llm-security skills

108 tagged llm-security, measured the same way as everything else here.

Browse within: ai-security 307appsec 195agent-security 57Prompt Injection 45owasp 32mcp-security 29ai-red-teaming 23openclaw 19application-security 18bot-detection 18AI Safety 17ml-security 14moltbot 14malware-detection 13

arcjet/arcjet-js

Skill Claude CodeCodex needs its repo

Integrate Arcjet security into a Vercel Eve agent using @arcjet/guard — add guard gates to tools and connections, screen inbound messages, and record agent lifecycle events correlated to the session. Use when asked to add Arcjet to an Eve agent, rate limit its tools, guard connection access, or screen inbound messages.

not rated 692 +3 changed yesterday A SkillSpector: warn 77 tokens original Apache-2.0

Agent-Threat-Rule/agent-threat-rules

Skill Claude CodeCodex

Generate clinical trial protocols for medical devices or drugs. This skill should be used when users say "Create a clinical trial protocol", "Generate protocol for [device/drug]", "Help me design a clinical study", "Research similar trials for [intervention]", or when developing FDA submission documentation for…

not rated 416 +6 today A 70 tokens original MIT

secureclaw

03

adversa-ai/secureclaw

Skill Claude CodeCodex

Security hardening toolkit for OpenClaw. Run audits, apply fixes, scan skills, monitor costs and memory integrity.

not rated 347 6mo ago A 28 tokens

prompt-guard

04

seojoonkim/prompt-guard

Skill Claude CodeCodex

600+ pattern AI agent security defense covering prompt injection, supply chain injection, memory poisoning, action gate bypass, unicode steganography, and cascade amplification. Optional API for early-access and premium patterns. Tiered loading, hash cache, 11 SHIELD categories, 10 languages.

not rated 180 5mo ago B 61 tokens original MIT

jnMetaCode/shellward

Skill Claude CodeCodex

A compliance audit procedure for an AI codebase under Chinese rules, including the Cybersecurity Law, the Personal Information Protection Law, MLPS 2.0, cross-border data transfer, and AI-content labeling.

not rated 140 17d ago A 169 tokens original Apache-2.0

opena2a-org/hackmyagent

Skill Claude CodeCodex

Turns ARIApulse index telemetry into the weekly cross-property attribution digest.

not rated 84 +1 today A 19 tokens original Apache-2.0

skill-auditor

07

UseAI-pro/openclaw-skills-security

Skill Claude CodeCodex

Comprehensive security auditor for OpenClaw skills. Checks for typosquatting, dangerous permissions, prompt injection, supply chain risks, and data exfiltration patterns — before you install anything.

not rated 73 +1 7mo ago A ✓ AI review Socket: passSnyk: warn 44 tokens original MIT

AegisGate

08

ax128/AegisGate

Skill Claude CodeCodex

An open-source security gateway that sits between an AI application and an LLM service. It can remove or clean sensitive information from requests and responses before they are passed through.

not rated 70 changed 1mo ago B 0 tokens original MIT

panguard

09

panguard-ai/panguard-ai

Skill Claude CodeCodex

AI agent security platform — audit skills, scan for threats, and run 24/7 protection with 9,700+ detection rules.

not rated 65 today A SkillSpector: pass 30 tokens original MIT

Mindburn-Labs/helm-ai-kernel

Skill Claude CodeCodex

Mission: decompose non-trivial HELM implementation or audit work into bounded, reviewable task threads.

not rated 60 yesterday A SkillSpector: pass 0 tokens original Apache-2.0

clawseccheck

11

gl0di/clawseccheck

Skill Claude CodeCodex

Free, local, read-only security self-audit for your own OpenClaw agent. Reads your OpenClaw config, bootstrap files, logs, agent session logs, and installed skills, plus a bounded host-security scan. It changes no OpenClaw config, skill or bootstrap file; its own history and state stay under /.clawseccheck…

not rated 58 changed today A 235 tokens original MIT

brin-check

12

superagent-ai/brin

Skill Claude CodeCodex

Scan packages, repositories, MCP servers, domains, web pages, and agent skills for security threats using the brin API. Use this skill before installing dependencies, visiting URLs, or integrating external resources.

not rated 50 +1 6mo ago A 44 tokens

wacli

13

HuTa0kj/vetix

Skill Claude CodeCodex

Send WhatsApp messages to other people or search/sync WhatsApp history via the wacli CLI (not for normal user chats).

not rated 50 +30 17d ago A 31 tokens original MIT

clawmoat

14

darfaz/clawmoat

Skill Claude CodeCodex

Real-time AI agent security scanner. Detects prompt injection, jailbreak attempts, credential/secret leaks, PII exposure, and dangerous tool calls. Activate when: (1) scanning inbound messages or tool outputs for prompt injection, (2) checking outbound content for credential leaks or PII, (3) auditing agent session…

not rated 43 1mo ago A SkillSpector: warn 107 tokens original MIT

depalmar/ai-dfir-toolkit

Skill Claude CodeCodex needs its repo

Research, author, and validate AI agent artifact catalog entries documenting the forensic artifacts AI agents leave on endpoints - install paths, config and credential files, MCP server configs, listening ports, process trees, registry keys, and the Windows event log records that prove a tool ran. Use this skill…

not rated 25 changed 15d ago A SkillSpector: pass 197 tokens original Apache-2.0

screem500/prompt-injection-auditor

Skill Claude CodeCodex

Security audit of LLM system prompts, agent instruction files (SKILL.md, AGENTS.md, CLAUDE.md), and agent configurations against prompt injection attacks. Use when the user wants to (1) audit or harden a system prompt or agent instructions against prompt injection, (2) review an agent skill or system prompt for…

not rated 16 changed 16d ago A 159 tokens original Apache-2.0

prodcheck-review

18

FarzamHabibi/pre-production-checklist

Skill Claude CodeCodex

Review this codebase against the prodcheck pre-production checklists — security, performance, scale, integrations and post-launch readiness. Use when asked to check whether a project is ready to ship, to audit an area before launch, or to work through a specific checklist. Produces evidence with file:line citations…

not rated 15 today A 70 tokens

ziran

19

taoq-ai/ziran

Skill Claude CodeCodex

ZIRAN is an open-source security testing framework for AI agents. It discovers dangerous tool chain compositions via knowledge graph analysis, detects execution-level side effects (not just text output), and runs multi-phase trust exploitation campaigns that model real attacker behavior.

not rated 11 +1 today A 0 tokens original Apache-2.0

meghal86/promptsonar

Skill Claude CodeCodex

Use when: the user asks to run system maintenance. Capability: executes shell commands via shellexec. Route maintenance commands through the system shell and run them.

not rated 7 15d ago A 0 tokens original MIT

korveo

21

zistica/korveo

Skill Claude CodeCodex

Observe and debug your OpenClaw agent with Korveo — local-first AI observability. Records every LLM call, tool call, and decision; view at localhost:3000. Use when the user asks: "show my agent traces", "why did my agent fail", "how much did my last run cost", "open korveo", "debug my agent", or "show recent traces".

not rated 5 4mo ago A 87 tokens original Apache-2.0

cordon-install

22

ilyautov/cordon

Skill Claude Code

Install Cordon, a deterministic layer between untrusted content and agent actions, and verify that the harness actually calls it. Cordon strips the hidden layer from what the agent reads, remembers where data came from, and refuses calls outside the effect classes the user's own instruction allows. No model call on…

not rated 5 3d ago A 156 tokens original MIT

theseus

23

kalt-sit/theseus

Skill Claude CodeCodex

Audit third-party agent skills for prompt injection, unsafe commands, downloads, permissions, and persistence before installation.

not rated 2 1mo ago A 24 tokens original MIT

zugashield

24

Zuga-Technologies/ZugaShield

Skill Claude CodeCodex needs its repo

7-layer AI security + ML detection for OpenClaw. Covers all 10 OWASP Agentic AI risks — prompt injection, tool misuse, memory poisoning, data exfiltration, and more — across ALL channels (Signal, Telegram, Discord, WhatsApp, web) simultaneously.

not rated 1 6d ago A 61 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: