Security skills

18,930 tagged Security, measured the same way as everything else here.

Browse within: cybersecurity 505bug-bounty 236agent 230generative-ai 178LangChain 177autonomous-pentesting 176hacking 176skills 131claude-ai 104LLM 103agentic-ai 87ai-security 76openclaw 73agents 64

attack-path-analysis

1201

Cognisn/cloudledger

Skill Claude CodeCodex

Analyse plausible attack paths to compromise a scanned AWS account and explain them against the MITRE ATT&CK framework, using the CloudLedger server. Use when the user wants an attack-path analysis, threat modelling, MITRE ATT&CK mapping, adversary/red-team perspective, "how could this account be compromised", or the…

not rated 0 2mo ago A 88 tokens original MIT

redhat-security-data

1202

dmc5179/redhat-security-data-api-mcp

Skill Claude CodeCodex

Query and investigate Red Hat security data (CVEs, CSAF advisories, OVAL streams) using the Red Hat Security Data API MCP server. Guides Claude through multi-step security investigation workflows.

not rated 0 2mo ago A 44 tokens original Apache-2.0

ai-poison-defense

1203

mzaid007/Universal-Poison-Armor

Skill Claude CodeCodex

Mandatory security shield that sanitizes untrusted input, strips prompt injections & Markdown XSS tracking pixels, neutralizes zero-width Unicode steganography, detects high-entropy adversarial suffixes (GCG), identifies semantic dataset anomalies, and verifies web search results against Consensus Poisoning / Sybil…

not rated 0 changed 2mo ago A 69 tokens original MIT

company-codegraph

1204

R1ck29/claude-code-codegraph-harness

Skill Claude CodeCodex

Use the approved local codegraph gateway for bounded structural code exploration in Codex, then verify consequential claims against source and tests.

not rated 0 3d ago A 29 tokens original Apache-2.0

chameleon-ultra

1205

fedroraddict/rango

Skill Claude CodeCodex

Use when the user mentions Chameleon Ultra/Lite, RFID or NFC card reading/cloning/emulation, Mifare Classic key recovery (fchk, nested, darkside, hardnested, autopwn), LF cards (EM410x, HID Prox, T5577...), or the MCP tools mcpplugin-chameleon-ultrachameleon. Provides device-operation workflows and mandatory safety…

not rated 0 2mo ago A 87 tokens original MIT

pc-filebridge

1206

gexiro-global/pc-filebridge

Skill Claude CodeCodex

Review files and reports shared between Codex and ChatGPT through PC FileBridge, including documents, images, text and arbitrary binary files; create new artifacts without overwriting existing files.

not rated 0 changed 1mo ago A 40 tokens original Apache-2.0

pentest-kb-workflow

1207

wangqiao258/pentest-kb-mcp

Skill Claude CodeCodex

A required workflow for real-world penetration testing, which is authorised security testing that looks for ways into systems. It searches a testing knowledge base first and saves task records for future work and file safety.

not rated 0 changed 2mo ago A 71 tokens archived

nexfade

1208

NexFade/nexfade-grok-plugin

Skill Claude Code

Create one-time NexFade encrypted links for attached files or sensitive notes, check link status, and revoke links.

not rated 0 2mo ago A 26 tokens original MIT

contribute

1209

TonPC64/mcp-a2a-bridge

Skill Claude CodeCodex

Test, secure, and submit project changes.

not rated 0 2mo ago A 12 tokens original MIT

agxhub/doc-redactor

Skill Claude CodeCodex

A tool for hiding sensitive information in local documents, including PDFs, word-processing files, spreadsheets, presentations, and text files. It covers personal details, company information, project codenames, watermarks, and logos, including scanned documents and embedded PDF images.

not rated 0 2mo ago A 0 tokens

living-stack

1211

equinoxaifinance-rgb/living-stack-mcp

Skill Claude CodeCodex

Use Living Stack MCP to establish scoped sessions, authorize bounded actions, record evidence, verify claims, checkpoint work, and export signed traces.

not rated 0 2mo ago A 30 tokens original Apache-2.0

heimdall

1212

actions-marketplace-validations/caglarbozkurt_mcp-heimdall

Skill Claude CodeCodex

Vet a Model Context Protocol (MCP) server for safety before installing or connecting it. Use when the user wants to check, audit, scan, or review an MCP server for prompt-injection, data-exfiltration, or malicious capabilities — given a directory, npm package, GitHub repo, or a tools/list JSON dump.

not rated 0 2mo ago A 71 tokens copy · 100% MIT

threadlinqs-cmd/intelthreadlinqs-mcp

Skill Claude CodeCodex

Operate the Threadlinqs Intelligence MCP server — 73 threat-intelligence tools covering threats, detection rules in Splunk SPL / Microsoft KQL / Sigma, IOCs, threat actors, CVE/CWE enrichment, MITRE ATT&CK coverage and prediction, C2 infrastructure, the correlation graph, and STIX 2.1 / ATT&CK Navigator export. Use…

not rated 0 2mo ago A 285 tokens original MIT

compuute-scan

1214

Compuute/compuute-scan-api

Skill Claude CodeCodex

Scan a public GitHub MCP-server repository for security issues before installing or connecting to it. Calls the hosted compuute-scan API at scan.compuute.se and returns severity counts, a 0-100 score, the most severe findings, and an honest triage disclaimer. Use BEFORE recommending or installing an unfamiliar MCP…

not rated 0 2mo ago A 122 tokens original MIT

coti-private-messaging

1215

coti-io/coti-sdk-private-messaging

Skill Claude CodeCodex

Send and receive private encrypted messages between AI agents for private agent-to-agent messaging, encrypted communication between autonomous agents, hidden state exchange, confidential multi-agent workflow coordination, delegation, expert review, plan synchronization, negotiation, inbox processing, and sharing…

not rated 0 4mo ago A 183 tokens original Apache-2.0

mcp-capstone

1216

daedalus/mcp-capstone

Skill Claude CodeCodex

MCP server that exposes Capstone disassembly framework functionality for binary disassembly, reverse engineering, and instruction analysis.

not rated 0 6mo ago A 0 tokens original MIT

kyalabs-badge

1217

kyalabs-Io/badge-server

Skill Claude CodeCodex

Prove your agent is an authorized actor, not a bot. MCP-native identity declaration for agent commerce.

not rated 0 4mo ago A 27 tokens original MIT

audit-dependencies

1218

sonatype/sonatype-cursor-plugin

Skill Claude CodeCodex

Comprehensive security audit of all project dependencies. Scans package manifests and reports vulnerabilities, license issues, and quality concerns prioritized by severity.

not rated 0 6mo ago A 31 tokens original MIT

carapace

1219

jdesl55/carapace-mcp

Skill Claude CodeCodex

You are operating with Carapace, a security and alignment layer that monitors your actions, verifies sensitive operations, and keeps you anchored to the user's goals.

not rated 0 8mo ago A 0 tokens original MIT

parental-control

1220

Gonzih/parental-control

Skill Claude CodeCodex

This skill teaches Claude how to use the parental-control MCP server in agent sessions.

not rated 0 7mo ago A 0 tokens original MIT

bitwarden-agent-vault

1222

ceweldy/bitwarden-agent-vault-mcp

Skill Codex

Mandatory persistent credential workflow backed by Bitwarden Secrets Manager. Use implicitly whenever Codex creates, generates, receives, discovers, needs, stores, retrieves, updates, rotates, shares, or uses a password, API key, access token, client secret, deployment credential, or other stable secret; before asking…

not rated 0 yesterday A 130 tokens original MIT

mcf-plugin

1223

jrmatherly/mcp-context-forge

Skill Claude Code

Author gateway plugins for MCP Context Forge — native Python plugins or external MCP plugins. Use when asked to create a new plugin, add a hook, build a filter/guard/validator, write a content transformer, implement rate limiting or PII detection, or add any pre/post processing to the gateway pipeline. Also use when…

not rated 0 8mo ago A 81 tokens original Apache-2.0 archived

guedder/mcp

Skill Claude CodeCodex

Como a autenticação Cognito do MCP Guedder liga e o que cada env var faz. Use ao configurar deploy autenticado, depurar 401 no MCP, ou decidir entre modo público e modo com token.

not rated 0 changed 1mo ago A 53 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: