Security

26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

ksafe

217

ioannisa/KSafe

Plugin Claude Code

Bundles 1 skill · 239 tokens together

Agent skill for the KSafe Kotlin Multiplatform encrypted persistence library — setup, usage patterns, anti-patterns, and debugging.

not rated 344 +1 1mo ago A tokens not measured original Apache-2.0

semgrep

219

semgrep/skills

Skill Claude CodeCodex

Run Semgrep static analysis scans and create custom detection rules. Use when asked to scan code with Semgrep, find security vulnerabilities, write custom YAML rules, or detect specific bug patterns. IMPORTANT: Also use this skill when users ask to 'scan for bugs', 'check code quality', 'find vulnerabilities', 'static…

not rated 340 +4 3mo ago A Socket: passSnyk: pass 112 tokens

learn

220

Encod3d-Sec/TORCH

Skill Claude CodeCodex needs its repo

Post-engagement knowledge harvest AND harness retrospective - after a box/bugbounty/pentest/CTF is completed, first diff how the engagement was EXECUTED against the skills/hooks that governed it (what discipline was skipped) and improve the harness, then sweep the whole engagement for GENERIC reusable knowledge NOT…

not rated 339 +2 2mo ago A SkillSpector: pass 139 tokens original MIT

publish-findings

221

vlinx-io/VelaTerm

Skill Codex

Requires explicit opt-in with CODEXSECURITYENABLEEXTERNALIMPORTS=1. Preview and import scanner findings into the local workbench or Codex Security Cloud. Use the selected provider's documented export format.

not rated 336 +12 3d ago A 44 tokens original MIT

ebctf-decode

222

Henglie/EBCTFCodeBox

Skill Claude CodeCodex

A local text decoder for identifying and reversing encodings and simple ciphers, such as Base64, hexadecimal, Caesar shifts, and Morse code. CTF means capture the flag, a type of security puzzle where hidden messages and clues must be solved.

not rated 332 +9 changed 21d ago A SkillSpector: pass 100 tokens original Apache-2.0

develop-disguise

223

cha0upup/LeoAI

Skill Claude CodeCodex

A specialised helper for creating or updating Disguises on a platform, including the code that changes and restores traffic data.

not rated 331 +5 changed 23d ago A 72 tokens GPL-3.0

mrphrazer/agentic-malware-analysis

Skill Claude CodeCodex

Structured malware triage and reverse-engineering orchestration for PE, ELF, and Mach-O binaries with strict artifact dumping to a status folder. Use when requests involve malware sample analysis, strings triage, API/import analysis, behavioral hypothesis generation, component mapping, deep-analysis planning, Binary…

not rated 330 +6 7mo ago A 92 tokens GPL-2.0

pentest-redteam

226

0rangec3t/Black-cat

Skill Claude Code

An authorized red-team framework for testing systems through stated assumptions. Red teaming is a permitted security exercise that imitates attacks to find weaknesses.

not rated 328 +1 3mo ago A 41 tokens

vbs-scan-security

227

tanviet12/vbsec

Skill Claude CodeCodex

Use when scanning code for security vulnerabilities. Use when user says "scan security", "kiểm tra bảo mật", "security audit", "review security", or invokes /vbs-scan-security. For large scans (>20 main-language files OR >30 total OR >14 days) processes chunks sequentially. Outputs bilingual reports (vi/en). Optional…

not rated 323 +5 changed 1mo ago B SkillSpector: warn 105 tokens original MIT

sage

228

gendigitalinc/sage

Plugin Claude Code

Bundles 1 skill, 1 hook · 39 tokens together

Safety for Agents - Agent Detection & Response (ADR) for AI agents.

not rated 322 changed 25d ago A tokens not measured original Apache-2.0

netwatch

229

sepivip/SeekerClaw

Skill Claude CodeCodex

Network monitoring and security audit. Use when: user asks to scan network, check open ports, network audit, who's on wifi, check connection, port scan, firewall check, network status, or network security. Don't use when: user asks about crypto transactions (use solana tools) or web search (use research skill).

not rated 319 changed 8d ago A SkillSpector: warn 68 tokens original MIT

agent-loop-safety

230

zorost/AI-Engineering-Lab

Skill Claude CodeCodex

Wrap an agent loop with step limits, cost caps, human approval gates, and a full trace. Use whenever building or reviewing any tool-calling agent before it touches real systems.

not rated 315 +2 2mo ago A SkillSpector: warn 41 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

L1 trigger - detects non-determinism, state transition completeness violations, and safety/liveness invariant breaks in consensus code. Inject into depth-consensus-invariant or depth-state-trace.

not rated 312 +3 1mo ago A SkillSpector: pass 45 tokens original MIT

screen_lock

232

AIOSAI/AIPass

Skill Claude Code

Password-lock the machine's screen while every process keeps running, and read whether it is locked.

not rated 312 +1 changed 14d ago A SkillSpector: pass 21 tokens original MIT

lacp-hardening

233

0xNyk/lacp

Plugin Claude Code

Bundles 3 skills, 1 command · 238 tokens together

Production hardening for AI coding agents — quality gates, security guards, continuous QA, and session memory. From the LACP (Local Agent Control Plane) framework.

not rated 307 +1 11d ago A tokens not measured original MIT

happy-app-audit

234

iamzhihuix/happy-claude-skills

Skill Claude CodeCodex

Audit a local macOS app's telemetry / reporting behavior using static analysis only. Reverse-engineers an .app bundle to identify embedded SDKs (AppLog/TEA, Parfait, TTNet, mars, MMKV, Sentry, Firebase, Bugly, Umeng, etc.), mapped upload endpoints, local on-disk queues, and privacy-relevant fields — without packet…

not rated 306 6mo ago A 152 tokens original MIT

ethskills

235

austintgriffith/ethskills

Plugin Claude Code

Bundles 28 skills · 1,877 tokens together

Ethereum development skills — corrects LLM blind spots on gas costs, L2s, CROPS trust review (Censorship Resistance, Open Source and Free, Privacy, Security), DeFi protocols, security, and the current tool landscape.

not rated 305 +2 11d ago A tokens not measured

lazyown

237

grisuno/LazyOwn

Skill Claude CodeCodex

LazyOwn RedTeam Framework — penetration testing and C2 via MCP.

not rated 299 +1 changed 18d ago A 16 tokens AGPL-3.0

cyber-neo

238

Hainrixz/cyber-neo

Plugin Claude Code

Bundles 1 skill · 123 tokens together

Open-source cybersecurity analysis agent. Scans any local project for vulnerabilities: code security (SAST), dependency CVEs (SCA), secret leaks, authentication/authorization flaws, cryptographic weaknesses, misconfigurations, supply chain risks, and CI/CD security. Covers all OWASP 2025 Top 10 and CWE Top 25…

not rated 294 +1 12d ago A tokens not measured original MIT

sigcli

239

sigcli/sigcli

Skill Claude CodeCodex

Guide Claude to use SigCLI correctly — check auth, login, get credentials, configure providers, and onboard new websites. Trigger when using sig commands, editing /.sig/config.yaml, or needing authenticated API access.

not rated 292 1mo ago A SkillSpector: warn 45 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: