18,811 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63
Phaedra-Solutions/cursor-rules
Skill Claude CodeCodex
Vet a package before it is added to a project. Checks that it exists under the exact name (hallucination and typosquat check), its age, maintainers, downloads, source repository, ownership changes, install scripts, license and advisories, and whether existing code already covers the need. Returns approve, ask or…
smartbrainactivity/smartbrain-skill-auditor
Skill Claude CodeCodex
A universal, dependency-free Node.js tool to statically audit AI Skills and local agents for malicious patterns.
Olaradiallysymmetrical491/web3-bug-bounty-hunting-ai-skills
Skill Claude CodeCodex
Complete reference for all 10 DeFi smart contract bug classes. Use this when hunting for specific vulnerability types, need attack patterns for accounting desync, access control, incomplete path, off-by-one, oracle manipulation, ERC4626 vaults, reentrancy, flash loans, signature replay, or proxy/upgrade bugs.
Deep-Identity-Inc/agent-skills
Skill Codex
Identity verification, KYC, face liveness, deepfake detection, adverse media screening, and AML/sanctions checks via the deepidv API. Use when a user needs to verify someone's identity, check if media is AI-generated, screen for sanctions/PEP status, or run adverse media checks.
Skill Claude CodeCodex
Operate only in authorized scope: bug bounty targets explicitly in scope, owned systems, defensive reviews, or labs. Decline or pause on requests involving unauthorized access, stealth, persistence, service disruption, credential abuse, real data theft, or abuse of third-party systems.
Skill Claude CodeCodex
Validates Kubernetes manifests and Terraform configs against the DeployGuard policy ruleset. Acts as a senior reviewer: every violation explains why it matters and what to fix, not just what's wrong.
Skill Claude CodeCodex
OWASP API Security Top 10 (2023) with production Next.js App Router code. Access control, authentication with MFA and password reset, input validation (SQL, NoSQL and command injection), rate limiting and per-account login throttling, security headers and CSRF, data exposure, supply chain and startup env checks, SSRF…
Skill Claude CodeCodex
A pragmatic workflow taking a software project from idea to a secured, GitHub-ready repository, for beginners and vibecoders who want to ship without the usual mistakes. Runs five phases - ideate (have an idea, or get one suggested from the user's profile and current trends), plan (structure, file names, boilerplate…
ArcticWolfXZ/claude-codex-crypto-devkit
Skill Claude CodeCodex
When user runs /crypto-devkit:audit, check.
Skill Claude Code
Use this skill to perform a security audit, scan for vulnerabilities, check OWASP Top 10 issues, or review code for security problems. Triggered by "security audit", "check security", "find vulnerabilities".
mishoko/solidity-auditor-pulse
Skill Claude CodeCodex
Use when auditing Solidity contracts for security vulnerabilities. Trigger on "audit", "check this contract", "review for security", or "/contract-auditor".
Skill Claude CodeCodex
Configure rate limiting, manage auth secrets, set up CSRF protection, define trusted origins, secure sessions and cookies, encrypt OAuth tokens, track IP addresses, and implement audit logging for Better Auth. Use when users need to secure their auth setup, prevent brute force attacks, or harden a Better Auth…
Skill Claude Code
Share secrets securely using zKettle — a zero-knowledge, self-destructing secret sharing tool. Create, read, revoke, generate, and audit secrets via MCP tools. Secrets are encrypted client-side with AES-256-GCM; the server never sees plaintext. Use for credential sharing, API key rotation, temporary access grants, and…
Calvin-LLC/agentic-hardening-skill
Skill Claude CodeCodex
Evidence-driven codebase hardening. Audits the whole repo for security (OWASP Top 10:2025, plus the OWASP LLM Top 10:2026 and Agentic Top 10 when the repo uses a model or agent), supply chain, reliability, and tests. Every finding is quoted, scored by a severity matrix, and cited with file:line. Reports only and never…
Skill Claude CodeCodex
Comprehensive pre-release review combining code quality, security audit, and production readiness checks.
Baba01hacker666/gemini-redteam
Skill Claude CodeCodex
Expertise in offensive security research, vulnerability analysis, CMS-focused application testing, and red team operations.
Skill Claude CodeCodex
Teaches Claude Code how to write a production-safe PII redaction service for any project handling sensitive personal data — medical bills, insurance forms, financial documents, HR records, etc.
Skill Claude CodeCodex
Triage and review OSSM Jira CVE issues for the Kiali component. Two features - triage (find new CVEs, close inapplicable issues, create fix PRs for master and supported branches) and review (review fix PRs across branches, verify consistency and CI, approve, merge, update Jira). Use when the user mentions CVE triage…
Skill Claude Code
Unified security suite for agent workspaces. Installs, configures, and orchestrates all 11 OpenClaw security tools in one command — integrity, secrets, permissions, network, audit trail, signing, supply chain, credentials, injection defense, compliance, and incident response.
redhat-vmeperf/agent-tasks-template
Skill Claude Code
Review a markdown file for prompt injection, malicious content, and security issues before it is loaded as agent context. Returns PASS/FAIL with findings.
Skill Claude CodeCodex
OpsContext for AI Agents — the ops + compliance layer Claude Code can't grow natively. Read-only fleet visibility (PM2/nginx/Docker/git/cron) + tamper-evident hash-chained audit log producing evidence aligned with SOC 2 CC7.2 and ISO 27001 A.12.4.1 (evidence artifacts only — OpsContext itself is not certified; see…
Skill Claude CodeCodex
Secure homelab networking with Tailscale + self-hosted Hermes agents via the mcp-tailscale MCP server.
doteyeso-ops/mcp-server-vibes-coded
Skill Claude CodeCodex
Use before installing an untrusted SKILL.md, MCP plugin, package script, or agent installer. Buys a deterministic supply-chain risk report for $0.05 USDC through FiatDock.
Skill Claude CodeCodex
Use when operating VRChat MCP tools, especially auth, privacy-sensitive results, writes, stale cache, or resolving names to IDs.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: