29,964 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Agent Claude Code
Penetration testing tools evasion specialist. Analyzes tool source code, searches for detection rules (YARA, Sigma, etc.), and DIRECTLY MODIFIES source code to evade detection. Use for tools bypass, detection evasion, source modification.
Skill Claude CodeCodex
An authorized red-team framework for testing systems through stated assumptions. Red teaming is a permitted security exercise that imitates attacks to find weaknesses.
apollographql/apollo-mcp-server
Skill Claude CodeCodex
Review a GitHub pull request for a Rust codebase. Focuses on security, performance, test coverage, and Rust idioms. Runs in GitHub Actions and posts comments directly to the PR.
iamzhihuix/happy-claude-skills
Skill Claude CodeCodex
Audit a local macOS app's telemetry / reporting behavior using static analysis only. Reverse-engineers an .app bundle to identify embedded SDKs (AppLog/TEA, Parfait, TTNet, mars, MMKV, Sentry, Firebase, Bugly, Umeng, etc.), mapped upload endpoints, local on-disk queues, and privacy-relevant fields — without packet…
Plugin Claude Code
Bundles 3 skills, 1 command · 238 tokens together
Production hardening for AI coding agents — quality gates, security guards, continuous QA, and session memory. From the LACP (Local Agent Control Plane) framework.
Skill Claude CodeCodex
Cross-site scripting (XSS) vulnerability detection and exploitation. Supports reflected XSS, stored XSS, DOM-based XSS, and blind XSS testing. Use this skill when user mentions XSS, cross-site scripting, script injection, or needs to test JavaScript injection in parameters, forms, headers, or DOM sources.
superagents-lab/xcode27-skills
Skill Claude CodeCodex
Audit and enable security-oriented Xcode build settings. Progressively enables compiler warnings, static analyzer checkers, and Enhanced Security features. Use when: user wants to secure their Xcode project, audit security settings, enable hardening, review security posture of build configuration, set up…
mrphrazer/agentic-malware-analysis
Skill Claude CodeCodex
Structured malware triage and reverse-engineering orchestration for PE, ELF, and Mach-O binaries with strict artifact dumping to a status folder. Use when requests involve malware sample analysis, strings triage, API/import analysis, behavioral hypothesis generation, component mapping, deep-analysis planning, Binary…
Skill Claude CodeCodex
A specialised helper for creating or updating Disguises on a platform, including the code that changes and restores traffic data.
Skill Claude CodeCodex
An AI skill for black-box penetration testing of web applications, meaning security testing without relying on the application's source code. It uses multiple agents across steps such as identifying the application, scanning entry points and APIs, crawling it, testing for vulnerabilities, and reviewing evidence.
Instructions file
Instructions for HarmonicSecurity/claudit-sec, covering claudit-sec — claude security audit tool, project overview, architecture, data collectors and key paths.
Skill Claude CodeCodex
Run Semgrep static analysis scans and create custom detection rules. Use when asked to scan code with Semgrep, find security vulnerabilities, write custom YAML rules, or detect specific bug patterns. IMPORTANT: Also use this skill when users ask to 'scan for bugs', 'check code quality', 'find vulnerabilities', 'static…
Instructions file
Instructions for GreyhavenHQ/greywall, covering greywall, build & run, test, lint & format and project structure.
Instructions file
Instructions for eqtylab/cupcake, covering cupcake system overview, policy engine (wasm/rego) details, 1. routing vs. policy execution (critical), 2. opa rego v1 migration (critical) and 3. decisions & synthesis.
Dicklesworthstone/misc_coding_agent_tips_and_scripts
Skill Claude CodeCodex
Encrypt, submit, scan, and decrypt age-encrypted GitHub Issues (X25519). Use when reporting vulnerabilities, scanning for encrypted issues, or decrypting security reports.
Instructions file CodexOpenCode
AGENTS.md instructions for jakejarvis/domainstack.io, covering repository guidelines, pre-commit checklist, skill loading, commands and development.
Instructions file
Claude Code instructions for Encod3d-Sec/TORCH, covering pentesting & bug bounty wiki: schema, quick reference, skills and tools, hunt skill auto-triggers and engagement discipline (state-first, anti-loop).
Skill Claude CodeCodex
General-purpose Static Application Security Testing (SAST) skill for code vulnerability analysis. Trigger when the user asks to: "analyze code for vulnerabilities", "review code security", "find security bugs", "do a SAST scan", "check for [vulnerability type] in code", "audit source code", or requests a security code…
Skill Claude CodeCodex
L1 trigger - detects non-determinism, state transition completeness violations, and safety/liveness invariant breaks in consensus code. Inject into depth-consensus-invariant or depth-state-trace.
Plugin Claude Code
Bundles 28 skills · 1,751 tokens together
Ethereum development skills — corrects LLM blind spots on gas costs, L2s, CROPS trust review (Censorship Resistance, Open Source and Free, Privacy, Security), DeFi protocols, security, and the current tool landscape.
Skill Claude CodeCodex
Audit a policy/ / adapter for XPolicyLab standard compliance and PR readiness — file completeness, deploy.yml, Model contract, decodeimagebit-only decoding, script conventions, static checks, debug-mode eval, README and checkpoint requirements. Use when asked to check, validate, review, or pre-flight a policy adapter…
Skill Claude CodeCodex
Full Caido SDK integration for Claude Code. Search HTTP history with HTTPQL, test with curl proxied through Caido (caching auth in reusable static curl config files), add match & replace rules, and organize handoffs into named replay sessions and collections - all via the official @caido/sdk-client. PAT auth…
Agent
Use for SecurityClaw orchestration, routing, skill-manifest, and investigation workflow changes.
Command Claude Code
Purpose: Comprehensive branch analysis for code quality, security, performance, and risk assessment before merging to main. Specialized for circuit-synth development workflows.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: