ekyc-suite
817Skill Claude CodeCodex
Skill "ekyc-suite" from wefi-ai/eKYC-Suite, covering ekyc suite, what is ekyc suite?, quick reference, external endpoints and security & privacy.
not rated 4 3mo ago A 694 tokens
original MIT
security-triage
818Skill Claude CodeCodex
Turn a large codebase into a short, ranked reading list of security-relevant code paths worth a human researcher's time, using the flyto-indexer MCP tools. Use when asked to find, prioritize, or triage potential vulnerabilities / taint flows / attack surface in a repository indexed (or indexable) by flyto-indexer …
not rated 4 17d ago A 105 tokens
original Apache-2.0
Skill Claude CodeCodex
Check this prompt or output against EU AI Act Article 5 and Article 50 rules and cite the article, via the ComplyEdge TrustLint MCP. Use when the user wants agent I/O checked and cited, not system classification, FRIA forms, or C2PA watermarking.
not rated 4
changed 4d ago A 70 tokens
original Apache-2.0
levelsofself/mcp-nervous-system
Skill Claude CodeCodex
Use this skill when building, managing, or auditing multi-agent AI systems. Provides governance patterns for behavioral enforcement, drift detection, audit trails, role management, and accountability across autonomous AI agents. Compatible with any orchestration framework.
not rated 4 3mo ago A 51 tokens
original MIT
Skill Claude Code
Backend security auditor for Django and DRF on an OWASP Top 10 (2025), API Security Top 10 (2023), and ASVS 5.0 foundation. Use when backend code is written or reviewed and touches authentication, sessions, cookies, JWT, OAuth2/OIDC, API keys, password hashing, permissions, access control, IDOR, SSRF, path traversal…
not rated 4
changed 12d ago B 262 tokens
original MIT
should-i-care
822Skill Claude CodeCodex
Single-CVE applicability triage that evaluates whether a CVE actually applies to the user's environment by reasoning about discriminating conditions against a skill-maintained environment profile; triggers when a user asks whether they are affected by a CVE, whether a CVE applies to them, or wants to assess a CVE…
not rated 4 5mo ago A 69 tokens
original MIT
astro-security
823Skill Claude CodeCodex
Astro security review — render-mode attack surface (SSG/SSR/hybrid), set:html and MDX content collections (XSS + author trust), API routes and middleware (auth, scope), adapter-specific runtime models (Cloudflare/Vercel/Netlify/Node), env-var hygiene (PUBLIC prefix), and Decap CMS pairing (OAuth backend, token…
not rated 4 5mo ago A 85 tokens
omv-find
824Skill Claude CodeCodex
Finds and ranks open-source packages worth auditing for passive CVE/VulDB research. Use when the user asks for vulnerability research targets, CVE hunting candidates, packages to audit, projects to fuzz, or /omv-find. Supports npm, Python, Go, Rust, Java, Ruby, PHP, C#, Swift, Dart, Elixir, Perl, R, and Lua, with…
not rated 4 2mo ago A 122 tokens
original MIT
token-antiflash
8250xlayerghost/solidity-agent-kit
Skill Claude CodeCodex
When this skill is triggered, DO NOT directly implement all strategies. Follow this workflow.
not rated 4
changed 17d ago A 91 tokens
original MIT
code-reviewer
826Skill Claude Code
Reviews code for quality, bugs, security, and best practices. Use when changing code or before merge. Checks security, authentication, and validation; ensures new code follows project rules and conventions.
not rated 4 3mo ago A 42 tokens
original MIT
ch015-verifier
827Skill Claude CodeCodex
Run CH015 adversarial verification workflows to independently validate security reports, recheck file-line evidence, find false positives, severity errors, missed findings, and dependencies.
not rated 4
changed 21d ago A 37 tokens
original MIT
adamoutler/joplin-server-vector-memory
Skill Claude CodeCodex
Run the skillsafe scan on the adamoutler/joplin-server-vector-memory package, then operate and improve/complete all issues identified. Use this when asked to scan or fix skillsafe issues.
not rated 4 5d ago A 45 tokens
original ISC
mcpvessel
829Skill Claude CodeCodex
Cage, run, and audit MCP servers with mcpvessel: install an MCP server into an isolated container, serve it to Claude Code, and watch what it does with the network and the user's secrets. Use this whenever the user mentions mcpvessel by name, or wants to add, install, set up, try, run, or sandbox an MCP server, or…
not rated 4 3mo ago A 152 tokens
original Apache-2.0
Skill Codex
Operate BurpSuite MCP Bridge for professional, authorized web testing. Use when Codex needs to inspect Burp live/history/logger/selection traffic, prioritize one target, retrieve a decisive request/response, intercept and edit a request or response before forwarding, replay one controlled mutation, manage temporary…
not rated 4 2d ago A 92 tokens
skillsync-mcp
831Skill Claude CodeCodex
Search, scan, install, and manage Claude Code skills with built-in security scanning. Every installation is gated behind a 60+ pattern threat scan.
not rated 4 yesterday A 0 tokens
original MIT
toolpermit
832sunhao123456sun-svg/toolpermit
Skill Codex
Install, configure, operate, and troubleshoot ToolPermit, the local-first permission policy, one-time approval, and redacted audit layer for MCP stdio tool calls. Use when Codex needs to protect or inspect an MCP server, wrap an MCP stdio command, create or review allow/ask/deny policies, manage approvals, replay…
not rated 4 3d ago A 100 tokens
original Apache-2.0
marq
833Skill Claude CodeCodex
Skill "marq" from rhaist/marq, covering marq — cyber assistant, start here — scope and domains, how to call a tool, discover tools and long-running scans.
not rated 4
changed 14d ago A 69 tokens
AGPL-3.0
secret-shuttle
834Skill Claude CodeCodex
Use when an AI coding agent must provision, inject, run, or rotate secrets without ever seeing their plaintext — you work with ss:// refs (like ss://stripe/prod/STRIPEWEBHOOKSECRET) while a local daemon resolves the real value at the last possible moment.
not rated 4 4mo ago A 60 tokens
original MIT
code-review
835Skill Claude CodeCodex
Use when reviewing a code change or diff for correctness, security, missing tests, and convention violations before opening or approving a PR. Review independently and adversarially, then fix high-confidence issues.
not rated 4
changed 26d ago A 42 tokens
original MIT
breachproof
836Skill Claude CodeCodex
Autonomous security audit and hardening that scans, exploits, fixes, and re-scans a codebase to zero findings, mapped to SOC 2.
not rated 4 3mo ago A 35 tokens
original Apache-2.0
git-gud-security
837Skill Claude Code
Audit any repo for security holes — a web/app project, a Claude skill, a Claude Code plugin, an MCP server, or an agent. Catches the glaring stuff (exposed servicerole keys, RLS off, committed .env, secrets in the client bundle, allow read,write: if true) and the subtle stuff (IDOR, SSRF, prompt injection in a…
not rated 4
changed 1mo ago A 281 tokens
original MIT
wp-review
838Skill Claude Code
WordPress theme and plugin review skill. Detects whether a target path is a theme or plugin, runs security and standards checks, scores the findings, and writes a markdown report. Use when the user wants to review a WordPress theme or plugin directory, generate a code review report, inspect WordPress security posture…
not rated 4 7mo ago A 76 tokens
original MIT
skillguard
839Skill Codex
A security-auditing skill for inspecting AI skills and plugins with static code analysis. Static analysis examines code without running it, while an abstract syntax tree represents its structure.
not rated 4 7mo ago A 44 tokens
skillguard
840Muhammad-Qasim-Munir/skillguard
Skill Claude CodeCodex
Review Claude/Cursor Skills for security issues (prompt injection, agentic/tool injection, data exfiltration, unsafe automation). Use when evaluating a Skill package/folder or SKILL.md + bundled scripts for risks like hidden instructions, tool misuse, credential theft, network exfil, destructive commands, and policy…
not rated 4 9mo ago C 90 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: