Security skills

18,816 tagged Security, measured the same way as everything else here.

Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63

recon

793

blisspixel/recon

Skill Claude CodeCodex

Public-metadata domain intelligence - Microsoft 365 / Google Workspace tenant identification, email security configuration (DMARC, DKIM, SPF, MTA-STS, BIMI), SaaS fingerprinting from DNS, certificate-transparency findings, related-domain discovery. Use when a domain name appears alongside phrases like "what does use"…

not rated 5 changed 7d ago A SkillSpector: warn 124 tokens original Apache-2.0

break-risk-intel

794

c0urag1/break-risk-intel-skill

Skill Codex

An assistant for analysing intelligence about black- and grey-market abuse, such as fraud, account attacks, and dishonest automation.

not rated 5 5mo ago A 154 tokens

anonymix-mcp

795

Dbuzek/anonymix-mcp

Skill Claude CodeCodex

Anonymizuje české právní dokumenty (smlouvy, rozsudky, žaloby, znalecké posudky) před odesláním do Claude. Nahrazuje osobní údaje pseudonymy [OSOBA1], [IČO1] apod. Po zpracování Claudem deanonymizuje výsledek zpět do originálu.

not rated 5 7mo ago A 0 tokens

openfga

796

openfga/agent-skills

Skill Claude CodeCodex

OpenFGA authorization modeling best practices for defining types and relations, writing relationship tuples, deriving can permissions, applying type restrictions and usersets, and authoring .fga.yaml check/listobjects/listusers tests. Use when authoring, reviewing, or refactoring OpenFGA models, tuples, permissions…

not rated 5 27d ago A 101 tokens original Apache-2.0

access

797

piiiico/agentlair

Skill Claude Code

Manage AgentLair email channel access — edit sender allowlists and set policy. Use when the user asks to allow or block email senders, check who can reach them, or change access policy.

not rated 5 yesterday A 42 tokens original MIT

stealth-factory/skills

Skill Claude CodeCodex

A free DIY reimplementation of Vercel's $150/mo Advanced Deployment Protection add-on — all three features (Password Protection, private/prod deployments, Deployment Protection Exceptions) plus named automation bypass tokens — a middleware gate for ANY framework on Vercel (Next.js proxy, or…

not rated 5 changed 25d ago A 241 tokens original MIT

skill-audit

799

ondrej-merkun/skill-audit

Skill Claude Code

Scan installed agent skills, plugins, and cross-agent instruction files for prompt injection, exfiltration, malicious code, and dependency risk. Use when the user asks to audit, check, review, inventory, or verify skills for Claude Code, Codex, Cursor, Copilot, Gemini, or AGENTS.md-style project instructions.

not rated 5 +1 changed 4d ago A 70 tokens

crtvrffnrt/skills

Skill Claude CodeCodex

Static malware reverse-engineering and threat-intelligence triage for unknown files, Windows EXE/PE binaries, scripts, archives, ISOs, JavaScript, PowerShell, documents, and unpacked payloads. Use when a user provides a sample path, hash, filename, or file and asks whether it is malicious, benign, suspicious, contains…

not rated 5 +1 5d ago A 104 tokens

moltrust-mcp-server

801

MoltyCel/moltrust-mcp-server

Skill Claude CodeCodex

MCP server providing 45 tools for AI agent trust verification, identity, and reputation scoring.

not rated 5 +1 4d ago A 0 tokens original MIT

liarjsdev/liarjs-skills

Skill Claude Code

Audit a browser fingerprint for internal contradictions with the liarjs CLI - canvas, WebGL, WebGL2, WebGPU, audio, 220 fonts, WebRTC and timezone probes, scored against the TLS/HTTP/ASN view of the same request. Use when asked to run a browser fingerprint test, see what a fingerprint looks like, check canvas or WebGL…

not rated 5 3mo ago A Socket: passSnyk: pass 104 tokens original MIT

agent-guard

803

elliottwaves-20/agent-guard

Skill Claude CodeCodex

This is a multi-file skill: individual entry points intentionally implement only their documented role while the package provides the workflow as a whole. Scan AI agent skills, plugins, and MCP servers for malicious code BEFORE installation — catches prompt injection, credential theft, data exfiltration, and…

not rated 5 changed 6d ago C 430 tokens original MIT

iso-27001

804

grcwarlock/compliance-as-code

Skill Claude Code

Use when the user asks about ISO/IEC 27001:2022 from an engineering perspective — building an ISMS that runs on systems and code rather than spreadsheets, instrumenting Annex A controls, designing risk registers as data, and producing evidence pipelines that hold up to a certification audit. Engineer-voice, not…

not rated 5 6mo ago A 72 tokens original MIT

compliance-catalog

805

oscal-compass/agentic-agile-authoring

Skill Claude Code

Convert a compliance-document PDF (law, regulation, industry standard) into a validated OSCAL Catalog JSON. Use when the user wants to turn a compliance PDF into an OSCAL Catalog, ingest a new framework into the OSCAL ecosystem, or regenerate a catalog from a revised PDF while keeping control IDs stable.

not rated 5 changed 1mo ago A 66 tokens original Apache-2.0

twilio-communications

806

LiHongwei-cn/lihongwei-cn

Skill Claude CodeCodex

Build communication features with Twilio: SMS messaging, voice calls, WhatsApp Business API, and user verification (2FA). Covers the full spectrum from simple notifications to complex IVR systems and multi-channel authentication.

not rated 5 27d ago A 47 tokens original MIT

autonomous-build

807

bnet47/codexicon

Skill Claude CodeCodex needs its repo

Execute a local task register with requirement tracing, verification, review, and refinement.

not rated 5 changed 1mo ago A 20 tokens original MIT

scan-before-connect

808

AgentAvow/AgentAvow

Skill Codex

Check whether an MCP server, a published package, or a GitHub repo is safe to connect to or install. AgentAvow answers Safe to connect, Review before you connect, or Do not connect, with the reason, a signed 0-100 trust score and an adoption score. Use when the user asks whether a specific tool, package, repo, or MCP…

not rated 5 +1 changed 6d ago A 95 tokens

kyvault-ops

809

webkubor/kyvault

Skill Claude CodeCodex

A local encrypted vault for storing passwords, API keys, tokens, and other access details under account or key aliases. It can inject those values into a command’s environment without exposing the plain text to the AI.

not rated 4 changed 8d ago A 69 tokens original MIT

OutlineDriven/odin-gemini-cli-extension

Skill Claude Code

Install a Claude-Code PreToolUse hook that blocks destructive git commands (push variants including force-push, hard reset, force clean, branch -D, checkout/restore overwrites) before Bash runs them. Use when the user wants git safety rails, force-push prevention, or repository-wipe protection.

not rated 4 4mo ago B 71 tokens original Apache-2.0

piranha

811

Falcon-Forge/PiRanha

Skill Claude CodeCodex

Autonomous agentic bug bounty hunting framework v2.0. BugHunter orchestrator with state-machine-driven phases, credential vault, auth flow automation, intelligent skill routing, Burp MCP bridge, parallel agent execution, LLM/AI target track, configurable severity profiles, and live dashboard. USE WHEN bug bounty…

not rated 4 4mo ago D 107 tokens original MIT

cybersecurity-audit

812

cesschneider/cybersec-audit-skill

Skill Claude CodeCodex

Full-spectrum security audit for any project — SAST, DAST, SCA, secret scanning, IaC security, container hardening, IAM/RBAC review, threat modeling, and API security. Step-by-step investigation with context-gathering questions before scanning. Produces triage findings, autofix patches, and a structured report.

not rated 4 5mo ago C 74 tokens original MIT

quake

813

Rubby2001/quake-skills

Skill Claude CodeCodex

A guide for querying 360 Quake, a Chinese internet asset-mapping service that reports hosts, services, domains, and certificates.

not rated 4 7mo ago D 27 tokens original MIT

code-review

814

liubf21/ds-forge

Skill Claude Code

Review code changes for security, performance, and style issues.

not rated 4 2mo ago A 15 tokens original MIT

android-apk

815

MineRoma/nekocode

Skill Claude CodeCodex

Analyze APKs from manifest to native libraries, statically and with instrumentation.

not rated 4 2mo ago A 3 tokens GPL-3.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: