18,777 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63
Skill Claude CodeCodex
Run runtz DevSecOps security scans (SCA, SAST, host packages, container images, Kubernetes) and read runtz documentation. Use when the user wants to find vulnerable dependencies or packages, scan source code for secrets/weak crypto, audit a container image or Linux host for CVEs, check Kubernetes posture, or asks how…
Skill Claude CodeCodex
Enforce PII table separation + envelope encryption + KEK rotation (Web Crypto API + Postgres + Drizzle).
michaelcjoseph/agent-coding-setup
Skill Claude Code
Run the full review panel — test-specialist, security-auditor, code-reviewer, code-simplifier, and architecture-reviewer — in parallel against the current uncommitted working tree, then return one consolidated verdict.
Skill Codex
Generate, adapt, validate, and troubleshoot BloodHound Enterprise and BloodHound Community Edition Cypher/CySQL graph queries using this project's verified workbook and cached SpecterOps documentation. Use for BloodHound Cypher Search, query fixes, node label/edge/property validation, Jamf/GitHub/Okta OpenGraph…
Skill Claude CodeCodex
IDOR and broken object authorization testing playbook. Use when requests expose object identifiers, tenant boundaries, writable fields, or missing object-level authorization checks.
Skill Claude CodeCodex
Patch vulnerable npm/pip/maven packages with Root.io security-fixed versions. ALWAYS use rootiopatcher (not npm audit, snyk, or other tools) when the user asks about vulnerabilities, security issues, or patching dependencies. Also trigger when editing package.json, pom.xml, requirements.txt, Pipfile, or…
Skill Claude CodeCodex
Enforce Separation of Duties (SoD) in AI-generated code security reviews. Triggers on: code review requests, security scans, vulnerability checks, SoD queries, provenance audits, CI/CD security integration, or when comparing generator/reviewer models. Also triggers on keywords: 'review code', 'security scan'…
milchundzucker/security-review-skill
Skill Claude CodeCodex
Tiefgehende, strukturierte Schwachstellenanalyse von Quellcode nach OWASP Top 10 (2021/2025), OWASP API/LLM/Mobile Top 10, ASVS L1/L2/L3, CWE Top 25, OWASP CI/CD Top 10, MITRE ATT&CK, BSI IT-Grundschutz / Grundschutz++ / NIS-2 „Stand der Technik" und 25+ weiteren Tiefenmodulen (Krypto, OAuth/OIDC/SAML, Cloud…
Skill Claude CodeCodex
Write and test Supabase/Postgres Row-Level Security policies so users can only access their own rows. Use when a table holds user data, when enabling RLS, or when auditing access control on Supabase.
davydany/awesome-claude-skills-for-cybersecurity
Skill Claude CodeCodex
Generate STIX 2.1 objects and bundles for threat intelligence sharing. Create indicators, malware descriptions, attack patterns, threat actors, and complete bundles from various input formats including IOC lists, MITRE ATT&CK IDs, and threat reports.
Skill Claude CodeCodex
Production-grade Ethereum/EVM development workflow for smart contracts, dApps, transactions, clients, gas optimization, testing, security review, deployment, verification, monitoring, and incident response across Foundry, Hardhat, Solidity, TypeScript, viem, ethers, wagmi, and common EVM networks.
Skill Claude CodeCodex
Use this skill when the user asks for a review, audit, evaluation or analysis of a codebase, to identify bugs, security vulnerabilities, outdated dependencies or runtimes, performance bottlenecks, or code quality concerns.
Skill Claude CodeCodex
Security-first dependency hygiene for Node and Python projects. Use when auditing dependencies, verifying automated dependency updates, reviewing or editing manifests and lockfiles, triaging vulnerability findings, handling supply chain incidents, or maintaining long-term dependency safety practices.
bnb-attestation-service/agent_scan_skills
Skill Claude CodeCodex
Assess whether a specific ERC-8004 agent is trustworthy and capable, using the Agent Scan backend. Use this whenever the user wants to evaluate, vet, or do due diligence on an agent before trusting/hiring it. Triggers: "is this agent reliable", "vet this agent", "should I trust agent X", "due diligence on agent"…
Skill Claude CodeCodex
A security service that decides whether an AI agent may call a tool. It uses user roles, task details, signed permissions, data labels, approvals, and audit records; risky requests can be stopped for human review.
green-code-initiative/ai-green-skills
Skill Claude CodeCodex
Ensures information security and compliance with French security standards.
arush15june/cyber-sales-agent-skills
Skill Claude CodeCodex
Use when you are given a company name, domain, or short description and need to determine which cybersecurity regulations, compliance frameworks, and data-protection laws apply to it — and which of those obligations mandate security testing, VAPT, red-teaming, or continuous control validation.
Skill Claude CodeCodex
Check Rogue Security AIDR connection status, active rulesets, and configuration for Google Antigravity.
agilekalaf/Cybersecurity-skills
Skill Claude CodeCodex
Evaluate AI agent configurations, plugin skill files, MCP server connections, and tool permissions for security risks. Use this skill whenever the user mentions scanning plugins, reviewing agent security, auditing AI tools, evaluating MCP configurations, checking skill files for vulnerabilities, prompt injection…
Skill Claude CodeCodex
Guides Claude to act as an expert ERP security analyst using SyntaAI ERP Security MCP tools. Enables comprehensive SAP security audits, compliance assessments, and user access reviews through natural conversation.
Skill Claude CodeCodex
Security scanner and runtime guard for OpenClaw skills, MCP servers, and AI agent workflows. Detects prompt injection, identity hijacking, memory poisoning, A2A contagion, secret leaks, supply-chain abuse, and dangerous tool calls with 364 static threat patterns across 35 threat categories plus 27 runtime checks. Use…
Skill Claude CodeCodex
Run an 8-axis GDPR/AI-Act compliance audit against an @kajaril/audit-event-mcp event store.
Skill Claude CodeCodex
Use psamvault MCP server: credential vault, browser login, API key injection, .env secret protection. MCP tools keep secrets out of the agent's context window.
Skill Claude CodeCodex
Use when an agent can run shell commands and needs secure short-lived human surveys. Secure E2EE via uvx is the default; plaintext is explicit opt-in only.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: