Agent Claude Code
A security lead that coordinates the project’s security reviews and makes a final risk judgment. A CISO is the person responsible for an organisation’s overall information-security decisions.
Command Claude Code
A follow-up security check that verifies whether earlier findings were fixed and, depending on the selected mode, looks for new problems.
Command Claude Code
A design-stage security review for product requirement documents and other planning documents; a PRD is a document describing what a product should do.
Command Claude Code
A command that gives concrete guidance for fixing discovered security vulnerabilities without changing the code itself.
Command Claude Code
A read-only penetration-testing command for examining source code from an attacker’s perspective and producing proof-of-concept checks. Penetration testing is authorized security testing that tries to verify exploitable weaknesses.
Command Claude Code
A read-only review of infrastructure settings, infrastructure-as-code, and CI/CD pipelines using MITRE ATT&CK attack paths. MITRE ATT&CK is a catalogue of techniques attackers use, while CI/CD means the automated process that builds, tests, and deploys software.
Command Claude Code needs its repo
A report generator that combines the security checks completed in the current session into a final document.
Command Claude Code
A security-workflow coordinator that turns a natural-language request into a plan involving code review, verification, attack testing, or reporting.
Command Claude Code
A summary of the security work completed in the current session, including services run, scores, findings, and architecture-area health.
Command Claude Code
A read-only security review of a codebase across eight architecture areas, with findings checked against file-and-line evidence.
Command Claude Code
An independent recheck of a security assessment report that derives conclusions from its own evidence instead of accepting the original findings.
Cursor rule Claude CodeCursor
A source-code security assessment system for vulnerability checks, architecture reviews, penetration testing, red-team analysis, compliance checks, and reports.
Skill Claude CodeCodex
Run CH015 AI Security Firm workflows for security audits, vulnerability assessment, adversarial verification, pentesting, red team review, compliance checks, fix guidance, and report generation.
Skill Claude CodeCodex
Run CH015 penetration testing workflows for attacker-minded source-code review, exploit scenarios, POC generation, dry-run or live verification, and security findings.
Skill Claude CodeCodex
Run CH015 red team infrastructure configuration security review workflows for IaC, CI/CD, containers, Kubernetes, cloud config, MITRE ATT&CK attack paths, and detection engineering.
Skill Claude CodeCodex
Run CH015 vulnerability assessment workflows for source-code security architecture review, 8-dimension analysis, compliance checks, self-verification, evidence verification, and VA reporting.
Skill Claude CodeCodex
Run CH015 adversarial verification workflows to independently validate security reports, recheck file-line evidence, find false positives, severity errors, missed findings, and dependencies.
Skill Claude CodeCodex
Run CH015 security design review workflows for PRDs and specs to produce security opinions or review findings mapped to standards and regulatory requirements.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: