Claude Codev1.2.0 · manifest
Design tests around invariants and input domains, and distinguish them from UI or binary fuzz testing.
Source: trailofbits/skills
plugins/property-based-testing · Independent maintainer marketplace
Includes 1+ sampled skill
Manifest observed; full component inventory, installed tools, provider access and task permissions remain unverified.
Source-linked package · Manifest fields inspected · Not a runtime testClaude Codev1.2.3 · manifest
Inspect independently maintained Django, FastAPI and Python workflow files; the retained skill inventory is partial.
Source: wshobson/agents
plugins/python-development · Independent maintainer marketplace
Includes 7+ sampled skills · 3+ sampled agents · 1+ sampled command
Manifest and packaged file paths observed. Required connections, account eligibility, costs and task permissions remain unknown.
Source-linked package · Manifest fields inspected · Not a runtime testClaude Codev1.1.0 · manifest
Review Rust safety boundaries and concurrency concerns using a separately maintained package.
Source: trailofbits/skills
plugins/rust-review · Independent maintainer marketplace
Includes Composition not yet established — not zero components
Manifest observed; full component inventory, installed tools, provider access and task permissions remain unverified.
Source-linked package · Manifest fields inspected · Not a runtime testClaude Codev1.3.0 · manifest
Prepare account research, outreach, call notes and pipeline reviews from the sales workflow package.
Source: anthropics/knowledge-work-plugins
sales · Publisher marketplace
Includes 9 observed skills · MCP configuration
Manifest and packaged file paths observed. Required connections, account eligibility, costs and task permissions remain unknown.
Source-linked package · Manifest fields inspected · Not a runtime testClaude Codev1.8.0 · manifest
Compare an external-model review route with local review; a separate CLI and provider access are prerequisites.
Source: trailofbits/skills
plugins/second-opinion · Independent maintainer marketplace
Includes 1+ sampled skill · MCP configuration
Choose one external review CLI and confirm its provider access. A bundled local MCP declaration is not an installed tool or a remote connection.
Source-linked package · Manifest fields inspected · Not a runtime testClaude Codev1.2.4 · manifest
Draft and test Semgrep detection rules for a stated code pattern.
Source: trailofbits/skills
plugins/semgrep-rule-creator · Independent maintainer marketplace
Includes Composition not yet established — not zero components
Manifest observed; full component inventory, installed tools, provider access and task permissions remain unverified.
Source-linked package · Manifest fields inspected · Not a runtime testClaude Codev1.1.1 · manifest
Assess how a detection rule should change for another programming language.
Source: trailofbits/skills
plugins/semgrep-rule-variant-creator · Independent maintainer marketplace
Includes Composition not yet established — not zero components
Manifest observed; full component inventory, installed tools, provider access and task permissions remain unverified.
Source-linked package · Manifest fields inspected · Not a runtime testClaude Codev1.1.1 · manifest
Review API and configuration choices that are easy to misuse.
Source: trailofbits/skills
plugins/sharp-edges · Independent maintainer marketplace
Includes Composition not yet established — not zero components
Manifest observed; full component inventory, installed tools, provider access and task permissions remain unverified.
Source-linked package · Manifest fields inspected · Not a runtime testClaude Codev1.0.0 · manifest
Find packaged Slack search, message and channel-digest workflows; workspace permissions remain separate.
Source: anthropics/knowledge-work-plugins
partner-built/slack · Publisher marketplace
Includes 2 observed skills · 5 observed commands · MCP configuration
Manifest and packaged file paths observed. Required connections, account eligibility, costs and task permissions remain unknown.
Source-linked package · Manifest fields inspected · Not a runtime testClaude Codev0.3.0 · manifest
Review small-business workflows for customer follow-up, invoicing, campaign planning and periodic working briefs.
Source: anthropics/knowledge-work-plugins
small-business · Publisher marketplace
Includes 31 observed skills · MCP configuration
Manifest and packaged file paths observed. Required connections, account eligibility, costs and task permissions remain unknown.
Source-linked package · Manifest fields inspected · Not a runtime testClaude Codev1.0.1 · manifest
Inspect partner-authored company-report and earnings-preview methods with separately governed data access.
Source: anthropics/financial-services
plugins/partner-built/spglobal · Publisher marketplace
Includes 3 observed skills · MCP configuration
Partner-authored plugin
Draft workflows for qualified human review. Provider access, subscriptions and permissions remain separate; this directory executes no transactions and posts no ledger entries.
Source-linked package · Manifest fields inspected · Not a runtime testClaude Codev2.0.0 · manifest
Compare a stated specification with implementation evidence and track disagreements.
Source: trailofbits/skills
plugins/spec-to-code-compliance · Independent maintainer marketplace
Includes Composition not yet established — not zero components
Manifest observed; full component inventory, installed tools, provider access and task permissions remain unverified.
Source-linked package · Manifest fields inspected · Not a runtime test
GPTsApp Plugins