Plugins

The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with your local repository context to help you fix compliance failures faster.

Find similar vulnerabilities and bugs across codebases using pattern-based analysis

Manage multiple Claude Code sessions, track work with checkpoints, and dispatch commands using voice or natural language routing

Graph-aware project analysis: coupling diagnostics, dependency tracking, scope enforcement, and architectural drift detection

Varsel CNA point-of-contact skills: file, verify, and summarize CVEs as Varsel cases through the Varsel MCP.

Multi-agent development plugin for Vault — a cross-platform subscription tracker, password manager, and secure file storage app built with Flutter, Dart, Riverpod, Drift (SQLCipher), GoRouter, and Freezed.

Task management commands for Obsidian vaults using vault-cli

The missing code-learning loop. At session start (or on demand via /code-learn) walks the active repo(s) under ~/Documents/GitHub/, extracts a durable pattern digest — tech stack and dependency signatures, naming conventions, error-handling style, test patterns, lint/type rules, file-layout idioms, frequent imports, and what the repo intentionally does NOT use — and writes one digest per repo to MoxyWolf Vault/_Shared Knowledge/Code Patterns/<repo>.md. Incremental: only files modified since the digest's last-learned timestamp are re-read. The digest is referenced by future Claude sessions so suggestions match the team's existing patterns instead of generic boilerplate. Auto-invoked by /session-start; manual trigger via /code-learn <repo> | --project <slug> | --all. v0.1.0.

Charles Coonce's My Brain vault lifecycle, graph, capture, search, sync, and writing workflows

Six vault-* workflow skills vendored from az9713/claude-code-obsidian. Companion to obsidian-skills (kepano's foundational five) — those handle the file formats, these run the daily vault workflows: vault-capture (quick-drop into _inbox/), vault-save (structured save to the right folder), vault-journal (Daily Journal/YYYY-MM-DD.md authoring), vault-synthesize (multi-note synthesis with citations), vault-moc (Map-of-Content authoring), vault-health (orphan / broken-link / stale-tag audits). v1.0.0.

Persoenliches Wissensmanagement: SvenBrain (Obsidian) als Second Brain + Vorderland Vault als Team-Wissenspipeline. OneDrive-Konflikt-Self-Heal fuer Multi-Device-Setups.

Transparent ANSI encoding protection for VB6 projects. Auto-converts Big5/Shift-JIS/GBK files on Read/Edit/Write, .frm format auto-fix, compile helpers, and safety nets.

Bug lifecycle for Virto Commerce QA — project setup, bug filing, autonomous fixing, fix verification, online bug monitoring, and self-diagnostics (/vc-self-check). Self-contained plugin (8 agents, 15 skills, 7 commands).

Advises founders through a pre-seed/seed raise: pitch-deck teardowns, investor research, outreach copy, and runnable fundraising playbooks.

Data-readiness + posture on your vCISO Lite data, with risk-intelligence workflows layering on as they ship.

QA Engineer Automation plugin for Playwright E2E testing with auto-scenario generation and validation

Go backend development automation for Venturo skeleton - Guided workflows for features, entities, endpoints, and adapters

Database design and API contract planning - Generate ERD, DBML, PostgreSQL migrations, and API contracts following audit standards

React frontend development automation for Venturo skeleton - Guided workflows for features from OpenAPI specs

Vercel deployment platform integration. Manage deployments, check build status, access logs, configure domains, and control your frontend infrastructure directly from Claude Code.

Curated upstream: Vercel-Labs React/Next.js skills — performance best practices, composition patterns (compound components, render props), and React Native / Expo conventions for mobile.

Evidence-before-claims methodology. Requires fresh execution of verification commands, reading full output, and confirming results before asserting completion.

Jurisdiction-neutral verification core (7 skills): legal syllogism, citation extraction, clause checklist, adversarial red-team review, single-pass opposing-counsel attack, judicial first impression (cold-reader test), output scoring. No connectors, sends no data out.

Verification feedback loop: format/typecheck/test on every edit, and block premature Stop until verify.sh passes.

Specification-first development workflow with ATDD, layered verification gates, and two-stage review agents. Enforces TDD, mechanical quality gates (lint, test, coverage, security, dead code), and AI-powered code review. Language-agnostic: runs the repo's own verify command and infers test idioms; Go is the bundled toolchain example; /test-audit spans Go, TypeScript, Python, and Java.

Identify and verify unverified claims in the agent's own responses before presenting them as conclusions.

Validate that a deployed website matches its source Figma design.

Verify BibTeX references against CrossRef metadata. Finds uncited entries and flags metadata discrepancies.

Black-box verification of any agent output: code, documents, presentations, reports, configs. Examine from the consumer's perspective and show evidence.

CiteAnything + AgentMap bundled for Claude Code — every claim backed by a clickable, verifiable source link, with automatic history logging.