Security skills

mightbesaad/audit-event-mcp

Skill Claude CodeCodex

Run an 8-axis GDPR/AI-Act compliance audit against an @kajaril/audit-event-mcp event store.

psam-717/psamvault-mcp

Skill Claude CodeCodex

Use psamvault MCP server: credential vault, browser login, API key injection, .env secret protection. MCP tools keep secrets out of the agent's context window.

EzzySoft/mcp-surveys

Skill Claude CodeCodex

Use when an agent can run shell commands and needs secure short-lived human surveys. Secure E2EE via uvx is the default; plaintext is explicit opt-in only.

olaservo/dangerous-skills-mcp

Skill Claude Code

Audit local Docker images and running containers for hardening issues before deploy — privileged flags, root users, stale base images, missing resource limits. Use for pre-deploy container review.

jshsakura/mfa-servicenow-mcp

Skill Claude CodeCodex

Portal-specialized ServiceNow skills — LLM execution blueprints with safety gates, sub-agent delegation, and context optimization.

xtofuub/frida-mcp-server

Skill Claude CodeCodex

Reverse engineers iOS applications using Frida dynamic instrumentation to understand internal logic, extract encryption keys, bypass security controls, and discover hidden functionality without source code access. Use when performing authorized iOS penetration testing, analyzing proprietary protocols, understanding…

JesseGdotIO/hermesplant-mcp-server

Skill Codex

Gate consequential shell, Git, SQL, package, deployment, infrastructure, MCP, wallet, or x402 actions with Hermes Plant Agent Action Safety. Use before executing commands that mutate data, production, money, infrastructure, or shared history; require authorized external disclosure and route unmatched consequential…

M2M-Sentinel/m2m-sentinel-sdk

Skill Claude CodeCodex

Deterministic EVM bytecode capability observations, EIP-1967 proxy resolution, current gas-price telemetry, and sourced market observations for autonomous applications on Base (Chain ID 8453).

siaginw/HexWitness

Skill Claude CodeCodex

Investigate authorized binaries and runtime behavior with HexWitness's durable evidence MCP and optional Binary Ninja or IDA live tools. Use for function or class discovery, UUID and field mapping, protocol reconstruction, capture comparison, contradiction analysis, evidence-gap planning, and promotion of live…

AgentValet/AgentValet

Skill Claude CodeCodex

Routes all platform API calls through AgentValet's credential proxy. Your raw API keys and OAuth tokens are never exposed to this agent — AgentValet injects the correct credential per platform call.

Erodenn/fetch-guard

Skill Claude CodeCodex

LLM-ready web fetching — extracts clean markdown and metadata from URLs with prompt injection defense.

codepros100-dev/claude-windows-health-check

Skill Claude Code

Comprehensive Windows system health check, diagnostics, and remediation.

evgenii-studitskikh/Claude-Code-SaaS-Studio

Skill Claude Code

Review the current diff against path-scoped rules (secrets, RLS/tenant scoping, Stripe webhook verification, input validation, scope), flag changed code lacking tests, and run a quick security pass. Reports findings; nothing auto-fixed without approval.

Erkan3034/aegis

Skill Claude CodeCodex

Production-grade red-team security audit skill for AI coding assistants. Audits codebases for OWASP Top 10 vulnerabilities, auth flaws, IDOR, XSS, SSRF, JWT misuse, Supabase policies, and provides drop-in secure code replacements with zero exfiltration risk.

Nick2bad4u/SonarCloud-Skill

Skill Codex

Use this skill whenever the user needs SonarCloud or SonarQube issue and hotspot triage, measures, gates, profiles, settings, tags, or safe mutations with environment-variable tokens.

drmhse/authos_skill

Skill Codex

Integrate AuthOS into browser, React, Vue, or plain TypeScript applications using @drmhse/sso-sdk and the AuthOS React/Vue adapters. Use when adding OAuth redirects, password login, magic links, passkeys, MFA callback handling, token refresh, or frontend session state.

piyushptiwari1/mcpkernel

Skill Claude CodeCodex

AI agent security gateway — policy enforcement, taint tracking, tool poisoning detection, DLP chain analysis, and SARIF output for CI/CD.

adityaarsharma/perch

Skill Claude Code

Server intelligence layer for RunCloud-managed Linux servers. Use when the user mentions Perch, /perch, RunCloud, nginx-rc, server intelligence, server diagnosis, WordPress site auditing, plugin vulnerability scanning, or any time they want to investigate, monitor, or heal a server they own.

ewwhardik/nirikshak

Skill Claude CodeCodex

Use when the user wants a security/exposure check on a domain or website they own or are authorized to test — "audit my site", "what's my attack surface look like", "did anything change on my domain", etc. Drives the nirikshak MCP tools (fullsurfacescan, and the individual checks) and turns raw output into a…

bitatlas-group/bitatlas

Skill Claude CodeCodex

Secure zero-knowledge document vault for AI agents. Persistence for your secrets.

daedalus/mcp-pwntools

Skill Claude CodeCodex

MCP server exposing pwntools functionality for binary exploitation.

solsentry/solsentry-mcp

Skill Claude Code

Use this skill for post-deploy Solana threat intelligence — operator risk lookups, counterparty checks before CPI, post-incident drain tracing, deployment monitoring, token-launch readiness, and bot cluster graph exploration. Backed by SolSentry's live mainnet scanner (api.solsentry.app).

danstrem2/clawdbot-skill-master-pack

Skill Claude CodeCodex

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities.

alexmmatos/arthur-mcp

Skill Claude Code

Add or reuse a permission end-to-end (backend + frontend) for a new page, tab, endpoint, or protected action in Arthur MCP. Use whenever a feature introduces a new user-facing surface or protected action that needs a permission decision.