Skill Claude CodeCodex needs its repo
MITRE ATT&CK technique, group, software, and mitigation lookup using mitrize.
not rated 21 4mo ago A 25 tokens
original MIT
21Stars on the repository
60Mods indexed here, across every type
4mo agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown
Skill Claude CodeCodex
Mobile app security testing with Frida instrumentation, OWASP MASVS compliance, and SSL pinning/root detection bypass for Android/iOS.
not rated 21 4mo ago A 30 tokens
original MIT
nuclei-scan
27Skill Claude CodeCodex
Nuclei template-based vulnerability scanning with severity filtering and structured output.
not rated 21 4mo ago A 19 tokens
original MIT
osint-email
28Skill Claude CodeCodex
Email-based OSINT collection including breach database checks and social account enumeration.
not rated 21 4mo ago A 17 tokens
original MIT
owasp-check
29Skill Claude CodeCodex
OWASP Top 10 (2021) checklist-based inspection and compliance matrix generation.
not rated 21 4mo ago A 20 tokens
original MIT
Skill Claude CodeCodex
Pentest report authoring with executive summary, CVSS-scored findings, attack narrative, and remediation roadmap (writing methodology).
not rated 21 4mo ago A 29 tokens
original MIT
port-scan
31Skill Claude CodeCodex
Port scanning and service detection with nmap for authorized security assessments.
not rated 21 4mo ago A 16 tokens
original MIT
Skill Claude CodeCodex needs its repo
Property-based fuzzing and testing to find security edge cases in crypto, smart contracts, and parsers across multiple languages.
not rated 21 4mo ago B 27 tokens
original MIT
secret-scan
33Skill Claude CodeCodex
Secret and credential detection in source code and git history using trufflehog or gitleaks.
not rated 21 4mo ago A 22 tokens
original MIT
Skill Claude CodeCodex
Security code review across input validation, auth, injection, crypto, error handling, dependencies, and concurrency with CWE mapping.
not rated 21 4mo ago A 27 tokens
original MIT
Skill Claude CodeCodex
Analyze HTTP security headers of a target URL and provide remediation advice.
not rated 21 4mo ago A 16 tokens
original MIT
siem-rule
36Skill Claude CodeCodex
Create and convert SIEM detection rules (Sigma/Splunk SPL/Elastic KQL/Sentinel KQL) from threat objectives, IOCs, or CVE reports.
not rated 21 4mo ago B 37 tokens
original MIT
Skill Claude CodeCodex needs its repo
Verify code implementation matches security specifications, detecting deviations that could introduce vulnerabilities.
not rated 21 4mo ago A 19 tokens
original MIT
ssl-check
38Skill Claude CodeCodex
Inspect SSL/TLS certificate validity, protocol versions, and cipher suites for a target host.
not rated 21 4mo ago A 20 tokens
original MIT
Skill Claude CodeCodex
Subdomain enumeration using subfinder and amass to discover attack surface.
not rated 21 4mo ago A 18 tokens
original MIT
Skill Claude CodeCodex
Subdomain takeover detection and verification for dangling DNS records.
not rated 21 4mo ago A 16 tokens
original MIT
Skill Claude CodeCodex
Supply chain security audit with SCA scanning (trivy/grype), SLSA compliance assessment, and SBOM generation (CycloneDX/SPDX).
not rated 21 4mo ago B 37 tokens
original MIT
Skill Claude CodeCodex needs its repo
Security testing methodology using fuzzers (AFL++, libFuzzer), sanitizers (ASan, MSan, UBSan), and static analysis for vulnerability discovery.
not rated 21 4mo ago A 36 tokens
original MIT
threat-model
43Skill Claude CodeCodex
Structured threat modeling producing threat catalog with STRIDE categorization, DREAD risk scores, and prioritized mitigation roadmap.
not rated 21 4mo ago A 25 tokens
original MIT
waf-detect
44Skill Claude CodeCodex
Detect the presence and type of a Web Application Firewall using wafw00f or manual fingerprinting.
not rated 21 4mo ago A 24 tokens
original MIT
Skill Claude CodeCodex
Business logic vulnerability testing covering workflow bypass, price manipulation, coupon abuse, rate limit bypass, and TOCTOU race conditions.
not rated 21 4mo ago A 32 tokens
original MIT
Skill Claude CodeCodex
Web cache poisoning and web cache deception vulnerability detection.
not rated 21 4mo ago A 18 tokens
original MIT
Skill Claude CodeCodex
GraphQL API security testing including introspection, batching, and authorization bypass.
not rated 21 4mo ago A 21 tokens
original MIT
Skill Claude CodeCodex
HTTP request smuggling (desync) detection in proxy/CDN architectures testing CL.TE, TE.CL, TE.TE, and H2.CL parser disagreements.
not rated 21 4mo ago A 40 tokens
original MIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: