18,920 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63
yoanbernabeu/supabase-pentest-skills
Skill Claude CodeCodex
Create a test user (with explicit permission) to audit what authenticated users can access vs anonymous users. Detects IDOR, cross-user access, and privilege escalation.
UseAI-pro/openclaw-skills-security
Skill Claude CodeCodex
Comprehensive security auditor for OpenClaw skills. Checks for typosquatting, dangerous permissions, prompt injection, supply chain risks, and data exfiltration patterns — before you install anything.
Skill Codex
A security review of project dependencies managed by npm, Yarn, or pnpm. It can inspect a local project directory or a remote Git repository for known dependency risks.
sparkfinderoven/r01-hesreallyhim-awesome-claude-code-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from hesreallyhim/awesome-claude-code. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.
faizkhairi/claude-code-blueprint
Skill Claude Code
Run a comprehensive multi-perspective code review on recent changes. Also triggers on 'is this secure?', 'security review', 'check for vulnerabilities', 'could this be exploited?' for security-focused review. Produces: GO/NO-GO verdict + findings table (Severity | Category | File:Line | Issue | Recommendation)…
Skill Claude CodeCodex
An open-source security gateway that sits between an AI application and an LLM service. It can remove or clean sensitive information from requests and responses before they are passed through.
Skill Claude CodeCodex
Sigillo is a self-hostable open-source alternative to Doppler. Use when working with sigillo run, sigillo setup, sigillo login, managing secrets, projects, or environments. Also load when integrating Sigillo into CI, Cloudflare Workers, Docker, Vercel, or any other deployment target.
SamarthaKV29/antigravity-god-mode
Skill Claude CodeCodex
Skill "securecoder_generation" from SamarthaKV29/antigravity-god-mode, covering secure coding guidelines, testing, security review & planning, secure web frontend skill and xss injection.
Skill Claude CodeCodex
Manage OAuth credentials & tokens for Google, Facebook, TikTok.
ricmmartins/azure-sre-agent-skills
Skill Claude CodeCodex
Assess security, reliability, and cost posture of Azure OpenAI and Microsoft Foundry deployments. Detects critical anti-patterns: API keys instead of Managed Identity, public endpoints without firewall, disabled content filtering, missing diagnostic settings, deprecated model versions, over-provisioned PTU, absence of…
frendysanusi/claude-pentest-skills
Skill Claude CodeCodex
Structured web application penetration testing with OWASP methodology, curated payload references, 6-gate validation, and professional report generation.
Skill Claude Code
Complete security remediation workflow. Scans code for vulnerabilities using Snyk, fixes them, validates the fix, and optionally creates a PR. Supports both single-issue and batch mode for multiple vulnerabilities. Use this skill when: User asks to fix security vulnerabilities User mentions "snyk fix", "security fix"…
Skill Claude Code
Investigate queued TRUDI alerts or resume an open live investigation, with gated source containment, native evidence collection, and reporting.
Skill Claude CodeCodex
AI agent security platform — audit skills, scan for threats, and run 24/7 protection with 9,700+ detection rules.
Skill Claude CodeCodex needs its repo
Scrub AI provenance marks from text and files using the markscrub CLI: invisible Unicode (Layer A), optional statistical rewrite (Layer B), and C2PA/EXIF/XMP/container metadata on PNG/JPEG/SVG/PDF/DOCX/HTML/MD. Use when the user asks to strip watermarks, remove Content Credentials, clean AI metadata, remove invisible…
Skill Claude CodeCodex
ZettelForge v2.0.0 — Production CTI agentic memory system. Hybrid TypeDB (STIX 2.1 ontology) + LanceDB (vector search). Zero external AI dependencies: fastembed for embeddings, llama-cpp-python for LLM. 75% accuracy on CTI queries, 18% on LOCOMO. Use when agents need persistent memory, threat intel retrieval, entity…
Skill Claude CodeCodex
GDPR compliance audit of code, plans, schemas, or IaC. Produces a findings report with article citations, severity, confidence, and fixes; flags evidence gaps. Not a substitute for a DPO/lawyer.
agentrust-io/awesome-ai-governance
Skill Claude CodeCodex
Patterns and techniques for adding governance, safety, and trust controls to AI agent systems. Use this skill when: Building AI agents that call external tools (APIs, databases, file systems) Implementing policy-based access controls for agent tool usage Adding semantic intent classification to detect dangerous…
Skill Claude CodeCodex
HSM-backed secret management for AI agents — store, retrieve, rotate, and share secrets via the 1Claw vault without exposing them in context.
Skill Claude CodeCodex
This skill should be used when the user asks to "run Preflight", "scan launch readiness", "check production readiness", "audit before deploy", "fix preflight findings", "set up preflight.yml", "wire Preflight into CI", or mentions the Preflight.sh CLI.
app-incubator-xyz/skill-vetter
Skill Claude Code
Multi-scanner security gate. TRIGGER when: user mentions installing, adding, or reviewing a skill to Claude Code, OpenClaw, or any other AI agent. Detects malicious code, vulnerabilities, and suspicious patterns.
Skill Claude Code
Guide for understanding and contributing to the awesome-ai-security curated resource list. Use this skill when adding resources, organizing categories, or maintaining README.md consistency (no duplicates).
Skill Claude CodeCodex
Use when auditing Solana programs for security vulnerabilities, reviewing Anchor or Pinocchio/native Rust smart contracts, checking CPI safety, PDA validation, account ownership, signer verification, or Token-2022 security.
Skill Claude CodeCodex
A web security audit system for PHP, Java, .NET, and Node.js applications. It identifies the technology used, checks code and runtime behaviour for common weaknesses, and documents fixes.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: