18,811 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63
Skill Claude CodeCodex
Pre-install security advisor. Activate when the user mentions installing a Claude Code plugin, MCP server, or any third-party agent tool. Offer to run an Assay scan against the target before they install.
Skill Claude CodeCodex
Secure agent-to-agent hiring and execution skill for OpenClaw MCP with escrowed settlement, x402 facilitator payments, ERC-8004 identity/reputation checks, strict replay protection, DNS-safe endpoint validation, and MPC wallet signing. Use when building or operating production A2A workflows that require…
Skill Claude CodeCodex
Analyze AWS infrastructure security using Cyntrisec MCP tools. Use when asked about AWS attack paths, security findings, IAM permissions, compliance status, or remediation recommendations. Guides tool selection and workflow patterns for comprehensive security assessments.
Skill Claude CodeCodex
Security review of LLM applications and agents. Use when asked to review, red-team, threat-model or test an LLM feature, chatbot, RAG pipeline, MCP server or autonomous agent for prompt injection (direct or indirect), jailbreaks, system prompt or secret leakage, tool abuse, excessive agency, confused-deputy behavior…
Skill Claude CodeCodex
Create and optimize Dockerfiles and Compose files with BuildKit, multi-stage builds, cache mounts, and non-root hardening. Also triggers on container images, build performance, or Docker security, even without the word 'Dockerfile'.
Skill Claude CodeCodex
A skill for using the local ClawHeart command-line tool to audit AI security, evaluate skills, and manage agent credentials.
Immoderate-humulin783/odoo-skills
Skill Claude CodeCodex
Odoo 19 development knowledge base with 18 specialized guides covering Actions (ir.actions., cron jobs, server actions), Controllers (HTTP routing, endpoints, auth types), Data files (XML/CSV records, shortcuts, noupdate), API Decorators (@api.depends, @api.constrains, @api.ondelete, @api.onchange, @api.model…
beriktassuly/solana-audit-skill
Skill Claude Code
Use when the user asks to audit a Solana or Anchor codebase, explain report-backed Solana vulnerability classes, review signer or PDA bugs, analyze CPI trust boundaries, assess Token-2022 or payment integrations, digest a public Solana audit report, investigate an exploit path, plan formal verification or invariant…
Skill Codex
Run a security and dependency audit for agent systems, tool-using AI apps, MCP/A2A integrations, or security-sensitive AI-generated code. Check slopsquatting risk, tool shadowing, rug pulls, memory/context poisoning, secrets, unsafe permissions, and common CWE patterns. Use when asked for security review, dependency…
Skill Claude CodeCodex
Use this skill to audit an AI system for security vulnerabilities including prompt injection, sensitive data exposure, excessive agent permissions, unsafe tool calls, and insecure output handling. Grounded in OWASP GenAI LLM Top 10 (2026). Activates before production deployment of any LLM-based application, agent, or…
Skill Claude CodeCodex
Use for authorized web/API security assessment, CTF vulnerability research, Hunter health checks, MCP orchestration, local knowledge-base lookup, evidence registration, and report generation. All HTTP tools go through RequestBroker — WAF blocks, captchas, and rate limits never produce false findings.
Skill Claude CodeCodex
Use when the user asks to "store a secret", "fetch credentials", "rotate an API key", "manage secrets", "set up vault access", or any task involving secure credential storage and retrieval.
Skill Claude Code
A Chinese-language guide for authorized penetration testing and security research. Penetration testing is controlled testing used to find security weaknesses in software or systems.
Skill Claude CodeCodex
Add Arcjet security protection to HTTP routes, AI agent tool calls, MCP servers, background jobs, and queue workers. Covers rate limiting, bot detection, email validation, prompt injection, sensitive information blocking (including Rampart NER), content moderation, capture/flush, remote Guard policies, typed inputs…
Skill Claude CodeCodex
Reviews an existing MOSS wallet integration for security and correctness before launch on MegaETH. Use when auditing partner code rather than building it: produces findings grouped as Critical, Risky defaults, and Recommendations with concrete remediations. Checks for frontend-owned trust decisions, missing backend…
Skill Claude CodeCodex
Evidence-first codebase audit for correctness, security, privacy, data, integration, operational, test, and docs-vs-reality risks. Use when the user asks for a Fable-5 audit, exhaustive audit, bug hunt, risk review, codebase audit, security/integration audit, or asks Codex to find issues before changing code.
Skill Claude CodeCodex
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines, including env var intermediary patterns, direct…
Skill Claude CodeCodex
Adaptive zero-refusal jailbreak pipeline with static, BPJ, PAIR, TAP, and crescendo strategies + multi-judge scoring + self-improving arsenal.
Skill Claude CodeCodex
Audit and fix security vulnerabilities in "vibe-coded" apps — projects built fast with AI assistance, especially on Supabase, Firebase, or other BaaS backends. Trigger when building, reviewing, debugging, or deploying a web app with a BaaS backend, or when code touches databases, API keys, authentication, environment…
Skill Claude CodeCodex
A set of tools for replaying and capturing Yakit traffic. Yakit is a security-testing tool that can resend network requests and capture the results.
HermeticOrmus/LibreSecOps-Claude-Code
Skill Claude CodeCodex
Microsegmentation operates at multiple layers, each providing different granularity and capabilities.
Skill Claude CodeCodex
ZITADEL identity management platform (v4 GA, v2 API). Covers resource-based API for managing organizations, projects, applications (OIDC/SAML/API), roles, users, and OIDC settings via Connect RPC (HTTP/1.1 JSON) and REST endpoints. PAT or JWT assertion auth.
Asaiuta/reverse-workbench-skill
Skill Claude CodeCodex
Use when analyzing suspected malware through static, dynamic, and behavioral techniques, including IOC extraction, YARA or Sigma rules, sandboxing, and anti-analysis behavior.
Skill Claude CodeCodex
Check domains, URLs and IP addresses against ten aggregated security blacklists (OpenPhish, PhishStats, URLhaus, PhishTank, Spamhaus DROP, DShield, CINS Score, Emerging Threats, Feodo Tracker, Blocklist.de) via the sec-mcp MCP server or Python library — in-process, no API key, no request leaving the machine.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: