By tqer39
Security review skills: supply chain, dependency auditing, and vulnerability detection
Personal SRE/DevOps plugin marketplace for Claude Code.
A centralized marketplace that distributes shared skills and commands across ~20 personal repositories. Built on the Claude Code Plugin Marketplace system.
# Add marketplace
/plugin marketplace add tqer39/claude-code-marketplace
# Install plugins
/plugin install git@tqer39-plugins
/plugin install architecture@tqer39-plugins
/plugin install marketplace@tqer39-plugins
/plugin install security@tqer39-plugins
/plugin install agent-config@tqer39-plugins
From within a Claude Code session:
/plugin marketplace add tqer39/claude-code-marketplace
Or configure it in .claude/settings.json for your project:
{
"extraKnownMarketplaces": {
"tqer39-plugins": {
"source": {
"source": "github",
"repo": "tqer39/claude-code-marketplace"
}
}
}
}
Install individual plugins by scope:
# User scope (you, all projects) — default
/plugin install git@tqer39-plugins
# Project scope (shared with team via .claude/settings.json)
/plugin install git@tqer39-plugins --scope project
# Local scope (you, this project only)
/plugin install git@tqer39-plugins --scope local
# Browse all available plugins
/plugin
# Enable/disable without uninstalling
/plugin enable git@tqer39-plugins
/plugin disable git@tqer39-plugins
# Uninstall
/plugin uninstall git@tqer39-plugins
# Reload after changes
/reload-plugins
# Update all marketplaces
/plugin marketplace update
# Update a specific marketplace
/plugin marketplace update tqer39-plugins
/plugin marketplace remove tqer39-plugins
Note: Removing a marketplace also uninstalls all plugins from it.
Add to your project's .claude/settings.json:
{
"extraKnownMarketplaces": {
"tqer39-plugins": {
"source": {
"source": "github",
"repo": "tqer39/claude-code-marketplace"
}
}
},
"enabledPlugins": {
"git@tqer39-plugins": true,
}
}
Git workflow commands and skills.
| Type | Name | Description |
|---|---|---|
| Command | auto-commit | Auto stage and commit with emoji prefix + Japanese summary |
| Command | create-branch | Create feature branches with naming conventions |
| Command | create-pr | Create a PR from the current branch with auto push and claude-auto label |
| Command | push | Push changes to remote with safety checks |
| Skill | gitignore | Generate and update .gitignore files with automatic project detection |
| Skill | pull-request | Automate GitHub PR workflow with rebase, conflict resolution, and description generation |
| Skill | auto-merge | Generate auto-approve and auto-merge workflow for PRs with claude-auto label |
Architecture analysis and redesign proposal skills.
| Skill | Description |
|---|---|
| redesign | Architectural analysis and redesign proposal workflow |
| editorconfig | Generate and update .editorconfig files with automatic file type detection |
Marketplace validation and management skills.
| Skill | Description |
|---|---|
| marketplace-lint | Lint marketplace for config issues, doc drift, and structural inconsistencies |
Security review skills: supply chain, dependency auditing, and vulnerability detection.
| Skill | Description |
|---|---|
| supply-chain | Audit supply chain security: lockfile integrity, dependency pinning, typosquatting detection, GitHub Actions SHA pinning, vulnerability scanning config |
LLM coding agent configuration: AGENTS.md creation and tool-specific symlink management.
| Skill | Description |
|---|---|
| agent-config-init | Initialize unified LLM coding agent configuration (AGENTS.md) with symlinks to Claude Code, Cursor, Copilot, Gemini CLI |
make bootstrap # Install dependencies
just lint # Run linting
claude plugin validate .
Private use only.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
npx claudepluginhub tqer39/claude-code-marketplace --plugin securityGit workflow commands and skills: auto-commit, branch creation, PR creation, push, gitignore, pull-request, and auto-merge
LLM coding agent configuration: AGENTS.md creation and tool-specific symlink management
Marketplace validation and management skills
Architecture analysis and redesign proposal skills: redesign, editorconfig
Audit and harden your software supply chain - packages, containers, GitHub Actions, IaC, AI/ML models, and IDE extensions. Action commands fix issues directly; walkthrough commands guide you through advanced setup.
AI-powered security auditing with interactive skills, automated agents, web dependency scanning, and supply chain hardening for comprehensive vulnerability detection and reporting
Specialized security review subagent
Audit supply-chain threat landscape of project dependencies for exploitation or takeover risk
Security scanning, dependency CVE audits, and exposure-aware risk prioritization.
Expert code review specialist. Proactively reviews code for quality, security, and maintainability. Use immediately after writing or modifying code.