By Zate
Run OWASP ASVS 5.0-aligned security audits using SAST tools (Semgrep, Gitleaks, Trivy) and LLM triage for vulnerability detection, deduplication, and remediation guidance across multiple languages.
OWASP ASVS 5.0 requirements database for security audits. Provides chapter structure, control objectives, and verification requirements for all 17 ASVS domains.
Security fix patterns for authentication and authorization vulnerabilities (credentials, JWT, deserialization, access control). Provides language-specific secure implementations.
Security fix patterns for configuration and deployment vulnerabilities (path traversal, debug mode, security headers). Provides language-specific secure implementations.
Security fix patterns for cryptographic vulnerabilities (weak algorithms, insecure randomness, TLS issues). Provides language-specific secure implementations.
Security fix patterns for injection vulnerabilities (SQL, Command, XSS). Provides language-specific code examples showing vulnerable and secure implementations.
Executes bash commands
Hook triggers when Bash tool is used
Modifies files
Hook triggers on file write and edit operations
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
A curated marketplace of high-quality Claude Code plugins for professional development workflows.
# Add this marketplace
/plugin marketplace add Zate/cc-plugins
# Install plugins
/plugin install devloop # Workflow engine
/plugin install ctx # Persistent memory (optional but recommended)
/devloop:plan "add user authentication" # 1. Plan - explore and design
/devloop:run # 2. Build - implement autonomously
/devloop:ship # 3. Ship - commit and PR
# Repeat # 4. Start next feature
That's it. Claude does the work. You stay in control.
Need deep exploration? Use /devloop:plan --deep "topic" for comprehensive analysis.
Context getting heavy? Use /devloop:fresh && /clear && /devloop:run every 5-10 tasks.
New to plugins? Check out the Getting Started Guide for a complete walkthrough.
| Plugin | Description | Components |
|---|---|---|
| devloop | Development workflow engine with autonomous planning and execution | 13 commands, 7 agents, 15 skills |
| ctx | Persistent memory for Claude across sessions | 3 skills |
| security | OWASP ASVS-aligned security audits | 1 command, 17 agents |
| diagrams | Text-based diagram generation (SVG, Mermaid, Excalidraw, D2) | 6 skills |
| blog-writer | Conversational blog post creator | 1 command, 2 agents |
| wsl-clipboard-fix | WSL2 clipboard image paste fix | 1 skill, hooks |
The flagship plugin for professional software development. Simple workflow: plan, build, ship, repeat.
/plugin install devloop
# The workflow
/devloop:plan "add user authentication" # Plan with autonomous exploration
/devloop:run # Execute tasks autonomously
/devloop:ship # Commit and create PR
# Variations
/devloop:plan --deep "should we use OAuth?" # Deep exploration first
/devloop:plan --quick "fix the typo" # Skip planning for tiny tasks
/devloop:plan --from-issue 42 # Start from GitHub issue
Why devloop?
v3.18 Highlights:
/devloop:runRead the full devloop documentation →
Claude Code plugins extend your development environment with:
| Component | Purpose | Example |
|---|---|---|
| Commands | Custom slash commands | /devloop:quick Fix the bug |
| Agents | Specialized subagents | code-reviewer, test-generator |
| Skills | Domain knowledge | go-patterns, security-checklist |
| Hooks | Event automation | Auto-detect project type on session start |
| MCP Servers | External integrations | Connect to databases, APIs, services |
# Add marketplace
/plugin marketplace add Zate/cc-plugins
# Install specific plugin
/plugin install devloop
# Install from local path
/plugin install /path/to/cc-plugins/plugins/devloop
# Install from GitHub
/plugin install https://github.com/Zate/cc-plugins/plugins/devloop
# List installed plugins
/plugin list
# Check plugin details
/plugin info devloop
Want to contribute a plugin? We maintain high quality standards.
# Copy the template
cp -r templates/plugin-template plugins/your-plugin-name
# Update manifest
vim plugins/your-plugin-name/.claude-plugin/plugin.json
# Test locally
/plugin install /absolute/path/to/plugins/your-plugin-name
npx claudepluginhub zate/cc-plugins --plugin securityComprehensive Godot game development plugin for Claude Code featuring project setup, scene/UI templates, debugging tools, performance optimization, and interactive planning agents. Supports 2D/3D game development with rapid iteration workflows.
Generate amazing diagrams using text-based formats (SVG, Mermaid, Excalidraw, D2) with intelligent format routing and a shared design system
Static correctness linter and quality orchestrator for Claude Code plugins, skills, and hooks. Catches invalid hook schemas, bad frontmatter, YAML corruption, and token inefficiency. Delegates description quality to skill-creator.
Persistent memory for Claude Code agents. Stores decisions, patterns, and knowledge in a structured graph database that persists across sessions.
Integration with Forge, a headless agent job runner. Submit jobs to LLM agents (Claude, Gemini, Ollama, LM Studio), track status, and retrieve output via MCP tools.
Harness-native ECC operator layer - 67 agents, 271 skills, 92 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
Comprehensive skill pack with 66 specialized skills for full-stack developers: 12 language experts (Python, TypeScript, Go, Rust, C++, Swift, Kotlin, C#, PHP, Java, SQL, JavaScript), 10 backend frameworks, 6 frontend/mobile, plus infrastructure, DevOps, security, and testing. Features progressive disclosure architecture for 50% faster loading.
Comprehensive feature development workflow with specialized agents for codebase exploration, architecture design, and quality review
Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques
Binary reverse engineering, malware analysis, firmware security, and software protection research for authorized security research, CTF competitions, and defensive security
Upstash Context7 MCP server for up-to-date documentation lookup. Pull version-specific documentation and code examples directly from source repositories into your LLM context.