18,930 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 505bug-bounty 236agent 230generative-ai 178LangChain 177autonomous-pentesting 176hacking 176skills 131claude-ai 104LLM 103agentic-ai 87ai-security 76openclaw 73agents 64
Skill Claude CodeCodex
Guides safe use of the PhishFort MCP server for client/user/document reads, incident lookup, triage, reporting, takedown or monitoring requests, evidence uploads, comments, webhook management, and webhook signature verification. Use when the user mentions PhishFort, phishing incidents, takedown workflows, monitoring…
Skill Claude CodeCodex
A skill for scanning content or project data for sensitive information, such as details that should not be exposed. Its description also covers when to use it, prerequisites, and a step-by-step workflow.
GangGreenTemperTatum/shodan-mcp-server
Skill Claude CodeCodex
Monitor and track organizational assets over time using Shodan. Use for continuous security monitoring, attack surface management, and change detection. Triggers on requests for "monitor assets", "track changes", "continuous monitoring", or "attack surface management".
Skill Claude CodeCodex
Verify the health of a skill's external dependencies before installing. Checks uptime, SSL, domain reputation, and blacklists. Returns a trust score and a clear install/block verdict.
Skill Claude CodeCodex
A security-testing guide for XXE, a flaw where an XML parser is tricked into reading files or making network requests. It covers XML inputs such as APIs, uploads, SOAP services, office documents, SVGs, and PDFs.
kkAlwaysAwaked/safety_fence_mcp
Skill Claude CodeCodex
A security boundary for OpenClaw that checks data before it leaves the local device. It allows safe data, can remove sensitive details when possible, and blocks dangerous secrets or data it cannot safely sanitize.
Skill Claude CodeCodex
Trigger Aegis security checks before generating security-relevant code.
Skill Claude CodeCodex
Review code or a skill bundle for the patterns that leak credentials and for least-privilege violations. This is a reasoning skill: it sharpens the agent's eye, and it needs no capabilities of its own.
Skill Claude CodeCodex
Build confidential smart contracts and dApps using Zama's fhEVM (Fully Homomorphic Encryption Virtual Machine). Covers encrypted types, FHE operations, access control, input proofs, decryption patterns, frontend integration, testing, and anti-patterns. Use this skill whenever the user wants to build with Zama…
LorenzoLombardi111/factory-mcpvet
Skill Claude CodeCodex
Vet an MCP server, Claude Code skill, or plugin for unsafe behavior (shell execution, secret access, data exfiltration, prompt injection, remote code) BEFORE installing it. Use whenever the user is about to add/install an MCP server, skill, or plugin, asks "is this safe to install", or pastes a GitHub repo / npm…
Skill Codex
Configure or troubleshoot LimaCharlie MCP auth, Vault storage, JWT refresh, key rotation, and UID/OID issues.
Skill Claude CodeCodex
Triage files, hashes, URLs, and alerts with AssemblyLine 4 via the assemblyline-mcp server. Use when the user asks to analyze/triage a sample, investigate a hash or IOC, assess an AssemblyLine alert, or decide if something is malicious. Requires the assemblyline-mcp MCP server to be connected.
Skill Claude CodeCodex
Use this skill when the user asks about dependencies, package upgrades, vulnerabilities, blast radius, or software supply chain security.
lobster-kit/mcp-server-lobstervault
Skill Claude CodeCodex
Encrypted secret storage for AI agents. Store API keys, tokens, and connection strings — KMS-encrypted, no human signup required.
Skill Claude CodeCodex
Use this skill when the user asks to document or audit an authorized Android APK with apk-docforge.
astroicers/security-weekly-mcp
Skill Claude CodeCodex
A workflow for maintaining a Taiwan-focused security glossary and producing weekly security reports. It supports Chinese-language term management, terminology checks, news collection, and report generation.
Skill Claude CodeCodex
One-click security audit for your MCP setup. Get a safety score, plain-English explanations, and fix recommendations.
Skill Claude CodeCodex
Fork, customize, deploy, or troubleshoot the Auth0 Who Am I MCP template as an Auth0 Custom Extension. Use when adapting this repository's MCP tools, publishing its generated Webtask artifacts, provisioning its Auth0 API resource server, promoting a domain-level connection, registering an MCP client, or connecting an…
Skill Claude CodeCodex
Advanced NixOS and Linux expertise for flake development, system debugging, packaging, security hardening, and innovative problem-solving. Triggers when working with NixOS configurations, Nix flakes, Linux system administration, debugging complex issues, building packages, compiler optimizations, security…
Skill Claude CodeCodex
Instructions for checking software-development compliance across pull requests, releases, and repositories. Compliance means testing whether work follows a chosen set of rules, such as SOC 2 or SLSA.
Skill Claude CodeCodex
Use when completing tasks, implementing major features, or before merging — routes code review to the appropriate specialist lens (STRIDE, OWASP, ATAM, TEMPORAL, CPT, MIGRATION, PRIVACY/SECRETS) based on detected signals, with Independent Judge for Tier 3.
Skill Claude CodeCodex
Find every account a username owns across 480+ platforms (OSINT username reconnaissance). Use when the user wants to investigate a handle, check someone's online footprint, verify an account, or do reconnaissance for AUTHORIZED security research. Returns the platforms where the handle exists plus a 0-100…
Skill Claude CodeCodex
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not…
Skill Claude CodeCodex
Tech/security research CLI for coding agents. Auto-invoke when the user asks to research, evaluate, compare, or monitor open source projects, libraries, CVEs, vulnerabilities, security advisories, GitHub repos, tech trends, Hacker News, or needs structured web research beyond a single URL fetch. Triggers: pesquisar…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: