By tonone-ai
Perform application security scanning (SAST/DAST), secure code review, and design secure SDLC pipelines. Analyze findings for root cause and exploitability, audit configurations for OWASP Top 10 coverage, and build CI-integrated scanning workflows.
Analyze and fix a SAST finding — root cause, exploitability, and secure code alternative.
Audit existing application security tooling and code for OWASP Top 10 coverage.
Design a SAST/DAST scanning pipeline — tooling selection, CI integration, and triage workflow.
Uses power tools
Uses Bash, Write, or Edit tools
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
npx claudepluginhub tonone-ai/tonone --plugin sastAudit application security tooling for OWASP Top 10 coverage
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.
A team of AI security specialists embedded in your coding workflow. 8 agents covering every phase of the Secure SDLC: requirements, threat modelling, code review, IaC security, compliance, and release gating. Works with Claude Code, Cursor, Windsurf, and any MCP-compatible tool.
Application security testing including SAST, DAST, dependency scanning, API security, and web security headers.
OpenText Fortify AppSec skills. Use for SAST/DAST/SCA scanning, vulnerability triage, audit workflows, CI/CD pipeline integration, and FCLI commands. Supports Fortify on Demand (FoD) and Software Security Center (SSC).
Agentic-Security is a powerful Claude Code plugin that automatically performs Application Security Testing (SAST, SCA, secrets detection, and more). Think of it as the easy button for making your Claude-generated code safe and secure.
Design eval harnesses — task schemas, metrics, dataset versioning, eval-as-code patterns.
Write a hardening playbook — CIS benchmark mapping and implementation steps
Design an evaluation framework for a ML model
Build a forecasting model for a time series
Map product data flows and identify regulatory triggers