Tools

Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin.

Anthropic's knowledge-work plugin marketplace, bundling skills, commands and connectors by role: sales, support, product, marketing, legal, finance, HR, data and more, plus many partner plugins. Built mainly for Cowork; also works in Claude Code.

A complete harness for coding agents: dozens of subagents, nearly 300 skills, hooks, rules, memory and continuous learning, plus the AgentShield security scanner. Built mainly for Claude Code, with Codex support.

Generates hook rules from a one-line description or by analyzing recent conversations. Rules are Markdown files with match conditions that block or warn on dangerous commands and unwanted patterns, and take effect without a restart. Official Anthropic plugin.

Connects Claude Code to gopls, Go's official language server, for code intelligence, refactoring and analysis. Install gopls with go install and add Go's bin directory to PATH first. Official Anthropic plugin.

HashiCorp's official Terraform plugin: runs the Terraform MCP Server in Docker against the Terraform Registry and HCP Terraform API to look up provider and module docs and help write IaC. Needs Docker; TFE_TOKEN is optional.

Anthropic's official plugin marketplace, built into Claude Code by default, with 300+ official and partner plugins for development, security, design and office collaboration. Browse and install with /plugin.

Connects GitLab's official remote MCP server (beta) so Claude can work with repos, merge requests, CI/CD pipelines, issues and wikis on GitLab.com. MCP access must be enabled on the top-level group, with browser OAuth. In Anthropic's official plugin marketplace.

Scans your codebase and recommends the best hooks, skills, MCP servers, subagents and slash commands by category. Analysis only, no file changes; a quick way to set up Claude Code for a project. Official Anthropic plugin.

Connects GitHub's official remote MCP server to manage issues and PRs, review code, search repos and call the GitHub API from Claude Code. Requires GITHUB_PERSONAL_ACCESS_TOKEN.

Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access.

Quant trading plugin from the wshobson/agents marketplace: quant analyst and risk manager subagents plus backtesting and risk metrics skills for strategy backtests, portfolio optimization and risk measures like VaR, Sharpe ratio and max drawdown. Needs local Python; not investment advice.

Business analytics plugin from the wshobson/agents marketplace: KPI dashboard design and data storytelling skills plus a business analyst subagent to choose metrics, plan dashboard layouts and turn data into reports executives or investors understand. Methods and templates only; no data connections.

Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees.

Support and sales plugin with two subagents: one handles support replies, ticket triage and help docs; the other writes cold email sequences, follow-up cadences, quote templates and objection handling. Prompts only; no direct CRM connection.

Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content.

MLOps plugin from the wshobson/agents marketplace: data scientist, ML engineer and MLOps engineer subagents and a /ml-pipeline command that runs the pipeline in phases from data analysis and training to deployment and monitoring, plus ML pipeline and recommender system skills.

Kubernetes operations plugin from the wshobson/agents marketplace: a kubernetes-architect subagent plus four skills for manifest generation, Helm chart scaffolding, GitOps workflows and security policies. Community-maintained.

Claude Code plugin for Next AI Draw.io that starts its Draw.io MCP server via npx. Generate and edit flowcharts, architecture and sequence diagrams in plain language, with live browser preview, version history and .drawio export. Needs Node.js.

Data analysis plugin: writes queries in each SQL dialect, explores datasets, runs statistical tests, charts with Python and builds interactive HTML dashboards, then reviews methods and conclusions before sharing. Connects to Snowflake, BigQuery and other warehouses. Official from Anthropic.

For preclinical life sciences research: bundles MCP connectors for PubMed, bioRxiv, ChEMBL, Open Targets, ClinicalTrials and more, plus analysis skills for single-cell RNA QC, scvi-tools and nf-core pipelines. Official from Anthropic; some data sources need accounts.

Official Slack (Salesforce) plugin in Anthropic's knowledge work marketplace: connects Slack's hosted MCP to search and send messages, read channels and threads, and manage canvases, with commands for channel digests, standup updates and announcements. Needs workspace admin approval.

Customer support plugin: triages and prioritizes tickets with routing suggestions, drafts customer replies, packages escalations, researches customer issues across sources and turns resolved issues into knowledge base articles. Official from Anthropic.

Anthropic's official knowledge work plugin: one question searches your connected chat, email, cloud docs, wiki and project tools at once and returns a sourced answer; can also produce daily or weekly digests. Preset MCP connectors for Slack, Notion, Atlassian, Asana and more, each needing auth.