18,930 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63
Skill Claude CodeCodex
Use when a project needs the OpenSpec + Superpowers sdd-tdd (spec-to-plan-to-TDD) workflow checked, installed, and configured -- or cleanly removed -- in any coding agent (Codex, Claude Code, Cursor, Antigravity, OpenCode, Gemini CLI, Copilot CLI, or others).
Skill Claude CodeCodex needs its repo
The user runs /vapt authz or this skill is triggered as part of Wave 3 during /vapt audit.
Skill Claude CodeCodex
Turn requirements into validated, executable plans. C31-brainstorm defines WHAT; C31-plan defines HOW — with coverage gates, wave analysis, and threat modeling.
Skill Claude CodeCodex
Bug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi — report templates, human tone guidelines, impact-first writing, CVSS 3.1 scoring, title formula, impact statement formula, severity decision guide, downgrade counters, pre-submit checklist. Use after validating a finding and before submitting. Never use…
Skill Claude CodeCodex
An MCP connection to Vaultwarden or Bitwarden, which are password managers for storing credentials and other secure fields.
CraigWilsonOZ/GitHub-CoPilot-BaseRepo
Skill Claude Code
Generates a Software Bill of Materials (SBOM.md) from the codebase for supply chain transparency.
Skill Claude CodeCodex needs its repo
7-layer AI security + ML detection for OpenClaw. Covers all 10 OWASP Agentic AI risks — prompt injection, tool misuse, memory poisoning, data exfiltration, and more — across ALL channels (Signal, Telegram, Discord, WhatsApp, web) simultaneously.
Skill Claude CodeCodex
This document teaches AI assistants how to effectively use the Ghidra MCP tools for binary analysis. Install it as context for your AI client.
AMATSUGI-120/plugin-health-auditor
Skill Codex
Audit Codex plugins, Agent Skills, hooks, scripts, and MCP configuration for always-on triggers, context overhead, recursive invocation, subagent amplification, instruction conflicts, risky commands, excessive capabilities, exposed secrets, and malformed manifests. Use only when the user explicitly asks to audit…
Skill Claude CodeCodex
Firefox browser MCP server for penetration testing — XSS detection, session manipulation, network capture, recon.
nidhish28guhan-netizen/hachiman-agent
Skill Claude CodeCodex needs its repo
Hachiman is a watchman that thinks like an attacker. On an authorized target it runs.
Skill Claude CodeCodex
Implement passwordless authentication in native Android/Kotlin applications using MojoAuth OIDC with AppAuth.
Skill Claude CodeCodex
Set up the Semgrep plugin by installing Semgrep, authenticating, and verifying compatibility.
Skill Claude CodeCodex
Forces the model to always use the mcp-security demo MCP server tools instead of native capabilities. Use this skill whenever the user is working in the mcp-security project and asks to read files, count lines, write files, check npm packages, inspect npm config, verify registry, or do any file/npm operation. This…
Skill Claude CodeCodex
Use this skill whenever you (the agent) need credentials, API keys, tokens, or access to an MCP/API — or when a connection fails with auth errors. ScopeGate is the credentials gateway: you never handle secret values; you request ephemeral capabilities instead. Also use it to onboard new services ("connect X", "add the…
Skill Claude CodeCodex
Vet MCP tools/list and local AI-agent tool configuration before attachment. Use to check tool poisoning, forced invocation, confusable tool names, unconstrained shell or code inputs, risky fetch-plus-privilege combinations, delegation exposure, or elevated-permission requests with a pinned offline static gate.
Skill Claude CodeCodex
Govern how AI agents access data through your organisation's Sealgate gateway. Use when you need to list governed MCP servers, review agent session and audit status, or check whether a tool call is allowed by policy.
Skill Claude CodeCodex
MCP server exposing pcapy-ng packet capture functionality.
Skill Claude CodeCodex
MCP server exposing full recon-ng OSINT framework functionality.
Skill Claude CodeCodex
Audit any MCP server for agent-readiness — get a 0–100 score across 10 checks with the exact fixes. Local-first, zero credentials.
Skill Claude CodeCodex
Verify AI-generated code before shipping. Run Umbra's Trust Score scan before committing or finishing any coding task, treat findings as blocking issues, and re-scan until clean. Use when finishing a task, before a commit, or when reviewing code written by an agent.
Skill Claude CodeCodex
Use this skill when an AI agent needs to act safely through oakallow, the runtime permission, approval, and audit layer for AI agent tool execution. Trigger it whenever you are about to take a tool action that could be risky, irreversible, or that touches another system, and you need to know whether it is allowed…
Skill Claude CodeCodex
Research npm packages with bundle size, vulnerability scanning, and download trends via MCP. Use when comparing or auditing packages.
Skill Claude CodeCodex
MCP server exposing python-nmap library for network scanning.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: