nmap
25Skill Claude CodeCodex
The reference port scanner. In this pipeline nmap is the accurate pass: run it against the open ports naabu already found, not as a wide sweep.
not rated 9 1mo ago A 40 tokens
9Stars on the repository
35Mods indexed here, across every type
1mo agoLast push, which is what freshness is scored on
customA LICENSE file GitHub cannot name, so bodies are not copied
nuclei
26Skill Claude CodeCodex
ProjectDiscovery's nuclei (pure-Go). Runs a large community + custom template library against live targets to flag known CVEs, misconfigurations, exposures, and default credentials. Breadth-first signal that focuses the deeper, tool- and agent-specific exploitation.
not rated 9 1mo ago A 51 tokens
wafw00f
27Skill Claude CodeCodex
Skill "wafw00f" from tr4m0ryp/shor, covering wafw00f — waf/cdn fingerprinting, when to reach for it, key flags, safe invocation and evidence to capture.
not rated 9 1mo ago A 48 tokens
semgrep
28Skill Claude CodeCodex
Skill "semgrep" from tr4m0ryp/shor, covering semgrep — static analysis (sast), when to reach for it, target the backend language, not just auto (important), key flags and safe invocation.
not rated 9 1mo ago A 52 tokens
osv-scanner
29Skill Claude CodeCodex
Google's osv-scanner (pure-Go). Reads lockfiles/SBOMs in the repo and matches dependency versions against the OSV.dev vulnerability database. Read-only, no target traffic → vuln-analysis phase. This is the software-composition (SCA) view: vulnerable libraries the app ships.
not rated 9 1mo ago A 49 tokens
Skill Claude CodeCodex
A small recipe over the already-cloned repo. It runs git log --grep for security/CVE/fix patterns, maps the touched files into ranked hot files, and emits historicalsignal.json. It optionally folds in two signals you may have ALREADY produced this phase — osv-scanner JSON (dependency CVEs) and gitleaks JSON (history…
not rated 9 1mo ago A 86 tokens
trivy
31Skill Claude CodeCodex
Aqua's trivy (pure-Go). One pass over the checked-out source produces three read-only views: vulnerabilities (SCA against its CVE DB), misconfigurations (Dockerfile, docker-compose, Kubernetes, Terraform, Helm — built-in policies), and secrets (regex/entropy). Read-only, no traffic to the target → pre-recon /…
not rated 9 1mo ago A 90 tokens
gitleaks
32Skill Claude CodeCodex
Skill "gitleaks" from tr4m0ryp/shor, covering gitleaks — secret scanning (repo + history), when to reach for it, pick the mode by what's on disk (important), key flags and safe invocation.
not rated 9 1mo ago A 49 tokens
trufflehog
33Skill Claude CodeCodex
Skill "trufflehog" from tr4m0ryp/shor, covering trufflehog — secret detection with live verification, when to reach for it, pick the mode by what's on disk (important), key flags and safe invocation.
not rated 9 1mo ago A 45 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: