CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows. Swagger 2.0 specs are auto-converted to OpenAPI 3.0 via npx swagger2openapi (requires…
Local-by-default, no-telemetry hooks inspect user prompts, supported tool inputs, outputs, and changed files in every enabled Claude Code or Codex session to block or mask secret leaks. Includes opt-in PII filtering and Git/CI backstops.
Coding guidelines and review tools. Skills for general coding, Ruby, Rails (including problem-details errors and protobuf-native APIs), Sorbet typing and adoption, Rust, Terraform, security, git commit style, README writing, and Japanese and English text writing. Includes a security review agent.
★not rated 31 yesterdayA
tokens not measured
originalMIT
Integrate the Vouch Protocol: cryptographic identity and accountability for autonomous AI agents. Signing and verifying agent actions, did:web and did:key, Data Integrity proofs, the post-quantum proof set, delegation chains, and revocation, across SDKs on every major platform.
183+ pentesting and OSINT tools (nmap, nuclei, amass, subfinder, httpx, sherlock, maigret, trufflehog, sqlmap, impacket, and more) wired into Claude Code as a single skill. Runs locally on any OS via native Bash, WSL, or purpose-built Docker images (instrumentisto/nmap, projectdiscovery/nuclei, caffix/amass, etc.).…
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import and release, execution monitoring, and Falcon Next-Gen SIEM lookup files.
★not rated 26
changed 16d agoA
tokens not measured
originalMIT
Autonomous security auditor. Scans a GitHub repo for vulnerabilities, triages false positives, writes a PoC, fixes each confirmed bug in its own PR, independently reviews the fix, and merges when the review is clean.
Claude Code plugin for whitebox security review. Stable: deterministic offline quick scan, shared findings.json with stable keys and hotspot-aware findings, SARIF/Markdown/HTML/bundle reports, suppressions, CI fail-on gate, Kuzushi parity. Beta: deep profile with Joern/CodeQL/Slither/Trivy/Checkov when installed.…
★not rated 25 4mo agoA
tokens not measured
originalMIT
CrowdSec skills: an operational skill (install/configure/operate/debug the engine, cscli, bouncers, WAF and bot detection across bare-metal/Docker/Kubernetes) and a Service API skill (drive the premium Console cloud API — blocklists, allowlists, firewall integrations, metrics, decisions).
★not rated 25
changed 1mo agoA
tokens not measured
originalMIT
Smart contract security analysis powered by 4,500+ real audit findings from Solodit. Quick scans, full framework assessments, and integration with audit-readiness.zealynx.io.
★not rated 25▲
+2 18d agoA
tokens not measured
originalMIT
A collection of tools and instructions for finding security weaknesses through SRC programs, public bug-bounty programs run by companies or platforms.
★not rated 24 2mo agoA
tokens not measured
originalMIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: