Plugin

Claude Code plugin that scans MCP servers and tools for prompt injection, tool poisoning and other risks via the Cisco MCP scanner.

Can read credential stores · talk to any host · run shell commands or eval · +1 more · Approval: no evidence · ran once, 2026-11-07: did more than it said · checked 2026-11-07

Claude Code plugin with a subagent and two skills that triage IOCs and CVEs against free threat-intel feeds, without API keys.

Can write outside the project · run shell commands or eval · Secrets: no evidence · not run yet · checked 2026-10-21

Claude plugin with eight SentinelOne skills for threat hunting, alert triage, detections, dashboards, parsers and Hyperautomation workflows.

Can tunnel or exfiltrate · add autostart, users or keys · write outside the project · +2 more · Approval: no evidence · not run yet · checked 2026-10-21

Claude Code plugin that statically audits GitHub Actions workflows which invoke AI coding agents for injection and permission flaws.

Can run shell commands or eval · run with broad pre-approvals · not run yet · checked 2026-10-19

Claude Code plugin that drives CodeQL, Semgrep and SARIF parsing to find security vulnerabilities in a codebase.

Can write outside the project · talk to any host · run shell commands or eval · +2 more · Secrets: no evidence · not run yet · checked 2026-10-19