Skill Claude CodeCodex
Run CIS Kubernetes Benchmark checks and remediate findings with kube-bench.
not rated 12 today B 24 tokens
original MIT
12Stars on the repository
200Mods indexed here, across every type
todayLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown
Skill Claude CodeCodex
Build an automated system to track adversary infrastructure using passive DNS, certificate transparency, WHOIS data, and IP enrichment to map and monitor threat actor command-and-control networks.
not rated 12 today A 44 tokens
copy · 100% MIT
Skill Claude CodeCodex
Extract and catalog attack patterns from cyber threat intelligence reports into a structured STIX-based library mapped to MITRE ATT&CK for detection engineering and threat-informed defense.
not rated 12 today C 44 tokens
copy · 100% MIT
Skill Claude CodeCodex
Builds an automated malware submission and analysis pipeline that collects suspicious files from endpoints and email gateways, submits them to sandbox environments and multi-engine scanners, and generates verdicts with IOCs for SIEM integration. Use when SOC teams need to scale malware analysis beyond manual sandbox…
not rated 12 today A 72 tokens
copy · 100% MIT
Skill Claude CodeCodex
Build and configure a resilient command-and-control infrastructure using BishopFox's Sliver C2 framework with redirectors, HTTPS listeners, and multi-operator support for authorized red team engagements.
not rated 12 today B 46 tokens
copy · 94% MIT
Skill Claude CodeCodex
Architect redirectors with nginx and Apache, malleable profiles, and OPSEC for resilient C2.
not rated 12 today B 30 tokens
original MIT
Skill Claude CodeCodex
This skill covers deploying Microsoft Sentinel as a cloud-native SIEM and SOAR platform for centralized security operations. It details configuring data connectors for multi-cloud log ingestion, writing KQL detection queries, building automated response playbooks with Logic Apps, and leveraging the Sentinel data lake…
not rated 12 today A 78 tokens
copy · 89% MIT
Skill Claude CodeCodex
Build effective detection rules using Splunk Search Processing Language (SPL) correlation searches to identify security threats in SOC environments.
not rated 12 today A 35 tokens
copy · 100% MIT
Skill Claude CodeCodex
Builds vendor-agnostic detection rules using the Sigma rule format for threat detection across SIEM platforms including Splunk, Elastic, and Microsoft Sentinel. Use when creating portable detection logic from threat intelligence, mapping rules to MITRE ATT&CK techniques, or converting community Sigma rules into…
not rated 12 today A 77 tokens
copy · 94% MIT
Skill Claude CodeCodex
Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.
not rated 12 today A 43 tokens
copy · 88% MIT
Skill Claude CodeCodex
Establish SAML 2.0 identity federation between on-premises Active Directory and Azure AD (Microsoft Entra ID) for seamless cross-domain authentication and SSO to cloud applications.
not rated 12 today A 50 tokens
copy · 84% MIT
Skill Claude CodeCodex
Builds comprehensive identity governance and lifecycle management processes including joiner-mover-leaver automation, role mining, access request workflows, periodic recertification, and orphaned account remediation using IGA platforms. Activates for requests involving identity lifecycle management, JML processes…
not rated 12 today A 74 tokens
copy · 88% MIT
Skill Claude CodeCodex
Builds real-time incident response dashboards in Splunk, Elastic, or Grafana to provide SOC analysts and leadership with situational awareness during active incidents, tracking affected systems, containment status, IOC spread, and response timeline. Use when IR teams need unified visibility during incident…
not rated 12 today A 66 tokens
copy · 100% MIT
Skill Claude CodeCodex
Designs and documents structured incident response playbooks that define step-by-step procedures for specific incident types aligned with NIST SP 800-61r3 and SANS PICERL frameworks. Covers playbook structure, decision trees, escalation criteria, RACI matrices, and integration with SOAR platforms. Activates for…
not rated 12 today A 94 tokens
copy · 100% MIT
Skill Claude CodeCodex
Build collaborative forensic incident timelines using Timesketch to ingest, normalize, and analyze multi-source event data for attack chain reconstruction and investigation documentation.
not rated 12 today B 38 tokens
copy · 100% MIT
Skill Claude CodeCodex
Build an automated pipeline to defang indicators of compromise (URLs, IPs, domains, emails) for safe sharing and distribute them in STIX format through TAXII feeds and threat intelligence platforms.
not rated 12 today A 49 tokens
copy · 100% MIT
Skill Claude CodeCodex
OpenCTI is an open-source platform for managing cyber threat intelligence knowledge, built on STIX 2.1 as its native data model. This skill covers building an automated IOC enrichment pipeline using O.
not rated 12 today A 52 tokens
copy · 100% MIT
Skill Claude CodeCodex
Build structured communication templates for malware incidents including stakeholder notifications, executive briefings, technical advisories, and regulatory disclosures with severity-based escalation procedures.
not rated 12 today A 37 tokens
copy · 100% MIT
Skill Claude CodeCodex
Establish a structured operational process to triage, test, and deploy Microsoft Patch Tuesday security updates within risk-based remediation SLAs.
not rated 12 today A 34 tokens
copy · 100% MIT
Skill Claude CodeCodex
Implement a phishing report button in email clients with automated triage workflow that analyzes user-reported suspicious emails and provides feedback to reporters.
not rated 12 today A 35 tokens
copy · 94% MIT
Skill Claude CodeCodex
Builds a structured ransomware incident response playbook aligned with the CISA StopRansomware Guide and NIST Cybersecurity Framework. Covers preparation, detection, containment, eradication, recovery, and post-incident phases with actionable checklists. Activates for requests involving ransomware response planning…
not rated 12 today A 83 tokens
copy · 92% MIT
Skill Claude CodeCodex needs its repo
Deploy and configure the Havoc C2 framework with teamserver, HTTPS listeners, redirectors, and Demon agents for authorized red team operations.
not rated 12 today A 40 tokens
copy · 100% MIT
Skill Claude CodeCodex
Apply bottom-up and top-down role mining techniques to discover optimal RBAC roles from existing user-permission assignments, reducing role explosion and enforcing least privilege.
not rated 12 today A 40 tokens
copy · 100% MIT
Skill Claude CodeCodex
Build a structured SOC escalation matrix defining severity tiers, response SLAs, escalation paths, and notification procedures for security incidents.
not rated 12 today A 33 tokens
copy · 100% MIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: