By darkflib
Run a full SAST pipeline across a codebase using Semgrep, Bandit, Trufflehog, and Safety
A collection of plugins and skills for Claude Code.
As with all plugins and skills, exercise caution when installing from untrusted sources. Plugins can execute code on your machine and access your filesystem. Review the contents of any plugin before installing it.
These plugins are provided on a best-effort basis. There are no guarantees of ongoing maintenance or support.
Issues and pull requests are welcome.
| Plugin | Description |
|---|---|
| copier-bootstrap | Bootstrap new projects using Copier templates. Supports FastAPI services, RabbitMQ workers, CLI tools, React frontends, AWS Lambda functions, and Google Cloud Functions. |
| kroki | Generate diagrams from plain text using a Kroki server. Supports PlantUML, Mermaid, GraphViz/DOT, D2, Structurizr, Ditaa, Svgbob, Excalidraw, and more. |
| project-planning | Structured 4-step methodology for planning and breaking down new software projects. Follows a human-in-the-loop gated process with clear deliverables at each stage. |
| python-cli-scaffold | Scaffold Python CLI tools with Click and Rich. Includes command groups, progress bars, tables, spinners, structured logging, testing, and Docker support. |
| python-fastapi-scaffold | Scaffold modern Python FastAPI projects with UV, Docker, K8s/Cloud Run deployment templates, testing, configuration management, and CI/CD patterns. |
| python-production-versions | Authoritative reference for current Python production library versions, deprecated packages, and compatibility issues. Provides version floors with project-local overrides. |
| python-worker-scaffold | Scaffold Python background workers for RabbitMQ with signed CloudEvents, structured logging, Docker, K8s manifests, retry logic, and dead letter queues. |
| sast | Run a full SAST pipeline across a codebase using Semgrep, Bandit, Trufflehog, and Safety/pip-audit. Produces structured findings and a prioritised remediation plan. |
| term-extractor | Extract technical terms, acronyms, and domain vocabulary from text into structured YAML format for glossary and index generation. |
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
npx claudepluginhub darkflib/skill-marketplace --plugin sast-pluginGenerate diagrams from plain text using a Kroki server
Scaffolds Python CLI tools with Click framework and Rich terminal output
Structured 4-step methodology for planning and breaking down new software projects
Bootstrap new projects using Copier templates (FastAPI, RabbitMQ workers, CLI tools, React, AWS Lambda, GCF)
Extract technical terms and domain vocabulary from text into structured YAML format
Agentic-Security is a powerful Claude Code plugin that automatically performs Application Security Testing (SAST, SCA, secrets detection, and more). Think of it as the easy button for making your Claude-generated code safe and secure.
Security scanning, dependency CVE audits, and exposure-aware risk prioritization.
Comprehensive vulnerability scanning for code, dependencies, and configurations with CVE detection
Open-source cybersecurity analysis agent. Scans any local project for vulnerabilities: code security (SAST), dependency CVEs (SCA), secret leaks, authentication/authorization flaws, cryptographic weaknesses, misconfigurations, supply chain risks, and CI/CD security. Covers all OWASP 2025 Top 10 and CWE Top 25 categories. Generates prioritized reports with remediation guidance. Invoke with /cyber-neo [path].
Security vulnerability detection and remediation: OWASP Top 10, SAST scanning, CVE research, dependency audit, secrets detection
Perform security audit on codebase