Agentsecops Secopsagentkit
- 181 repo stars
- Updated April 15, 2026
- AgentSecOps/SecOpsAgentKit
SecOpsAgentKit is a Claude Code plugin that equips your agent with 25+ DevSecOps skills to scan for vulnerabilities, secrets, and policy violations while you code.
About
SecOpsAgentKit is an AgentSecOps Claude Code plugin bundle aimed at developers and small teams who ship with AI coding agents but cannot afford a full security org. It packages more than twenty-five skills across seven plugins so Claude can catch vulnerabilities early, scan containers, hunt secrets in repos, model threats with STRIDE, apply Sigma-style detection thinking, and tie findings to compliance frameworks like HIPAA and PCI-DSS. Use it when you are hardening a SaaS API, tightening a CI pipeline, or reviewing code before launch—not as a replacement for professional penetration tests, but as continuous agent-driven guardrails. The toolkit emphasizes DevSecOps automation, policy-as-code enforcement, secure software lifecycle rituals, and incident-oriented response patterns so security work stays in the same session as implementation. Repository momentum is modest but focused; treat outputs as signals to verify, not automatic pass/fail unless you wire real scanners and policies behind the skills.
- Bundle of 7 Claude Code plugins packaging 25+ security-oriented agent skills
- Coverage spans AppSec, container scanning, secret detection, Sigma rules, STRIDE threat modeling, and policy enforcement
- DevSecOps and SecSDLc workflows: reconnaissance, penetration testing patterns, vulnerability assessment, and secure revi
- Compliance and standards hooks for HIPAA, PCI-DSS, and policy-as-code automation
- Offensive-security and defensive-hunting skills for validation plus engineering feedback loops
Agentsecops Secopsagentkit by the numbers
- Data as of Jul 27, 2026 (Skillselion catalog sync)
/plugin install agentsecops-secopsagentkit@AgentSecOps/SecOpsAgentKitAdd your badge
Show developers this plugin is listed on Skillselion. Paste this into your README.
| repo stars | ★ 181 |
|---|---|
| Last updated | April 15, 2026 |
| Repository | AgentSecOps/SecOpsAgentKit ↗ |
What it does
Install when you want Claude Code to run DevSecOps checks—vulnerability scans, secret detection, container hardening, and policy-as-code—without bolting on separate security tools for every repo.
Who is it for?
Best when you're shipping APIs, CLIs, or agent tools and want repeatable AppSec, secret scanning, and threat-modeling rituals inside Claude Code sessions.
Skip if: Skip if you need certified audits, managed SOC, or production-grade scanners with SLAs without integrating your own tooling behind the skills.
What you get
After you register the bundle, Claude can invoke structured security skills in-line—surfacing risks, suggesting remediations, and aligning work with policy and compliance checklists before you merge or deploy.
- Structured vulnerability and secret-findings reports from agent sessions
- Threat models and security review notes aligned to common compliance frames
- Actionable remediation and policy-enforcement checklists before ship
By the numbers
- 7 plugins in the bundle
- 25+ security-oriented agent skills advertised
- Source repository AgentSecOps/SecOpsAgentKit
Recommended Plugins
1mangesh1 Hipaa GuardianAI agent skill for HIPAA compliance - PHI/PII detection, code scanning, audit reports, and remediation guidance6
Abossenbroek Abossenbroek Claude PluginsCustom Claude Code plugins by abossenbroek2
Agent Sh EnhancePlugin structure and tool use analyzer - validates plugin.json, MCP tools, and security patterns3
Altic Dev EnvaultLet agents safely manage env variables6
Auth0 Agent SkillsAuth0 Agent Skills40
Aws Solutions Library Samples Guidance For Claude Code With Amazon BedrockThis Guidance demonstrates how organizations can implement secure enterprise authentication for Amazon Bedrock using industry-standard protocols and AWS services382How it compares
A multi-plugin DevSecOps skill bundle, not a single MCP server or passive documentation skill.
FAQ
Who is SecOpsAgentKit for?
Developers using Claude Code who own security themselves and want agent-native scanning, review, and compliance-oriented workflows without a dedicated SecOps team.
When should I use SecOpsAgentKit?
Use it before merging risky changes, when onboarding a new repo, before container deploys, or whenever you need STRIDE threat models, secret checks, or policy-as-code guidance in the same coding session.
How do I add SecOpsAgentKit to my agent?
Install or register the AgentSecOps/SecOpsAgentKit Claude Code plugin from the catalog, enable its seven bundled plugins in your Claude Code configuration, then invoke security skills by name or let the agent suggest them during ship and review tasks.