18,859 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63
Skill Claude CodeCodex
Comprehensive system check for Mastra AI agent projects. Validates configuration, agents, workflows, memory, tools, prompts, and security across 66 rules organized by priority. Use when setting up new projects, debugging issues, reviewing code, or preparing for production deployment.
Skill Claude CodeCodex
Not legal advice and not a compliance opinion. Israeli cybersecurity regulatory framework guidance covering INCD (Ma'arach HaSyber) national directives, Bank of Israel Directive 364, the consolidated IT, information security and cyber framework that took effect 18/05/2026 and repealed Directives 357, 361 and 363, plus…
smartchainark/skill-security-audit
Skill Claude CodeCodex
Detect malicious patterns in AI Agent skills — 13 detectors for backdoors, credential theft, data exfiltration, and supply-chain attacks. Based on SlowMist's ClawHub threat intelligence (472+ malicious skills). Pure Python, zero dependencies.
Skill Claude CodeCodex
Auth0 — identity platform: auth flows, Universal Login, SSO, identity providers, MFA, RBAC, Actions, tokens.
AI-Safeter/antigravity-cli-plugin
Skill Claude CodeCodex needs its repo
Master Electron desktop app development with secure IPC, contextIsolation, preload scripts, multi-process architecture, electron-builder packaging, code signing, and auto-update.
mollyretter/forward-deployed-engineer-toolkit
Skill Claude CodeCodex
Multi-agent panel review of a PR or current-branch diff. Three-model fan-out across Opus, Sonnet, and Haiku. Opus and Sonnet review for regressions, security issues, and bugs; Haiku reviews convention drift, naming, dead code, and comment quality. Discrete severity levels (nit, question, blocker). Sonnet confidence…
ibnsawad/Saudi-Regulatory-Compliance-Claude-Skill
Skill Claude CodeCodex
Senior cybersecurity, cloud, and data-protection compliance advisor for organisations in Saudi Arabia. Trigger for: NCA ECC-2:2024, CCC-2:2024, DCC-1:2022, CSCC-1:2019, OTCC-1:2022, TCC-1:2021, OSMACC-1:2021, CGEC-1:2019, CGESP-1:2019, NCS-1:2020; SAMA Cybersecurity/IT Governance/Business Continuity Frameworks; CST…
dinosn/security-knowledge-base
Skill Codex
Read, search, and inspect evidence in a Security Knowledge Base v1 repository, then validate or stage evidence-cited, revision-bound claim and finding proposals. Use when a task refers to a repository containing kb.json and the kb CLI, asks to check or update the security KB, or supplies an skb.context-packet/v1. Stop…
Skill Claude CodeCodex
Review the current diff against this team's conventions and invariants before it ships. Invoke with /prereview before opening a PR, or run as a pre-push gate.
1ikeadragon/awesome-offsec-claude
Skill Claude CodeCodex
Elite AI/LLM exploitation specialist - prompt injection, jailbreaking, agent exploitation, RAG poisoning, multi-modal attacks, model extraction, and system prompt leakage for CTF and red team engagements.
slartz/agent-security-awareness-training
Skill Claude CodeCodex
Mandatory security awareness onboarding for AI agents. Run this skill at the start of EVERY agent session, before performing any task — especially tasks involving tools, credentials, external content, email, file systems, cloud resources, or production systems. Also run it whenever the security policy file changes…
iceman1001/awesome_rfid_claude_skills
Skill Claude CodeCodex
Generate Frida hook scripts using modern Frida API. Activate when the user wants to write Frida scripts, hook functions at runtime, trace calls or arguments or return values, intercept native or ObjC or Java methods, dump memory or exports, or handle native module load timing for Android and other targets.
Skill Claude CodeCodex
MANDATORY pre-flight for ALL SQL operations. Fire this skill IMMEDIATELY whenever the conversation involves SQL of any kind — writing it, proposing it, executing it, reviewing it, or even talking about it concretely. Triggers include any of these keywords appearing in user input or your own draft output…
ArianHobson333/claude-bug-bounty-stack
Skill Claude CodeCodex
Curated index of external hacking resources — meta-lists, frameworks, wordlists, payload banks, recon/OSINT, network, exploitation, and CTF tooling. Load when the user asks "what's the tool for X", "where do I find payloads for Y", "is there a wordlist for Z", or when planning which external resource to pull for a…
CaseyLabs/kc-secure-repo-template
Skill Claude CodeCodex
Review or update GitHub repository hardening guidance and its Terraform implementation under config/infra, including rulesets, required checks, scanning, permissions, provider pins, and plan/apply safety. Do not use for ordinary app code, generic template adaptation, release integrity, or routine workflow validation.
Skill Claude CodeCodex
Scans extensions, skills, and code for security threats: prompt injection, malicious code, obfuscation, data exfiltration. Also scans inbound messages for injection patterns automatically.
Skill Claude CodeCodex
Execute privacy and sensitive leakage guarding before output. As long as context contains sensitive information, must trigger this skill even if user only requests explanation/summary. Default to downgrade expression for tool conclusions not multi-source verified.
Skill Claude CodeCodex
Use when operating the vigolium CLI for web vulnerability scanning, security testing, or traffic analysis. Covers planning a scan with --dry-run, scanning a URL/spec/raw request, watching and waiting on scans, running AI agent scans (autopilot, swarm, audit, query), triaging, verifying and marking findings, diffing…
Skill Claude Code
Multi-angle code review that adapts to what is being reviewed — a mid-flight worktree increment, a full PR before production, a merge-window integration sweep, or a security-only pass. Findings are scored, adversarially refuted, widened to the same defect elsewhere in the codebase, and reported to the native review…
Skill Claude CodeCodex needs its repo
Automatically scan any npm package for supply-chain security risks BEFORE the user installs it. Trigger this skill whenever the user asks to install, add, or upgrade an npm package or dependency (e.g. "npm install X", "install X", "add X as a dependency", "yarn add X", "pnpm add X", "upgrade X"), or wants to…
Skill Claude CodeCodex
Audit and enable security-oriented Xcode build settings. Progressively enables compiler warnings, static analyzer checkers, and Enhanced Security features. Use when: user wants to secure their Xcode project, audit security settings, enable hardening, review security posture of build configuration, set up…
thirdwatch-dev/scraping-skills
Skill Claude CodeCodex
Use when a site blocks your scraper and you need to get past it — 403 Forbidden on the first request, JS challenges, CAPTCHAs, Cloudflare Turnstile, DataDome, Akamai, PerimeterX, "Just a moment...", access denied, IP bans, or an empty/skeleton page where data should be. Covers diagnosing transient failures vs real…
Skill Claude CodeCodex
Use when reverse-engineering Android APKs on-device in Termux/Shizuku, including unpacking with apktool, inspecting with jadx/smali, patching manifests/resources/code, rebuilding, signing, installing, and iterating with the MCP shell.
Skill Claude CodeCodex
Row Level Security patterns for database operations. Use when writing any database query, creating API routes that access data, implementing webhooks that write to the database, or working with user data. This project uses direct pg (node-postgres) queries with raw SQL -- no ORM.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: