18,838 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63
Skill Claude CodeCodex
Quickly audit the current project for obvious malicious or untrustworthy behavior so the user can decide whether it is safe to run, build, or install. This is a triage pass, not a full security review — aim for a dozen targeted checks, not an exhaustive audit.
sourav15mukherjee/skillforge-free-skills
Skill Claude CodeCodex
Scan project dependencies for known CVEs, outdated packages, and supply chain risks. Use when the user asks to audit dependencies, check for vulnerabilities, scan packages, run a security check on nodemodules, or wants to know if their dependencies are safe. Supports npm, pip, cargo, go mod, maven, gem, and nuget.
mh2-lee/everything-claude-code
Skill Claude CodeCodex
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
Skill Claude CodeCodex
Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload…
Skill Claude CodeCodex
Audits code for security vulnerabilities covering OWASP Top 10, dependency risks, and infrastructure misconfigurations.
Skill Claude Code
Comprehensive repository review covering code quality, security, performance, DevOps, and architecture. Use when asked to audit a repository, perform a full review, or analyze an entire codebase.
Skill Claude Code
Comprehensive GitHub repo analysis covering architecture, OWASP Top 10 security scanning (with file path + line number + fix), 4-dimension strategic value assessment (cost savings, efficiency, startup opportunities, community impact), auto-competitor discovery, and optional Traditional Chinese audio review via…
Skill Claude Code
End-to-end Arcium MPC development playbook (Jan 2026). Build privacy-preserving Solana programs using Arcium's Cerberus MPC protocol. Covers encrypted instructions (Arcis), three-instruction callback pattern, encryption/sealing, MXE configuration, offchain circuit storage, ArgBuilder patterns, and integration with…
Skill Claude Code
Methodical deep-dive IDOR/BFLA testing with encoding tricks, parameter manipulation, and context-dependent failure detection (e.g., /idorDeep swagger.json --from-apiTesting).
Skill Claude Code needs its repo
Whole-codebase code quality audit system with 9 specialized sub-skills covering security, SOLID principles, architecture, error handling, performance, test quality, code smells, design patterns, and framework best practices. Produces a scored health dashboard (0-100 per category), severity-rated findings (P0-P3) with…
Skill Claude CodeCodex
Audit AI agent skills for security vulnerabilities. Use when scanning installed skills against the OWASP Agentic Skills Top 10, checking skills before running them, gating CI/CD on skill safety, or generating audit reports (text, JSON, SARIF, HTML) for stakeholders.
Skill Claude CodeCodex
A security review method for an external coding-agent skill file. It looks for prompt injection, credential theft, unsafe code execution, misleading names, and social-engineering tactics before installation.
Skill Claude CodeCodex
Perform a security audit on code, checking for common vulnerabilities including injection, auth bypass, secrets leakage, and unsafe dependencies.
Skill Codex
CTF pwn solving workflow for Codex with tmux-CLI-driven persistent-GDB live debugging: protection checks, libc/loader matching, IDA or idalib reverse engineering, pwntools wrappers, mandatory GDB-pwndbg inferior-tty step debugging, heap/stack/libc state inspection, and exploit strategy selection by primitive, glibc…
Skill Claude CodeCodex
Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload…
hugomrtz/skill-vetting-clawhub
Skill Claude CodeCodex
Vet ClawHub skills before installation. Use when the user asks about evaluating, auditing, or safely installing OpenClaw/ClawHub skills, or when a skill’s trustworthiness is in question.
Skill Claude CodeCodex
Collect natural-language environment context and generate evidence collection guidance for Mandate 2.2.3 Secure Training and Fine-Tuning. Use when code is insufficient and operational proof is required for final compliance evaluation.
Skill Claude CodeCodex needs its repo
Business logic vulnerability playbook. Use when reasoning about workflows, race conditions, price manipulation, coupon abuse, state machines, and multi-step authorization gaps.
Skill Claude CodeCodex
Security patterns, auth approach, and what NOT to do in this codebase.
Skill Claude CodeCodex
Security auditor for agent skills. Scans SKILL.md files, scripts, hooks, and commands for prompt injection, data exfiltration, destructive operations, obfuscation, and permission overreach. Generates trust scores and hardening recommendations. Use before installing any community skill.
krshmbb/android-security-skill
Skill Claude CodeCodex
Comprehensive Android app security best practices from official Android documentation. Use when implementing features, reviewing security issues, handling sensitive data, or ensuring compliance with Android security guidelines.
Skill Claude CodeCodex
A meta-skill that automatically synthesizes a safe counterpart for any OpenClaw skill through a spec-driven, closed-loop safety engineering pipeline. Use when creating, auditing, or hardening skills. Implements threat modeling, specification generation, adversarial testing, and iterative refinement to produce a…
yanglittlecat/electron-client-security-audit
Skill Codex
A security-audit guide for Electron desktop applications, which are desktop programs built with web technologies. It focuses on vulnerabilities that ordinary users can trigger through projects, files, links, or other normal actions.
S-CClaw/openclaw-vulnerability-scanner
Skill Claude CodeCodex
Generates structured attack scenarios from Nuclei scan results (JSONL) by mapping CWE → CAPEC → ATT&CK and producing JSON output for dashboard visualization.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: