By Zate
Run OWASP ASVS 5.0-aligned security audits using SAST tools (Semgrep, Gitleaks, Trivy) with LLM triage. Detects vulnerabilities across languages, generates structured reports with severity classification and remediation patterns.
OWASP ASVS 5.0 requirements database for security audits. Provides chapter structure, control objectives, and verification requirements for all 17 ASVS domains.
Security fix patterns for authentication and authorization vulnerabilities (credentials, JWT, deserialization, access control). Provides language-specific secure implementations.
Security fix patterns for configuration and deployment vulnerabilities (path traversal, debug mode, security headers). Provides language-specific secure implementations.
Security fix patterns for cryptographic vulnerabilities (weak algorithms, insecure randomness, TLS issues). Provides language-specific secure implementations.
Security fix patterns for injection vulnerabilities (SQL, Command, XSS). Provides language-specific code examples showing vulnerable and secure implementations.
Executes bash commands
Hook triggers when Bash tool is used
Modifies files
Hook triggers on file write and edit operations
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
A curated marketplace of high-quality Claude Code plugins for professional development workflows.
# Add this marketplace
/plugin marketplace add Zate/cc-plugins
# Install plugins
/plugin install devloop # Workflow engine
/plugin install ctx # Persistent memory (optional but recommended)
/devloop:plan "add user authentication" # 1. Plan - explore and design
/devloop:run # 2. Build - implement autonomously
/devloop:ship # 3. Ship - commit and PR
# Repeat # 4. Start next feature
That's it. Claude does the work. You stay in control.
Need deep exploration? Use /devloop:plan --deep "topic" for comprehensive analysis.
Context getting heavy? Use /devloop:fresh && /clear && /devloop:run every 5-10 tasks.
New to plugins? Check out the Getting Started Guide for a complete walkthrough.
| Plugin | Description | Components |
|---|---|---|
| devloop | Development workflow engine with autonomous planning and execution | 13 commands, 7 agents, 15 skills |
| ctx | Persistent memory for Claude across sessions | 3 skills |
| security | OWASP ASVS-aligned security audits | 1 command, 17 agents |
| diagrams | Text-based diagram generation (SVG, Mermaid, Excalidraw, D2) | 6 skills |
| blog-writer | Conversational blog post creator | 1 command, 2 agents |
| wsl-clipboard-fix | WSL2 clipboard image paste fix | 1 skill, hooks |
The flagship plugin for professional software development. Simple workflow: plan, build, ship, repeat.
/plugin install devloop
# The workflow
/devloop:plan "add user authentication" # Plan with autonomous exploration
/devloop:run # Execute tasks autonomously
/devloop:ship # Commit and create PR
# Variations
/devloop:plan --deep "should we use OAuth?" # Deep exploration first
/devloop:plan --quick "fix the typo" # Skip planning for tiny tasks
/devloop:plan --from-issue 42 # Start from GitHub issue
Why devloop?
v3.18 Highlights:
/devloop:runRead the full devloop documentation →
Claude Code plugins extend your development environment with:
| Component | Purpose | Example |
|---|---|---|
| Commands | Custom slash commands | /devloop:quick Fix the bug |
| Agents | Specialized subagents | code-reviewer, test-generator |
| Skills | Domain knowledge | go-patterns, security-checklist |
| Hooks | Event automation | Auto-detect project type on session start |
| MCP Servers | External integrations | Connect to databases, APIs, services |
# Add marketplace
/plugin marketplace add Zate/cc-plugins
# Install specific plugin
/plugin install devloop
# Install from local path
/plugin install /path/to/cc-plugins/plugins/devloop
# Install from GitHub
/plugin install https://github.com/Zate/cc-plugins/plugins/devloop
# List installed plugins
/plugin list
# Check plugin details
/plugin info devloop
Want to contribute a plugin? We maintain high quality standards.
# Copy the template
cp -r templates/plugin-template plugins/your-plugin-name
# Update manifest
vim plugins/your-plugin-name/.claude-plugin/plugin.json
# Test locally
/plugin install /absolute/path/to/plugins/your-plugin-name
Comprehensive Godot game development plugin for Claude Code featuring project setup, scene/UI templates, debugging tools, performance optimization, and interactive planning agents. Supports 2D/3D game development with rapid iteration workflows.
Fixes image pasting in WSL2 by auto-converting BMP clipboard content to PNG. Runs a background daemon that monitors the Wayland clipboard and converts Windows BMP images so Claude Code can detect them.
Lightweight development workflow with plan/run/fresh pattern, git workflow integration, PR feedback, and autonomous execution. Optimized for efficiency - minimal hooks, on-demand skills, direct execution.
Generate amazing diagrams using text-based formats (SVG, Mermaid, Excalidraw, D2) with intelligent format routing and a shared design system
Static correctness linter and quality orchestrator for Claude Code plugins, skills, and hooks. Catches invalid hook schemas, bad frontmatter, YAML corruption, and token inefficiency. Delegates description quality to skill-creator.
npx claudepluginhub zate/cc-plugins --plugin securityHarness-native ECC plugin for engineering teams - 67 agents, 271 skills, 92 legacy command shims, reusable hooks, rules, MCP conventions, and operator workflows for Claude Code plus adjacent agent harnesses
Comprehensive skill pack with 66 specialized skills for full-stack developers: 12 language experts (Python, TypeScript, Go, Rust, C++, Swift, Kotlin, C#, PHP, Java, SQL, JavaScript), 10 backend frameworks, 6 frontend/mobile, plus infrastructure, DevOps, security, and testing. Features progressive disclosure architecture for 50% faster loading.
A growing collection of Claude-compatible academic workflow bundles. Covers scientific figures, manuscript writing and polishing, reviewer assessment, citation retrieval, data availability, paper reading, literature search, response letters, paper-to-PPTX conversion, and evidence-grounded Chinese invention patent drafting. Rules are organized as reusable skill folders with explicit workflows and quality checks.
Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques
Binary reverse engineering, malware analysis, firmware security, and software protection research for authorized security research, CTF competitions, and defensive security
Upstash Context7 MCP server for up-to-date documentation lookup. Pull version-specific documentation and code examples directly from source repositories into your LLM context.