Security skills

MayDay-wpf/snow-cli

Skill Claude Code

A set of custom privacy rules for Snow CLI, using patterns such as regular expressions to redact or mask sensitive values in tool results.

hashgraph-online/hol-guard

Skill Claude CodeCodex

Run HOL Guard scanner and guard operations via uv run hol-guard. Use when the user asks to scan plugins/MCP/skills for security, quality, or ecosystem compliance, or when they ask to run guard detect/install/protect workflows for local AI harnesses.

H-mmer/pentest-agents

Skill Cursor

Hunting skill for Insecure Direct Object Reference / Broken Object Level Authorization (BOLA — OWASP API1:2023). Built from 1,117 public IDOR bug bounty reports across HackerOne, Bugcrowd, Intigriti, GitHub Security Advisories, Huntr, plus 2024-2026 meta verified against NVD — Sam Curry's automotive chain…

RuoJi6/audit-skills

Skill Claude CodeCodex

A skill for authorised, defensive security audits of Java, .NET, and PHP source code, deployed files, or decompiled software. It also covers related vulnerability checks and evidence collection.

agentscope-ai/OpenJudge

Skill Claude CodeCodex

Detect whether an API endpoint is backed by genuine Claude (not a wrapper, proxy, or impersonator) using 9 weighted rule-based checks that mirror the claude-verify project. Also extracts injected system prompts from providers that override Claude's identity. Fully self-contained — copy the code below and run, no extra…

SterlingChin/marvin-template

Skill Claude CodeCodex

Audit a software project for hardening — security, AI gaps, test coverage, code quality, and decoupling. Use when user wants to harden a project, audit for vulnerabilities, check test coverage, or separate private data from code.

SafeAI-Lab-X/ClawKeeper

Skill Claude Code

Fetch GitHub issues, spawn sub-agents to implement fixes and open PRs, then monitor and address PR review comments. Usage: /gh-issues [owner/repo] [--label bug] [--limit 5] [--milestone v1.0] [--assignee @me] [--fork user/repo] [--watch] [--interval 5] [--reviews-only] [--cron] [--dry-run] [--model glm-5]…

juicesharp/rpiv-mono

Skill Claude Code

Conduct comprehensive code reviews of pending changes, a branch, or a PR using parallel specialist agents that audit the diff, compare against peer code, and verify claims. Use when the user asks to 'review this', wants pending changes, a PR, a branch, or a diff reviewed, or asks for a code review. Produces review…

laramint/laravel-brain

Skill Claude CodeCodex

Analyze a Laravel application for complexity hotspots, security surface, and database access patterns using laravel-brain. Activate when: the user asks what needs work, what should be improved, what to work on next, where to focus, what is the most complex code, what are the security issues, audit the codebase…

s0ld13rr/pentestcode

Skill Claude CodeCodex

Android APK static analysis — OWASP Mobile Top 10, Retrofit API audit, transport security, smali reading, component export, auth flow analysis. Use when target is an APK/Android app. Triggers - APK, Android, mobile app, decompiled, smali, jadx, apktool.

3stoneBrother/code-audit

Skill Claude CodeCodex

Professional code security audit skill covering 55+ vulnerability types. Enhanced with WooYun 88,636 real-world vulnerability cases (2010-2016). This skill should be used when performing security audits, vulnerability scanning, penetration testing preparation, or code review for security issues. Supports 9 languages…

lingbol088-spec/5.6-JAILBREAK-NERV-codex-instruct-5.6

Skill Claude CodeCodex

A skill for making code harder to read and for reversing those changes. Obfuscation alters code structure or text without changing its intended behaviour.

toby-bridges/api-relay-audit

Skill Claude CodeCodex

Use when auditing third-party AI API relays, LLM proxies, gateways, or resale APIs locally before trusting coding, tool, or wallet-sensitive traffic; works with Cursor, OpenClaw, Hermes, and other skill-capable agents.

laolaoshiren/claude-code-skills-zh

Skill Claude CodeCodex

A read-only audit of a project’s third-party packages for known security issues, version health, and license facts. It uses the versions actually selected by lockfiles, which record the exact packages installed, rather than relying only on version ranges.

gmh5225/awesome-llvm-security

Skill Claude Code

Expertise in LLVM-based dynamic binary instrumentation, runtime tracing, and program monitoring. Use this skill when implementing runtime analysis tools, code coverage systems, profilers, or dynamic security monitors.

h5i-dev/h5i

Skill Claude CodeCodex

Skill "h5i" from h5i-dev/h5i, covering h5i, choose the workflow, build and verify and use the development tools.

superhq-ai/shuru

Skill Claude CodeCodex needs its repo

Run commands in an isolated Linux microVM sandbox using the shuru CLI. Use when the user asks to execute untrusted code, install packages safely, test in a clean environment, run Docker containers or a headless browser inside a VM, or needs Linux-specific tooling on macOS.

poshan0126/dotclaude

Skill Claude Code

Review code changes or a pull request. Delegates to specialist agents (code quality, security, performance, silent failures, test quality, docs) in parallel.

bodadotsh/npm-security-best-practices

Skill Claude CodeCodex

Prevent JavaScript/TypeScript projects from supply-chain attacks across package managers like npm, pnpm, yarn, bun, and deno. Use whenever planning, installing, updating dependencies or configuring package managers.

asdfgh1445/ctf-super-hub

Skill Claude Code

A cryptography skill for solving capture-the-flag challenges, which are security puzzles that require finding and exploiting weaknesses. It covers algorithms, attacks, mathematical techniques, and zero-knowledge proofs.

FrancescoStabile/numasec

Skill Claude CodeCodex

Digital forensics and incident response toolbox. Load when the operator asks about a pcap, a binary, a memory dump, a suspicious file, malware triage, IOC hunting, or post-incident analysis. Covers network (tshark), binaries (radare2, strings, binwalk, file, exiftool), memory (volatility), and pattern matching (YARA).…

rennf93/fastapi-guard

Skill Claude CodeCodex

Production-ready security middleware for FastAPI. Use when adding IP filtering, rate limiting, per-route security decorators, route-resolution strict mode, global behavior rules, passive/log-only mode, or Guard Agent SaaS telemetry to a FastAPI app. Covers SecurityMiddleware setup, SecurityConfig tuning, and the…

SeaOf0/dsh-redteam-model

Skill Claude CodeCodex

A penetration-testing playbook for examining authorized websites, applications, and services for real, verified security weaknesses.

Noelo-Lab/kuna

Skill Claude CodeCodex

Use the Kuna CLI to recover searchable C and assembly, trace program logic, and validate findings in CTF solving, vulnerability hunting, malware identification, and program repair. Covers using Kuna, not developing the decompiler.