blue-team skills

108 tagged blue-team, measured the same way as everything else here.

Browse within: cybersecurity 368bug-bounty 202ctf-tools 185ethical-hacking 103ai-security 92devsecops 89CISO 87agents-md 49appsec 44ai-assistant 39cli 39codex-cli 39configuration 39detection-engineering 27

mcp-catalog

01

wellwelwel/lagune

Skill Claude Code needs its repo

Find, review, and add MCP servers to the reviewed catalog that lagune.ai serves to Lagune Code. Use when asked to look for servers worth adding, to add a specific server, or to update or drop an entry.

not rated 173 +1 yesterday A 51 tokens original MIT

ad-attacks

02

mukul975/Threatswarm

Skill Claude Code

Active Directory attack reference — BloodHound Cypher queries, Kerberos attack decision tree, ACE/ACL abuse, ADCS ESC1-8, and AD misconfig checklist.

not rated 88 +1 5mo ago A 39 tokens original MIT

cybersecurity-lab

03

handnewb/hermes-cybersec-lab

Skill Claude CodeCodex

Turnkey cybersecurity lab — 2,077 skills, 131+ tools, 28 frameworks, and evolving methodology for security research, pentesting, forensics, and threat intelligence. Includes one-step ecosystem cloner for 8 repositories.

not rated 18 +1 2mo ago A 54 tokens original MIT

container-security

04

EvilFreelancer/secs

Skill Claude CodeCodex

Container and Kubernetes security assessment — image vulnerability scanning, SBOM diff analysis, K8s cluster auditing, RBAC privilege mapping, NetworkPolicy review, container escape testing, and runtime monitoring (Falco/Tetragon). Use when scanning Docker/OCI images, auditing K8s clusters, reviewing Dockerfiles…

not rated 11 2mo ago A 118 tokens original Apache-2.0

astro-security

05

roodlicht/accans-sec-skills

Skill Claude CodeCodex

Astro security review — render-mode attack surface (SSG/SSR/hybrid), set:html and MDX content collections (XSS + author trust), API routes and middleware (auth, scope), adapter-specific runtime models (Cloudflare/Vercel/Netlify/Node), env-var hygiene (PUBLIC prefix), and Decap CMS pairing (OAuth backend, token…

not rated 4 4mo ago A 85 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: