Static Application Security Testing (SAST) for comprehensive code vulnerability detection across multiple languages, frameworks, and security patterns. Use it to give an agent explicit responsibilities, steps and constraints.

Browse all 94 marketplace plugins organized by category: 90 local plugins plus 4 externally hosted git-subdir entries (pensyve, qa-orchestra, storymap-skill, ciagent). Use it as a repeatable review, validation or hardening pass.

Plugin content in this repo ships to five harnesses: OpenAI Codex CLI, Cursor, OpenCode, Gemini CLI, and GitHub Copilot. Claude Code is the source-of-truth. The adapter framework handles per-harness mechanics (frontmatter rewrites, format transforms, output paths) so you auth. Use it to ground design choices in named patterns, trade-offs and examples.

This marketplace follows industry best practices with a focus on granularity, composability, and minimal token usage. Use it as a repeatable review, validation or hardening pass.

Agent Skills are modular packages that extend Claude's capabilities with specialized domain knowledge, following Anthropic's Agent Skills Specification. This plugin ecosystem includes 175 local specialized skills across 48 plugins, enabling progressive disclosure and efficien. Use it as a repeatable review, validation or hardening pass.