18,904 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 503bug-bounty 235agent 231generative-ai 178LangChain 177hacking 176autonomous-pentesting 175skills 133LLM 104claude-ai 104agentic-ai 87ai-security 75openclaw 71antigravity 67
Skill Claude CodeCodex
Decompile Android APK, XAPK, JAR, and AAR files using jadx or Fernflower/Vineflower. Reverse engineer Android apps, extract HTTP API endpoints, trace call flows from UI to network layer, and analyze runtime behavior with Frida, network capture, JNI/SO inspection, and signature generation. Use when the user wants to…
Skill Claude CodeCodex needs its repo
Secure environment variable management with Varlock. Use when handling secrets, API keys, credentials, or any sensitive configuration. Ensures secrets are never exposed in terminal, logs, or LLM context. Provides guidance around integrating varlock into a project, reading/editing .env.schema and other .env files…
Skill Claude CodeCodex
A task-specific instruction for submitting a flag during a tsec CTF or penetration-testing competition. A CTF is a security contest where participants solve challenges and submit proof strings called flags.
Skill Claude CodeCodex needs its repo ✓ vendor
Run Tika's OSS-Fuzz Jazzer targets locally against a working-tree checkout — build the image, build fuzzers from local source, fuzz a target, run a corpus as a regression pass, reproduce a crash, and add seeds. Use for "fuzz the OneNote parser", "run OneNoteParserFuzzer against these files", "reproduce an OSS-Fuzz…
Skill Claude Code
Investigate GitHub security incidents using tamper-proof GitHub Archive data via BigQuery. Use when verifying repository activity claims, recovering deleted PRs/branches/tags/repos, attributing actions to actors, or reconstructing attack timelines. Provides immutable forensic evidence of all public GitHub events since…
Skill Claude CodeCodex
Turns a threat report, a malware analysis, vendor tool documentation, or a raw log sample into draft Sigma detection rules, validated against sigma-cli where a shell exists and labelled "not machine-validated" where not, each paired with a validation note covering assumptions, false positives, evasion gaps, and a test…
Skill Claude CodeCodex
HackerOne bounty program scope-guard workflow — reads program scope, enforces scope and program rules, then hands each in-scope asset to pentest-flow.
Skill Claude CodeCodex
A collection of methods for analyzing websites, browser code, API behavior, and encryption or signing processes. It is intended for authorized investigation and produces findings and reports rather than launching attacks.
Skill Claude Code
Analyze PCIe DMA threats, host-mediated memory acquisition, FPGA behavior, and IOMMU defenses. Use when the memory initiator or device boundary matters; use kernel security for host-only mechanisms.
Skill Claude Code
Provides cryptography attack techniques for CTF challenges. Use when attacking encryption, hashing, signatures, ZKP, PRNG, or mathematical crypto problems involving RSA, AES, ECC, lattices, LWE, CVP, number theory, Coppersmith, Pollard, Wiener, padding oracle, GCM, key derivation, or stream/block cipher weaknesses.
Skill Claude CodeCodex
Ensure that RDS instances are not publicly accessible.
Skill Claude CodeCodex
Writing to the Neo4j attack-surface graph in RedAmon: the tenant-isolation MERGE key every entity node must carry, where graph methods live (mixins, not the client), and the schema places that must be updated together. A MERGE missing the tenant key silently merges one project's data into another's. Trigger: editing…
Skill Claude CodeCodex
LLM & VLM evaluation suite for home security AI applications.
visa/visa-vulnerability-agentic-harness
Skill Claude CodeCodex
Weaknesses in browser-delivered code — JS/TS, JSX/TSX, Vue, Svelte, Angular, HTML, templates, bundler and Docker config. DOM XSS and code-exec sinks, secrets in bundles or config.js, build-inlined REACTAPP/NEXTPUBLIC/VITE env, source maps and dev servers shipped in images, tokens in localStorage or non-httpOnly…
Skill Claude CodeCodex needs its repo
Organization-grade identity-fabric mapping: tenant/federation fingerprinting and the pre-auth user-ENUMERATION oracle methodology — enumeration and fingerprint only, never credential submission. Covers domain-to-tenant resolution (Microsoft getuserrealm.srf Managed/Federated namespace check, Entra OIDC metadata…
Skill Claude CodeCodex
Terminal security analysis for shell environments. This skill should be used when checking commands for supply-chain attacks before execution, scanning repositories for hidden content or config poisoning, scoring URLs for homograph attacks, setting up AI tool protection, inspecting Python package artifacts, governing…
Skill Claude CodeCodex needs its repo ✓ vendor
Generates and runs crash reproducers to verify security flaws. Use when viable findings exist and you need to write and execute a script or payload to verify the crash. Don't use for code auditing or patching.
cisco-ai-defense/skill-scanner
Skill Claude CodeCodex
Retrieves current weather conditions and forecasts for any location worldwide.
Skill Claude CodeCodex needs its repo
Business logic vulnerability playbook. Use when reasoning about workflows, race conditions, price manipulation, coupon abuse, state machines, and multi-step authorization gaps.
Skill Codex needs its repo
A scripted workflow for Kunlun-M, a static security scanner that examines source code without running it. It supports PHP, JavaScript, Solidity smart contracts, and Chrome extensions, and can create scanner rules and tamper settings.
Skill Claude CodeCodex
Configure fnox secret providers and profiles, inject secrets into commands, and diagnose missing secrets or authentication failures. Use for fnox.toml and fnox CLI workflows.
Skill Codex
Configure authorization policies, ACLs, static claims enrichment, required external decisions, bypasses, identity headers, JWT verification, remote Basic/API-key auth, SQLite/Consul API keys, and direct OAuth without a portal.
Skill Claude CodeCodex
A procedure for auditing Java archive files for security problems using evidence stored in SQLite. A Java archive, or JAR, is a packaged file containing Java code and resources.
Skill Claude CodeCodex
Audit and update Pilot Shell upstream dependencies in installer/upstreams.yaml. Checks npm, PyPI, brew, and curl-pipe entries for newer stable versions, known security advisories, and sha256 drift. Verifies each update installs successfully before committing. Use when: "check upstreams", "update dependencies", "audit…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: