Инструменты

A complete development methodology for coding agents: brainstorm to clarify requirements, write an implementation plan, then build with subagents, with red-green TDD, systematic debugging and code review throughout. In the official Claude Code and Codex marketplaces.

Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin.

A complete harness for coding agents: dozens of subagents, nearly 300 skills, hooks, rules, memory and continuous learning, plus the AgentShield security scanner. Built mainly for Claude Code, with Codex support.

UI/UX design knowledge base plugin with searchable UI styles, color palettes, font pairings, charts and guidelines for 20+ tech stacks; generates complete design system recommendations by product type. Needs Python 3 installed locally.

Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content.

Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees.

UI/UX design plugin from the wshobson/agents marketplace with 3 subagents, 9 skills and commands for design review, component creation and accessibility audits, covering design tokens, WCAG 2.2, responsive layout, iOS HIG and Material Design 3 for in-code UI design and review.

Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access.

Google's official Firebase plugin: starts the Firebase MCP via firebase-tools to manage projects, Firestore data, Auth users and security rules, and view Crashlytics and Cloud Functions logs. Needs Node.js and a Firebase CLI login.

Connects Claude Code to SourceKit-LSP so the agent can go to definitions, find references and inspect symbols in Swift code. Install the Swift toolchain or Xcode first. Official Anthropic plugin.

Connects Claude Code to the clangd C/C++ language server for code intelligence, diagnostics and formatting. Install LLVM/clangd and add it to PATH first. Official Anthropic plugin.

Connects Upstash's hosted Context7 remote MCP to fetch current, version-specific docs and code examples for libraries on demand, reducing outdated or invented APIs. No local Node needed; works anonymously, and an API key raises limits. Maintained by Upstash.

Connects Claude Code to the C# language server csharp-ls for code intelligence and diagnostics. Needs .NET SDK 6.0+; install csharp-ls first via dotnet tool or Homebrew. Official Anthropic plugin.

Connects Claude Code to JetBrains' Kotlin language server so the agent can go to definitions, find references and inspect symbols in .kt and .kts files. Install kotlin-lsp first (Homebrew works). Official Anthropic plugin.

Connects Claude Code to the Eclipse JDT.LS language server so the agent can go to definitions, find references and inspect symbols in Java code. Needs JDK 17+ and jdtls installed first. Official Anthropic plugin.

MiniMax's official skill plugin with dev guides for frontend, full-stack, Android, iOS, Flutter, React Native and GLSL shaders, plus PDF, PowerPoint, Excel and Word document skills and image, video and music generation. Media skills need a MiniMax API key. Still in beta.

Bundles 60+ full-stack specialist skills into one plugin: experts for 12 languages including Python, TypeScript, Go, Rust and Java, and frameworks like React, Django and Spring Boot, activated automatically by request. Also includes Jira and Confluence workflow commands (needs Atlassian MCP).

Anthropic's official AI governance plugin: tiers AI use cases against your internal register, runs impact assessments across applicable laws such as the EU AI Act, reviews vendor AI terms for training-data and liability risk, and periodically checks for drift between AI policy and practice.

Privacy compliance plugin: decides whether processing activities need a PIA or DPIA, generates privacy impact assessments, reviews DPAs from the controller or processor side, and drafts DSAR responses within statutory deadlines. Official from Anthropic.

Google's official Android agent skills: 25 skills for AGP 9 upgrades, XML-to-Compose migration, Navigation 3, R8 analysis, Play Billing Library upgrades, permissions and intent security, and more. Install with the Android CLI or as a Claude Code plugin.

Plugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too.

OpenAI's official Codex plugin marketplace (openai-curated) with 60+ plugins such as Figma, Notion, GitHub, Stripe and Vercel, each bundling skills, MCP servers and app connections into one install.

OpenAI's official Codex plugin for macOS apps: building and running, SwiftUI scenes and AppKit interop, testing and troubleshooting, signing, notarization and packaging, and logging instrumentation. Requires macOS and Xcode; Codex only.

Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access.