Security commands

SetsunaYukiOvO/x64dbg-mcp

Command

Security vulnerability scanning and dangerous API detection.

bybren-llc/safe-agentic-workflow

Command Claude Code

Run comprehensive dependency audit.

rhesis-ai/rhesis

Command Claude Code

Audit and fix Dependabot security vulnerabilities across the monorepo.

GRCEngClub/claude-grc-engineering

Command

Retrieve a single AWS Secrets Manager secret value to stdout or a 0600-permission file. Opt-in retrieval mode — never writes to the findings cache.

GRCEngClub/claude-grc-engineering

Command

Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001, and SCF controls.

GRCEngClub/claude-grc-engineering

Command

Verify specific CIS Control implementation from 18 controls.

Agent-Threat-Rule/agent-threat-rules

Command Claude Code

Open GitHub issues on flagged repos to notify authors before public disclosure.

Agent-Threat-Rule/agent-threat-rules

Command Claude Code

Run incremental ecosystem scan: crawl registries → audit new packages → merge results → generate posts.

hypnguyen1209/offensive-claude

Command

Execute Phase 6 - Command and Control Infrastructure Setup.

hypnguyen1209/offensive-claude

Command

Execute Phase 8 - Final Reporting and Engagement Closeout.

zhukunpenglinyutong/ai-max

Command

A review command that examines uncommitted code changes for security problems, code-quality issues, and common development mistakes.

JDArmy/Evasion-SubAgents

Command Claude Code

Analyze C2 framework source code, find detection rules (YARA, Sigma, etc.), and modify source to evade detection. Triggers on "C2 evasion", "analyze C2", "YARA", "modify C2", "bypass detection", "C2免杀".

JDArmy/Evasion-SubAgents

Command Claude Code

Generate shellcode loaders by combining components from knowledge base. Creates working C/C++/Rust loaders using documented techniques. Triggers on "generate loader", "create loader", "shellcode loader", "生成loader".

0xNyk/lacp

Command

Show LACP hardening status — active hooks, context mode, eval checkpoint state, recent quality gate decisions.

sigcli/sigcli

Command Claude Code

You have access to the sig CLI for managing authentication credentials. All commands output JSON to stdout (for parsing) and human messages to stderr.

arnaldo-delisio/claude-code-studio

Command

Scan for security vulnerabilities.

circuit-synth/circuit-synth

Command Claude Code

Purpose: Comprehensive branch analysis for code quality, security, performance, and risk assessment before merging to main. Specialized for circuit-synth development workflows.

lasso-security/claude-hooks

Command Claude Code

Install the prompt injection defender hooks into your Claude Code project.

lasso-security/claude-hooks

Command Claude Code

You are working in a project with the Prompt Injection Defender installed.

aws-samples/sample-well-architected-skills-and-steering

Command ✓ vendor

Generate preventive Well-Architected guardrails — AWS Config rules, Service Control Policies, permission boundaries, CloudWatch alarms, and IaC policy checks (CDK Aspects, cfn-guard, OPA/Sentinel) — so a workload stays aligned with Well-Architected best practices over time instead of being assessed once.

hyperb1iss/unifly

Command

Security audit of UniFi configuration. Checks for open WiFi, permissive firewall rules, and misconfigurations.

sahin/ai-rules

Command Claude Code

Use this guide when implementing security features, reviewing code for vulnerabilities, or responding to security incidents.

secondsky/claude-skills

Command

Interactive setup wizard for better-auth authentication. Guides through database, framework, OAuth providers, and plugin configuration.

ab604/claude-code-r-skills

Command

Review code for security, quality, and best practices. Use after writing code and before committing.