Инструменты

Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin.

Anthropic's knowledge-work plugin marketplace, bundling skills, commands and connectors by role: sales, support, product, marketing, legal, finance, HR, data and more, plus many partner plugins. Built mainly for Cowork; also works in Claude Code.

A complete harness for coding agents: dozens of subagents, nearly 300 skills, hooks, rules, memory and continuous learning, plus the AgentShield security scanner. Built mainly for Claude Code, with Codex support.

Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content.

Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees.

Support and sales plugin with two subagents: one handles support replies, ticket triage and help docs; the other writes cold email sequences, follow-up cadences, quote templates and objection handling. Prompts only; no direct CRM connection.

Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access.

Official Slack (Salesforce) plugin in Anthropic's knowledge work marketplace: connects Slack's hosted MCP to search and send messages, read channels and threads, and manage canvases, with commands for channel digests, standup updates and announcements. Needs workspace admin approval.

Customer support plugin: triages and prioritizes tickets with routing suggestions, drafts customer replies, packages escalations, researches customer issues across sources and turns resolved issues into knowledge base articles. Official from Anthropic.

Anthropic's official knowledge work plugin: one question searches your connected chat, email, cloud docs, wiki and project tools at once and returns a sourced answer; can also produce daily or weekly digests. Preset MCP connectors for Slack, Notion, Atlassian, Asana and more, each needing auth.

Anthropic's official AI governance plugin: tiers AI use cases against your internal register, runs impact assessments across applicable laws such as the EU AI Act, reviews vendor AI terms for training-data and liability risk, and periodically checks for drift between AI policy and practice.

Privacy compliance plugin: decides whether processing activities need a PIA or DPIA, generates privacy impact assessments, reviews DPAs from the controller or processor side, and drafts DSAR responses within statutory deadlines. Official from Anthropic.

Plugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too.

Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access.

OpenAI's official Codex plugin for Outlook mail: triages your inbox, summarizes threads, extracts action items, and drafts replies or forwards, for people who handle heavy email loads. Requires Codex with a ChatGPT sign-in and an authorized Microsoft account.

OpenAI's official Codex plugin that uses the Gmail connector to search mail, read threads, draft replies and tidy your inbox. The plugin bundles no extra skills; authorize your Google account in Codex.

Before tool calls run, blocks destructive Git and file commands (git reset --hard, rm -rf) and access to sensitive files like SSH keys and .env. Parses command semantics, so bash -c wrappers are caught too. Works with Claude Code, Codex and other coding CLIs; needs Node.js 18+.

Atlassian's official plugin: connects the cloud Atlassian MCP to search and create Jira issues, read and write Confluence pages and manage sprints, with skills that turn meeting notes into tasks and generate status reports. Needs an Atlassian Cloud account with OAuth or an API token.

Salesforce's official plugin that helps service admins configure Service Cloud web chat, messaging, WhatsApp and Email-to-Case channels, connect Agentforce service agents to them and set up handoff to humans. Needs Salesforce org admin rights, a logged-in Salesforce CLI (sf) and Python.

Customer success plugin from gtm-agents: three commands with subagents for account health monitoring, adoption plans and escalation playbooks, plus skills for risk scoring, executive business reviews (EBRs) and feedback loops. Prompt-only; bring your own usage, ticket and NPS data.

Voice of customer plugin: organizes tickets, interviews, surveys and community feedback into one taxonomy, estimates revenue and churn impact by theme, produces insight briefs for leadership or product, and tracks feedback loops and advocacy programs. No code; supply your own feedback data.

Renewal management plugin for customer success and account managers: segment-based renewal forecasts with upside and downside scenarios, save plays and escalation paths for at-risk accounts, and post-renewal retrospectives. Prompt-based; you supply contract values, usage and other data.

Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker.

Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up).