Private Claude Code Plugin Marketplace by Esonhugh
English | 中文
This is Esonhugh's private Claude Code Plugin Marketplace — a curated collection of Claude Code plugins for security research, finance analysis, browser automation, reasoning frameworks, and productivity tools.
/plugin marketplace add Esonhugh/Marketplace/plugin install <plugin-name>@Esonhugh-Marketplace| Plugin | Category | Author | Source | Description |
|---|---|---|---|---|
| fofa-intel | Security | Esonhugh | local | FOFA cyberspace search engine — asset mapping & threat intel |
| threatbook-intel | Security | Esonhugh | local | ThreatBook (微步) — IP/domain/hash threat intel with browser automation |
| macos-control-bypasser | Security | Esonhugh | local | macOS offensive security — TCC bypass, sandbox escape, dylib injection |
| pydoll-antibot-bypasser | Automation | Esonhugh | repo | Stealth browser automation bypassing Cloudflare WAF & CAPTCHA |
| ibkr-trade-analyzer | Finance | Esonhugh | repo | IBKR trading history analysis — P&L, portfolio, fees |
| detective | Reasoning | Esonhugh | local | Investigation-driven problem solving with evidence chains |
| video-extractor | Productivity | Esonhugh | repo | Video tutorial to Markdown — mlx-whisper + Vision OCR |
| tradingview | Finance | Esonhugh | repo | TradingView data access — quotes, options, screener, news, alerts |
| finance-market-analysis | Finance | himself65 | upstream | Earnings, correlation, ETF premium, SEPA strategy |
| document-skills | Productivity | Anthropic | upstream | Document processing — xlsx, docx, pptx, pdf |
| skill-creator | Development | Anthropic | upstream | Skill authoring and improvement tool |
FOFA cyberspace search engine plugin. Bundles pre-compiled GoFOFA binaries for macOS/Linux/Windows — the fofa command is available immediately after installation with no manual PATH setup.
/plugin install fofa-intel@Esonhugh-MarketplaceFeatures:
| Capability | Command |
|---|---|
| Asset search by domain / IP / port / cert | fofa search |
| Bulk data export (millions of records) | fofa dump |
| Full host profile | fofa host |
| Field distribution statistics | fofa stats |
| Subdomain enumeration | fofa domains |
| Result count | fofa count |
Requirements: FOFA account + API Key (FOFA_KEY env var or ~/.config/gofofa/.env)
Notes: Queries consume F-Points. cert/banner fields cap at 2,000 per page; body caps at 500.
ThreatBook (微步在线) threat intelligence plugin. Query IPs, domains, and file hashes; perform asset mapping with X language; automate the browser via pydoll including full WeChat QR login.
/plugin install threatbook-intel@Esonhugh-MarketplaceFeatures:
| Capability | Detail |
|---|---|
| IP / domain / hash threat intel | Reputation, tags, associated malware, geolocation |
| Vulnerability intelligence | CVE detail and affected assets |
| X language asset mapping | Boolean operators: ip=, port=, asn=, country=, os=, etc. |
| Content search | intitle=, intext=, blog=, x=, smedia= |
| WeChat login automation | Full QR flow via pydoll — login state persisted in Chrome profile |
| XGPT conversation | AI-powered threat analysis chat |
Requirements: Chrome, uv, ThreatBook account, WeChat account
Comprehensive macOS offensive security skill for authorized penetration testing and security research. Covers the full attack surface from userland to kernel.
/plugin install macos-control-bypasser@Esonhugh-MarketplaceCoverage:
| Area | Topics |
|---|---|
| Binary Analysis | Mach-O internals, dyld, code signing, entitlements |
| Code Injection | Dylib injection, DYLD_INSERT_LIBRARIES, task_for_pid, app-runtime injection (Electron/Chromium/NIB) |
| Privilege Escalation | Shellcode (x64/ARM64), Mach IPC, XPC attacks |
| Security Bypass | Gatekeeper, AMFI, MACF, sandbox escapes, TCC bypasses |
| Persistence | LaunchAgents/Daemons, login items, cron, plist manipulation |
| System Components | IOKit/DriverKit, MDM exploitation, keychain attacks |
Intended use: Authorized pentesting engagements, CTF, macOS security research.
Teaches Claude how to write stealth browser automation using Pydoll — async-native, zero-WebDriver Chromium automation specialized in WAF bypass.
/plugin install pydoll-antibot-bypasser@Esonhugh-MarketplaceWAF Support:
| WAF | Status |
|---|---|
| Cloudflare Turnstile | Full (headless) |
| Cloudflare JS Challenge | Full |
| Cloudflare Managed Challenge | Full (headless=False + xvfb) |
| DataDome | Partial |
| PerimeterX | Partial |
| Akamai Bot Manager | Partial |
Included Templates: basic_browser, bypass_cloudflare, web_scraping, form_filling, hybrid_automation, screenshot, concurrent_scraping, stealth_browser
Requirements: Python >= 3.10, Chrome/Chromium, uv
Standalone repo: Esonhugh/pydoll-cf-waf-bypasser-skills (also a marketplace)
Analyze Interactive Brokers trading history with read-only access. Supports both the Flex Web Service API (online) and local CSV/XML file import (offline).
/plugin install ibkr-trade-analyzer@Esonhugh-MarketplaceAnalysis Dimensions:
| Dimension | Metrics |
|---|---|
| Trading Behavior | Trade frequency, holding periods, time-of-day patterns, win rate, profit factor |
| P&L Performance | Realized/unrealized P&L, equity curve, max drawdown, Sharpe ratio, monthly returns |
| Portfolio Structure | Asset allocation, sector concentration, long/short ratio, currency exposure |
| Fees & Cash Flow | Commissions, dividends, interest, financing costs, fee-to-PnL ratio |
Output Formats: Terminal summary, Markdown report, HTML with interactive Plotly charts
Configuration: Requires ibkr_flex_token and ibkr_query_id in plugin settings. Optional proxy for network access.
Requirements: Python >= 3.10, uv
Safety: Read-only by design. Zero write/order endpoints. Local file mode has zero network access.
Standalone repo: Esonhugh/ibkr-trade-analyzer (also a marketplace)
Investigation-driven problem solving framework. Maintains a CaseBoard — a directed labeled graph of Fragments (information units) and Threads (logical connections) — to solve unknown-target problems through evidence chains, hypothesis testing, constraint propagation, and autonomous convergence detection.
/plugin install detective@Esonhugh-MarketplaceSkills:
| Skill | Purpose |
|---|---|
brainstorm |
Pre-investigation: collaborative problem exploration, produce case brief |
open-case |
Initialize a CaseBoard, define crime scene and goal |
investigate |
Main loop: Scan → Evolve → Focus → Act → File (until convergence) |
review-board |
Display board state, fragments, threads, hypotheses |
discuss-case |
Structured dialogue at deadlocks, ambiguity, or critical junctures |
close-case |
Produce resolution with complete evidence chain traceback |
Core Concepts:
- Fragment: Information unit with maturity (Raw → Clue → Evidence → Anchor) and role (Observation, Hypothesis, Constraint, Conclusion)
- Thread: Directed edge between fragments (supports, contradicts, derives, eliminates, requires)
- Strategy Engine:
Score(action) = (Discrimination x Feasibility) / Costwith automatic pruning of dead targets, redundancy, cold leads, and circular reasoning - Autonomous Convergence: Graph topology determines when the investigation is complete — no LLM self-assessment
Applicable Domains: Security research, intelligence analysis, root cause analysis, code archaeology
State Storage: .detective/cases/<case-id>.json (project-local, self-contained)
Video tutorial to structured Markdown converter. Optimized for Apple Silicon Mac — uses mlx-whisper for GPU-accelerated transcription and macOS native Vision framework for OCR.
/plugin install video-extractor@Esonhugh-MarketplacePipeline:
- Intelligent keyframe extraction (detects scene changes, avoids redundant frames)
- mlx-whisper GPU transcription (Apple Silicon MLX backend)
- macOS Vision OCR (extracts on-screen text, code, UI elements)
- Structured Markdown assembly (timestamps, speaker segments, screen content)
Use Cases:
- Convert coding tutorials into step-by-step text guides
- Extract slides and spoken content from conference talks
- Create searchable documentation from video walkthroughs
Requirements: macOS (Apple Silicon), ffmpeg, uv, Python >= 3.11
Platforms: macOS only (depends on MLX + Vision framework)
Standalone repo: Esonhugh/video_extractor (also a marketplace)
Read-only TradingView data access with persistent headless Chrome. Provides spot quotes, full options chains, screener, news, watchlists, alerts, chart state inspection, and screenshots — all without requiring a TradingView API key.
/plugin install tradingview@Esonhugh-MarketplaceSkills:
| Skill | Purpose |
|---|---|
launch |
Start headless Chrome with TradingView session |
stop |
Gracefully shut down the browser |
status |
Health-check the running browser instance |
preflight |
Verify plugin prerequisites |
quote |
Get real-time spot quote for a symbol |
search |
Search TradingView symbols |
options-chain |
Fetch full options chain for a symbol |
options-expiries |
List available option expiration dates |
screener |
Run stock/crypto screener with filters |
news |
Fetch news headlines |
news-research |
Deep research via news aggregation |
watchlists |
List TradingView watchlists |
alerts |
Fetch price alerts |
chart-state |
Read current chart symbol, interval, indicators |
screenshot |
Take a PNG screenshot of a chart |
login-email |
Non-interactive email/password login |
login-interactive |
Open visible browser for manual login |
options-analysis |
Analyze options strategy and payoff |
Architecture: A plugin-managed headless Chrome instance connects to TradingView via CDP (Chrome DevTools Protocol). The monitor hook auto-launches, health-checks, and restarts the browser on crash.
Requirements: Chrome/Chromium, Node.js, persistent Chrome profile for session
Standalone repo: Esonhugh/tradingview (also a marketplace)
Plugins below are sourced from external repositories. They are included in this marketplace for convenience but maintained by their respective authors.
Reference:
himself65/finance-skillsatplugins/market-analysis/
Market analysis toolkit for stock investors. Provides earnings analysis (preview/recap/estimate revisions), portfolio risk assessment (stock correlation, ETF premium/discount), and SEPA trend-following entry methodology.
/plugin install finance-market-analysis@Esonhugh-MarketplaceIncluded Skills: earnings-preview, earnings-recap, estimate-analysis, stock-correlation, etf-premium, sepa-strategy, options-payoff, yfinance-data, company-valuation, saas-valuation-compression, stock-liquidity
Requirements: Python >= 3.10, yfinance
Reference:
anthropics/skillsatskills/xlsx,skills/docx,skills/pptx,skills/pdf
Document processing suite from Anthropic. Generate and manipulate Excel spreadsheets, Word documents, PowerPoint presentations, and PDF files directly from Claude Code.
/plugin install document-skills@Esonhugh-MarketplaceIncluded Skills: xlsx (Excel), docx (Word), pptx (PowerPoint), pdf (PDF)
Reference:
anthropics/skillsatskills/skill-creator
Meta-skill from Anthropic for creating, modifying, and measuring the effectiveness of Claude Code skills. Useful for plugin developers building their own skill libraries.
/plugin install skill-creator@Esonhugh-MarketplaceThis marketplace uses multiple source strategies:
| Type | Example | When |
|---|---|---|
| Local | "./plugins/fofa-intel" |
Plugin lives in this repo |
| URL | {"source": "url", "url": "https://...git"} |
Plugin has its own standalone repo |
| Git Subdir | {"source": "git-subdir", "url": "...", "path": "..."} |
Plugin is a subdirectory in another repo |
Plugins with standalone repos are both a plugin and a marketplace — they can be used independently or aggregated here.
Marketplace/
├── .claude-plugin/
│ └── marketplace.json # Marketplace catalog (11 plugins)
├── plugins/
│ ├── fofa-intel/ # FOFA cyberspace search (local)
│ ├── threatbook-intel/ # ThreatBook threat intel (local)
│ ├── macos-control-bypasser/ # macOS offensive security (local)
│ └── detective-plugin/ # Investigation framework (local)
└── README.md
Plugins not listed above are referenced via URL/git-subdir and fetched at install time.
All plugins are provided for authorized security testing, educational purposes, and legitimate automation only. Users are responsible for complying with applicable laws and the Terms of Service of any target systems or websites.
Maintained by Esonhugh