21 boosters for "auditing" — open source, verified from GitHub, ready to install
A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows. Codex-native skill discovery is supported via the sidecar tree in this repository. See [](.codex/INSTALL.md) for additional details.
Check HIPAA compliance for healthcare data security requirements. Use when auditing healthcare applications. Trigger with 'check HIPAA compliance', 'validate health data security', or 'audit PHI protection'.
"name": "foldkit-skills", "description": "Skills for building Foldkit apps — app generator, message scaffolding, submodel extraction, and architecture auditing", "skills": ["./skills/generate-program/"]
This skill walks a user through writing a systematic literature review (SLR) that follows the PRISMA 2020 reporting guideline. It produces a manuscript in strict journal article format as a Word document (.docx), generates an annotated PRISMA flow diagram, and enforces APA 7th Edition referencing th
A comprehensive Model Context Protocol (MCP) server that provides web performance auditing, accessibility testing, SEO analysis, security assessment, and Core Web Vitals monitoring using Google Lighthouse. Enables LLMs and AI agents to perform detailed website analysis with 13+ specialized tools.
"description": "Ship software systematically: project lifecycle, TDD, parallel agents, code review, security auditing, and infrastructure validation", "email": "lgbarn@users.noreply.github.com"
"name": "design-system-ops", "description": "Staff-level design system auditing, governance, documentation, validation, and communication — 39 skills, 4 agents, and 11 knowledge notes for the full design system lifecycle", "name": "Murphy Trueman"
"name": "a11y-specialist-skills", "description": "Accessibility specialist skills for Claude Code. WCAG 2.2 review, conformance auditing, and improvement planning tools.", "url": "https://github.com/masuP9"
A comprehensive frontend performance auditing skill that analyzes websites for Core Web Vitals, accessibility, and SEO issues, then provides actionable improvement plans—essential for developers and teams optimizing web performance.
kube-audit-kit is a read-only Kubernetes security auditing skill that exports cluster resources, sanitizes metadata, and generates PSS/NSA-compliant audit reports. DevOps engineers and security teams use it to perform compliance reviews and identify security misconfigurations without cluster modification.
You are a content optimization agent using , a deterministic linter with 92 rules. Your job is to validate and fix content files so they are optimized for both traditional SEO and AI search engine citation (GEO).
"description": "A curated collection of AI coding agent skills for browser automation, frontend design, performance auditing, task tracking, and structured problem-solving workflows.", "repository": "https://github.com/wunki/amplify", "browser-automation",
perf-expert is a frontend performance auditing skill that analyzes websites for Core Web Vitals, accessibility, and SEO issues, then provides actionable improvement plans. It's ideal for developers and teams looking to optimize website performance and user experience.
"name": "skill-builder", "description": "Create, audit, optimize Claude Code skills. Converts bloated CLAUDE.md files into lean briefing documents plus on-demand skills, enforcement hooks, and validation agents.", "name": "Francis Meetze",
skill-auditor is an expert reviewer that evaluates SKILL.md files against Claude Code Skills best practices, helping developers ensure their skills meet structural and effectiveness standards. It's essential for skill creators and maintainers who want to validate compliance before publishing.
A specialized agent for security compliance professionals to implement, audit, and maintain security controls across industry standards like SOC2, ISO 27001, and HIPAA. Ideal for compliance officers, security teams, and organizations needing automated governance frameworks.
Tinman provides systematic security auditing and hardening guidance for OpenClaw projects and system infrastructure, helping developers identify and remediate security risks across credentials, tokens, SSH, and firewall configurations.
An AI-powered code auditing tool that integrates with Claude Desktop via MCP protocol, using local Ollama models to analyze code for security vulnerabilities, performance issues, and quality concerns without sending code to external services. Developers and security teams benefit from automated, privacy-preserving code reviews with customizable analysis parameters.
perf-expert is a frontend performance auditing skill that analyzes websites for Core Web Vitals, accessibility, and SEO issues, then provides actionable improvement plans. It's designed for developers and teams looking to optimize their site performance and user experience.
kube-audit-kit automates Kubernetes security audits with PSS/NSA compliance checks, resource export, and topology analysis—ideal for DevSecOps teams and cluster administrators needing systematic security reviews.
kube-audit-kit automates read-only Kubernetes security audits by exporting resources, sanitizing metadata, and generating PSS/NSA-compliant reports. DevOps engineers and security teams use it to assess cluster security posture without modifying cluster state.
