Vibe Index
florianbuetow

florianbuetow/claude-code

74 resources in this repository

GitHub
🎯64🔌9🏪1
11

🎯Skills64

🎯ssrf🎯Skill

Part of a comprehensive collection of 21 plugins and 101 skills for Claude Code, covering application security, software architecture analysis, agent guardrails, session management, ISO 27001 compliance, and autonomous research pipelines.

ssrf
🎯spec-writer🎯Skill

Part of a Claude Code collection offering 21 plugins and 101 skills, including tools for specification writing, security auditing, architecture explanation, changelog management, and development workflow guardrails.

spec-writer
🎯sans25🎯Skill

A security mapping skill that checks code against the SANS/CWE Top 25 most dangerous software weaknesses. Part of a comprehensive application security toolbox with 62 skills, 8 frameworks, and red team simulation, providing CWE mapping, DREAD scoring, and concrete fix suggestions.

sans25
🎯solid-principles🎯Skill

Skill

solid-principles
🎯business-logic🎯Skill

Skill

business-logic
🎯file-upload🎯Skill

Skill

file-upload
🎯pasta-risk🎯Skill

Skill

pasta-risk
🎯attack-surface🎯Skill

Skill

attack-surface
🎯dos🎯Skill

Skill

dos
🎯info-disclosure🎯Skill

Skill

info-disclosure
🎯pasta-attack-sim🎯Skill

Skill

pasta-attack-sim
🎯report🎯Skill

Skill

report
🎯data-disclosure🎯Skill

Skill

data-disclosure
🎯api🎯Skill

Skill

api
🎯pasta-decompose🎯Skill

Skill

pasta-decompose
🎯insecure-design🎯Skill

Skill

insecure-design
🎯crypto🎯Skill

Skill

crypto
🎯config🎯Skill

Skill

config
🎯pasta-objectives🎯Skill

Skill

pasta-objectives
🎯verify🎯Skill

Skill

verify
🎯access-control🎯Skill

Skill

access-control
🎯pasta-vulns🎯Skill

Skill

pasta-vulns
🎯stride🎯Skill

Skill

stride
🎯auth🎯Skill

Skill

auth
🎯mitre🎯Skill

Skill

mitre
🎯non-compliance🎯Skill

Skill

non-compliance
🎯beyond-solid-principles🎯Skill

Skill

beyond-solid-principles
🎯spoofing🎯Skill

Skill

spoofing
🎯pasta🎯Skill

Skill

pasta
🎯learn🎯Skill

Skill

learn
🎯explain🎯Skill

Skill

explain
🎯fix🎯Skill

Skill

fix
🎯integrity🎯Skill

Skill

integrity
🎯linking🎯Skill

Skill

linking
🎯tampering🎯Skill

Skill

tampering
🎯logging🎯Skill

Skill

logging
🎯privilege-escalation🎯Skill

Skill

privilege-escalation
🎯explain-system-tradeoffs🎯Skill

Skill

explain-system-tradeoffs
🎯identifying🎯Skill

Skill

identifying
🎯outdated-deps🎯Skill

Skill

outdated-deps
🎯injection🎯Skill

Skill

injection
🎯graphql🎯Skill

Skill

graphql
🎯pasta-scope🎯Skill

Skill

pasta-scope
🎯start🎯Skill

Skill

start
🎯model🎯Skill

Skill

model
🎯secrets🎯Skill

Skill

secrets
🎯fuzz🎯Skill

Skill

fuzz
🎯detecting🎯Skill

Skill

detecting
🎯linddun🎯Skill

Skill

linddun
🎯race-conditions🎯Skill

Skill

race-conditions
🎯owasp🎯Skill

Skill

owasp
🎯non-repudiation-privacy🎯Skill

Skill

non-repudiation-privacy
🎯repudiation🎯Skill

Skill

repudiation
🎯unawareness🎯Skill

Skill

unawareness
🎯status🎯Skill

Skill

status
🎯review-plan🎯Skill

Skill

review-plan
🎯glossary🎯Skill

Skill

glossary
🎯full-audit🎯Skill

Skill

full-audit
🎯misconfig🎯Skill

Skill

misconfig
🎯serverless🎯Skill

Skill

serverless
🎯regression🎯Skill

Skill

regression
🎯harden🎯Skill

Skill

harden
🎯pasta-threats🎯Skill

Skill

pasta-threats
🎯data-flows🎯Skill

Skill

data-flows

🔌Plugins9

🔌kiss🔌Plugin

Analyze code and architecture for unnecessary complexity, over-abstraction, and redundancy. Reports findings with severity ratings and concrete simplification suggestions.

development
🔌spec-writer🔌Plugin

An expert-guided skill for creating layered software specification documents for greenfield projects. Produces Vision, Business Requirements, Software Requirements, Architecture & Design, and Behavioral Spec & Test Verification documents.

development
🔌explain-system-tradeoffs🔌Plugin

Reverse-engineer distributed system tradeoffs from code, configuration, and architecture artifacts. Analyzes six axes: Consistency & Availability, Latency & Throughput, Data Distribution, Transaction Boundaries, Resilience & Failure Isolation, and Observability, Security & Cost.

development
🔌archibald🔌Plugin

Software architecture quality assessment through structural smell detection, quantitative metrics analysis, antipattern identification, dependency structure evaluation, risk/trade-off analysis, and technical debt measurement.

development
🔌spec-dd🔌Plugin

Specification-driven development workflow skill. Orchestrates a spec-first discipline with advisory quality gates: behavioral specification, test specification, implementation specification, and alignment review.

development
🔌retrospective🔌Plugin

Analyze Claude Code session logs to identify what went well, what didn't, and how to improve developer-AI collaboration. Suggests new skills, subagents, slash commands, hooks, and workflow optimizations based on actual usage patterns.

development
🔌beyond-solid-principles🔌Plugin

Analyze code and architecture for violations of ten system-level software design principles: Separation of Concerns, Single Responsibility (system-level), DRY, Law of Demeter, Loose Coupling / High Cohesion, Evolvability, Resilience, KISS, Principle of Least Surprise, and YAGNI

development
🔌solid-principles🔌Plugin

Analyze code for violations of the SOLID principles of object-oriented design (Single Responsibility, Open/Closed, Liskov Substitution, Interface Segregation, Dependency Inversion)

development
🔌appsec🔌Plugin

Comprehensive application security toolbox for Claude Code. 62 skills across 8 frameworks (OWASP Top 10, OWASP API Top 10, STRIDE, PASTA, LINDDUN, MITRE ATT&CK, SANS/CWE Top 25, DREAD), red team simulation with 6 attacker personas plus consolidator, and interactive security education.

security

🏪Marketplaces1

🏪florianbuetow-claude-code🏪Marketplace

A collection of Claude Code plugins for software engineering workflows: application security analysis, SOLID principles analysis, system-level architecture principles analysis, expert-guided specification writing, and distributed system tradeoff analysis.

plugins:5developmentsecurity
Back to Home