macaugh/super-rouge-hunter-skills
Skill Claude Code
Systematic approach to analyzing compiled binaries, understanding program behavior, and identifying vulnerabilities without source code access.
not rated 6 1y ago A 25 tokens
access
698Skill Claude Code
Manage WeChat channel access — edit allowlists and set DM policy. Use when the user asks to add/remove users, check who's allowed, or change policy.
not rated 6 yesterday A 34 tokens
original MIT
Skill Claude CodeCodex
CVE vulnerability lookup via NIST NVD, CISA KEV, EPSS scores, and MITRE ATT&CK. 7 tools for real-time cybersecurity intelligence.
not rated 6 7mo ago A 41 tokens
original MIT
agent-security
700olanokhin/agent-security-skill
Skill Codex
Use when reviewing or writing LLM, RAG, MCP, tool, or agent code for OWASP-aligned security issues; triggered by "owasp my code", "owasp this PR", AI security review, PR review, or changes to AI system code.
not rated 6
+1 4mo ago A 57 tokens
original MIT
srs-domain-recon
701MrCl0wnLab/Skill-SimpleReconSubdomain
Skill Claude CodeCodex
Coleta o máximo de informação (recon/OSINT) sobre um ou mais domínios usando a ferramenta local SimpleReconSubdomain, entregando a saída em JSON por domínio. Use SEMPRE que o usuário quiser investigar um domínio do ponto de vista de segurança — mesmo que diga só "investiga o domínio X" ou cole uma lista de domínios.…
not rated 6 4mo ago A 227 tokens
TheSethRose/Vulnerability-Scanning
Skill Claude CodeCodex
Local vulnerability scans: dependencies, secrets, GitHub Actions, SAST, SBOM, package intake, cron/predeploy.
not rated 6 5mo ago A 30 tokens
original MIT
pastewatch
703Skill Claude Code
Sensitive data scanner — deterministic detection and obfuscation for text content.
not rated 6
changed 15d ago B SkillSpector: warn 16 tokens
original MIT
aiguard
704zscaler/zguard-ai-integrations
Skill Claude Code
Scan prompts, AI responses, and code for security threats using Zscaler AI Guard. Supports 19 prompt detectors and 21 response detectors including: prompt injection, toxicity, DLP, PII, PII DeepScan, personal data, secrets, malicious URLs, code, gibberish, invisible text, brand risk, competition, language, legal…
not rated 6
+1 21d ago A 230 tokens
original MIT
qa-e2e-security
705Skill Codex needs its repo
Real-cluster security regression QA — backend auth enforcement, grant/session policy, gateway deny paths, audit emission, trust escalation, UI/API security headers, HTTPS redirect modes, and secret-leak scanning in live logs. Use when Codex is asked to verify a change did not regress auth, governance, gateway policy…
not rated 6
changed 1mo ago A SkillSpector: warn 116 tokens
original Apache-2.0
security-skill
706Skill Claude CodeCodex
A software security review based on South Korea’s KISA 2021 security weakness guide. It checks 69 design and implementation categories and labels each one as passed, vulnerable, needing review, or not applicable.
not rated 6 4mo ago A 0 tokens
original MIT
Skill Claude CodeCodex
When the user wants to analyze automotive requirements, check INCOSE/EARS compliance, review MISRA-C code, assess ADAS levels, or verify ISO 26262/AUTOSAR/SOTIF conformance. Also use when the user says 'check requirements', 'EARS check', 'INCOSE analysis', 'MISRA check', 'ASIL assessment', 'V-model check'…
not rated 6 6mo ago A 122 tokens
original MIT
rhombus-cli
708Skill Claude CodeCodex
Operate the Rhombus physical-security platform (cameras, access control, sensors, alerts, footage) from the terminal using the official rhombus CLI. Use when a task involves checking camera or device status, pulling alerts or events, reviewing or stitching footage, managing access control, or automating anything in a…
not rated 6
+1
changed 15d ago A 73 tokens
review-plan-v2
709Sierra-Code-Co/internal-speckit-template
Skill Claude Code
Pre-push gate for the current branch's diff. Runs review-plan-v2's deterministic analyzers (gitleaks, markdownlint, actionlint, shellcheck, ruff, structural) with --static-only, then the CodeRabbit CLI for the actual review. No API keys, nothing billed to you, and no diff leaves the machine on the first leg. The…
not rated 6
changed 2mo ago A 105 tokens
xsoar-pack-dev
710Skill Claude Code
Cortex XSOAR content pack development lifecycle - create packs, integrations, scripts, playbooks, run demisto-sdk lint/validate/pre-commit, build zip packs, manage versions and release notes, run unit tests, deploy to XSOAR instances, manage git branches/tags, handle marketplace vs local pack workflows. Use when the…
not rated 6 7mo ago D 95 tokens
original Apache-2.0
auth
711Skill Claude CodeCodex
Use when the user says something like "add login", "users need to sign in", "I want auth", "gate this behind a user account". The auth surface (login / signup / OAuth / sessions) is NOT something you build. Read this whole page before touching auth code.
not rated 6 3mo ago A 0 tokens
original Apache-2.0
kensho
712Skill Claude CodeCodex
KENSHO (検証) — industry-grade playbook for offensive Web3 security assessment and responsible disclosure, covering EVM smart contracts / DeFi and Rust/Solana consensus & validator code. Usable by individual researchers, audit teams, and security firms. Invoke when a target is named (project, handle, repo, or website)…
not rated 6
changed 2mo ago B 143 tokens
Skill Claude CodeCodex
Reverse engineering meta-cognitive activation engine. Manages attention allocation, noise suppression, task-mode routing, object typing, hypothesis branching, mental model switching, and analysis boundary judgment at a meta level. Use when performing reverse engineering, binary analysis, malware analysis, obfuscation…
not rated 6 3mo ago A 136 tokens
original MIT
wtf-approve
714Skill Claude CodeCodex
Use when presenting shell commands or tool calls for user approval. Adds a human-readable explanation of intent, scope, and risk before the approval prompt.
not rated 6 7mo ago C ✓ AI review 34 tokens
original MIT
bugbounty-01
715vigilantshield/Claude-HunterKit
Skill Claude CodeCodex
Complete bug bounty workflow: recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload…
not rated 6 3mo ago A ✓ AI review 156 tokens
sentinela
716Skill Claude CodeCodex
Realiza uma auditoria de segurança completa em um projeto de código (web, API, backend, mobile etc), cobrindo OWASP Top 10 e CWE, dependências desatualizadas com CVEs, segredos expostos (incluindo histórico do git), CORS, TLS/HSTS, rate limiting, WAF, autenticação e cookies, controle de acesso, exposição excessiva de…
not rated 6 2mo ago A 219 tokens
re-autopilot
717Skill Claude CodeCodex
An authorised reverse-engineering workflow for examining local software samples and recovering how they work. Reverse engineering means studying compiled or packaged software, such as an APK, ELF, PE, or firmware image, to infer its logic.
not rated 6 1mo ago A 140 tokens
strm-mapping
718austinsonger/GRC-Mapping-Analyst
Skill Codex
Use when asked to map, crosswalk, align, compare, or gap-analyze any two cybersecurity frameworks, control catalogs, or regulatory requirements using NIST IR 8477 Set-Theory Relationship Mapping (STRM). Triggers on terms like "map controls", "crosswalk", "framework alignment", "gap analysis", or producing a STRM CSV…
not rated 6 4mo ago A 79 tokens
auto-re
719Skill Codex
A command-line tool for static reverse engineering, which means examining compiled files without running them, including ELF, PE, Mach-O, object files, and identified shellcode.
not rated 6
changed 14d ago A 82 tokens
original MIT
envskill
720Skill Claude CodeCodex
Use when a command needs API keys or environment secrets. Inject only named variables through envskill without reading or printing values.
not rated 6 2mo ago A 27 tokens
original MIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: