18,920 tagged Security, measured the same way as everything else here.
Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63
Skill Codex
Use when creating, reviewing, or fixing OctoBus JavaScript service packages from API docs, request examples, existing implementations, or proto/service manifests. Helps generate npm-compatible service packages with service.json, package.json bin, proto contracts, SDK handlers, config/secret schemas, and tests.
thomasxm/CrowdSentinels-AI-MCP
Skill Claude CodeCodex
Comprehensive threat hunting and incident response skill for CrowdSentinel MCP Server. Provides decision frameworks (MITRE ATT&CK, NIST IR, Pyramid of Pain, Diamond Model), workflow guidance, executable scripts for Elasticsearch queries, field mapping assistance, and debugging tools.
Skill Claude CodeCodex
Zero-knowledge secrets infrastructure — AI agents manage the complete credential lifecycle without ever seeing values.
Skill Claude Code
Security assessment of a codebase, minimal mode for runner validation.
databricks-industry-solutions/security-analysis-tool
Skill Claude CodeCodex
Audit npm and Python dependencies across all Databricks Apps in a workspace. Use when checking for malicious packages, generating dependency inventories, or investigating supply chain risks. Triggers on dependency audit, npm audit, package audit, supply chain, malicious package, dependency inventory.
Skill Claude Code
Generate SITF-compliant attack flow JSON files from attack descriptions or incident reports. Use when analyzing supply chain attacks, breaches, or security incidents.
Skill Claude CodeCodex
Cross-site scripting skill vision validation.
Skill Claude CodeCodex
Use the rsigma CLI and MCP server: engine eval, engine daemon, rule lint, rule draft, rule tune, rule backtest, backend convert, mcp serve. Prefer MCP tools when rsigma mcp serve is connected. For authoring Sigma YAML (detection, correlation, filters, pipelines, modifiers), use the sigma-rules skill. Use this skill…
Skill Claude CodeCodex
Use when managing Secure Enclave signing keys or encrypted secrets. Use for creating/listing/deleting P-256 keys, signing digests, running commands with secrets injected via vault exec, storing/retrieving encrypted secrets. Also use when an agent needs API keys, private keys, or credentials injected into a subprocess…
Skill Claude CodeCodex
600+ pattern AI agent security defense covering prompt injection, supply chain injection, memory poisoning, action gate bypass, unicode steganography, and cascade amplification. Optional API for early-access and premium patterns. Tiered loading, hash cache, 11 SHIELD categories, 10 languages.
vinayaklatthe/microsoft-security-skills
Skill Claude CodeCodex
Guidance for governing the identities of AI agents and non-human identities (NHIs) — Microsoft 365 Copilot Studio agents, Microsoft Foundry agents, custom AI agents, and traditional service principals/managed identities — through their full lifecycle. Covers ownership and tagging, scoped permissions and consent…
Skill Claude Code
Execute authorized penetration testing via Kali Linux CLI tools over SSH or Docker. Covers: information gathering, vulnerability analysis, sniffing & spoofing, web/API testing, exploitation, password attacks, wireless, cloud-native security, RFID/NFC, VoIP/ICS, reverse engineering, forensics, post-exploitation/C2, and…
Fausto-404/ai-mobile-reverse-skills
Skill Claude CodeCodex
A six-stage workflow for authorized security analysis of Android apps using decompiled code, captured network traffic, and native libraries such as JNI or SO files.
Skill Claude CodeCodex
Use when auditing a Gwxapkg unpacked WeChat Mini Program directory with LLM assistance; consumes .gwxapkg semantic artifacts, route maps, sensitivereport.json, and optional Burp raw requests to produce evidence-backed security findings.
Skill Claude Code
Deep audit of a Frappe app for security, correctness, and customization defects. Runs every security scope and every quality rule in a separate agent, verifies each candidate in a fresh context, and compiles one report. User-invoked only - run /deep-app-audit [app path] [options].
Skill Claude CodeCodex
Supervised authorized pentest: scope, route, validate, report.
Skill Claude CodeCodex
Securely share files via encrypted, expiring links. Use this skill to (1) upload a local file to get a secure vnsh.dev URL, or (2) read a vnsh.dev URL to decrypt and access its content.
Skill Claude CodeCodex
Binary analysis and reverse engineering workflow using checksec, strings, binwalk, radare2, ropgadget, and gdb for CTF and vulnerability research.
CyberStrategyInstitute/ai-safe2-framework
Skill Claude CodeCodex
Apply AI SAFE2 v3.1 to design, build, audit, test, and govern AI agents, multi-agent systems, RAG, MCP/tool integrations, and AI infrastructure. Use the 161-control core taxonomy plus applicable profile overlays such as CP.5.MCP MCP-1 through MCP-19. Classify autonomy with ACT tiers, enforce HEAR and replication…
Skill Claude CodeCodex
Detect PII, credentials, and corporate sensitive data in API responses, source code, files, headers, and database extracts.
Skill Claude CodeCodex
A practical guide for AI agents that need to use vdb. If you are changing the code rather than using it, read AGENTS.md instead.
Skill Claude Code
Solves reCAPTCHA by clicking the checkbox, with audio challenge fallback.
Skill Claude CodeCodex
An automated workflow for checking an authorized GitHub repository for exposed secrets such as API keys, tokens, passwords, private keys, and webhook URLs.
Skill Claude CodeCodex
Comprehensive smart contract security audit framework with multi-expert analysis. Use for full audits of Ethereum / EVM Solidity and Vyper, Solana / SVM Anchor Rust, TON / FunC / Tact, or Sui / Move projects.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: