18,854 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63
Skill Claude CodeCodex
Add OAuth 2.0 PKCE authentication to a remote MCP server. Use this skill whenever the user wants to add authentication to an MCP server, protect MCP tools with OAuth, implement login flow for an MCP connector, add user auth to an MCP endpoint, or set up token-based access for MCP. Also triggers on: 'MCP OAuth', 'MCP…
Skill Claude Code
An AI-assisted workflow for investigating security alerts in a security operations center, or SOC—the team and systems that monitor an organisation for attacks. It can analyse alerts, investigate their origins, prepare response scripts, and record approved rules and reports.
Skill Claude CodeCodex
Run a structured codebase audit — map architecture, assess health (compliance / tests / docs), perform deep analysis (security / performance / code quality), and synthesize a prioritized roadmap. Use this skill when the user says things like 'audit the codebase', 'understand this project', 'find problems', '/audit'…
Bhanunamikaze/Code-VulnScan-Skill
Skill Claude CodeCodex
Use this when the user wants to find security vulnerabilities in a codebase, perform a security audit, scan for CVEs, detect secrets, review React/Next.js, Go, Java/Kotlin JVM, PHP, Ruby, .NET, or Rust web services, audit architecture/application/infrastructure flaws, review auth/API/crypto/business logic, check…
LeoKemp223/embedded-llm-guardrails
Skill Claude CodeCodex
Safety instructions for using an AI coding assistant in embedded projects, such as microcontroller, real-time operating system, driver, and board-support code. Embedded software runs on dedicated hardware, where mistakes can affect the device itself.
kcmadden/claude-code-1password-skill
Skill Claude CodeCodex
Integrate 1Password secrets management into Claude Code workflows. Use when the user wants to: store API keys or credentials in 1Password, read secrets from 1Password into scripts or config, set up .env files using 1Password secret references, rotate or update credentials, manage developer secrets across projects, use…
Skill Claude CodeCodex
Expert guide for the Osmedeus security automation workflow engine. Use when: (1) writing or editing YAML workflows (modules and flows), (2) running osmedeus CLI commands (scan, workflow management, installation, server), (3) configuring steps, runners, triggers, or template variables, (4) debugging workflow execution…
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A guide to reverse engineering, the practice of examining software to understand how it works, using tools such as radare2.
Skill Claude Code
Provides binary exploitation (pwn) techniques for CTF challenges. Use when exploiting buffer overflows, format strings, heap vulnerabilities (House of Orange, Spirit, Lore, Apple 2, Einherjar, tcache stashing unlink), race conditions, kernel bugs, ROP chains, ret2libc, ret2dlresolve, shellcode, GOT overwrite…
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit topic for unsafe deserialization. Deserialization turns stored or received data back into program objects, and unsafe handling can create security risks.
Skill Claude CodeCodex
Use when an agent must decide whether to proceed autonomously, ask for clarification, request approval, or select an appropriate verification scope for a coding or documentation task.
Skill Claude Code
Run HefestoAI before committing AI-generated code: pre-commit / CI quality gate for semantic drift, security, and reliability. Use when the user asks about Hefesto, code quality gates, semantic drift, install hooks, or validating Claude/Codex/Cursor output before commit.
Skill Claude CodeCodex
Intent-aware destination verification for AI agents. Use before an agent opens a URL to assess destination risk, confirm task alignment, and obtain an explicit ALLOW or DENY decision before navigation.
Skill Claude CodeCodex
Integrate SanctifAI Trust Proof-of-Human attestations. Use when an app needs cryptographic proof a human performed a task or human-in-the-loop verification.
Skill Claude CodeCodex
A review tool for deciding whether a coding-agent skill is safe and worthwhile to install. It checks for risky behavior and scores how precisely, effectively, and efficiently the skill works.
1181652815-hub/clean-windows-c-drive-skill
Skill Codex
Provide a standalone Simplified Chinese Windows app and CLI workflows to assess C: drive health, clean a fixed allowlist of regenerable junk, find large user files, detect exact duplicates with SHA-256, and relocate or recycle explicitly approved ordinary user files without breaking Windows or installed applications.…
kylebrodeur/1password-ssh-setup
Skill Claude CodeCodex
1Password CLI integration for managing secrets, API keys, and authentication. Use when working with 1Password in Linux/WSL/Windows environments. Supports Service Account authentication, Desktop App integration, and Session Token Caching.
Skill Claude CodeCodex
Guide for using openlens to review code. Triggers on: "review my code", "check for bugs", "security scan", "run openlens", "set up code review", "openlens".
Skill Claude CodeCodex
Name: capybara-nexus-v2 Tier: Frontier (Capybara-class) Mandate: Autonomous Reasoning, Empirical Feedback, & Zero-Day Research.
Skill Codex
Use when hardening npm package release workflows with trusted publishing, OIDC, GitHub environments, pinned GitHub Actions, disabled publish-path caching, Changesets release PRs, direct tag-based npm publish flows, staged publishing, or npm release-supply-chain reviews.
ArmisSecurity/armis-appsec-mcp
Skill Claude CodeCodex
On-demand AI-powered security scanning. Use when the user asks to scan code for vulnerabilities, run a security check, scan code for security issues, scan a file, scan a diff, scan staged changes, check for security issues, check for secrets, find hardcoded credentials, or run an appsec scan. Triggers: /security-scan…
PoulpYBifle/NCF-Coding-Best-Practices
Skill Claude CodeCodex
Patterns et regles backend/API/DB/securite pour projets Next.js + TypeScript. Utiliser des que l'utilisateur travaille sur une mutation, une query, une route API, une migration de base de donnees, de l'authentification, de la securite, des schemas Zod, de l'observabilite, ou toute logique serveur. Couvre : template…
Skill Claude Code
Review code for correctness, security, TypeScript quality, and performance. Run before any PR or deploy.
Skill Claude CodeCodex
Skill "android-auth-identity" from noloman/Android-AI-skills, covering android authentication & identity, hard rules, core patterns and references.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: