Search

Improved Anthropic Sandbox Runtime (ASRT) - A general-purpose tool for wrapping security boundaries around arbitrary processes (sysid fork with several improvements and bug fixes)

Solidity smart contract security auditing plugin for OpenCode — 4 specialized agents, 12 tools (11 core + optional Solodit), and a curated vulnerability knowledge base

One set of rules above every model. A router, lean core and thirteen specialist skills coordinating engineering, design, security, research and project memory in compatible AI agents.

Four approval modes + command-level security restrictions for the Pi coding agent. Act / Auto / Ask / Plan mode switching, rule engine, subagent auto-approval.

A lightweight, policy-driven, and adapter-based JWT factory for creating and verifying tokens in Node.js backend services. Enforces security best practices through a decoupled, testable architecture.

A secure alternative to dotenv — prevents sensitive '.env.secret' files from being pushed to Git and creates '.env.secret.example' automatically. Supports CommonJS and ES Module.

Full-project audit orchestrator for accessibility, experience, content, architecture, security, performance, design systems, release readiness, localization, testing, privacy, SEO, APIs, and agent readiness.

13-module Claude Code skill for shipping a full web product: backend, security, SEO, ads, AI integration, analytics, email, i18n & more — stdlib-only, self-contained

Production-ready multi-account authentication library (Auth Forge) for Node.js, Express, Prisma, and PostgreSQL. Secure JWT auth, OTP, and dynamic email verification flow.

Enterprise-grade Audit Trail Plugin for Node.js with TypeScript - Performance Monitoring, System Integration Audit, Data Accountability & User Activity Tracking with Advanced Security Features

Security plugin for OpenCode — intercepts tool calls to detect secrets, redact sensitive data, evaluate safety risks, block access to sensitive files, and maintain an audit trail

SECflow — zero-cost security scanning for AI-driven repos: secrets (gitleaks), dependency vulns (trivy / npm audit), custom regex rules, and AI-ready fix reports.

Automatically generate a complete GraphQL CRUD API from ZenStack schemas, including input types, filters, relation resolvers, custom directive support, security limits, and query projection parsing.

Virgil JavaScript Crypto Library is a high-level cryptographic library that allows you to perform all necessary operations for secure storing and transferring data and everything required to become HIPAA and GDPR compliant.

🔐 Modern self-hosted credential manager with zero-knowledge encryption, multi-user support, and emergency recovery. Store API keys, passwords, and secrets securely with your own Supabase database.

Claude Code skill that background-checks a dependency before you install it — maintenance pulse, real install weight, license conflicts, security history, typosquat identity — verdict with dated evidence. 🔎

Local AI security scanner. Runs on your laptop with your own Claude Code, Codex, Gemini, or OpenRouter key. Source never leaves your machine. 68 categories, SARIF output, CI-ready.

Inbound message security gateway for bots — 5-layer default-deny (caller-validator, identity-resolver, rate-limit, audit, forward) for Telegram/WhatsApp/WeChat and other OTT platforms.

Security-focused IP-based rate limiter for detecting and banning hackers, bots, and malicious users. Features automatic IP banning, threat detection, analytics, and multi-channel alerts.

AI-powered smart contract security auditor — OWASP SC Top 10 (2026), MITRE ATT&CK, CWE, and NIST SSDF compliance outputs with a benchmarked detection engine