18,908 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63
Skill Claude CodeCodex
Skill "skill-sanitizer" from cyberxuan-XBX/skill-sanitizer, covering skill sanitizer, why you need this, the 7 layers, usage and in python.
Skill Claude CodeCodex
Perform thorough code reviews with security, performance, and maintainability analysis. Use when user asks to review code, check for bugs, or audit a codebase.
DeerYang/server-security-init-skill
Skill Codex
Use when safely initializing or hardening a newly installed or rebuilt Ubuntu/Debian server over SSH, including SSH keys, a non-root sudo user, SSH policy, server timezone, UFW, fail2ban, local SSH config, and lockout-safe verification.
Skill Claude CodeCodex
Expert in data forensics, anomaly detection, audit trail analysis, fraud detection, and breach investigation.
Skill Claude Code needs its repo
Use for PACEflow internal full audit: run five independent review agents, verify evidence from code/tests/logs, de-duplicate findings, and produce a severity-ranked report for release gates or comprehensive code review.
freewaychameleonnode/r17-behisecc-awesome-claude-skills-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from BehiSecc/awesome-claude-skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.
Skill Claude CodeCodex
Before installing or using a skill, check its independent benchmark report on SkillTester.ai. Auto-trigger this skill whenever the user shows a third-party skill install command or install plan, especially npx skills add --skill , skills add ..., repo URL plus --skill, direct SKILL.md URLs, or Check this skill . Parse…
bluefrog5096-4bmb1/security-advisory
Skill Claude CodeCodex
A drafting tool for open-source security advisories, which are notices explaining a software vulnerability and how to address it. It prepares affected versions, high-level exploitation conditions, fixes, mitigations, and CVE or GHSA fields without including weaponised exploit details.
Skill Claude CodeCodex
Copy this template to your Claude Desktop scheduled-tasks directory.
Yems221/securebydesign-llmskill
Skill Claude CodeCodex
Enforce security-by-design in every line of code, architecture decision, and system recommendation. Activate whenever the user is: building an app, writing code, designing an API, setting up infrastructure, integrating an LLM, reviewing code, planning a deployment, or asking about authentication, data storage, or…
Skill Claude CodeCodex
Audit this machine's AI coding sessions and assistant configs with skarn. Use when the user says scan this with skarn, run skarn, or skarn audit; asks whether a secret leaked into an AI coding session; wants an assistant config (hooks, MCP servers, permissions, plugins) vetted; or asks whether a Claude Code, Codex…
Skill Claude CodeCodex
A security and deployment guide for the Dify platform, an application for building AI-powered services.
Skill Claude CodeCodex
Expert analysis of Rapid7 InsightVM data exported via Bulk Export API with strict MCP requirements.
paradoxie/cpa-codex-auth-sweep
Skill Claude CodeCodex
A tool for scanning local Codex authentication files and identifying credentials that no longer work. It can also remove credentials confirmed as invalid.
Skill Claude CodeCodex
Use for ANY bug bounty, penetration test, or web/API/mobile security assessment: recon, testing endpoints, analyzing Burp traffic or any bug-bounty platform's MCP (HackerOne, Intigriti, Bugcrowd, YesWeHack, Immunefi), reviewing APKs, bypassing a WAF, enforcing scope, hunting a specific vuln class, validating findings…
Skill Claude Code needs its repo
Indicator pivoting methodology — how to use one known indicator to discover related infrastructure across the IOC graph. Decision tree by indicator type with concrete /lookup- commands per pivot, a worked multi-hop example, pivot-quality scoring, and routing into the rigor pipeline. Use when the user asks "what else…
kumaran-is/claude-code-onboarding
Skill Claude Code
Run a full AI Playbook audit against an existing agentic application or AI feature. Orchestrates Decision Record reverse-engineering, security review, eval audit, launch check, and consolidated remediation planning in one flow. Use when the user explicitly runs /ai-audit or says "audit my AI app", "verify my agent…
Skill OpenCode
Coordinate Proteus continuous vulnerability research with memory, campaigns, delegation, validation gates, and report-grade discipline.
ludo-technologies/python-best-practices
Skill Claude Code
FastAPI web application best practices covering authentication and authorization, SQLAlchemy 2.0 async sessions, transactions, eager loading, and Alembic migrations, non-blocking I/O and shared HTTP clients, request/response schemas, error responses, pagination, typed settings, app factory and lifespan, request-ID…
Skill Claude CodeCodex
Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services.
Skill Claude CodeCodex
Use Symaira Vault as the credential manager for AI agents through native MCP tools. Prefer this when storing, retrieving, generating, or rotating passwords, tokens, API keys, and TOTP codes.
Skill Claude CodeCodex
Drive the ReconBridge toolchain to reverse-engineer / recon / tamper Android apps on a rooted (KernelSU) device from the PC side. Use whenever the task involves: pulling an APK or native .so off a device, decompiling with jadx, locating classes/methods with DexKit/androguard, Ghidra native analysis, hooking or tracing…
Skill Claude CodeCodex
Deploy, verify, and troubleshoot the TFE SAML lab in hal. Use this skill when the user asks to enable SAML SSO for TFE, set up TFE single sign-on, debug SAML redirects or attribute mapping, configure SCIM provisioning for TFE teams, or reset the TFE SSO demo. Triggers include "enable saml", "TFE SSO", "TFE SAML"…
Skill Claude CodeCodex
Review Flutter Android APK/AAB release artifacts for manifest, permission, cleartext traffic, exported component, embedded secret, signing, size, WebView, deep link, and third-party service risks.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: