3,221 tagged Security, measured the same way as everything else here.
Browse within: claude-code-plugin 192ai-security 115cybersecurity 101ai-coding 94bug-bounty 78Autonomous Agents 73ai-security-tool 70Multi-Agent 65agentic-coding 61claude-code-skills 59appsec 57ctf 50offensive-security 50multi-agent-systems 47
AbdulmalekAlshugaa/claude-agents-fullstack
Agent
Use after implementing a change and before committing/PR. Reviews the current diff for correctness, security, MongoDB pitfalls, TanStack Query cache bugs, and Next.js mistakes. Read-only; returns findings ranked by severity.
mangonealessandro/coffee-roulette-starter
Agent Claude Code
Use this agent when you need to implement, review, or debug authentication and authorization logic in the system. This includes JWT token management, guards, decorators, refresh token logic, and access control patterns.\n\nExamples:\n \nContext: The user is working on the NestJS backend and needs to implement a new…
Agent
You are a principal security engineer with deep expertise in threat modeling, security architecture review, and risk assessment. Think like an attacker, but design like an engineer — security must enable, not obstruct, velocity. Your authority comes from systematic analysis and pattern recognition across attack…
VictorCostaOliveira/agents-tdd-flow
Agent Claude Code
Code review (SOLID, arquitetura, qualidade). No fluxo TDD — SEMPRE persiste AVALIACAO.md na pasta da feature com TODOS os pontos para o devoso ler e corrigir. Git diff + critérios quando houver. Security: use security-auditor.
herakles-dev/opensource-pipeline
Agent
Fork any project for open-sourcing. Copies files, strips secrets and credentials (20+ patterns), replaces internal references with placeholders, generates .env.example, and cleans git history. First stage of the opensource-pipeline skill.
maurizio100/human-agent-workflow-bundle
Agent
Read-only PR review agent. Given a PR number and story/issue ID, reviews the pushed diff against the change's stated intent and the project's own documented conventions (discovered from CLAUDE.md and the docs it points to), applies a security lens when the change touches auth, posts a summary review comment plus…
Agent Claude Code
Specialized agent for reviewing code security.
Agent Claude Code
Single-challenge CTF worker. Use for offline prep, writing exploits, remote pwn/web, and submitting flags. One challenge id per spawn. Prefer when monitor plan says a challenge needs coverage or respawn.
viable-systems/vsm-sub-agentsv1
Agent Claude Code
Ethics and risk gatekeeper for VSM operations.
Agent
Use this agent when building or debugging the active network scanning layer — Nmap port/service scanning, Ncrack authentication probing, scan profile management, and authorization enforcement. This agent ALWAYS enforces written authorization checks. Examples: Context: Building the active recon module for authorized…
Agent
Rules & governance catalog for AI/LLM-assisted engineering — architecture, security, and change discipline as machine-readable rules.
Agent
For autonomous or semi-autonomous agents that discover vulnerabilities in third-party systems.
Agent
PHP/Laravel-specific reviewer — SQL injection, mass assignment, CSRF, N+1 Eloquent, auth middleware, type safety, queue idempotency.
vaquarkhan/compliance-agent-skills
Agent
Simulates a CMMC Level 2 assessment perspective for organizations handling Controlled Unclassified Information (CUI) — not a C3PAO certification or SPRS submission.
Agent Claude Code
Use before a commit or push, or on demand, to scan staged, unstaged, or untracked changes for private or employer work references, non-personal identities, or leaked GitHub / Slack / Linear / GCP identifiers before they enter this public repository. Complements the deterministic scope-guard hook by catching…
hwchany0ung/claude-agent-playbook
Agent
Use for OWASP Top 10 security audits, JWT/auth flow review, database RLS policy validation, API rate limiting checks, and vulnerability assessment. Read-only analysis agent — does NOT modify code. Use after major feature implementation or before production releases.
Agent
You are a Security Engineer conducting a security review. You apply adversarial thinking: assume malicious users, assume compromised dependencies, assume insider threats. Your goal is to find exploitable vulnerabilities, not just to find "bad practices.".
VoidTechnology/voidtech-claude-plugins
Agent Claude Code
A security-review agent for Voidtech Loop, a tool that runs commands and manages Git workspaces. It performs a read-only, adversarial review and reports only reproducible critical or high-severity problems.
Agent Claude Code
Use this agent to generate security documentation, penetration testing reports, and ethical use guidelines. Examples include:\n\n \nContext: New security tool added to MCP server.\nuser: "I added sqlmap integration to the vulnerability server."\nassistant: "Let me use the security-docs-generator agent to create…
Agent
BiRRe QA mode for tool validation and demonstration.
tealfabric/cursor-mcp-tealfabric
Agent
Verify build, docs, and plugin metadata before publishing.
Agent Claude Code
Use this agent when you need to conduct comprehensive code reviews focusing on code quality, security vulnerabilities, and best practices. Specifically:\n\n \nContext: Developer has submitted a pull request with changes to critical authentication logic in a TypeScript backend service.\nuser: "Can you review this PR…
stevologic/security-recipes.ai
Agent
Compare Codex, Claude Code, Cursor, Copilot, Devin, Shiba Studio, Hermes, and OpenClaw for AI vulnerability remediation with bounded instructions and review gates.
threadlinqs-cmd/Threadlinqs-Security-Detection-MCP
Agent Cursor
Attack Range configuration and build specialist. Use to build custom ranges for specific detection testing scenarios.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: