Private Claude Code Plugin Marketplace by Esonhugh
English | 中文
This is Esonhugh's private Claude Code Plugin Marketplace — a curated collection of Claude Code plugins for security research, finance analysis, browser automation, reasoning frameworks, and productivity tools.
/plugin marketplace add Esonhugh/Marketplace/plugin install <plugin-name>@Esonhugh-Marketplace| Plugin | Category | Author | Source | Description |
|---|---|---|---|---|
| fofa-intel | Security | Esonhugh | local | FOFA cyberspace search engine — asset mapping & threat intel |
| threatbook-intel | Security | Esonhugh | skills | ThreatBook (微步) — IP/domain/hash threat intel with browser automation |
| macos-control-bypasser | Security | Esonhugh | skills | macOS offensive security — TCC bypass, sandbox escape, dylib injection |
| interactive-cli-systemic-debugging | Development | Esonhugh | skills | tmux workflow for debugging interactive CLI, REPL, TUI, and watch-mode processes |
| terminal-session-mcp | Development | Esonhugh | local | PTY terminal session MCP for long-running interactive CLI debugging and full transcript recording |
| pydoll-antibot-bypasser | Automation | Esonhugh | repo | Stealth browser automation bypassing Cloudflare WAF & CAPTCHA |
| ibkr-trade-analyzer | Finance | Esonhugh | repo | IBKR trading history analysis — P&L, portfolio, fees, Flex API + local import |
| detective | Reasoning | Esonhugh | local | Investigation-driven problem solving with evidence chains |
| video-extractor | Productivity | Esonhugh | repo | Video tutorial to Markdown — mlx-whisper + Vision OCR |
| tradingview | Finance | Esonhugh | repo | TradingView data access — quotes, options, screener, news, alerts |
| finance-market-analysis | Finance | himself65 | upstream | Earnings, correlation, ETF premium, SEPA strategy |
| document-skills | Productivity | Anthropic | upstream | Document processing — xlsx, docx, pptx, pdf |
| skill-creator | Development | Anthropic | upstream | Skill authoring and improvement tool |
| chrome-devtools-mcp | Development | Chrome DevTools Team | upstream | Chrome automation, debugging, network, console, and performance traces |
| frontend-design | Development | Anthropic | upstream | Production-grade frontend UI/UX design skill |
| superpowers | Development | Jesse Vincent | upstream | Brainstorming, TDD, debugging, code review, and skill authoring workflows |
| mattpocock-skills | Development | Matt Pocock | repo | Engineering and productivity skills including grill-me |
FOFA cyberspace search engine plugin. Bundles pre-compiled GoFOFA binaries for macOS/Linux/Windows — the fofa command is available immediately after installation with no manual PATH setup.
/plugin install fofa-intel@Esonhugh-MarketplaceFeatures:
| Capability | Command |
|---|---|
| Asset search by domain / IP / port / cert | fofa search |
| Bulk data export (millions of records) | fofa dump |
| Full host profile | fofa host |
| Field distribution statistics | fofa stats |
| Subdomain enumeration | fofa domains |
| Result count | fofa count |
Requirements: FOFA account + API Key (FOFA_KEY env var or ~/.config/gofofa/.env)
Notes: Queries consume F-Points. cert/banner fields cap at 2,000 per page; body caps at 500.
ThreatBook (微步在线) threat intelligence plugin. Query IPs, domains, and file hashes; perform asset mapping with X language; automate the browser via pydoll including full WeChat QR login.
/plugin install threatbook-intel@Esonhugh-MarketplaceFeatures:
| Capability | Detail |
|---|---|
| IP / domain / hash threat intel | Reputation, tags, associated malware, geolocation |
| Vulnerability intelligence | CVE detail and affected assets |
| X language asset mapping | Boolean operators: ip=, port=, asn=, country=, os=, etc. |
| Content search | intitle=, intext=, blog=, x=, smedia= |
| WeChat login automation | Full QR flow via pydoll — login state persisted in Chrome profile |
| XGPT conversation | AI-powered threat analysis chat |
Requirements: Chrome, uv, ThreatBook account, WeChat account
Skill path: skills/threatbook-intel/
Comprehensive macOS offensive security skill for authorized penetration testing and security research. Covers the full attack surface from userland to kernel.
/plugin install macos-control-bypasser@Esonhugh-MarketplaceCoverage:
| Area | Topics |
|---|---|
| Binary Analysis | Mach-O internals, dyld, code signing, entitlements |
| Code Injection | Dylib injection, DYLD_INSERT_LIBRARIES, task_for_pid, app-runtime injection (Electron/Chromium/NIB) |
| Privilege Escalation | Shellcode (x64/ARM64), Mach IPC, XPC attacks |
| Security Bypass | Gatekeeper, AMFI, MACF, sandbox escapes, TCC bypasses |
| Persistence | LaunchAgents/Daemons, login items, cron, plist manipulation |
| System Components | IOKit/DriverKit, MDM exploitation, keychain attacks |
Intended use: Authorized pentesting engagements, CTF, macOS security research.
Skill path: skills/macos-control-bypasses/
Systematic tmux-based debugging workflow for interactive CLI, REPL, TUI, prompt-loop, watch-mode, and long-running terminal programs.
/plugin install interactive-cli-systemic-debugging@Esonhugh-MarketplaceIncluded Skill: interactive-cli-systemic-debugging
Use cases: commands that hang after prompts, TUIs that render differently by terminal size, watch-mode failures after input, and any CLI behavior that needs preserved screen state with tmux capture-pane / send-keys.
PTY-backed terminal session MCP server for Claude Code. It runs through uv as a stdio MCP server and supports long-running commands, multi-session concurrency, special key input, terminal resizing, and complete bidirectional transcript recording.
/plugin install terminal-session-mcp@Esonhugh-MarketplaceIncluded MCP server: terminal-session
Included Skill: terminal-session-debugging
Use cases: debugging REPLs, TUIs, ssh/telnet/nc sessions, watch-mode commands, dev servers, prompt flows, and any terminal command that may not exit or needs real key input.
Records: all command input, output, key events, resize events, close events, exit status, and errors under .terminal-debug/ without redaction or masking.
Teaches Claude how to write stealth browser automation using Pydoll — async-native, zero-WebDriver Chromium automation specialized in WAF bypass.
/plugin install pydoll-antibot-bypasser@Esonhugh-MarketplaceWAF Support:
| WAF | Status |
|---|---|
| Cloudflare Turnstile | Full (headless) |
| Cloudflare JS Challenge | Full |
| Cloudflare Managed Challenge | Full (headless=False + xvfb) |
| DataDome | Partial |
| PerimeterX | Partial |
| Akamai Bot Manager | Partial |
Included Templates: basic_browser, bypass_cloudflare, web_scraping, form_filling, hybrid_automation, screenshot, concurrent_scraping, stealth_browser
Requirements: Python >= 3.10, Chrome/Chromium, uv
Standalone repo: Esonhugh/pydoll-cf-waf-bypasser-skills (also a marketplace)
Analyze Interactive Brokers trading history with read-only access. Generates comprehensive reports on trading patterns, P&L performance, portfolio structure, and fee analysis. Supports Flex Web Service API (online) and local CSV/XML file import (offline).
/plugin install ibkr-trade-analyzer@Esonhugh-MarketplaceAnalysis Dimensions:
| Dimension | Metrics |
|---|---|
| Trading Behavior | Trade frequency, holding periods, time-of-day patterns, win rate, profit factor |
| P&L Performance | Realized/unrealized P&L, equity curve, max drawdown, Sharpe ratio, monthly returns |
| Portfolio Structure | Asset allocation, sector concentration, long/short ratio, currency exposure |
| Fees & Cash Flow | Commissions, dividends, interest, financing costs, fee-to-PnL ratio |
Output Formats: Terminal summary, Markdown report, HTML with interactive Plotly charts
Configuration: Requires ibkr_flex_token and ibkr_query_id in plugin settings. Optional proxy for network access.
Requirements: Python >= 3.10, uv
Safety: Read-only by design. Zero write/order endpoints. Local file mode has zero network access.
Standalone repo: Esonhugh/ibkr-trade-analyzer (also a marketplace)
OODA-native investigation framework with a local MCP graph core for project-local case storage, evidence chains, blackboard notes, coverage, actions, proof gates, specialist-agent orchestration, graph queries, and Markdown/Mermaid exports.
/plugin install detective@Esonhugh-MarketplaceSkills:
| Skill | Purpose |
|---|---|
brainstorm |
Pre-investigation: collaborative problem exploration, produce case brief |
open-case |
Initialize a CaseBoard, define crime scene and goal |
investigate |
Autonomously run MCP-backed Observe → Orient → Decide → Act → Review cycles, including constrained specialist-agent delegation |
review-board |
Display board state, fragments, threads, hypotheses |
discuss-case |
Structured dialogue at deadlocks, ambiguity, or critical junctures |
close-case |
Produce resolution with complete evidence chain traceback |
Core Concepts:
- Nodes: Observations, clues, evidence, hypotheses, constraints, conclusions, questions, and tasks
- Edges: Directed reasoning links such as supports, contradicts, derives, eliminates, and requires
- OODA Orchestration: Records phase transitions, intents, actions, checkpoints, coverage, and specialist-agent work
- Proof Gate: Requires confirmed direct evidence, resolved alternatives/questions/actions, and non-empty complete coverage before normal closure
Applicable Domains: Security research, intelligence analysis, root cause analysis, code archaeology
MCP Graph Core Storage: Current v0.4 case state is project-local and directory-based:
.detective/cases/<case-id>/case.json
.detective/cases/<case-id>/notes.md
.detective/cases/<case-id>/graph.mmd
.detective/cases/<case-id>/events.jsonl
Detective v0.4 accepts schema 4.0 cases only; legacy flat files and compatibility scripts are not part of this release.
Video tutorial to structured Markdown converter. Optimized for Apple Silicon Mac — uses mlx-whisper for GPU-accelerated transcription and macOS native Vision framework for OCR.
/plugin install video-extractor@Esonhugh-MarketplacePipeline:
- Intelligent keyframe extraction (detects scene changes, avoids redundant frames)
- mlx-whisper GPU transcription (Apple Silicon MLX backend)
- macOS Vision OCR (extracts on-screen text, code, UI elements)
- Structured Markdown assembly (timestamps, speaker segments, screen content)
Use Cases:
- Convert coding tutorials into step-by-step text guides
- Extract slides and spoken content from conference talks
- Create searchable documentation from video walkthroughs
Requirements: macOS (Apple Silicon), ffmpeg, uv, Python >= 3.11
Platforms: macOS only (depends on MLX + Vision framework)
Standalone repo: Esonhugh/video_extractor (also a marketplace)
Read-only TradingView data access with persistent headless Chrome. Provides spot quotes, full options chains, screener, news, watchlists, alerts, chart state inspection, and screenshots — all without requiring a TradingView API key.
/plugin install tradingview@Esonhugh-MarketplaceSkills:
| Skill | Purpose |
|---|---|
launch |
Start headless Chrome with TradingView session |
stop |
Gracefully shut down the browser |
status |
Health-check the running browser instance |
preflight |
Verify plugin prerequisites |
quote |
Get real-time spot quote for a symbol |
search |
Search TradingView symbols |
options-chain |
Fetch full options chain for a symbol |
options-expiries |
List available option expiration dates |
screener |
Run stock/crypto screener with filters |
news |
Fetch news headlines |
news-research |
Deep research via news aggregation |
watchlists |
List TradingView watchlists |
alerts |
Fetch price alerts |
chart-state |
Read current chart symbol, interval, indicators |
screenshot |
Take a PNG screenshot of a chart |
login-email |
Non-interactive email/password login |
login-interactive |
Open visible browser for manual login |
options-analysis |
Analyze options strategy and payoff |
Architecture: A plugin-managed headless Chrome instance connects to TradingView via CDP (Chrome DevTools Protocol). The monitor hook auto-launches, health-checks, and restarts the browser on crash.
Requirements: Chrome/Chromium, Node.js, persistent Chrome profile for session
Standalone repo: Esonhugh/tradingview (also a marketplace)
Plugins below are sourced from external repositories. They are included in this marketplace for convenience but maintained by their respective authors.
Reference:
himself65/finance-skillsatplugins/market-analysis/
Market analysis toolkit for stock investors. Provides earnings analysis (preview/recap/estimate revisions), portfolio risk assessment (stock correlation, ETF premium/discount), and SEPA trend-following entry methodology.
/plugin install finance-market-analysis@Esonhugh-MarketplaceIncluded Skills: earnings-preview, earnings-recap, estimate-analysis, stock-correlation, etf-premium, sepa-strategy, options-payoff, yfinance-data, company-valuation, saas-valuation-compression, stock-liquidity
Requirements: Python >= 3.10, yfinance
Reference:
anthropics/skillsatskills/xlsx,skills/docx,skills/pptx,skills/pdf
Document processing suite from Anthropic. Generate and manipulate Excel spreadsheets, Word documents, PowerPoint presentations, and PDF files directly from Claude Code.
/plugin install document-skills@Esonhugh-MarketplaceIncluded Skills: xlsx (Excel), docx (Word), pptx (PowerPoint), pdf (PDF)
Reference:
anthropics/skillsatskills/skill-creator
Meta-skill from Anthropic for creating, modifying, and measuring the effectiveness of Claude Code skills. Useful for plugin developers building their own skill libraries.
/plugin install skill-creator@Esonhugh-MarketplaceReference:
ChromeDevTools/chrome-devtools-mcpas a standalone plugin repo, matching the official marketplace index.
Chrome DevTools MCP integration for controlling and inspecting a live Chrome browser from Claude Code: browser automation, console and network inspection, screenshots, and performance traces.
/plugin install chrome-devtools-mcp@Esonhugh-MarketplaceReference:
anthropics/claude-plugins-officialatplugins/frontend-design/
Anthropic frontend design skill for creating distinctive, production-grade UI/UX implementations and avoiding generic AI-looking interfaces.
/plugin install frontend-design@Esonhugh-MarketplaceReference:
obra/superpowersas a standalone plugin repo, matching the official marketplace index.
Workflow skills for brainstorming, red/green TDD, systematic debugging, subagent-driven development, code review, and skill authoring.
/plugin install superpowers@Esonhugh-MarketplaceReference:
mattpocock/skillsas a root Claude Code plugin.
Matt Pocock's engineering and productivity skills. Includes grill-me, grill-with-docs, tdd, diagnose, triage, handoff, and related real-engineering workflow skills.
/plugin install mattpocock-skills@Esonhugh-MarketplaceThis marketplace uses multiple source strategies:
| Type | Example | When |
|---|---|---|
| Local plugin | "./plugins/fofa-intel" |
Full plugin lives in this repo |
| Local skills-only | "source": "./" + "skills": ["./skills/name"] |
Pure skills entry stored under top-level skills/ |
| URL | {"source": "url", "url": "https://...git"} |
Plugin has its own standalone repo |
| Git Subdir | {"source": "git-subdir", "url": "...", "path": "..."} |
Plugin is a subdirectory in another repo |
Plugins with standalone repos are both a plugin and a marketplace — they can be used independently or aggregated here.
Marketplace/
├── .claude-plugin/
│ └── marketplace.json # Marketplace catalog (16 plugins)
├── skills/
│ ├── interactive-cli-systemic-debugging/ # tmux CLI debugging skill
│ ├── macos-control-bypasses/ # macOS security research skill
│ └── threatbook-intel/ # ThreatBook intel skill
├── plugins/
│ ├── fofa-intel/ # FOFA cyberspace search (local plugin)
│ └── detective-plugin/ # Investigation framework (local plugin)
└── README.md
Pure skills-only entries are stored under top-level skills/ and referenced from marketplace.json with source: "./" plus explicit skills relative paths. Plugins not listed above are referenced via URL/git-subdir and fetched at install time.
All plugins are provided for authorized security testing, educational purposes, and legitimate automation only. Users are responsible for complying with applicable laws and the Terms of Service of any target systems or websites.
Maintained by Esonhugh