18,855 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63
Skill Claude CodeCodex
Autonomous reverse engineering of compiled apps, binaries, APKs, firmware, and installers on macOS and Windows. Use when the user wants to analyze, decompile, inspect, or understand a binary — including PE/ELF/Mach-O executables, Android APKs, .NET assemblies, Java JARs, firmware blobs, and app bundles. Triggers on…
Skill Claude CodeCodex
Use when the user asks for a deep review, full review, comprehensive review, production readiness assessment, full audit, multi-domain audit, "security and reliability and code review", or "review everything". Also use when the user explicitly requests performance review alongside the comprehensive request (e.g.…
Skill Claude CodeCodex
Real SIM-card SMS verification for AI agents via VirtualSMS MCP server. TRIGGERS: SMS verification, OTP code, phone number, virtual number, SIM card, two-factor authentication, account verification, WhatsApp verify, Telegram verify, real SIM, agent phone, MCP SMS, virtualsms. Use when an agent needs to receive an SMS…
Skill Claude CodeCodex
Pseudonymises medical and clinical documents by replacing patient identifiers with labelled tokens (e.g. [PATIENTNAME1], [NHSNUMBER1], [DATEOFBIRTH1]) so the text can be safely processed by AI or shared, with clinical meaning intact. Combines a deterministic pattern layer (NHS numbers with Modulus-11 validation, UK…
Skill Claude CodeCodex
Source code security audits, SAST, dependency review. When findings are listed or audit ends, MUST chain to sentinel-report — read skills/sentinel/sentinel-report/SKILL.md, ask save folder, Write .md + offline .html. Triggers on audit, vulnerability, security review, 审计.
Automattic/claude-woocommerce-toolkit
Skill Claude CodeCodex
Comprehensive WooCommerce plugin development skill that enforces WordPress and WooCommerce coding standards, security best practices, and end-to-end testing for every file created. Use this skill whenever the user wants to create, scaffold, build, or start a WooCommerce plugin, WooCommerce extension, or WordPress…
Skill Claude CodeCodex
Audit and enable security-oriented Xcode build settings. Progressively enables compiler warnings, static analyzer checkers, and Enhanced Security features. Use when: user wants to secure their Xcode project, audit security settings, enable hardening, review security posture of build configuration, set up…
Skill Claude CodeCodex
This skill should be used when the user asks to "scan for PHI", "detect PII", "HIPAA compliance check", "audit for protected health information", "find sensitive healthcare data", "generate HIPAA audit report", "check code for PHI leakage", "scan logs for PHI", "check authentication on PHI endpoints", "scan FHIR…
Skill Claude CodeCodex
Amazon Cognito — Custom UI with Passkeys, Social Login & Face ID. Reference skill (loaded via skill:// from the ios agent).
mayurrathi/awesome-agent-skills
Skill Claude CodeCodex
Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities.
SHADOWPR0/security-bluebook-builder
Skill Claude CodeCodex
Create or refine a concise, normative security policy ("Blue Book") for sensitive applications. Use when users need a threat model, data classification rules, auth/session policy, logging and audit requirements, retention/deletion expectations, incident response, or security gates for apps handling PII/PHI/financial…
Cholulaa/claude-code-hardening-skill
Skill Claude Code
Complete security hardening of a Linux server based on CIS Benchmarks, NIST 800-123, and ANSSI BP-028. Smart service discovery to avoid disruption. 4 hardening levels (minimal/standard/enhanced/paranoid). Installs open-source security tools, hardens SSH/kernel/firewall/systemd/permissions, runs all scans, generates a…
Newmcpe/ida-reverse-engineering-skill
Skill Claude CodeCodex
Drive IDA Pro through the IDA Pro MCP like a senior reverse engineer: don't just narrate decompiler output, transform the database. Use this whenever the user is reverse engineering, analyzing malware, working a crackme or CTF, or doing binary/firmware analysis with IDA Pro over an MCP connection (mrexodia/ida-pro-mcp…
Skill Codex
A workflow for reconstructing calculations in web JavaScript from their final outputs, such as request parameters, cookies, headers, or WebSocket messages. It covers signatures, encryption, verification challenges, WebAssembly, and heavily obfuscated code.
Skill Claude CodeCodex
Playbook for Xray Suite scanner, crawlergo, and headless browser usage with safe request pacing.
Skill Claude CodeCodex
Detect insecure file upload vulnerabilities in a codebase using a three-phase approach: discovery (find all upload sites), batched verify (check extension bypass and related issues in parallel subagents, 3 sites each), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first).…
dayfinggg/openai-codex-agent-skills
Skill Claude CodeCodex
Inspect, filter, deduplicate, or validate existing SARIF results without claiming an unperformed source scan. Use when the task supplies or names .sarif files or static-analysis results in SARIF format.
Skill Claude CodeCodex
Evidence-driven application audit protocol for security, authorization, privacy, concurrency, state integrity, reliability, performance, accessibility, visual consistency, responsive behavior, and release readiness. Use for incremental checks, pre-merge review, pre-launch audits, high-stakes deep audits, AI-generated…
Skill Claude CodeCodex
Intentionally unsafe SkillGuard demo fixture.
Skill Claude CodeCodex
Audytuje bezpieczeństwo skilla, pluginu lub agenta Claude Code przed instalacją. Warstwa statyczna (heurystyki) plus subagent-audytor tylko do odczytu wykrywają prompt injection, kradzież sekretów, exfiltrację danych, obfuskację i persistence. Pozyskuje kod do izolowanego katalogu tymczasowego, nigdy bezpośrednio do…
Skill Claude CodeCodex
Manage Discord channel access for cursor-discord-channels — pairing, allowlists, trustedBots. Use when configuring the bridge or when the user asks about Discord bot access.
Skill Claude Code
Discover the best Claude Code extensions on the web AND tell the user how safe each one is before installing. Reads the user's Claude Code setup (project context, memory, history), asks a few questions to understand their goal (general or a specific idea), then surfaces a ranked shortlist - name, what it does, what…
Skill Claude CodeCodex
Elite manual security code review skill for deep, adversarial vulnerability hunting and exploit-chain discovery. Trigger when the user asks to: "do a deep security audit", "manual code review", "find exploit chains", "hunt for logic bugs", "red-team this codebase", "do an offensive security review", "review this like…
Skill Claude Code
Audit guardrails-kit compliance of the current session — run the transcript marker scorecard. Use when asked to audit compliance, check which guardrail rules fired or were missed, or score the session.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: