16,761 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 488bug-bounty 285agent 227generative-ai 179LangChain 176hacking 175autonomous-pentesting 137cloud-security 126claude-ai 118redteam 117skills 108security-audit 107LLM 106cors-exploitation 93
Skill Claude CodeCodex
Evaluate whether AdCP (Ad Context Protocol, agenticadvertising.org) — or a concrete AdCP implementation such as a seller agent, buyer agent, or orchestrator — is safe, interoperable, operationally viable, and ready for pilot or production use. Combines a weighted decision scorecard, hard safety gates that override any…
Skill Claude CodeCodex
Guide for using openlens to review code. Triggers on: "review my code", "check for bugs", "security scan", "run openlens", "set up code review", "openlens".
Skill Claude CodeCodex
Name: capybara-nexus-v2 Tier: Frontier (Capybara-class) Mandate: Autonomous Reasoning, Empirical Feedback, & Zero-Day Research.
Skill Claude CodeCodex
Run a structured codebase audit — map architecture, assess health (compliance / tests / docs), perform deep analysis (security / performance / code quality), and synthesize a prioritized roadmap. Use this skill when the user says things like 'audit the codebase', 'understand this project', 'find problems', '/audit'…
Skill Codex
Use when hardening npm package release workflows with trusted publishing, OIDC, GitHub environments, pinned GitHub Actions, disabled publish-path caching, Changesets release PRs, direct tag-based npm publish flows, staged publishing, or npm release-supply-chain reviews.
ArmisSecurity/armis-appsec-mcp
Skill Claude CodeCodex
On-demand AI-powered security scanning. Use when the user asks to scan code for vulnerabilities, run a security check, scan code for security issues, scan a file, scan a diff, scan staged changes, check for security issues, check for secrets, find hardcoded credentials, or run an appsec scan. Triggers: /security-scan…
Skill Claude Code
Configure KYT transaction monitoring rules with tags, applicant risk scoring and risk levels. TRIGGER when the user says "create / add / set up KYT rules / TM rules", "configure transaction monitoring", describes scoring logic (flag/block/hold transactions by amount, country, direction, peer, or other conditions)…
Skill Claude CodeCodex
Inspect and remove identifying metadata and provenance marks from files — GPS coordinates, camera serial numbers, author names, editing timestamps, C2PA content credentials, and invisible Unicode carriers. Works on PNG, JPEG, WebP, PDF, DOCX, ODT, SVG, HTML, Markdown and plain text. Use when someone asks to strip…
Bhanunamikaze/Code-VulnScan-Skill
Skill Claude CodeCodex
Use this when the user wants to find security vulnerabilities in a codebase, perform a security audit, scan for CVEs, detect secrets, review React/Next.js, Go, Java/Kotlin JVM, PHP, Ruby, .NET, or Rust web services, audit architecture/application/infrastructure flaws, review auth/API/crypto/business logic, check…
PoulpYBifle/NCF-Coding-Best-Practices
Skill Claude CodeCodex
Patterns et regles backend/API/DB/securite pour projets Next.js + TypeScript. Utiliser des que l'utilisateur travaille sur une mutation, une query, une route API, une migration de base de donnees, de l'authentification, de la securite, des schemas Zod, de l'observabilite, ou toute logique serveur. Couvre : template…
Skill Claude Code
Review code for correctness, security, TypeScript quality, and performance. Run before any PR or deploy.
LeoKemp223/embedded-llm-guardrails
Skill Claude CodeCodex
Safety instructions for using an AI coding assistant in embedded projects, such as microcontroller, real-time operating system, driver, and board-support code. Embedded software runs on dedicated hardware, where mistakes can affect the device itself.
macaugh/super-rouge-hunter-skills
Skill Claude Code
Systematic methodology for developing reliable exploits from vulnerability discovery to weaponization.
Skill Claude Code
Manage WeChat channel access — edit allowlists and set DM policy. Use when the user asks to add/remove users, check who's allowed, or change policy.
Skill Claude CodeCodex needs its repo
Comprehensive cybersecurity tabletop exercise design and facilitation framework. USE WHEN designing incident response scenarios, creating executive or technical tabletops, generating atomics for exercise runners, identifying missing SOPs/playbooks, or evaluating organizational preparedness. Includes threat model…
Skill Codex needs its repo
Real-cluster security regression QA — backend auth enforcement, grant/session policy, gateway deny paths, audit emission, trust escalation, UI/API security headers, HTTPS redirect modes, and secret-leak scanning in live logs. Use when Codex is asked to verify a change did not regress auth, governance, gateway policy…
songoao25/dsh-virtual-product-team
Skill Claude CodeCodex
A development and quality process for building software, testing it, and checking it for security problems. It separates implementation, quality assurance, and security review while coordinating their handoffs.
PacktPublishing/The-Claude-Code-Operating-Model
Skill Claude Code
Review code for security vulnerabilities, performance issues, and coding best practices. Activate when the user asks to review code, check code quality, give feedback on code changes, or audit a file.
Skill Codex
A workflow for reconstructing calculations in web JavaScript from their final outputs, such as request parameters, cookies, headers, or WebSocket messages. It covers signatures, encryption, verification challenges, WebAssembly, and heavily obfuscated code.
Skill Claude CodeCodex
Use when presenting shell commands or tool calls for user approval. Adds a human-readable explanation of intent, scope, and risk before the approval prompt.
Skill Claude CodeCodex
Realiza uma auditoria de segurança completa em um projeto de código (web, API, backend, mobile etc), cobrindo OWASP Top 10 e CWE, dependências desatualizadas com CVEs, segredos expostos (incluindo histórico do git), CORS, TLS/HSTS, rate limiting, WAF, autenticação e cookies, controle de acesso, exposição excessiva de…
Skill Claude CodeCodex
Audit Roblox Creator Store, Toolbox, inventory, group, universe, package, model, UI, gameplay, plugin-like, and other third-party imported assets for malicious or risky scripts. Use whenever Claude imports, inserts, reviews, or trusts Creator Store assets, especially assets with Scripts, LocalScripts, ModuleScripts…
Skill Claude CodeCodex
Fill stored secrets (passwords, card numbers, API keys) into web pages through the secure-browser MCP server without ever seeing the secret values. Use when a task needs a login, checkout, payment form, or any credential entered into a website and the credentials live in a secret store rather than in the conversation.
Skill Claude CodeCodex
Builder-level security assessment methodology for web services. Use when performing security header audits, identifying exposed API keys, analyzing cookie behavior, checking CSRF protection, or compiling security reports for site owners.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: