sc-lang-php
25Skill Claude CodeCodex needs its repo
PHP-specific security deep scan.
not rated 56 2mo ago A SkillSpector: warn 10 tokens
original MIT
56Stars on the repository
49Mods indexed here, across every type
2mo agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown
Skill Claude CodeCodex
Python-specific security deep scan.
not rated 56 2mo ago D 9 tokens
original MIT
sc-lang-rust
27Skill Claude CodeCodex needs its repo
Rust-specific security deep scan.
not rated 56 2mo ago A SkillSpector: warn 10 tokens
original MIT
Skill Claude CodeCodex needs its repo
TypeScript/JavaScript-specific security deep scan.
not rated 56 2mo ago D 14 tokens
original MIT
sc-ldap
29Skill Claude CodeCodex
LDAP Injection detection in search filters, DN construction, and bind operations.
not rated 56 2mo ago A 17 tokens
original MIT
Skill Claude CodeCodex
Mass assignment and over-posting detection — unfiltered request body binding to data models.
not rated 56 2mo ago A 22 tokens
original MIT
sc-nosqli
31Skill Claude CodeCodex
NoSQL Injection detection for MongoDB, Redis, CouchDB, and Elasticsearch.
not rated 56 2mo ago A 19 tokens
original MIT
Skill Claude CodeCodex
Open redirect detection — unvalidated redirect URLs, protocol-relative bypasses, and URI scheme abuse.
not rated 56 2mo ago A 23 tokens
original MIT
Skill Claude CodeCodex
Master orchestration skill that coordinates the entire 4-phase security scanning pipeline.
not rated 56 2mo ago A 19 tokens
original MIT
Skill Claude CodeCodex needs its repo
Path traversal and directory traversal detection — LFI, RFI, zip slip, and symlink attacks.
not rated 56 2mo ago C 26 tokens
original MIT
Skill Claude CodeCodex
Privilege escalation vector detection — role manipulation, admin bypass, and RBAC circumvention.
not rated 56 2mo ago A 24 tokens
original MIT
Skill Claude CodeCodex
Race condition and TOCTOU detection — database races, file system races, double-spend, and atomicity failures.
not rated 56 2mo ago A 28 tokens
original MIT
Skill Claude CodeCodex
Missing rate limiting and application-level DoS vector detection — ReDoS, query complexity, resource exhaustion.
not rated 56 2mo ago A 26 tokens
original MIT
sc-rce
38Skill Claude CodeCodex
Remote Code Execution detection via eval, exec, dynamic code loading, and code injection vectors.
not rated 56 2mo ago A 21 tokens
original MIT
sc-recon
39Skill Claude CodeCodex
Codebase discovery and architecture mapping for security analysis.
not rated 56 2mo ago A SkillSpector: pass 13 tokens
original MIT
sc-report
40Skill Claude CodeCodex
Final consolidated security assessment report generator with CVSS severity and remediation roadmap.
not rated 56 2mo ago A 16 tokens
original MIT
sc-secrets
41Skill Claude CodeCodex
Hardcoded secrets, API keys, tokens, credentials, and private key detection in source code.
not rated 56 2mo ago A 22 tokens
original MIT
sc-session
42Skill Claude CodeCodex
Session management flaw detection — fixation, hijacking, cookie misconfiguration, and lifecycle issues.
not rated 56 2mo ago A 20 tokens
original MIT
sc-sqli
43Skill Claude CodeCodex
SQL Injection detection across all variants — classic, blind, time-based, second-order, and UNION-based.
not rated 56 2mo ago A 24 tokens
original MIT
sc-ssrf
44Skill Claude CodeCodex
Server-Side Request Forgery detection — URL fetching with user input, DNS rebinding, cloud metadata access.
not rated 56 2mo ago C 26 tokens
original MIT
sc-ssti
45Skill Claude CodeCodex
Server-Side Template Injection detection across all major template engines.
not rated 56 2mo ago A 15 tokens
original MIT
sc-verifier
46Skill Claude CodeCodex
False positive elimination and confidence scoring for all security findings.
not rated 56 2mo ago A SkillSpector: pass 14 tokens
original MIT
sc-websocket
47Skill Claude CodeCodex
WebSocket security flaw detection — missing origin validation, authentication bypass, and message injection.
not rated 56 2mo ago A 20 tokens
original MIT
sc-xss
48Skill Claude CodeCodex
Cross-Site Scripting detection for Reflected, Stored, and DOM-based XSS across all frameworks.
not rated 56 2mo ago A 24 tokens
original MIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: