Security skills

18,930 tagged Security, measured the same way as everything else here.

Browse within: cybersecurity 505bug-bounty 236agent 230generative-ai 178LangChain 177autonomous-pentesting 176hacking 176skills 131claude-ai 104LLM 103agentic-ai 87ai-security 76openclaw 73agents 64

airlock

1177

ByJH/airlock

Skill Claude CodeCodex

Gate an agent extension before you install it. Audits a skill, MCP server, or tool repo and returns allow, quarantine, or block with line-level evidence.

not rated 0 4mo ago A 36 tokens original MIT

alex-jb/shadow-perception-mcp

Skill Claude CodeCodex

Pre-submit council for trading tickets. Five voices review a JSON trade ticket for Kelly-cap compliance, missing stop-loss, sector or single-name concentration limits, fat-finger qty (10× typical = BLOCK, Knight Capital 2012 lesson), and Reg BI Care Obligation on retirement accounts. Returns SHIP / REWORK / BLOCK…

not rated 0 3mo ago A 99 tokens original MIT

opencti-usage

1179

Space-C0wboy/OpenCTI-MCP-Server

Skill Claude CodeCodex

Use when working with the OpenCTI threat-intelligence platform via the opencti MCP tools — explains OpenCTI's STIX data model, entity types, indicators vs observables, relationships, containers, TLP markings, confidence, connectors/ingestion, and RBAC, and maps each concept to the right MCP tool. Load before creating…

not rated 0 today A 91 tokens original MIT

owasp-guide-research

1180

sunick2009/mcp-owasp-pentesting-guide

Skill Claude CodeCodex

Query versioned OWASP testing guides through the Pentest Guide MCP for research, comparison, applicability analysis, and candidate test planning.

not rated 0 1mo ago A 32 tokens original Apache-2.0

kasra-code-review

1181

yuanjianking/kasra-mcp

Skill Claude CodeCodex

🔒 Perform deep security review of the current code repository using the Kasra security engine (direct SDK or MCP).

not rated 0 3mo ago A 28 tokens original MIT

codepecker-code-review

1182

Abdul4code/CodePecker

Skill Claude CodeCodex

Review a code change for security, standards, production-readiness, and sustainability issues against a governed rule corpus, citing the rule ID and verbatim evidence for each finding. Use when reviewing, hardening, or pre-flighting code before it merges — especially AI-generated code.

not rated 0 3mo ago A 61 tokens

free2pa-protect-agent

1187

kilroyblockchain/free2pa-devtool

Skill Codex

Add Free2PA provenance and local trust checks to an agentic application. Use when a developer asks to protect an agent, OpenClaw project, ChatGPT app, MCP server, Agents SDK workflow, skills, prompts, SOUL.md, AGENTS.md, policies, or other control files from unnoticed changes or outside-group publishers.

not rated 0 3mo ago A 74 tokens original Apache-2.0

agent-keys

1188

Gonzih/agent-keys

Skill Claude CodeCodex

Provides AI agents with autonomous API key acquisition and management via MCP.

not rated 0 7mo ago A 0 tokens original MIT

teodorofodocrispin-cmyk/sentinel-public

Skill Claude CodeCodex

Pre-execution transaction safety check for autonomous AI agents — one capability of the SENTINEL trust oracle (sentinel-agent.dev). Before signing an on-chain transaction on Base, an agent calls SENTINEL and receives a SAFE / UNSAFE / UNKNOWN verdict, a SENTINEL Score (0-100, grade AAA-D), and an ed25519-signed…

not rated 0 1mo ago A 186 tokens

cordon-takeover

1190

iamsecure1920/Cordon-AI

Skill Claude CodeCodex

Detect and verify subdomain takeovers with Cordon's three-step flow, then produce a responsible PoC. Use when checking for dangling DNS, takeover candidates, unclaimed cloud resources, or NS/MX delegation issues.

not rated 0 2mo ago A 50 tokens original MIT

url-js-finder

1191

l0s3r-Q/url-js-finder

Skill Claude CodeCodex

A web and JavaScript analysis tool for finding URLs, API endpoints, subdomains, and possible secrets such as keys or tokens in authorised targets.

not rated 0 2mo ago A 143 tokens original MIT

agent-audit

1192

nirhalfon/cinch-ai-security

Skill Claude CodeCodex

Audit an AI agent deployment against the CUSTODY containment framework and LASM threat model. Checks identity, input handling, supervision, traceability, operational controls, dependency management, and yield/teardown. Maps findings to NIST AI RMF, OWASP, CUSTODY pillars, and LASM layers.

not rated 0 9d ago A 67 tokens CC-BY-4.0

security-qa-tester

1193

PurrlyDigital/owasp-wstg-mcp

Skill Claude CodeCodex

Security QA tester workflow for the owasp-wstg MCP server — scope, search, neighbor-walk, and citation over the WSTG corpus using five MCP tools. Load this file first; then load the model-variant file that matches your model family.

not rated 0 3mo ago A 54 tokens CC-BY-SA-4.0

mustafadeel/auth0-whoami-mcp-template

Skill Claude CodeCodex

Fork, customize, deploy, or troubleshoot the Auth0 Who Am I MCP template as an Auth0 Custom Extension. Use when adapting this repository's MCP tools, publishing its generated Webtask artifacts, provisioning its Auth0 API resource server, promoting a domain-level connection, registering an MCP client, or connecting an…

not rated 0 2mo ago A 76 tokens

mcpanonimohealth

1195

alexandreumatize/mcpanonimohealth

Skill Codex

Desidentifica localmente documentos de saúde antes de analisar seu texto com IA. Use quando um médico quiser trabalhar com receita, laudo, PDF ou imagem que possa conter dados de paciente.

not rated 0 12d ago A 44 tokens original Apache-2.0

mcp-accses

1196

antonlarimaraton/mcp-accses

Skill Claude CodeCodex

Version: 1.0.0 Status: Active Last Updated: 2026-01-01.

not rated 0 2mo ago B 0 tokens original Apache-2.0

mcp-server77

1197

veteranchat/mcp-server77

Skill Claude CodeCodex

Skill "mcp-server77" from veteranchat/mcp-server77, covering skill.md — practical examples & use cases, using the server, python example, check status and nmap scan.

not rated 0 2mo ago D 0 tokens original Apache-2.0

agent-fables-preflight

1198

AaronVick/AGENT_FABLES

Skill Codex

Retrieve revision-pinned software-agent failure evidence and unresolved verification gates without authorizing execution. Use before destructive, irreversible, privileged, broad-scope, production, infrastructure, database, filesystem, permission, MCP configuration, or supply-chain operations; when reviewing a…

not rated 0 2mo ago A 79 tokens

blue-team-host-audit

1200

Pusparaj99op/blackarch-AI

Skill Claude Code

Local host hardening audit — listening ports vs firewall, SUID/world-writable files, SSH config, and package integrity. No network target required.

not rated 0 2mo ago A 36 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: