18,821 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63
Skill Claude CodeCodex
A decision framework for judging whether university work materials are safe to put into AI services. It classifies information as public, university-only, or confidential, including file metadata, EXIF data, OCR risks, and information saved in AI workspace settings.
Diffuzmetall/security-hardening-skill
Skill Claude CodeCodex
Comprehensive security audit and hardening checklist for VPS servers, WordPress sites, and Next.js applications. Covers SSH hardening, firewall configuration, fail2ban, CrowdSec, kernel sysctl, Docker security, SSL/TLS, WAF, OWASP Top 10, headers, secrets management, backups, and incident response. Use this skill…
Skill Claude CodeCodex needs its repo
Read and apply this skill whenever you are helping a user build a non-custodial crypto wallet or wallet-related application and the conversation touches any of the following.
Skill Claude CodeCodex
Use before committing to the public CTObot repo to catch company-specific or proprietary content that has drifted into the public files (AGENTS.md, SOUL.md, docs/, skills/, README). The agent reads the diff (or all files) and reasons about whether the content is generic and shareable or specific to our company…
Skill Claude CodeCodex
Scans Claude Code skills for security risks before installation. Checks for prompt injection, credential harvesting, exfiltration patterns, hooks, excessive permissions, and settings modification. Supports GitHub URLs, local paths, and bulk scanning. Use when asked to audit, scan, or check a skill for malware or…
chenxihuang1028-a11y/variant-analysis
Skill Codex
Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, analyzing security vulnerabilities, or performing systematic code audits after finding an initial issue.
yanis7774/mac-security-audit-skill
Skill Claude CodeCodex
Run a comprehensive READ-ONLY macOS security audit and triage the findings. Checks open/listening ports and external exposure, firewall + stealth, SSH and remote access (Screen Sharing, ARD), VPN/tunnels (Tailscale, WireGuard, reverse SSH), persistence (LaunchAgents/Daemons, cron, login hooks, shell rc, BTM /…
Skill Claude CodeCodex
VirusTotal antivirus and active protection for OpenClaw: file/hash lookup, background scanning with policy-controlled uploads, command inspection and blocking, and quarantine of malicious auto-scan results. Use for file threat analysis or an explicit request to manage these protections. Includes persistent…
Skill Claude Code
Use when writing or reviewing code that crosses a trust boundary (user input, external APIs, file/network/DB I/O) — guards against invalid input, injection, unsafe failure modes, and missing validation at the edges without over-defending internal code.
dungnotnull/dex-market-manipulation-detector-agent-skill
Skill Claude CodeCodex
This document serves as the authoritative registry for all skills in the dex-market-manipulation-detector harness. It documents how skills are registered, resolved, executed, and validated, including input/output JSON schemas for runtime validation and automatic documentation generation.
Skill Claude CodeCodex
Lord skill for governing AI coding agents at runtime — gateway interception, agent/flow/model allowlisting, and MCP-server-as-securable. The control layer between an agent's decision and its real-world action.
get-convex/convex-codex-plugin
Skill Claude CodeCodex
Audit and harden a Convex app's authorization: identity-from-arg impersonation, missing per-document ownership checks, and public queries leaking PII/financial data by a client-supplied id — the single largest real-defect cluster measured against generated Convex backends (44 of 214). Runs a deterministic scan for the…
mumuchongchongchong/security-skills
Skill Codex
Offline reconstruction and security audit of agent execution traces from JSON, JSONL, or pasted logs. Use when Codex needs to review user input, model planning, tool calls, tool results, approvals, and final answers for prompt injection, unauthorized tools, secret exposure, missing approval, repeated-call loops, or…
jiluojiluo/agent-skill-sandbox-configurator
Skill Claude CodeCodex
A setup tool for running an agent skill inside an OpenSandbox isolation environment. It examines the skill and creates the files needed to build and use a Docker-based sandbox.
Skill Claude CodeCodex
Analyze JSON Web Tokens (JWTs) for common security vulnerabilities including algorithm confusion attacks (RS256 to HS256), none algorithm bypass, weak secret brute-forcing, and claim manipulation. Practice in isolated lab environments to understand authentication bypass and privilege escalation via token forgery.
newcore-network/opencore-ai-skills
Skill Claude CodeCodex
OpenCore framework best practices - bootstrap, controllers, imports, security, events, type generation, adapters, validation, runtime constraints. Use this skill when writing, reviewing, refactoring, or explaining code built with @open-core/framework and related OpenCore adapters. Trigger on any question about…
Skill Claude CodeCodex
Intelligent code security scanner with hybrid local-cloud detection. Fingerprints packages, runs static behavioral analysis, and consults cloud threat intelligence (enabled by default, can be disabled) for confidence scoring.
g-greatdevaks/mcp-dev-summit-blr-2026
Skill Claude CodeCodex
Detects data exfiltration, lateral movement, and crypto-mining anomalies from ExamplePay observability signals (logs, metrics, traces). Returns a structured ThreatSignal with a confidence score (0.0–1.0).
Skill Claude CodeCodex
Network scanning MCP server wrapping nmap. Provides 14 purpose-built tools for host discovery, port scanning (SYN/TCP/UDP), service & OS detection, NSE script execution, and vulnerability scanning. Returns structured JSON output. Includes scope enforcement (CIDR allowlist), audit logging, and scan persistence. Use…
jonnybottles/patch-tuesday-mcp
Skill Claude CodeCodex
Monthly Patch Tuesday identity/security triage using the single msrcsearch tool with product watchlists.
Skill Claude Code
Cryptography CTF attacks: RSA, AES, ECC, PRNG, hash length-extension, padding oracles, lattice/LWE/CVP, HNP, Coppersmith, Pollard, Wiener, ZKP/Circom/halo2, post-quantum KEM. Dispatch on prime shape, oracle type, or scheme artefact.
Skill Claude CodeCodex
Clerk authentication integration for Astro/Next.js. Use when implementing authentication, handling Clerk middleware, testing with Playwright, or debugging auth issues. Trigger phrases include "Clerk auth", "sign in", "authentication", "middleware", "E2E testing with Clerk".
Skill Claude CodeCodex
Code-quality gate and coding guardrail for AI coding agents. Always invoke when you finish editing and prepare to hand control back, even if the user did not explicitly ask. Trigger on commit, push, PR, or phrases like any slop, remove slop, review my code, run aislop, or score my code. Scans with aislop, fixes what…
Skill Claude CodeCodex
Use when querying or changing Drata/GRC data through the drata CLI, including compliance status, frameworks, certificates, Trust Center documents, controls, monitoring tests, evidence, risks, vendors, policies, personnel compliance, and background-check questions. Prefer versionless CLI commands, JSON output…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: