18,930 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63
Skill Claude CodeCodex
Use when creating, repairing, testing, or reviewing OpenGrep YAML rules, porting Semgrep rules, or modeling sources, sinks, sanitizers, and propagators. Apply procedural-first augmentation, claim-specific semantics, test-first fixtures, and false-positive/false-negative regression gates. Includes four complete…
Skill Claude CodeCodex
Use only when the user explicitly asks for a "Baseline Security" scan or audit of the codebase, or to create Jira stories from a Baseline Security audit. Do not use for a general security scan, vulnerability assessment, penetration test or code review that does not name Baseline Security.
Skill Claude CodeCodex
Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security audits, or pen tests. Run the complete workflow only for explicit codebase audit or pen-test requests, full/comprehensive/end-to-end…
Skill Claude CodeCodex
Step 3 of the surf-skill pipeline. Runs a card's demo task with the skill in a locked-down agy sandbox, checks the result with code and an AI reviewer, and writes run.json. Use when the surf-skill orchestrator launches the Run step for a card folder, or when asked to redo the run for one card.
TheArchitectit/agent-guardrails-template
Skill Claude CodeCodex
Topic-based content filtering to block harmful or unauthorized content in agent output.
YankielDBC2/saas-cybersecurity
Skill Codex
Audit and safely harden authorized SaaS web applications across frameworks and hosting providers. Use for OWASP-aligned reviews, runtime browser checks, HTTP headers, XSS/CSRF, access control, secrets, payments, uploads, privacy, abuse controls, supply-chain risk, link injection, or security remediation; do not use…
Skill Claude Code
Reviews code diffs after implementation, auto-fixes safe issues, and runs specialist security and architecture reviewers on large diffs. Also triages issues and PRs when the user mentions them. Not for exploring ideas or debugging.
Skill Claude CodeCodex
Pre-install security audit for agent skills on Base. Scans SKILL.md + manifest for prompt-injection and secret-exfiltration, audits referenced contracts (unlimited approvals, upgradeable owner, honeypot), and validates x402 endpoints. Returns a deterministic risk verdict (ALLOW/WARN/DENY) with evidence. Read-only…
coelhobugado/antigravity-browser-bridge
Skill Claude Code
Core agent-browser usage guide. Read this before running any agent-browser commands. Covers the snapshot-and-ref workflow, navigating pages, interacting with elements (click, fill, type, select), extracting text and data, taking screenshots, managing tabs, handling forms and auth, waiting for content, running multiple…
Skill Claude CodeCodex
Turn a project's FOSSA findings into NeuVector runtime controls and push them to the cluster. Two tracks — vulnerability findings become WAF sensors (regex-matched request inspection); license-conflict findings become a workload quarantine (network isolation / deploy hold). Use when asked to mitigate, compensate for…
rudimentall1/agentic-wallet-guardian-v3
Skill Claude CodeCodex
Use before executing any MetaMask Agent Wallet (mm CLI) command that moves funds or changes on-chain state — mm send, mm swap, mm bridge, mm perps open/modify/close, mm predict trade, mm earn supply/withdraw, mm aave borrow/repay, mm pay. Sends the proposed action to a self-hosted Agentic Wallet Guardian instance for…
Skill Codex
Verify whether an AI, automation, vendor, or agent claim represents a real external outcome rather than activity. Use before accepting claims such as completed, shipped, adopted, paid, hired, saved time, reduced cost, removed risk, fulfilled an obligation, or received a recipient response; when reviewing agent runs…
Skill Claude CodeCodex
Apply OpenMesha two-layer AgentFence (ingest scan + act gate) and HOTL escalation. Use when reviewing untrusted tool output, inbound messages, or irreversible/money-moving actions.
Skill Claude CodeCodex
Use when the user asks to create, generate, build, audit, fix, compile, or look up smart contracts and tokens. Pentagonal Clawd is a sovereign smart contract forge and token intelligence platform with AI-powered 8-agent security pen testing across Ethereum, Solana, Polygon, Base, Arbitrum, Optimism, and BSC.
Skill Claude CodeCodex
Digital content verification and deepfake detection. Verify text authenticity, detect AI-generated images, generate blockchain-anchored certificates.
Skill Claude CodeCodex
Use Weavatrix Online only for configured Cloud or self-hosted endpoint status, current dependency advisory refresh, bounded installed-package malware review, owner-managed architecture contracts, or explicitly approved source-free graph synchronization. Do not use it for ordinary local code analysis or refactoring.
Skill Claude CodeCodex
MCP server for Metasploit Framework via pymetasploit3.
Skill Claude CodeCodex
MCP server exposing Shodan API functionality.
Skill Claude CodeCodex
Validates actions, generates receipts, enables rollback.
gblinproject/gblin-treasury-risk-regime
Skill Claude CodeCodex
Use when an AI agent needs verifiable PROOF that it checked market risk before moving capital, or needs to verify such a proof from a counterparty/peer agent. Covers GBLIN Risk Attestations — perishable (10-minute), EIP-712-verifiable snapshots of the on-chain BTC/ETH risk regime that an agent mints, attaches to its…
Skill Claude CodeCodex
Verify an exact public GitHub Agent Skill commit before installation, optionally purchase fresh isolated evidence over x402, and validate the signed receipt plus live lifecycle status. Use before installing or activating an unfamiliar SKILL.md package, when prior evidence may be stale, or when policy requires…
Skill Claude Code
Lightweight AI security guard that intercepts risky install/download commands (npm, npx, pip, cargo, git clone) to block known malicious packages and scan for suspicious code. Invoke ONLY when user runs install/download/clone commands.
Skill Claude CodeCodex
Run Bumblebee supply-chain inventory and exposure scans on the local machine. Use this skill whenever the user wants to check developer endpoints for compromised npm/PyPI/Go/RubyGems/Composer packages, audit installed editor or browser extensions, inspect MCP host configs, or perform supply-chain incident response on…
ashray/claude-permissions-wizard
Skill Claude CodeCodex
Interactive wizard to configure Claude Code permission rules. Sets up granular allow/ask permissions so you can work without --dangerously-skip-permissions while keeping safety nets for destructive commands. Use when user says "configure permissions", "set up permissions", "permission settings", or "stop asking me for…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: