18,930 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 505bug-bounty 236agent 230generative-ai 178LangChain 177autonomous-pentesting 176hacking 176skills 131claude-ai 104LLM 103agentic-ai 87ai-security 76openclaw 73agents 64
madebyshun/blueagent-x402-services
Skill Claude CodeCodex
Security OS for autonomous agents and builders on Base. 31 pay-per-use tools across Quantum Security, Agent Safety, Research, Data, and Earn. Built for AI agents, Zero-Human Companies (ZHC), and Base ecosystem builders. Pay USDC per call via x402 protocol — no subscription, no API key needed.
adminmetavision-rgb/metavision-mcp
Skill Claude CodeCodex
Web3 AI platform with CVE security scanning, DeFi signals, market intelligence, and 3D generation. Use when: (1) searching CVE vulnerabilities in Web3/smart contracts, (2) getting live DeFi arbitrage signals on Base network, (3) checking wallet security and rug pull detection, (4) generating 3D models from text or…
Skill Claude CodeCodex
Use Airlock before installing or executing packages, running risky shell commands, committing generated code, or declaring an agent task complete. Airlock detects hallucinated/slopsquatted dependencies, destructive commands, leaked secrets, and suspicious test changes.
Skill Claude CodeCodex
Use when the user wants to access, look up, create, edit, or manage credentials, passwords, secrets, login entries, secure notes, TOTP/2FA codes, or vault items in their Vaultwarden / Bitwarden vault via the vaultwarden-mcp MCP server. Trigger whenever the user mentions passwords, credentials, logins, secrets, vault…
Skill Claude CodeCodex
Code Fixer subagent definition for the mcp2agy pipeline. This agent produces minimal, correct, testable fixes for verified security findings. Do NOT use this agent directly — it is invoked by the audit pipeline orchestrator.
Skill Claude CodeCodex
Use this skill BEFORE executing any install command - npm install, pip install, cargo add, docker pull, or installing IDE extensions (VS Code, Cursor, Windsurf, JetBrains). Triggers on requests to install, add, pull, or use a package, image, or extension - especially when the name was suggested by an AI or pulled from…
Skill Claude CodeCodex
MCP server exposing cryptography library functionality including encryption, hashing, and key derivation.
Skill Claude CodeCodex
MCP server for ECDSA cryptography operations.
Skill Claude CodeCodex
MCP server exposing hashlib functionality.
mandelbro/awesome-claude-hooks
Skill Claude Code
Comprehensive GitHub code review with AI-powered swarm coordination.
8dp6brm9hp-svg/lion-mcp-public
Skill Claude CodeCodex
Before your agent sends USDC to an x402 payTo, screen that address with LION's $0.001 OFAC wallet screen. PASS proceeds. WARN or BLOCK aborts. The same wallet again is the $0.01 recheck. GO proceeds. HOLD or STOP aborts.
Skill Claude CodeCodex
Fetch public web pages safely through the safe-fetch MCP server's fetchurl tool. Use whenever you need the content of a URL (docs, articles, READMEs, feeds, JSON APIs). Covers paging long pages, handling refusals and errors, and treating fetched text as untrusted data.
Skill Claude CodeCodex
Develop and maintain the ArchiveBox connector while preserving its governed API actions, web-source contract, credential boundary, package resources, and public-first release evidence.
Little-H-lying-flat/72stack-sec
Skill Claude CodeCodex
A Chinese-language workflow for authorized security testing and bug bounty work, where researchers look for and report vulnerabilities in websites, applications, and cloud systems.
Skill Claude CodeCodex
Onchain security scanner on Robinhood Chain — scan token approvals, detect honeypots, analyze contracts for rugpull indicators, check liquidity locks, and score contract safety. Use when a user asks an agent to evaluate, scan, or check a token or wallet before trading, swapping, signing an approval, or investing. 18…
Skill Claude CodeCodex
Discover x402 callables then check the seller BEFORE paying. Free resource join (GET /v1/intel/resources) lists listed|live402 claims; free preflight returns a ReadinessCard (allow / warn / block) from the observed Solana and Base x402 corpus. Composes with any x402 payer skill: discover → merchantcard wash refuse →…
ck3938700-ship-it/anjian-agent
Skill Claude CodeCodex
Use AnJian MCP tools for an authorization-gated website security assessment and Chinese report.
celticht32/Enterprise-Analytics-MCP
Skill Claude CodeCodex
Use this skill when the user wants to manage Couchbase users, groups, roles, or check permissions on the cluster — creating service accounts, rotating passwords, granting analytics privileges, or auditing who can do what. Trigger when they mention "user", "group", "role", "RBAC", "permission", "upsertuser"…
Skill Claude CodeCodex
Methodology and playbook for authorized cloud, API and web-application penetration testing driven through the MCP Kali Server. Use when the user wants to plan or run a pentest engagement against cloud/API/web targets, perform reconnaissance, service enumeration or exploitation via the Kali MCP tools, or wants guidance…
Skill Claude Code
Autonomous HackerOne bug bounty hunting system. For authorized security testing only.
Skill Claude Code
Use for non-trivial engineering work with a junior/early-career engineer — new features, unclear bugs, design decisions, PR reviews, postmortems (after an incident is resolved), or estimates. Turns the task into a guided learning exercise instead of handing over finished code. Applies alongside any other…
cx-anand-nandeshwar/security-dlp-mcp
Skill Claude CodeCodex
Scan content for data loss prevention violations using the DLP DLP MCP server.
Skill Codex
Diagnose why an inbound webhook signature fails to verify, and write correct verification code for a named provider. Use when a signature check rejects real traffic, when a webhook works in a provider's test console but not against your server, or when you are implementing verification for Stripe, GitHub, Shopify…
Skill Claude CodeCodex
Runs a Checkmarx SCA (Software Composition Analysis / OSS) scan on dependency manifests and lockfiles to detect vulnerable and malicious open-source packages, and remediates findings using the Checkmarx MCP tool. Use when a user asks to scan dependencies, check packages, audit a manifest/lockfile (package.json…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: