Tools

Guides the agent through writing or improving a skill: clarify intent, draft SKILL.md, run scored evals with and without the skill, then tune the description so it triggers accurately. Official Anthropic skill.

Anthropic's terminal coding agent: understands your codebase, edits code, runs commands and handles git workflows, with plugins, MCP and a headless mode (claude -p). Sign in with a Claude account or set an API key.

Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin.

Reference for the Claude API and Anthropic SDK: model selection and pricing, streaming, tool use, prompt caching, Managed Agents and more, plus workflows for model migration and prompt audits. Official Anthropic skill.

Guides agents in building quality MCP servers: research the protocol and target API, design tools, implement with Python (FastMCP) or the TypeScript SDK, and write evaluation questions to test the result. Official Anthropic skill.

Generates hook rules from a one-line description or by analyzing recent conversations. Rules are Markdown files with match conditions that block or warn on dangerous commands and unwanted patterns, and take effect without a restart. Official Anthropic plugin.

Toolkit for building Claude Code plugins: 7 skills on plugin structure, hooks, MCP integration, commands, subagents and skill writing, a guided eight-phase create command, and subagents for agent generation, plugin validation and skill review. Maintained by Anthropic.

Scaffolds a Claude Agent SDK project in Python or TypeScript interactively with /new-sdk-app, then a verifier agent checks dependencies, config and code against official best practices. Maintained by Anthropic.

Scans your codebase and recommends the best hooks, skills, MCP servers, subagents and slash commands by category. Analysis only, no file changes; a quick way to set up Claude Code for a project. Official Anthropic plugin.

Connects Claude Code to the Pyright language server for static type checking and code intelligence in Python. Install pyright first with npm, pip or pipx. Official Anthropic plugin.

Official Anthropic plugin that reads local session logs in ~/.claude/projects and generates an interactive HTML usage report covering tokens, cache hit rate, subagents, skills and the most expensive prompts, with optimization tips. Needs Node.js.

Connects Claude Code to gopls, Go's official language server, for code intelligence, refactoring and analysis. Install gopls with go install and add Go's bin directory to PATH first. Official Anthropic plugin.

Creates or improves Agent Skills from scratch: writes eval cases to test them, runs benchmarks with variance analysis, and tunes descriptions for more accurate triggering. Maintained by Anthropic.

Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access.

Anthropic's official plugin marketplace, built into Claude Code by default, with 300+ official and partner plugins for development, security, design and office collaboration. Browse and install with /plugin.

Designs and builds MCP servers: first picks a deployment model among remote HTTP, MCPB bundles and local stdio, then guides tool design, auth and in-chat interactive components. Maintained by Anthropic.

Everyday software engineering plugin: standup summaries, code review, structured debugging, architecture decision records, incident response and pre-deploy checks. Official from Anthropic, built mainly for Cowork but also usable in Claude Code.

Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review.

Privacy compliance plugin: decides whether processing activities need a PIA or DPIA, generates privacy impact assessments, reviews DPAs from the controller or processor side, and drafts DSAR responses within statutory deadlines. Official from Anthropic.

Anthropic's official AI governance plugin: tiers AI use cases against your internal register, runs impact assessments across applicable laws such as the EU AI Act, reviews vendor AI terms for training-data and liability risk, and periodically checks for drift between AI policy and practice.

Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained.

Anthropic's official OS-level sandbox CLI: restricts file and network access for agents, MCP servers and any command without containers, using sandbox-exec on macOS and bubblewrap on Linux. Currently a research preview.

Read-only mirror of the community plugin marketplace maintained by Anthropic, with 2,000+ community plugins that passed submission review and automated security scans, for Claude Code and Claude Cowork.

Puts Claude in your incident channel: builds triage runbooks from past incidents, investigates alerts read-only and gives an evidence-backed first diagnosis while humans decide fixes, plus handoffs and status reports. Anthropic reference code, no longer maintained; needs Claude Team or Enterprise.