agentmods.dev

007

007 is a skill for Claude Code, Codex from marysatasselshaped667/skills-collection-1. It costs 39 tokens per session (6,167 once invoked), scanned A, a copy of 007, MIT.

A security review assistant for application code, APIs, infrastructure, and connected services. It covers threat modeling, which maps possible attacks, along with common web-security checks.

In plain words
What is it for?
Use it for security audits, code reviews, threat models, system hardening, incident response, and authorized red-team or blue-team work.
Why use it?
It helps find security weaknesses and plan defenses across a project instead of checking only one part of it.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: mentions Codex; mentions Gemini CLI.

not rated 1repo yesterday A scan 39 tokens copy · 94% MIT

Good fit Use it for security audits, code reviews, threat models, system hardening, incident response, and authorized red-team or blue-team work.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/marysatasselshaped667/skills-collection-1/007
View source ↗ marysatasselshaped667/skills-collection-1
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add marysatasselshaped667/skills-collection-1 --skill 007
Clone the repo
git clone --depth 1 https://github.com/marysatasselshaped667/skills-collection-1

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for 007

README.md
[![agentmods](https://agentmods.dev/badge/skills/marysatasselshaped667/skills-collection-1/007/github.svg)](https://agentmods.dev/skills/marysatasselshaped667/skills-collection-1/007)
Your own site
<a href="https://agentmods.dev/skills/marysatasselshaped667/skills-collection-1/007"><img src="https://agentmods.dev/badge/skills/marysatasselshaped667/skills-collection-1/007/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for 007

Your own site · 80×15
<a href="https://agentmods.dev/skills/marysatasselshaped667/skills-collection-1/007"><img src="https://agentmods.dev/badge/skills/marysatasselshaped667/skills-collection-1/007.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 39 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 6,167 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin 94% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00039 $0.06167
Opus 5 $0.00019 $0.03083
Sonnet 5 $0.00008 $0.01233
Haiku 4.5 $0.00004 $0.00617

Measured 12d ago against content hash b933e9212cdd, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

007 scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.

The scan reads SKILL.md. This mod also ships 8 executable files (scripts/config.py, scripts/full_audit.py, scripts/quick_scan.py, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Runs shell commandslowCapability

Expected in a hook, worth knowing in a rule or an instructions file.

- Onde ha execucao de codigo (eval, exec, subprocess, child_process)
Origin

This is a copy

94% identical to 007 — 615 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

SKILLS/007/SKILL.md · 651 lines

How it starts

The opening of the file, as written. The whole thing — 651 lines — stays where its author put it; the contents beside it link to each section on GitHub.

007 — Licenca para Auditar

Overview

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.

When to Use This Skill

  • When the user mentions "audite" or related topics
  • When the user mentions "auditoria" or related topics
  • When the user mentions "seguranca" or related topics
  • When the user mentions "security audit" or related topics
  • When the user mentions "threat model" or related topics
  • When the user mentions "STRIDE" or related topics

Do Not Use This Skill When

  • The task is unrelated to 007
  • A simpler, more specific tool can handle the request
  • The user needs general-purpose assistance without domain expertise

How It Works

O 007 opera como um Chief Security Architect AI com expertise em:

Dominio Especialidades
Codigo Python, Node/JS, supply chain, SAST, dependencias
Infra Linux/Ubuntu, Windows, SSH, firewall, containers, VPS, cloud
APIs REST, GraphQL, OAuth, JWT, webhooks, CORS, rate limit
Bots/Social WhatsApp, Instagram, Telegram (anti-ban, rate limit, policies)
Pagamentos PCI-DSS mindset, antifraude, idempotencia, webhooks financeiros
IA/Agentes Prompt injection, jailbreak, isolamento, explosao de custo, LLM security
Compliance OWASP Top 10 (Web/API/LLM), LGPD/GDPR, SOC2, Zero Trust
Operacoes Observabilidade, logging, resposta a incidentes, playbooks

007 — Licenca Para Auditar

Agente Supremo de Seguranca, Auditoria e Hardening. Pensa como atacante, age como arquiteto de defesa. Nada entra em producao sem passar pelo 007.

Modos Operacionais

O 007 opera em 6 modos. O usuario pode invocar diretamente ou o 007 seleciona automaticamente baseado no contexto:

Modo 1: Audit (Padrao)

Trigger: "audite este codigo", "revise a seguranca", "tem algum risco?" Executa analise completa de seguranca com o processo de 6 fases.

Read the full file on GitHub · 651 lines

Files

What ships with it

14 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 12d ago First seen · 651 lines · 39 tokens per session scan A b933e9212cdd

Subscribe to this mod's changes

007 is a skill published in the GitHub repository marysatasselshaped667/skills-collection-1 (1 stars, last pushed yesterday), licensed MIT. It adds 39 tokens to every session and 6,167 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (runs shell commands). It is 94% identical to 007, differing in 615 lines, and is treated as a copy.

Code reviewSecurityagentsaiai-codingai-workflowsantigravityantigravity-skillsaudithardeningowasppentestthreat-modeling
Related

Other skills, from other repositories

007

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.

sickn33/agentic-awesome-skills · 39 tokens

007

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.

lingxling/awesome-skills-cn · 39 tokens

007

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.

pinkpixel-dev/skills-collection-1 · 39 tokens

007

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.

iradoweck/antigravity-awesome-skills · 39 tokens

007

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.

henryalouf/ruflow · 39 tokens

007

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.

DorianGallo/antigravity-awesome-skills-local · 39 tokens