security-scanner
Comprehensive security scanner for vulnerabilities and OWASP Top 10 issues
Pacote de plugins · de GLINCKER Team
Resumo
security-scanner é um pacote de plugins para ferramentas de programação com IA publicado por GLINCKER Team. Marketplaces que lemos e que o listam: 1 (Community GitHub marketplaces). Vimos pela primeira vez em 2026-10-19 e não registramos mudanças desde então. Conforme nossa passagem pelos marketplaces em 2026-10-20.
O que pede
- Instala-se como pacote de plugins
Nenhum dos marketplaces que lemos publica as ferramentas ou as configurações que ele pede.
O que declara, pede e executa, por completo
Instale apenas plugins de desenvolvedores em quem você confia. Mostramos o que os marketplaces publicam e não testamos plugins.
Funciona com
- Claude Code
Pelos marketplaces que o listam e pelo transporte MCP que declara, conforme cada cliente documenta. Não testamos plugins.
Conectar
Comandos e configurações gerados apenas a partir do que os marketplaces declaram. Não os executamos por você e não testamos plugins.
Como plugin do Claude Code
Gerado a partir do que Community GitHub marketplaces declara.
/plugin marketplace add glincker/claude-code-marketplace
/plugin install security-scanner@glincker-marketplaceOnde está publicado
| Marketplace | Status | Versão | Números | Verificado | Visto pela primeira vez |
|---|---|---|---|---|---|
| Marketplace da comunidade glincker/claude-code-marketplace (Abrir o código no GitHub) | Listado | 1.0.0 | Forks (GitHub): 4 Estrelas (GitHub): 37 |
Sem marcação |
Cada número é do próprio marketplace e nunca é somado entre marketplaces. Um marketplace que não publica números não mostra nenhum: sem número não é zero.
Listado em um marketplace da comunidade
| Marketplace | Repositório | Estrelas (GitHub) |
|---|---|---|
| glincker-marketplace | glincker/claude-code-marketplace | 37 |
O que mudou
- Passou a ser um produto que acompanhamos
- Community GitHub marketplaces: apareceu
Plugins semelhantes
Produtos cujos próprios nomes, descrições, ferramentas e skills são os mais próximos deste pelo significado, em todos os marketplaces que lemos. A proximidade é ordenada apenas dentro desta lista.
-
DevsForge comprehensive security vulnerability scanner with automated remediation suggestions.
-
Security scanning and vulnerability auditing following OWASP Top 10 guidelines with automated remediation
-
Security vulnerability detection and remediation: OWASP Top 10 2025, SAST scanning, CVE research (NVD, OSV.dev), dependency audit, secrets detection, security headers, auth…
-
Client-side web security scanner — detects secrets, vulnerable JS libraries, misconfigurations, XSS sinks, CORS issues, and more
-
Security audit patterns (OWASP, CWE, CVSS) with 80+ checkpoints — by Netresearch
-
Security best practices and vulnerability detection
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
hawkscan
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
Deterministic, zero-token security scanner your AI agent calls to find and re-verify issues.
-
owasp-scan io.github.GuardBee/owasp-scan
Unified OWASP MCP Top 10 scan — path or live tools/list, A–F grade, SARIF
Plugins semelhantes por marketplace
A mesma pergunta feita a cada marketplace separadamente: existe lá um equivalente deste plugin?
Listado em Claude Code: claude-plugins-community (5)
-
Client-side web security scanner — detects secrets, vulnerable JS libraries, misconfigurations, XSS sinks, CORS issues, and more
-
Skills for working with NightVision, a DAST and API Discovery platform that finds exploitable vulnerabilities in web applications and REST APIs
-
Security audit skill collection — SAST, DAST, external software analysis, architecture review, dataflow clustering, assessment-as-code methodology
-
Agentic-Security is a powerful Claude Code plugin that automatically performs Application Security Testing (SAST, SCA, secrets detection, and more). Think of it as the easy button…
-
Security auditor for Node.js and Python backend APIs. Four skills cover pre-audit reconnaissance (route graph, auth matrix, invariants), static code audit across the OWASP API…
Listado em Claude Code: claude-plugins-official (5)
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
Skills for working with NightVision, a DAST and API Discovery platform that finds exploitable vulnerabilities in web applications and REST APIs
-
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
Listado em Claude: knowledge-work-plugins (5)
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Keep your coding agent up to date with the latest web best practices
Listado em Codex: openai-curated (openai/plugins) (5)
-
Codex Security workflows for security scans, analysis, and investigation.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Inspect recent issues and events in Sentry from Codex.
-
Cloudflare platform plugin with curated skills for Workers, Wrangler, and Agents SDK plus the official Cloudflare API MCP server.
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
Listado em Community GitHub marketplaces (5)
-
DevsForge comprehensive security vulnerability scanner with automated remediation suggestions.
-
Security scanning and vulnerability auditing following OWASP Top 10 guidelines with automated remediation
-
Security vulnerability detection and remediation: OWASP Top 10 2025, SAST scanning, CVE research (NVD, OSV.dev), dependency audit, secrets detection, security headers, auth…
-
Security audit patterns (OWASP, CWE, CVSS) with 80+ checkpoints — by Netresearch
-
Security best practices and vulnerability detection
Listado em Copilot CLI: github/awesome-copilot (5)
-
Triage Dependabot alerts and recommend safe, evidence-based dependency updates.
-
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages…
-
Inspect a repository, improve Tiny Tool Town readiness, submit its listing issue, and launch remediation work.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Keep your coding agent up to date with the latest web best practices
Listado em Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
Build Power Apps Canvas Apps using the Canvas Authoring MCP server.
-
code-apps-preview
Build and deploy Power Apps code apps using React, Vite, and Power Platform connectors.
Listado em Cursor: cursor/plugins (5)
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
-
playwright-mcp io.github.microsoft/playwright-mcp
Playwright Tools for MCP
-
Scaffold and validate new agent plugins.
-
Build apps, scripts, and automations with the TypeScript SDK.
-
if you want to go fast, go deep first. pstack helps you write less, but higher quality code. rigorous agent workflows you can parallelize with confidence.
Listado em Docker MCP Catalog (5)
-
Connects with the Beagle Security backend using a user token to manage applications, run automated security tests, track vulnerabilities across environments, and gain intelligence…
-
stackhawk com.stackhawk/stackhawk
An MCP server that provides interaction with StackHawk's security scanning platform.
-
MCP server for using Semgrep to scan code for security vulnerabilities.
-
Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.
-
npm-sentinel-mcp io.github.Nekzus/npm-sentinel-mcp
Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
Listado em Official MCP Registry (5)
-
Deterministic, zero-token security scanner your AI agent calls to find and re-verify issues.
-
owasp-scan io.github.GuardBee/owasp-scan
Unified OWASP MCP Top 10 scan — path or live tools/list, A–F grade, SARIF
-
Grade a URL as an attacker and a customer would see it; scan a repo; check Supabase, Stripe, Vercel.
-
Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.
-
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
Listado em npm registry (MCP servers) (5)
-
mcp com.dechonet/mcp
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
-
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
-
dsh-verify io.github.263311487-ux/dsh-verify
Agent-built web app quality gate. Real browser is the judge. PASS/FAIL with receipts.
-
Uptime monitoring for developers — monitors, incidents, heartbeats, maintenance, status pages
-
Gives AI agents eyes and hands into running React Native apps: logs, REPL, tap, screenshots
Encontrados pelo significado, não por código ou repositório em comum: plugins semelhantes continuam sendo produtos distintos, e isto não é uma avaliação nem uma recomendação.
Quer esta marca no seu plugin em nosso catálogo?
Prove que o mantém com um arquivo no repositório, um arquivo no seu domínio ou um registro DNS, e você poderá mostrar esta marca na ficha, com banners ao vivo para o seu site e o README. Como funciona a verificação
Você também recebe alertas quando um marketplace o publica, o remove, muda a marca de verificado ou o que ele pede, e o endpoint remoto passa a ser monitorado como um serviço web.
Dados de Community GitHub marketplaces. Os números vêm das nossas próprias passagens regulares pelos marketplaces, última leitura em . Não publicamos dados de contato dos editores de plugins.