claudemods

来源ormus-solutions/libresecops-claude-code

ormus-solutions/libresecops-claude-code 已索引

Security operations plugins, agents, commands, and skills for Claude Code. Sister project to LibreUIUX.

查看上游仓库

已索引 索引里有这个仓库的包记录。包数量是历史登记记录,不代表这些包现在仍可用。

仓库

规范名称
Ormus-Solutions/LibreSecOps-Claude-Code
GitHub 仓库 ID
1166199028
包记录
34 (历史登记记录,不代表现在仍可用)

发现与队列

首个记录来源
search:topic:claude-code-marketplace fork:false
发现于
队列状态
ok
记录的错误次数
0
最近完成的处理
下次检查资格
起具备资格

首个记录来源是队列第一次保存的来源,不是完整的发现历史。错误次数在处理以错误状态结束时增加,成功处理后清零,不是全部尝试次数。「最近完成的处理」是结束时间,不是开始时间。

资格按 计算。它不是排期:采集器每次运行只处理有限数量的来源,具备资格也不保证何时检查。

最近保存的扫描

仓库元数据读取于
扫描状态
complete
扫描保存于
识别器版本
2
续扫记录
没有

扫描记录与队列状态分开:队列状态说明处理进度,扫描记录说明最近一次保存了什么。有续扫记录只表示存有未完成的状态,没有剩余数量。

源文件证据覆盖

已存储的包版本在这个仓库中引用的固定源文件的原始计数。它反映已记录了什么,不代表仓库有多完整。

范围与限制

统计所有已存储版本(来自任何包)中指向本仓库规范名称的不同固定文件链接(仓库、提交、路径)。本仓库所拥有的包的文件,只有被某个版本在这里链接时才会计入。不合并别名,也不会根据当前名称推测历史。

「已知」表示已记录普通文件身份,不表示整个目录或包已被覆盖。不是有效固定文件 URL 的链接不计入。

引用了 176 个固定源文件

  • 176 已知
  • 0 提交中不存在
  • 0 文件列表截断
  • 0 不受支持
  • 0 尚无记录
  • 0 读取失败

按仓库、提交和路径去重;同一路径出现在两个提交中,按两个文件身份计数。不是组件组数。

读取失败的提交 0

尚无记录的文件没有对应的提交读取失败记录。

关联的包 34

按仓库的已验证身份关联。数量是历史登记记录,不是当前可用性。

第 1–20 条,共 34 条结果

  • api-security-testing插件

    API security assessment for REST, GraphQL, gRPC, and WebSocket interfaces against the OWASP API Security Top 10, including authentication flow audits and secure auth patterns.

  • blue-team-detection插件

    Detection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.

  • bug-bounty-methodology插件

    Methodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.

  • cloud-security-aws插件

    Defensive AWS security: IAM, S3, VPC, KMS, and logging architecture reviews, CIS and Well-Architected compliance audits, and hardening patterns.

  • cloud-security-azure插件

    Defensive Azure security: Entra ID, Conditional Access, RBAC, networking, storage, and Key Vault reviews, plus CIS Azure and Microsoft Cloud Security Benchmark audits.

  • cloud-security-gcp插件

    Defensive Google Cloud security: IAM and Workload Identity, Organization Policies, VPC Service Controls, and CIS GCP benchmark audits.

  • compliance-frameworks插件

    Compliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.

  • container-security插件

    Container security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.

  • cryptography-essentials插件

    Cryptography guidance: algorithm and parameter selection, password hashing, key management and rotation, TLS configuration, and crypto code audits.

  • devsecops-pipelines插件

    Security-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.

  • forensics-analysis插件

    Digital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.

  • identity-access-management插件

    Identity and access management: IAM architecture, SSO and MFA design, RBAC/ABAC/ReBAC access control models, authentication flow review, and access audits.

  • incident-response插件

    Security incident response: incident command and coordination, forensic evidence handling, playbooks for common incident types, and blameless postmortems.

  • kubernetes-security插件

    Kubernetes security: cluster hardening, RBAC audits, Pod Security Standards, NetworkPolicy, and admission control with Gatekeeper or Kyverno.

  • libre-secops-hooks插件

    Optional security hooks: a one-line security profile of the project at session start, a confirmation prompt before Claude edits secret or key files, and a local pattern scan for vulnerabilities after each edit.

  • malware-analysis插件

    Defensive malware analysis for incident responders: triage, static and sandbox-based dynamic analysis in an isolated lab, IOC extraction, and detection signatures.

  • mobile-app-security插件

    Mobile application security for Android and iOS: OWASP MASVS/MASTG assessments, secure code review, hardening checklists, and mobile crypto patterns.

  • network-security插件

    Network security: firewall rules, segmentation and trust zones, IDS/IPS with Suricata, Snort, and Zeek, VPN review, and network audits.

  • penetration-testing插件

    Penetration testing methodology for authorized assessments: scoping and rules of engagement, attack surface mapping, test planning, and risk-rated vulnerability analysis.

  • privacy-engineering插件

    Privacy engineering: privacy by design, GDPR data protection impact assessments, personal data flow mapping, and technical privacy controls.

已保存的扫描说明 0

没有保存额外的扫描说明。

记录的别名 0

这些名称在上次记录时指向这个仓库。这是记录下来的解析结果,不是实时的 GitHub 检查;本站不会因此合并包或元数据。

没有记录到指向这个仓库的别名。

不支持的市场条目 0

这个仓库的市场清单里、本站暂不支持的条目。它们是原样保存的来源数据,不会被抓取或执行。

没有记录到不支持的条目。