ai-security agents

53 tagged ai-security, measured the same way as everything else here.

Browse within: bug-bounty 88cybersecurity 84ctf 52devsecops 33appsec 31agentic-security 30attack-trees 30Autonomous Agents 28blue-team 27owasp 25owasp-juice-shop 24threatmodeler 24threatmodelling 24aicodeassistant 12

tachi-risk-scorer

01

davidmatousek/tachi

Agent Claude Code needs its repo

Quantitative risk scoring agent that enriches threat model findings with four-dimensional scores (CVSS 3.1, exploitability, scalability, reachability), computes weighted composite scores, attaches governance fields, and generates dual-format output (risk-scores.md and risk-scores.sarif).

not rated 95 +1 4d ago A 65 tokens original Apache-2.0

password-attacks

02

mukul975/Threatswarm

Agent Claude Code

Password cracking and credential attack specialist. Use when working with password hashes, hash cracking, wordlist attacks, credential analysis, or password auditing. Triggers on: password, hash, crack, hashcat, john, wordlist, NetNTLMv2, Kerberoast, NTLM, bcrypt, credential, ASREP, JWT crack, mask attack, rule…

not rated 88 +1 5mo ago A 88 tokens original MIT

code-reviewer

03

stacklok/toolhive-registry-server

Agent Claude Code

Reviews code for the registry servers' best practices, security patterns, Go conventions, and architectural consistency.

not rated 29 yesterday A 23 tokens original Apache-2.0

{{NAME}}

04

friedbotstudio/baseline

Agent Claude Code

Agent "{{NAME}}" from friedbotstudio/baseline, covering operating envelope, inputs (provided by the caller), method (mandatory sequence) and constitutional constraints (binding — art. ii).

not rated 14 3d ago A 8 tokens copy · 92% Apache-2.0

advisor

05

gw0/docker-claude-code

Agent Claude Code

Web research and advisory agent for external knowledge gathering.

not rated 4 changed 28d ago B 11 tokens

web3-auditor

06

Mikacr1138/claude-bug-bounty

Agent Claude Code

Smart contract security auditor. Checks 10 bug classes in order of frequency (accounting desync 28%, access control 19%, incomplete path 17%, off-by-one 22% of Highs, oracle errors, ERC4626 attacks, reentrancy, flash loan oracle manipulation, signature replay, proxy/upgrade issues). Applies pre-dive kill signals…

not rated 3 2d ago A 101 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: