131 tagged security-tools, measured the same way as everything else here.
Browse within: research-automation 57hardening 43security-audit 43claude-code-plugin 40aws 39security-hardening 39appsec 37api 21open-security 21defensive-security 18devsecops 18sast 17kotlin 16spring 16
Skill Claude Code
Creates, syncs, audits and manages Prowler compliance frameworks end-to-end. Covers the two supported JSON schemas (universal multi-provider and legacy per-provider), the SDK model tree (legacy attribute classes, universal ComplianceFramework, ConfigRequirements guardrails), output formatters (legacy per-framework +…
Skill Claude CodeCodex
Expert guide for the Osmedeus security automation workflow engine. Use when: (1) writing or editing YAML workflows (modules and flows), (2) running osmedeus CLI commands (scan, workflow management, installation, server), (3) configuring steps, runners, triggers, or template variables, (4) debugging workflow execution…
Skill Claude CodeCodex
Autonomous mobile security audit aligned with OWASP MASTG v2. Performs checklist-driven analysis across MASVS categories: storage, crypto, network, platform, code, resilience, privacy. Exports structured markdown report with MASTG test references.
Skill Claude Code
Generate a PR-ready technique proposal when an attack step doesn't map to existing SITF techniques. Use after /attack-flow identifies technique gaps.
Skill Claude CodeCodex
Extract spatial text (liteparse grid projection), structured JSON with per-page bounding boxes, a heuristic Markdown reconstruction (with headings, lists, tables, hyperlinks, and bookmark-driven heading hierarchy), the PDF outline / Table of Contents, or per-page PNG renders (with optional bbox overlay + full-text…
Skill Claude CodeCodex
A guide for creating and checking editable Office files, including PowerPoint presentations, Word documents, PDFs, and Excel workbooks. It also covers checking layout, formulas, and file structure.
Skill Claude CodeCodex
Use this skill when the user wants to build with the Claude API or Anthropic SDKs.
Skill Claude CodeCodex
Generates a changelog entry from recent commits.
Yaomeng1749/claude-code-digital-nomad-config-pack
Skill Codex
Backend architecture patterns, API design, database optimization, and server-side best practices for Node.js, Express, and Next.js API routes.
Muhammad-Qasim-Munir/skillguard
Skill Claude CodeCodex
Review Claude/Cursor Skills for security issues (prompt injection, agentic/tool injection, data exfiltration, unsafe automation). Use when evaluating a Skill package/folder or SKILL.md + bundled scripts for risks like hidden instructions, tool misuse, credential theft, network exfil, destructive commands, and policy…
Skill Claude CodeCodex
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines, including env var intermediary patterns, direct…
Skill Claude CodeCodex
Apply security guidelines when designing, building, or reviewing AI chatbots, LLM-powered apps, autonomous/tool-using agents, and mobile apps (React Native/Expo, Flutter) — covering agent controls (authorization checks, plan validation, execution limits, audit logging), LLM/prompt security (prompt injection, RAG…
Skill Claude CodeCodex
Check domains, URLs and IP addresses against ten aggregated security blacklists (OpenPhish, PhishStats, URLhaus, PhishTank, Spamhaus DROP, DShield, CINS Score, Emerging Threats, Feodo Tracker, Blocklist.de) via the sec-mcp MCP server or Python library — in-process, no API key, no request leaving the machine.
Skill Claude Code
A Chinese-language guide for authorized penetration testing and security research. Penetration testing is controlled testing used to find security weaknesses in software or systems.
Skill Claude CodeCodex
Use when the user wants a security/exposure check on a domain or website they own or are authorized to test — "audit my site", "what's my attack surface look like", "did anything change on my domain", etc. Drives the nirikshak MCP tools (fullsurfacescan, and the individual checks) and turns raw output into a…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: