17,076 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 485bug-bounty 277agent 229generative-ai 179LangChain 176hacking 175autonomous-pentesting 135cloud-security 121skills 121claude-ai 118redteam 113LLM 108security-audit 105cors-exploitation 88
Skill Codex
Integrate AuthOS into browser, React, Vue, or plain TypeScript applications using @drmhse/sso-sdk and the AuthOS React/Vue adapters. Use when adding OAuth redirects, password login, magic links, passkeys, MFA callback handling, token refresh, or frontend session state.
Skill Claude CodeCodex
Turn requirements into validated, executable plans. C31-brainstorm defines WHAT; C31-plan defines HOW — with coverage gates, wave analysis, and threat modeling.
Skill Claude CodeCodex
Smart contract security audit — 10 DeFi bug classes (accounting desync, access control, incomplete path, off-by-one, oracle, ERC4626, reentrancy, flash loan, signature replay, proxy), pre-dive kill signals (TVL < $500K etc), Foundry PoC template, grep patterns for each class, and real Immunefi paid examples. Use for…
Skill Claude CodeCodex
An MCP connection to Vaultwarden or Bitwarden, which are password managers for storing credentials and other secure fields.
CraigWilsonOZ/GitHub-CoPilot-BaseRepo
Skill Claude Code
Generates a Software Bill of Materials (SBOM.md) from the codebase for supply chain transparency.
Skill Claude CodeCodex needs its repo
7-layer AI security + ML detection for OpenClaw. Covers all 10 OWASP Agentic AI risks — prompt injection, tool misuse, memory poisoning, data exfiltration, and more — across ALL channels (Signal, Telegram, Discord, WhatsApp, web) simultaneously.
Skill Claude CodeCodex
This document teaches AI assistants how to effectively use the Ghidra MCP tools for binary analysis. Install it as context for your AI client.
Skill Claude Code
Server intelligence layer for RunCloud-managed Linux servers. Use when the user mentions Perch, /perch, RunCloud, nginx-rc, server intelligence, server diagnosis, WordPress site auditing, plugin vulnerability scanning, or any time they want to investigate, monitor, or heal a server they own.
AMATSUGI-120/plugin-health-auditor
Skill Codex
Audit Codex plugins, Agent Skills, hooks, scripts, and MCP configuration for always-on triggers, context overhead, recursive invocation, subagent amplification, instruction conflicts, risky commands, excessive capabilities, exposed secrets, and malformed manifests. Use only when the user explicitly asks to audit…
Skill Claude CodeCodex
Firefox browser MCP server for penetration testing — XSS detection, session manipulation, network capture, recon.
nidhish28guhan-netizen/hachiman-agent
Skill Claude CodeCodex needs its repo
Hachiman is a watchman that thinks like an attacker. On an authorized target it runs.
Skill Claude CodeCodex
Secure zero-knowledge document vault for AI agents. Persistence for your secrets.
Skill Claude CodeCodex
Implement passwordless authentication in Go applications using MojoAuth OIDC Hosted Login Page.
Skill Claude CodeCodex
Set up the Semgrep plugin by installing Semgrep, authenticating, and verifying compatibility.
huuanh20/awesome-ai-agent-skills
Skill Claude Code
QA/QC agent. Reads ALL pipeline artifacts (BA + TechLead + PM + BE + FE + Tester) and produces quality-report.md, compliance-check.md, and sign-off.md. Declares Gate 3: Release Sign-off (advisory only — operator has final authority). Part of the Virtual Team Skill pipeline.
Skill Claude CodeCodex
Forces the model to always use the mcp-security demo MCP server tools instead of native capabilities. Use this skill whenever the user is working in the mcp-security project and asks to read files, count lines, write files, check npm packages, inspect npm config, verify registry, or do any file/npm operation. This…
Skill Claude CodeCodex
Govern how AI agents access data through your organisation's Sealgate gateway. Use when you need to list governed MCP servers, review agent session and audit status, or check whether a tool call is allowed by policy.
Skill Claude CodeCodex
Use this skill when an AI agent needs to act safely through oakallow, the runtime permission, approval, and audit layer for AI agent tool execution. Trigger it whenever you are about to take a tool action that could be risky, irreversible, or that touches another system, and you need to know whether it is allowed…
Skill Claude CodeCodex
Research npm packages with bundle size, vulnerability scanning, and download trends via MCP. Use when comparing or auditing packages.
Skill Claude CodeCodex
Use Airlock before installing or executing packages, running risky shell commands, committing generated code, or declaring an agent task complete. Airlock detects hallucinated/slopsquatted dependencies, destructive commands, leaked secrets, and suspicious test changes.
Skill Claude CodeCodex
Code Fixer subagent definition for the mcp2agy pipeline. This agent produces minimal, correct, testable fixes for verified security findings. Do NOT use this agent directly — it is invoked by the audit pipeline orchestrator.
mandelbro/awesome-claude-hooks
Skill Claude Code
Comprehensive GitHub code review with AI-powered swarm coordination.
Skill Claude CodeCodex
A cloud-based code quality and static analysis tool that automatically reviews code for bugs, security issues, and style violations, tracks coverage and quality metrics across languages, and integrates with CI/CD pipelines to help teams maintain high standards and reduce technical debt. Read and write Codacy data…
Little-H-lying-flat/72stack-sec
Skill Claude CodeCodex
A Chinese-language workflow for authorized security testing and bug bounty work, where researchers look for and report vulnerabilities in websites, applications, and cloud systems.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: