By vanman2024
Security infrastructure with git hooks, secret scanning, vulnerability detection, and OWASP best practices
Validate user input against injection patterns, detect PII, sanitize content before processing by other agents
Validate agent-generated content for exfiltration patterns, secrets, malicious URLs before writing files
Performs comprehensive security analysis of projects
Security vulnerability scanning, secret detection, dependency auditing, and OWASP best practices. Use when performing security audits, scanning for vulnerabilities, detecting exposed secrets, checking dependencies, validating security headers, implementing OWASP patterns, or when user mentions security, vulnerabilities, secrets, CVE, OWASP, npm audit, security headers, or penetration testing.
Runtime security validation including secret scanning, PII detection, prompt injection defense, audit logging, and output validation for AI agents. Use when validating user input, scanning for secrets, detecting PII, preventing data exfiltration, or implementing security guardrails.
Uses power tools
Uses Bash, Write, or Edit tools
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Tech-agnostic workflow automation - from init to deploy in 7 lifecycle phases.
Version: 2.0.0 (Rebuilt October 2025 + November 2025 additions)
The dev-lifecycle-marketplace provides structured development workflow plugins that work with ANY tech stack. These plugins handle HOW you develop (process and methodology), not WHAT you develop with (specific SDKs or frameworks).
Key Concept: Lifecycle plugins are completely tech-agnostic. They detect your project's tech stack and adapt accordingly.
Initialize projects, detect tech stack, configure environment
Commands:
/foundation:init - Initialize project structure/foundation:detect-stack - Detect and document tech stack/foundation:setup-env - Setup environment configuration/foundation:verify-setup - Verify project setupWhat it does:
.claude/project.json with detected framework, languages, structureComponents:
Create specifications, architecture designs, roadmaps, and ADRs
Commands:
/planning:plan - Create comprehensive project plans/planning:spec - Write feature specifications/planning:architecture - Design system architecture/planning:roadmap - Create project roadmaps/planning:decisions - Document architectural decisions (ADRs)What it does:
.claude/project.json to understand your projectComponents:
Task management, code adjustments, refactoring, feature enhancement
Commands:
/iterate:adjust - Adjust implementation based on feedback/iterate:sync - Sync implementation with specifications/iterate:tasks - Transform sequential tasks into layered tasks with agent assignmentsWhat it does:
Components:
Special Note: Preserves the critical task-layering agent that intelligently assigns agents to tasks.
Automated feature building from layered tasks with tech-specific command mapping
Commands:
/implementation:execute - Execute all layered tasks (L0→L3) sequentially/implementation:execute-layer - Execute specific layer only/implementation:status - Show execution progress/implementation:continue - Resume execution after pause/failure/implementation:map-task - Preview task-to-command mapping (dry-run)What it does:
.claude/execution/ status files/iterate:sync after each layerComponents:
Example Workflow:
/planning:add-feature "AI chat interface"
/iterate:tasks F001
/implementation:execute F001 # Automatically executes all mapped commands
Code validation, security scanning, and compliance checking
Commands:
/quality:validate-code - Validate code against specs and security rules/quality:security - Run security scans and vulnerability checks/quality:performance - Analyze performance and identify bottlenecksWhat it does:
npx claudepluginhub vanman2024/dev-lifecycle-marketplace --plugin securityProduction-ready Celery distributed task queue with worker management, beat scheduling, monitoring (Flower), and framework integrations (Django, Flask, FastAPI)
OpenRouter SDK plugin - unified interface for 500+ LLM models with intelligent routing, cost optimization, and framework integrations (Vercel AI SDK, LangChain, OpenAI SDK, PydanticAI)
Comprehensive ElevenLabs AI audio integration for voice-enabled applications with TTS, STT, voice cloning, and Vercel AI SDK support
Comprehensive Supabase integration for AI applications with database, auth, storage, realtime, and vector search capabilities
Modular Vercel AI SDK development plugin with 13 specialized agents, parallel orchestration, and AI SDK v6 support. Features AI Elements (54 components), 107+ providers, Tools Registry, MCP integration, and full-stack app builder.
Stage-aware security guidance for planning, risky implementation changes, review, and release checkpoints.
Security best practices advisor with vulnerability detection and fixes
Security agents — security, compliance, privacy specialists
Security scanning, dependency CVE audits, and exposure-aware risk prioritization.
DevsForge Enterprise Git Quality Architect delivering comprehensive version control methodologies, code quality frameworks, and collaborative development optimization that transforms Git management from version control into strategic business value creation and development excellence catalyst
Agents specialized in security engineering and threat mitigation. Focuses on secure architecture, vulnerability assessment, and compliance.