CVE skills

55 tagged CVE, measured the same way as everything else here.

Browse within: apache 80cisa-kev 35cvss 35bun 33cpe 33bug-bounty 28claude-code-plugin 21false-positive 21model-context-protocol 15agents 14nvd 14cve-scanning 12ai-skills 11github-advisory 10

cyberowlai

01

karimhabush/cyberowl

Skill Claude CodeCodex

Check if recent cybersecurity alerts from 10 international CERTs affect your current project. Use when the user asks about security vulnerabilities, CVEs, "is my project affected", "any new security alerts", "check for vulnerabilities", "cyberowlai", or "/cyberowlai". Also trigger when the user is working on…

not rated 263 today A SkillSpector: pass 155 tokens original MIT

vulnerability-db

02

AppThreat/vulnerability-db

Skill Claude CodeCodex

A practical guide for AI agents that need to use vdb. If you are changing the code rather than using it, read AGENTS.md instead.

not rated 154 +1 4d ago A 0 tokens original MIT

bob-egress

03

vmihalis/hacker-bob

Skill Claude Code needs its repo

List, add, test, enable, disable, or remove Hacker Bob egress profiles from Codex.

not rated 99 6d ago A SkillSpector: pass 25 tokens original Apache-2.0

cybersecurity-lab

04

handnewb/hermes-cybersec-lab

Skill Claude CodeCodex

Turnkey cybersecurity lab — 2,077 skills, 131+ tools, 28 frameworks, and evolving methodology for security research, pentesting, forensics, and threat intelligence. Includes one-step ecosystem cloner for 8 repositories.

not rated 18 +1 2mo ago A 54 tokens original MIT

code-audit-system

05

UserB1ank/code-audit-system

Skill Claude CodeCodex

CVE-oriented multi-agent code audit system. Use when user provides a git repository URL for vulnerability discovery with the goal of submitting CVEs. This skill orchestrates subagents to find exploitable vulnerabilities (RCE, SQLi, Auth Bypass, etc.), write weaponized POCs, and generate CVE-ready reports. ALWAYS use…

not rated 15 4mo ago A 97 tokens

code-vulnscan

06

Bhanunamikaze/Code-VulnScan-Skill

Skill Claude CodeCodex

Use this when the user wants to find security vulnerabilities in a codebase, perform a security audit, scan for CVEs, detect secrets, review React/Next.js, Go, Java/Kotlin JVM, PHP, Ruby, .NET, or Rust web services, audit architecture/application/infrastructure flaws, review auth/API/crypto/business logic, check…

not rated 7 2mo ago A 128 tokens original MIT

claude-code-project

07

zebbern/pocmap

Skill Claude CodeCodex

Use this skill when the user wants to update their project's CLAUDE.md or AGENTS.md, verify their Claude Code setup, or check for improvements to their project configuration. Triggers on requests like: "update my project docs", "verify my claude setup", "check my project configuration", "audit my .claude directory"…

not rated 6 1mo ago A 100 tokens original MIT

omv-find

09

bx33661/oh-my-vul

Skill Claude CodeCodex

Finds and ranks open-source packages worth auditing for passive CVE/VulDB research. Use when the user asks for vulnerability research targets, CVE hunting candidates, packages to audit, projects to fuzz, or /omv-find. Supports npm, Python, Go, Rust, Java, Ruby, PHP, C#, Swift, Dart, Elixir, Perl, R, and Lua, with…

not rated 4 1mo ago A 122 tokens original MIT

bug-bounty-hunting

10

rozetyp/vuln-intel-mcp

Skill Claude CodeCodex

Hunt vulnerabilities like an expert, not a linear software engineer: come at a target from the overlooked angle, reason by analogy and transfer proven attack mechanisms, attack the hidden assumptions and the seams between systems, drill to the mechanism, then keep it honest with proof and persistence (acceptance !=…

not rated 0 6d ago A 263 tokens

compuute-scan

11

Compuute/compuute-scan-api

Skill Claude CodeCodex

Scan a public GitHub MCP-server repository for security issues before installing or connecting to it. Calls the hosted compuute-scan API at scan.compuute.se and returns severity counts, a 0-100 score, the most severe findings, and an honest triage disclaimer. Use BEFORE recommending or installing an unfamiliar MCP…

not rated 0 1mo ago A 122 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: