ClaudeSuperPower
SubmitLog in

nightvision

Plugin

Skills for working with NightVision, a DAST and API Discovery platform that finds exploitable vulnerabilities in web applications and REST APIs

2API Tools

Install

claude plugin install nightvision@claude-plugins-official

What is nightvision?

Skills for working with NightVision, a DAST and API Discovery platform that finds exploitable vulnerabilities in web applications and REST APIs

What's inside

5 bundled components — installing the plugin installs all of them.

Skills (5)

api-discovery

shell

Guide for agents to help users extract OpenAPI specs from source code using NightVision API Discovery. Use when running swagger extract, identifying framework support, troubleshooting extraction, handling unresolved variables, comparing API specs, or understanding Code Traceback.

app-security-scan

shell

DAST-first NightVision scan for an app you just built or changed. Use when a user (or an org CLAUDE.md rule) wants a local, private, staging, or internal web app/API security-scanned. Drives the NightVision MCP `run-app-security-scan` harness.

ci-cd-integration

shell

Guide for agents to help users integrate NightVision DAST scanning into CI/CD pipelines. Use when setting up security scans in GitHub Actions, GitLab CI, Azure DevOps, Jenkins, BitBucket, or JFrog pipelines, configuring NightVision tokens, creating targets, running scans, exporting results as SARIF/

scan-configuration

shell

Guide for agents to help users configure NightVision DAST scans. Use when creating targets, setting up authentication (Playwright, headers, cookies), recording HTTP traffic, managing projects, configuring scope exclusions, or preparing private network scans.

scan-triage

shell

Guide for agents to help users interpret and act on NightVision DAST scan results. Use when reading SARIF/CSV findings, explaining vulnerabilities, locating vulnerable code, validating findings with curl, prioritizing by severity, suggesting remediations, or marking false positives.

What this can do

Capabilities declared by the plugin's own components — read straight from their frontmatter, not inferred.

Run shell commands

5 components declare Bash

~351 tokens of context used while enabled, before you invoke anything

All declared tools (10)
BashGrepReadmcp__nightvision__auth-statusmcp__nightvision__export-sarifmcp__nightvision__get-scan-statusmcp__nightvision__preflight-appmcp__nightvision__run-app-security-scanmcp__nightvision__summarize-scan-findingsmcp__nightvision__wait-for-scan

Trust

79/100 · Good

2 factors scored below maximum

Runs shell commands

Documentation

README · ~6 min read
NightVision

NightVision Agent Skills

Your best defense is a good offense: give your coding agent NightVision skills.


License Agent Skills Claude Code NightVision

NightVision is a developer-first DAST and API security platform. It dynamically tests running web applications and APIs, discovers REST endpoints from supported source code, and connects validated findings to source locations when that context is available.

These Agent Skills give your coding agent the ability to run NightVision scans, triage results, and integrate security testing into your CI/CD pipelines, all from natural language. Agent Skills are an open format supported by Claude Code, OpenAI Codex, Cursor, and other agentic tools, so the same skill folders work across whichever agent you use.

Installation

Reviews

Log in to leave a review.

No reviews yet — be the first.

Explore related

Other things in this space — across every part of the ecosystem, not just plugins.

Pluginssimilar to this one

All plugins →

youdotcom-agent-skills

You.com agent skills for web search, research with citations, and content extraction. Guided integrations for Vercel AI SDK, Claude Agent SDK, OpenAI Agents SDK, crewAI, LangChain, Microsoft Teams.ai, direct REST API, and bash CLI.

52 stars

mercadopago

Mercado Pago full-product integration toolkit. One agent routes to four orchestration skills (mp-integrate wizard, mp-webhooks, mp-test-setup, mp-review) that pull every endpoint, payload, and snippet live from the official Mercado Pago MCP server. The MCP must always be connected — there is no offl

24 stars

crowdstrike-falcon-foundry

CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows.

23 stars