Security skills

19,424 tagged Security, measured the same way as everything else here.

Browse within: cybersecurity 486bug-bounty 286generative-ai 177LangChain 174hacking 174autonomous-pentesting 138cloud-security 127claude-ai 113openclaw 111redteam 111skills 105cors-exploitation 94firebase-hacking 93hermes-agent 90

security-audit

121

TheDecipherist/claude-code-mastery

Skill Claude CodeCodex

Audit code and dependencies for security vulnerabilities. Use when reviewing PRs, checking dependencies, preparing for deployment, or when user mentions security, vulnerabilities, or audit.

not rated 545 4mo ago A 36 tokens original MIT

hol-guard

122

hashgraph-online/hol-guard

Skill Claude CodeCodex

Run HOL Guard scanner and guard operations via uv run hol-guard. Use when the user asks to scan plugins/MCP/skills for security, quality, or ecosystem compliance, or when they ask to run guard detect/install/protect workflows for local AI harnesses.

not rated 551 +30 today A 58 tokens original Apache-2.0

google/mcp-security

Skill Claude CodeCodex ✓ vendor

Helps the user configure the Google SecOps Remote MCP Server for Antigravity. Use this when the user asks to "set up" or "configure" the security tools for Antigravity.

not rated 522 +1 yesterday A 48 tokens original Apache-2.0

slowmist/slowmist-agent-security

Skill Claude CodeCodex

Comprehensive security review framework for AI agents. Covers skill/MCP installation, GitHub repos, URLs/documents, on-chain addresses, products/services, and social shares. Built from real-world attack patterns and incident response experience.

not rated 504 4mo ago A 50 tokens original MIT

solana-foundation/solana-com

Skill Claude CodeCodex

Discover, verify, security-screen, and maintain Solana wallet products using the canonical local registry in packages/ecosystem-data and current web research. Use when asked to refresh wallet data, find new Solana wallets, add or remove wallets, check wallets for scam or security concerns, audit wallet features or…

not rated 502 +1 today A 96 tokens GPL-3.0

bug-hunter

126

codexstar69/bug-hunter

Skill Claude CodeCodex

Precision-first adversarial bug hunting for runtime, logic, data, concurrency, and security defects. Uses deterministic risk triage, evidence-bounded retrieval, Hunter/Skeptic/Referee review, optional hybrid verification, and explicit immutable Fixer scope. Scan-only and single-pass by default; complete-coverage…

not rated 502 +4 19d ago A 105 tokens original MIT

turnstile-testing

127

jumodada/Drissionpage-MCP-Server

Skill Claude CodeCodex

Use when testing an authorized Cloudflare Turnstile integration or operating an authorized production challenge with drissionpage-mcp. Covers official visible, invisible, pass, fail, and forced-interactive test keys; fresh iframe geometry; bounded coordinate interaction; refresh recovery; parent-page postconditions…

not rated 489 5d ago A 69 tokens

k8e-sandbox

128

xiaods/k8e

Skill Claude CodeCodex

Execute a goal inside the K8E sandbox (gVisor/Kata/Firecracker). Use when the user runs /k8e-sandbox , $k8e-sandbox , or asks to run/execute/test code safely off the host.

not rated 481 +1 10d ago B 61 tokens original Apache-2.0

MHaggis/Security-Detections-MCP

Skill Claude CodeCodex

Optimize detection queries for performance across Splunk (SPL), Microsoft Sentinel (KQL), and Elastic Security (EQL/ES|QL). Covers search pipeline internals, common anti-patterns, and optimization techniques for detection rules on each platform.

not rated 483 +3 2mo ago A 55 tokens

Damage Control

130

disler/claude-code-damage-control

Skill Claude CodeCodex

Install, configure, and manage the Claude Code Damage Control security hooks system. Use when user mentions damage control, security hooks, protected paths, blocked commands, install security, or modify protection settings.

not rated 480 8mo ago C 42 tokens

evm-bytecode-analysis

131

cdump/evmole

Skill Claude CodeCodex

Analyze supplied deployed EVM runtime bytecode with EVMole or guide a separate application in integrating a published EVMole Rust, Go, Python, or JavaScript binding. Use for unverified-contract inspection, ABI reconstruction from runtime code, selector discovery, storage-access analysis, EVM control-flow inspection…

not rated 462 +1 20d ago A 135 tokens original MIT

go-rig

132

mudrii/openclaw-dashboard

Skill Claude CodeCodex

Use this skill when building, reviewing, or refactoring Go code that must follow strict design discipline — ATDD/TDD workflow, explicit dependency injection, package-boundary discipline, and structured code review. Complements CLAUDE.md by focusing on process and design judgment rather than version-specific Go…

not rated 454 4d ago A 64 tokens original MIT

workflow-orchestrator

133

SHAdd0WTAka/Zen-Ai-Pentest

Skill Claude CodeCodex

Module Loop and Iteration Skill for orchestrating multi-phase penetration testing workflows. Use when coordinating sequential tool execution, managing dependencies between reconnaissance and vulnerability scanning modules, implementing adaptive fallback strategies, or managing workflow state across iterations.…

not rated 449 +4 yesterday A 85 tokens original MIT

owasp-top-10

134

tomascupr/sandstorm

Skill Claude CodeCodex

Use this checklist when performing security audits. Check each category systematically against the codebase.

not rated 447 +1 4mo ago A 0 tokens original MIT

deep-security-scan

135

CoWork-OS/CoWork-OS

Skill Claude CodeCodex

Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide Codex Security scan. Run repeated independent repository-wide discovery passes with worker-specific threat models, semantically merge candidates, synthesize one canonical validation threat model, then run validation…

not rated 447 +4 today A 97 tokens original MIT

sponsio

136

SponsioLabs/Sponsio

Skill Claude CodeCodex

Install, observe, tune, and enforce Sponsio: a runtime contract layer for LLM agents that blocks unsafe tool calls and scores output quality against declared rules. Use when the user wants to set up / add / install Sponsio, add guardrails or runtime safety to an LLM agent, generate or refine a sponsio.yaml, audit tool…

not rated 438 today A 0 tokens original Apache-2.0

dependency-upgrade

137

secondsky/sap-skills

Skill Claude CodeCodex

Secure dependency upgrades with supply chain protection, cooldowns, and staged rollout. Use when upgrading deps, configuring security policies, or preventing supply chain attacks.

not rated 433 +5 yesterday A 34 tokens GPL-3.0

bountyforge

138

Gabson0x/bountyforge

Skill Claude CodeCodex

All-round bug bounty skill covering smart contract audits (EVM/Solidity, Move/Aptos, Solana, TRON), web/API security, CI/CD pipeline attacks, LLM/AI security, and professional report generation for HackerOne, Bugcrowd, Intigriti, and Immunefi. Full pipeline — recon, pre-hunt learning from disclosed reports…

not rated 408 +4 6d ago D 351 tokens

aspectrr/deer

Skill Claude CodeCodex

Diagnose and resolve Elasticsearch security errors: 401/403 failures, TLS problems, expired API keys, role mapping mismatches, and Kibana login issues. Use when the user reports a security error.

not rated 404 4mo ago A 48 tokens original MIT

secknowledge-skill

140

Pa55w0rd/secknowledge-skill

Skill Claude CodeCodex

A Chinese-language knowledge base for practical security testing, including penetration testing, vulnerability research, security audits, CTFs, and AI or LLM security. It combines recorded vulnerability cases with security methods and risk frameworks.

not rated 404 +1 2mo ago A 426 tokens

php-audit-pipeline

141

0xShe/PHP-Code-Audit-Skill

Skill Claude CodeCodex

A multi-file workflow for auditing PHP web applications for security issues. The description does not specify enough detail about its exact checks beyond coordinating other PHP audit tools.

not rated 399 +1 5mo ago A 71 tokens

wxmini-security-audit

142

sssmmmwww/wxmini-security-audit

Skill Claude CodeCodex

A complete static security-audit workflow for WeChat Mini Programs, using several specialised agents and preliminary scripts.

not rated 395 +5 5mo ago A 95 tokens

ergrelet/windiff

Skill Claude CodeCodex

Generate and interpret security-research diffs between Windows versions or patch levels using this repo's WinDiff CLI and databases. Use when comparing Windows builds or binaries such as ntoskrnl.exe, ntdll.dll, win32k.sys, ci.dll, or cng.sys to find changed syscalls, symbols, types, mitigation flags, callbacks…

not rated 391 3d ago A 140 tokens GPL-3.0

kubernetes-skill

144

LukasNiessen/kubernetes-skill

Skill Claude CodeCodex

Prevent Kubernetes hallucinations by diagnosing and fixing failure modes: insecure workload defaults, resource starvation, network exposure, privilege sprawl, fragile rollouts, and API drift. Use when generating, reviewing, refactoring, or migrating manifests, Helm charts, Kustomize overlays, cluster policies, and…

not rated 391 +3 19d ago A 89 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: