27,008 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
ExpertVagabond/guardrails-mcp-server
MCP server Claude CodeCodexCursor +2
AI Agent Guardrails MCP server - security layer. Runs locally from the guardrails-mcp-server npm package.
lordbasilaiassistant-sudo/base-security-scanner-mcp
MCP server Claude CodeCodexCursor +2
MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities. Runs locally from the base-security-scanner-mcp npm package. Needs 1 environment variable to run.
lordbasilaiassistant-sudo/mcp-servers
MCP server Claude CodeCodexCursor +2
One of 4 in server.json
Smart contract security scanner — vulnerabilities, risk scores, and calldata decoding. Runs locally from the @thryx/contract-scanner-mcp-server npm package. Needs 4 environment variables to run.
MCP server Claude CodeCodexCursor +2
Append-only evidence receipts for AI records: seal, verify, cite, chain-check, anchor status. Runs locally from the apex-psi-mcp npm package. Needs 2 environment variables to run.
MCP server Claude CodeCodexCursor +2
MCP tools for x402 payment safety — vet the counterparty (risk score, allow/review/block, spending policy) AND vet the payment itself (buyer-side firewall: routing/drain/injection). Thin client for 402sentinel.com. Runs locally from the @kaditang/402sentinel-mcp npm package. Needs 2 environment variables to run.
Skill Claude CodeCodex
Implement passwordless authentication in native Android/Kotlin applications using MojoAuth OIDC with AppAuth.
Skill Claude CodeCodex
Set up the Semgrep plugin by installing Semgrep, authenticating, and verifying compatibility.
MCP server Claude CodeCodexCursor +2
Minimal MCP guardrails proxy — policy-first, human approvals, hash-chained audit log. Runs locally from the shugo Python package.
huuanh20/awesome-ai-agent-skills
Skill Claude Code
QA/QC agent. Reads ALL pipeline artifacts (BA + TechLead + PM + BE + FE + Tester) and produces quality-report.md, compliance-check.md, and sign-off.md. Declares Gate 3: Release Sign-off (advisory only — operator has final authority). Part of the Virtual Team Skill pipeline.
deeppath-ai/mcp-marketing-site
MCP server Claude CodeCodexCursor +2
This is a Crawler Security Guard based on the Model Context Protocol (MCP). Runs locally from the mcp-marketing-site npm package.
MCP server Claude CodeCodexCursor +2
MCP server for 5G DDoS detection using the NCSRD-DS-5GDDoS dataset. Runs locally from the 5g-ddos-mcp Python package.
timwukp/aws-security-posture-advisor-mcp
MCP server Claude CodeCodexCursor +2
MCP server "awslabs.aws-security-posture-advisor" as configured in timwukp/aws-security-posture-advisor-mcp. Runs locally from the awslabs.aws-security-posture-advisor Python package.
MCP server Claude CodeCodexCursor +2
MCP server for using TShark to analyze network packets. Runs locally from the tshark-mcp Python package.
outris-dev-org/outris-identity-mcp
MCP server Claude CodeCodexCursor +2
MCP server "outris-identity-mcp", hosted remotely at mcp-server.outris.com, as configured in outris-dev-org/outris-identity-mcp.
Skill Claude CodeCodex
Forces the model to always use the mcp-security demo MCP server tools instead of native capabilities. Use this skill whenever the user is working in the mcp-security project and asks to read files, count lines, write files, check npm packages, inspect npm config, verify registry, or do any file/npm operation. This…
MCP server Claude CodeCodexCursor +2
Trust scoring for AI agents. Investigate, verify, and compare agent trustworthiness through MCP. Runs locally from the agentscore-mcp npm package.
MCP server Claude CodeCodexCursor +2
A cross-platform TUI/CLI/API/MCP command library for authorized security testing. Runs locally from the pentquiver Python package.
MCP server Claude CodeCodexCursor +2
MCP server for autonomous API logic penetration testing — OWASP API Top 10 / BOLA-IDOR detection via LLM-driven analysis. Runs locally from the mcp-api-pentest Python package.
Skill Claude CodeCodex
Use this skill whenever you (the agent) need credentials, API keys, tokens, or access to an MCP/API — or when a connection fails with auth errors. ScopeGate is the credentials gateway: you never handle secret values; you request ephemeral capabilities instead. Also use it to onboard new services ("connect X", "add the…
MCP server Claude CodeCodexCursor +2
LLM prompt injection firewall with session tracking, explainability and multilingual detection. Runs locally from the promptwall Python package.
MCP server Claude CodeCodexCursor +2
AI-powered security scanning using Black Duck Signal for vulnerability detection. Runs locally from the @black-duck/mcp-server npm package.
Skill Claude CodeCodex
Runs a Checkmarx ASCA (AI Security Code Assistant) SAST scan on a SOURCE CODE file to detect code vulnerabilities, and remediates findings using the Checkmarx MCP tool. Use when a user asks to scan or fix a source code file (.py/.js/.java/.go/.ts/…) for security vulnerabilities. Also invoke this skill automatically…
MCP server Claude CodeCodexCursor +2
MCP server for ScanMalware.com URL scanning, malware detection, and analysis. Remote server at mcp.scanmalware.com.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 378 tokens together
Governed OPNsense + pfSense firewall ops: rules, NAT, VPN, DHCP, RCA. 35 tools.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: