18,778 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63
Skill Codex
Install or add requested npm or pnpm dependencies through SafeInstall's existing artifact-bound installation gate. Use when a user requests dependency installation, including development dependencies. Never use for arbitrary registry-code execution or to bypass a policy block.
Skill Codex
Safely investigate, install, and update dependencies in pnpm-managed JavaScript and TypeScript projects through Socket Firewall and release-age checks. Use for dependency upgrades, security remediation, dependency installation, or pnpm lockfile reviews. Audit-only requests remain read-only. Execution requires the…
Skill Codex
Request a one-off human approval through Sanction for an exact proposed tool action, or resume that same request after review. Use for explicit approval requests and synthetic approval tests, not ordinary tool discovery or usage reporting.
Skill Claude CodeCodex
Pre-ingestion zero-trust PII, secret, and regulated data sanitization skill for AI coding agents (Claude Code, Cursor, Codex, Gemini CLI, Windsurf) via @privacyscrubber/mcp-server. Intercepts files, shell commands, and prompts in local RAM with 30 specialized industry profiles and SHA-256 compliance receipts.
Skill Claude CodeCodex
Encrypted secrets vault for AI agents. Store API keys, tokens, and passwords encrypted at rest and resolve them at runtime over MCP so plaintext never appears in the conversation transcript. Use when an agent must store, retrieve, or sandbox secrets, generate TOTP codes, or share secrets.
gemini-cli-extensions/google-secops
Skill Claude CodeCodex
List recent SOAR cases. Use this for "list cases" or "show cases".
Skill Claude Code needs its repo
AI agent guardrails — defends prompts against injection attacks, jailbreaks, and evasion; scans LLM responses for leaked secrets and harmful content. Up to 36 inline defenses (24 default), 3 output scanners, and adaptive ranking. Keywords: shield, guardrails, prompt injection, defense, security, scan.
Skill Codex
Guard an autonomous agent's x402 payment with the live IntentFence service before it signs. Use when an agent receives a PAYMENT-REQUIRED challenge, is about to pay an x402 endpoint, needs to enforce a USDC price ceiling or payee allowlist, or needs signed evidence that an exact Base USDC quote was checked. Also use…
Skill Claude CodeCodex
Use when an OpenClaw-style or local autonomous computer-use agent needs a single Neura Relay preflight workflow for messages, file changes, browser submits, shell commands, package or publisher changes, workflow state, memory writes, or data exports before execution.
Skill Claude CodeCodex
Comprehensive code review with security, performance, and style analysis for Python, TypeScript, and Go. Detects OWASP Top 10 vulnerabilities, N+1 queries, race conditions, and logic errors before they reach production.
Skill Claude CodeCodex
Pre-checkout verification for shopping agents. Before transacting with any storefront the user didn't explicitly type, fetch Ed25519-signed merchant facts (domain age, TLS age, brand-lookalike score, price deviation) from the Onyx oracle over x402, verify the signature, and surface the facts to the buyer. Use whenever…
Skill Claude CodeCodex
An AI and MCP security scanner aligned with the OWASP MCP Top 10, a list of common risks for tool-connected AI systems. It checks for issues such as prompt injection, command injection, poisoned tools, leaked secrets, unsafe permissions, supply-chain attacks, SSRF, and banned Chinese-language content.
Skill Claude CodeCodex
Trust scoring, PII protection, and audit for OpenClaw agents. Strips personal data before it reaches the LLM. Blocks dangerous tools. Detects prompt injection. Audits everything.
Skill Claude CodeCodex
Verify wallets, tokens, smart contracts, AI agents and web applications before trusting them, paying per call in USDC over x402.
Skill Claude CodeCodex
Use when an action could cause material, hard-to-reverse harm to production, data, security, finances, users, or external systems.
Skill Claude CodeCodex
Expert Canadian GRC and cyber law advisor covering OSFI B-10/B-13/E-21/I-CRT, FSRA, AMF/Loi 25, BCFSA, CIRO, AER Reg 84/CSA Z246.1, PIPEDA, PHIPA, PIPA BC, PIPA AB, Bill C-26, and AIDA. Use this skill whenever the user mentions any Canadian financial regulator, provincial privacy law, Alberta energy security, Canadian…
Aidress-ai/aidress-skill-find-verified-code-generation-agent
Skill Claude CodeCodex
Find a Verified Code Generation Agent. Agent discovery, trust verification, and capability routing powered by Aidress — the coordination registry for autonomous AI agents. Use for software agent discovery, trust verification, and capability routing — via Aidress (https://api.aidress.ai).
softwareasg-tools/information-security-for-vibecoded-apps
Skill Claude CodeCodex
Autonomous security auditor for AI-generated applications. Provide a codebase path and it will automatically detect the stack, execute a comprehensive 12-phase security scan, identify vulnerabilities, and provide a production decision.
Skill Codex
Detection rules engineering skill for SIEM logic, alert design, telemetry mapping, tuning, and false-positive reduction.
Skill Claude Code
Parallel multi-agent code review using Agent Teams with 4 specialized reviewers. Spawns a coordinated team of security, performance, test coverage, and code quality agents. Teammates can share findings with each other for cross-domain insights. Produces unified report with severity-ranked findings saved to /output/.…
Skill Claude CodeCodex
Comprehensive reference for the VirusTotal API v3, covering authentication, rate limits, endpoint usage, and the critical differences between Free (Public) and Premium (Enterprise) tiers. Use this skill whenever a user asks about VirusTotal, VT API, scanning files or URLs with VirusTotal, threat intelligence lookups…
Skill Claude CodeCodex
Audit a vibe-coded or AI-generated SaaS for security and payment failures before it ships, focused on the Next.js + Supabase + Stripe stack. Use this whenever the user is about to deploy, launch, or "ship" a web app that handles authentication, user data, or payments. Trigger on phrases like "is my app secure", "can…
codeverbojan/claude-code-kickstart
Skill Claude Code
Enforces secure coding patterns for API routes, auth, input handling, and database queries. Triggered when writing server-side code, handling user input, or adding dependencies.
Skill Claude Code
Project-wide security rules for handling untrusted input, secrets, and database access.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: