42Crunch plugin marketplace for Claude Code and AI coding tools. Provides plugins that enable OpenAPI auditing, OWASP API vulnerability scanning, and validation of fixes to enforce API security guardrails.
Install
npx skills add 42Crunch-AI/claude-pluginsgh skill install 42Crunch-AI/claude-pluginsgit clone --depth 1 https://github.com/42Crunch-AI/claude-pluginsSkills in this collection
- 42crunch API Security Testing42Crunch-AIRun both a 42Crunch Audit and a live Scan together in a single pipeline. Use this skill when the user wants to run audit and scan together, complete the full security pipeline, or when the request is ambiguous about which phase to run. Triggers on phrases like "run audit and scan", "full 42crunch pipeline", "full security check", "audit then scan", "42crunch", or "SQG".
- 42crunch Audit42Crunch-AIRun a 42Crunch API Security Audit and fix SQG-blocking issues in an OpenAPI Specification file. Use this skill whenever the user wants to audit an OAS file for security issues, fix SQG-blocking issues, score an API, apply data dictionary enrichment, or remediate audit findings.
- 42crunch Scan42Crunch-AIRun a 42Crunch live conformance and authorization scan against an API and fix SQG-blocking scan findings. Use this skill whenever the user wants to run a conformance test, authorization scan, BOLA test, BFLA test, generate or configure a scan config, or fix scan-reported issues.
- 42crunch Setup42Crunch-AISet up the 42Crunch environment so that audit and scan skills can run without friction. Use this skill whenever the user wants to configure 42Crunch for the first time, install or update the 42c-ast binary, configure an API key, or troubleshoot missing credentials or binary errors.
- Generate Oas42Crunch-AIGenerate a complete OpenAPI 3.0 (OAS) specification from an API codebase, a Postman or Insomnia collection, or both together. Use this skill whenever the user wants to generate, create, or derive an OpenAPI spec, reverse-engineer an API definition, document an existing API, or convert a Postman/Insomnia collection to OpenAPI — when there is no existing OAS file yet.