apiiro
Apiiro security plugin: skills and commands (prevention hooks are opt-in)
Pacote de plugins · de Apiiro
Resumo
apiiro é um pacote de plugins para ferramentas de programação com IA publicado por Apiiro. Marketplaces que lemos e que o listam: 1 (Community GitHub marketplaces). A última mudança que registramos foi em 2026-10-15. Conforme nossa passagem pelos marketplaces em 2026-10-15.
O que pede
- Instala-se como pacote de plugins
Nenhum dos marketplaces que lemos publica as ferramentas ou as configurações que ele pede.
O que declara, pede e executa, por completo
Instale apenas plugins de desenvolvedores em quem você confia. Mostramos o que os marketplaces publicam e não testamos plugins.
Funciona com
- Claude Code
Pelos marketplaces que o listam e pelo transporte MCP que declara, conforme cada cliente documenta. Não testamos plugins.
Conectar
Comandos e configurações gerados apenas a partir do que os marketplaces declaram. Não os executamos por você e não testamos plugins.
Como plugin do Claude Code
Gerado a partir do que Community GitHub marketplaces declara.
/plugin marketplace add apiiro/marketplace
/plugin install apiiro@apiiro
Onde está publicado
| Marketplace | Status | Versão | Números | Verificado | Visto pela primeira vez |
|---|---|---|---|---|---|
| Marketplace da comunidade apiiro/marketplace (Abrir o código no GitHub) | Listado | 1.9.0 | Forks (GitHub): 1 Estrelas (GitHub): 2 |
Sem marcação |
Cada número é do próprio marketplace e nunca é somado entre marketplaces. Um marketplace que não publica números não mostra nenhum: sem número não é zero.
Listado em um marketplace da comunidade
| Marketplace | Repositório | Estrelas (GitHub) |
|---|---|---|
| apiiro | apiiro/marketplace | 2 |
O que o pacote contém
Conforme publicado em Community GitHub marketplaces.
Skills: 9
guardian-apiguardian-fixguardian-inventoryguardian-queryguardian-risksguardian-scanguardian-secure-promptguardian-setupguardian-threat-model
O que mudou
- Community GitHub marketplaces: lançou a versão 1.9.0 (antes 1.8.1)
- Passou a ser um produto que acompanhamos
- Community GitHub marketplaces: apareceu
Possivelmente o mesmo plugin
Listagens que compartilham um sinal com esta, mas não o bastante para tratá-las como o mesmo produto.
Plugins semelhantes
Produtos cujos próprios nomes, descrições, ferramentas e skills são os mais próximos deste pelo significado, em todos os marketplaces que lemos. A proximidade é ordenada apenas dentro desta lista.
-
OWASP API Security Top 10 skills: BOLA detection, auth and RBAC scaffolding, injection checks, security tests, API security review, OpenAPI hardening.
-
IAM, EDR, SIEM, secrets management, cloud/app/network security, DLP, GRC, and zero trust — Entra ID, CrowdStrike, Sentinel, Vault, Wiz, and more, with a security-specialist agent.
-
Security-focused development with advisory and vulnerability scanning (2 agents, 1 skill)
-
Threat modeling, security architecture review, incident response, vulnerability management, and access and identity. Reviewer-class.
-
Operational skill for installing, configuring, operating, and debugging CrowdSec (cscli, LAPI/CAPI, hub, bouncers, WAF/AppSec) across bare-metal, Docker, and Kubernetes.
-
Git guard hook, ekbasis-guard skill and MCP server: what happens if I run this?
-
AI-native security intelligence. Query your security posture, investigate threats, triage alerts, and run SQL against all your connected data sources — directly from Claude Code.
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
Every ThreatLocker Portal API feature, plus the write operations the read-only tools lack and a
-
[STUB] Security audit, OWASP, authentication, compliance
Plugins semelhantes por marketplace
A mesma pergunta feita a cada marketplace separadamente: existe lá um equivalente deste plugin?
Listado em Claude Code: claude-plugins-community (5)
-
AI-native security intelligence. Query your security posture, investigate threats, triage alerts, and run SQL against all your connected data sources — directly from Claude Code.
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
> Automatic security scanner for Claude Code plugins — detects new or updated extensions at session start and scans them for prompt injection, malicious hook scripts, and data…
-
Security audit plugin that scans Claude Code skills, hooks, and MCP configurations for threats. Detects 37 attack patterns including prompt injection, data exfiltration, supply…
-
Reco SaaS & AI security — query app risks, shadow IT, AI agents, user posture, and access events directly from Claude Code
Listado em Claude Code: claude-plugins-official (5)
-
Operational skill for installing, configuring, operating, and debugging CrowdSec (cscli, LAPI/CAPI, hub, bouncers, WAF/AppSec) across bare-metal, Docker, and Kubernetes.
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
Listado em Claude: knowledge-work-plugins (5)
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
Listado em Codex: openai-curated (openai/plugins) (5)
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Codex Security workflows for security scans, analysis, and investigation.
-
Cloudflare platform plugin with curated skills for Workers, Wrangler, and Agents SDK plus the official Cloudflare API MCP server.
-
Evaluate Codex skills and plugins from chat with a beginner-friendly start command, local-first reports, token budget explanations, and guided benchmarking.
Listado em Community GitHub marketplaces (5)
-
OWASP API Security Top 10 skills: BOLA detection, auth and RBAC scaffolding, injection checks, security tests, API security review, OpenAPI hardening.
-
IAM, EDR, SIEM, secrets management, cloud/app/network security, DLP, GRC, and zero trust — Entra ID, CrowdStrike, Sentinel, Vault, Wiz, and more, with a security-specialist agent.
-
Security-focused development with advisory and vulnerability scanning (2 agents, 1 skill)
-
Threat modeling, security architecture review, incident response, vulnerability management, and access and identity. Reviewer-class.
-
Operational skill for installing, configuring, operating, and debugging CrowdSec (cscli, LAPI/CAPI, hub, bouncers, WAF/AppSec) across bare-metal, Docker, and Kubernetes.
Listado em Copilot CLI: github/awesome-copilot (5)
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Official incident.io plugins for AI agents: skills for working with [incident.io](https://incident.io/) — incidents, on-call, and investigations — and for authoring the…
-
A focused set of prompts, instructions, and a chat mode to help triage incidents and respond quickly with DevOps tools and Azure resources.
-
Use Datadog directly in Copilot / VS Code through a preconfigured Datadog MCP server. Query logs, metrics, traces, dashboards, and more through natural conversation.
Listado em Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
Complete bundle: all Microsoft Skills for Fabric for developers and consumers.
-
model-apps
Build and deploy Power Apps generative pages for model-driven apps with specialist agents for planning, entity creation, and parallel code generation. Requires PAC CLI >= 2.7.0…
-
Build and manage Microsoft Dataverse solutions using natural language. Includes table/column creation, solution lifecycle, data operations, and MCP server configuration.
Listado em Cursor: cursor/plugins (5)
-
Scaffold and validate new agent plugins.
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
-
Let Grok Bot reach MCP servers on your private Tailscale network. Sign in to Tailscale to connect your tailnet; Grok Bot joins it as one tagged device and only reaches the hosts…
-
Build apps, scripts, and automations with the TypeScript SDK.
-
if you want to go fast, go deep first. pstack helps you write less, but higher quality code. rigorous agent workflows you can parallelize with confidence.
Listado em Docker MCP Catalog (5)
-
Manage Zscaler Zero Trust Exchange via 400+ tools — ZPA, ZIA, ZDX, ZCC, ZTW, ZMS, EASM, and more.
-
stackhawk com.stackhawk/stackhawk
An MCP server that provides interaction with StackHawk's security scanning platform.
-
Connects with the Beagle Security backend using a user token to manage applications, run automated security tests, track vulnerabilities across environments, and gain intelligence…
-
npm-sentinel-mcp io.github.Nekzus/npm-sentinel-mcp
Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
-
Brings context about device inventory, threats, risks and utilization powered by the Cylera Partner API into an LLM.
Listado em Official MCP Registry (5)
-
Every ThreatLocker Portal API feature, plus the write operations the read-only tools lack and a
-
Abnormal Security email threats, cases, and reporting in your terminal and your AI agents.
-
Every KnowBe4 KMSAT reporting feature plus a local SQLite store that answers the cross-client
-
Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.
-
Every SentinelOne v2.1 management endpoint, plus an offline SQLite store and cross-entity analytics
Encontrados pelo significado, não por código ou repositório em comum: plugins semelhantes continuam sendo produtos distintos, e isto não é uma avaliação nem uma recomendação.
Quer esta marca no seu plugin em nosso catálogo?
Prove que o mantém com um arquivo no repositório, um arquivo no seu domínio ou um registro DNS, e você poderá mostrar esta marca na ficha, com banners ao vivo para o seu site e o README. Como funciona a verificação
Você também recebe alertas quando um marketplace o publica, o remove, muda a marca de verificado ou o que ele pede, e o endpoint remoto passa a ser monitorado como um serviço web.
Dados de Community GitHub marketplaces. Os números vêm das nossas próprias passagens regulares pelos marketplaces, última leitura em . Não publicamos dados de contato dos editores de plugins.