Streamline people operations — recruiting, onboarding, performance reviews, compensation analysis, and policy guidance. Maintain compliance and keep your team running smoothly.
Run in your terminal
claude plugin marketplace add anthropics/knowledge-work-plugins && claude plugin install human-resources@knowledge-work-pluginsAdds the knowledge-work-plugins marketplace if you don't have it yet, then installs. Start a new Claude Code session to use it.
1. Add the marketplace (first time only)
/plugin marketplace add anthropics/knowledge-work-plugins2. Install
/plugin install human-resources@knowledge-work-pluginsPublished in Anthropic's knowledge-work-plugins marketplace (anthropics/knowledge-work-plugins).
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
Plugin · by Anthropic · 242k marketplace installs
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
Plugin · by Semgrep · 20k marketplace installs
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, that you apply when you choose.
Plugin · by Anthropic · 8.6k marketplace installs
Sonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get secure version recommendations, and check component quality metrics.
Plugin · by Sonatype · 7.5k marketplace installs
Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.
Plugin · by Aikido Security · 7.3k marketplace installs
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages. PostToolUse hooks run analysis after every file edit. Pre-tool secrets scanning prevents 450+ patterns from reaching the LLM. Slash commands give on-demand access to quality gate status, coverage, duplication, and dependency risks. Includes SonarQube CLI, MCP Server, skills, hooks, and slash commands.
Plugin · by SonarSource · 6.4k marketplace installs