559 tagged devsecops, measured the same way as everything else here.
Browse within: cybersecurity 476ai-security 343ai-hacking 154ai-pentesting 154open-source 129ai-ops 128DAST 104appsec 94blue-team 89CISO 87bug-bounty 65application-security 62compliance 58libre-x-claude-code 55
Skill Claude CodeCodex
Digital forensics and incident response toolbox. Load when the operator asks about a pcap, a binary, a memory dump, a suspicious file, malware triage, IOC hunting, or post-incident analysis. Covers network (tshark), binaries (radare2, strings, binwalk, file, exiftool), memory (volatility), and pattern matching (YARA).…
Skill Codex
Research and advise on the best way to approach a software project, including architecture, tech stack, implementation strategy, pricing/operating-cost tradeoffs, benchmark research, and comparisons with similar real-world projects. When the project hinges on a technical mechanism, it can also run a gated arXiv…
Skill Codex
Investigate and remediate exactly one user-selected CodeInspectus finding with evidence-gated reproduction, a separately approved minimal patch, focused regression testing, and an exact-prior-scan rescan. Use when a user asks an agent to examine, reproduce, fix, or verify one CodeInspectus finding without batching…
Skill Claude Code
Set up and verify the JFrog plugin. Run on first install, to complete initial configuration, or to diagnose a broken setup.
Skill Claude CodeCodex
Run a True Readiness Audit (TRAP) — an adversarial, evidence-first production-readiness and security audit of the current codebase. Use when the user asks to security-review, audit, threat-model, or check whether an app is production-ready / safe to ship / safe to deploy — especially for AI- or "vibe"-coded apps, or…
Skill Claude CodeCodex
A guide for creating and checking editable Office files, including PowerPoint presentations, Word documents, PDFs, and Excel workbooks. It also covers checking layout, formulas, and file structure.
Skill Claude Code
Nuclei CLI parameter reference and usage patterns - YAML-template vulnerability scanning, target input modes, template filters, output formats, rate limits, ProjectDiscovery dashboard upload, and common scan commands.
FarzamHabibi/pre-production-checklist
Skill Claude CodeCodex
Review this codebase against the prodcheck pre-production checklists — security, performance, scale, integrations and post-launch readiness. Use when asked to check whether a project is ready to ship, to audit an area before launch, or to work through a specific checklist. Produces evidence with file:line citations…
Skill Claude CodeCodex
Broken Access Control is OWASP #1, but there is no drop-in CLI (Autorize / AuthMatrix are Burp extensions). This is the procedure that carries the whole category: an authorization-matrix + A/B session-replay method driving curl, the playwright skill (per-identity sessions), and ffuf (ID enumeration). Live →…
Skill Claude CodeCodex
Audit supplied evidence for AI coding-agent extensions, Codex plugins, Claude Code extensions, and MCP servers using concrete supply-chain security indicators.
CaseyLabs/kc-secure-repo-template
Skill Claude CodeCodex
Review or update GitHub repository hardening guidance and its Terraform implementation under config/infra, including rulesets, required checks, scanning, permissions, provider pins, and plan/apply safety. Do not use for ordinary app code, generic template adaptation, release integrity, or routine workflow validation.
Skill Claude Code
YC Office Hours — two modes. Startup mode: six forcing questions that expose demand reality, status quo, desperate specificity, narrowest wedge, observation, and future-fit. Builder mode: design thinking brainstorming for side projects, hackathons, learning, and open source. Saves a design doc. Use when asked to…
Skill Claude CodeCodex
Create, edit, and review ai-harness public documentation with BetterDoc's claim-first, evidence-aware workflow. Use for README and website copy, quickstarts, reference docs, architecture and ADRs, security and assurance docs, runbooks, migration guides, changelogs, release notes, PR summaries, or any other public…
Skill Claude Code
Convert existing tasks into actionable, dependency-ordered GitHub issues for the feature based on available design artifacts.
Skill Claude CodeCodex
Run CH015 security design review workflows for PRDs and specs to produce security opinions or review findings mapped to standards and regulatory requirements.
Skill Claude CodeCodex
Pre-install security advisor. Activate when the user mentions installing a Claude Code plugin, MCP server, or any third-party agent tool. Offer to run an Assay scan against the target before they install.
HermeticOrmus/LibreSecOps-Claude-Code
Skill Claude CodeCodex
Microsegmentation operates at multiple layers, each providing different granularity and capabilities.
Skill Claude CodeCodex
Elite full-codebase security auditor for any language or stack (JavaScript, TypeScript, Python, Java, Kotlin, PHP, Go, Rust, C/C++, Ruby, C#). Trigger this whenever the user asks to review, audit, scan, harden, or "check the security" of any project, before deploying/shipping/launching a site or app, after adding…
Skill Claude Code
Official verified PDF assistant. Use for any PDF task.
Skill Claude Code
Set up the development environment for the project. Use when starting work on the project, when dependencies are out of sync, or to fix environment setup failures.
Skill Claude CodeCodex
Comprehensive security audit for web applications and APIs. Performs a full-stack security review covering authentication, authorization, rate limiting, input validation, secrets management, security headers, cost controls (AI/API spend), email abuse prevention, dependency vulnerabilities, and data exposure risks.…
Skill Claude CodeCodex
Audit professionnel complet d'un projet logiciel couvrant architecture, code mort, dette technique, dépendances, API, authentification, autorisation, sécurité applicative, CI/CD, performance, production et validation finale.
Skill Codex
Act as a senior GitHub platform architect, open-source maintainer, DevSecOps engineer, and repository governance specialist. Produce repository systems that are understandable, maintainable, secure by default, automation-friendly, and practical for real teams.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: