26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude CodeCodex
General-purpose Static Application Security Testing (SAST) skill for code vulnerability analysis. Trigger when the user asks to: "analyze code for vulnerabilities", "review code security", "find security bugs", "do a SAST scan", "check for [vulnerability type] in code", "audit source code", or requests a security code…
Skill Claude CodeCodex
Full Caido SDK integration for Claude Code. Search HTTP history with HTTPQL, test with curl proxied through Caido (caching auth in reusable static curl config files), add match & replace rules, and organize handoffs into named replay sessions and collections - all via the official @caido/sdk-client. PAT auth…
Skill Claude CodeCodex
Use Hermes Vault as the canonical credential broker for Hermes and persistent sub-agents.
MCP server Claude CodeCodexCursor +2
CrowdStrike Falcon MCP Server. Runs locally from the falcon-mcp Python package. Needs 12 environment variables to run.
Plugin Claude Code
Bundles 1 skill · 165 tokens together
Autonomous, looping, multi-altitude security vulnerability hunt for a codebase — the RAPTOR 'Karpathy auto-research' generate -> adversarially-judge -> verify loop that finds far more bugs than a single-pass scan.
Skill Claude CodeCodex
This skill provides three primary modes for Android security testing.
Skill Claude CodeCodex
Check if recent cybersecurity alerts from 10 international CERTs affect your current project. Use when the user asks about security vulnerabilities, CVEs, "is my project affected", "any new security alerts", "check for vulnerabilities", "cyberowlai", or "/cyberowlai". Also trigger when the user is working on…
Skill Claude CodeCodex
Review supplied Slips alerts with OpenWorkProof's reference SOC workflow and verify its signed evidence bundle. Use for alert investigation and evidence review; connecting MCP alone does not activate endpoint protection.
Skill Claude Code
A Chinese-language guide for authorized penetration testing, covering information gathering, vulnerability discovery, exploitation, and post-exploitation. Penetration testing is security testing that imitates an attack on a specified target.
Cursor rule Cursor
MCP Defender is a security application designed to monitor and protect Model Context Protocol (MCP) communications. It intercepts tool calls and responses, verifying them against security signatures to prevent potentially harmful operations. The following is a breakdown of the key components and files.
MCP server Claude CodeCodexCursor +2
One of 2 in .mcp.json
MCP server "wstg-pentest" as configured in bhavsec/autopentest-ai. Launched with uv --directory ./server run server.py.
wiz-sec-public/secure-rules-files
Cursor rule Cursor
Enforce secure infrastructure-as-code best practices for HCL/Terraform configurations to prevent common cloud security misconfigurations.
Skill Claude CodeCodex
Review a change for correctness, security, and missing tests.
Hook Claude Code
One of 2 in settings.json
Runs before the agent uses a tool, executing approval-gate.sh. From johnkf5-ops/the-dev-squad.
elvismdev/claude-wordpress-skills
Plugin Claude Code
Bundles 1 skill, 2 commands · 156 tokens together
Professional WordPress engineering skills for Claude Code — performance optimization, security auditing, Gutenberg block development, and theme/plugin best practices.
AgriciDaniel/claude-cybersecurity
Plugin Claude Code
Bundles 1 skill · 201 tokens together
AI-powered cybersecurity code review with 8 specialist agents, OWASP Top 10:2021, CWE Top 25:2024, MITRE ATT&CK v15, and framework-aware false-positive suppression.
Skill Claude CodeCodex
API specification linting and security validation using Stoplight's Spectral with support for OpenAPI, AsyncAPI, and Arazzo specifications. Validates API definitions against security best practices, OWASP API Security Top 10, and custom organizational standards. Use when: (1) Validating OpenAPI/AsyncAPI specifications…
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 69 tokens together
Claude Code workflow guidance for local gograph: AST-aware call graphs, impact, security-flow candidates, and 61 query, analysis, and workflow capabilities through a separately registered MCP server.
Skill Claude CodeCodex
Python-based threat modeling using pytm library for programmatic STRIDE analysis, data flow diagram generation, and automated security threat identification. Use when: (1) Creating threat models programmatically using Python code, (2) Generating data flow diagrams (DFDs) with automatic STRIDE threat identification…
Skill Claude CodeCodex
Review the selected implementation and report correctness, security, and maintainability findings. Do not modify workspace files.
Skill Claude CodeCodex
Configure rate limiting, manage auth secrets, set up CSRF protection, define trusted origins, secure sessions and cookies, encrypt OAuth tokens, track IP addresses, and implement audit logging for Better Auth. Use when users need to secure their auth setup, prevent brute force attacks, or harden a Better Auth…
Skill Claude CodeCodex
Validate ActiveStorage attachments (content type, file size, file extension) with the activestorage-validator gem's blob validator. Use when adding validations to hasoneattached / hasmanyattached attributes.
MCP server Claude CodeCodexCursor +2
Access control for AI agents and MCP servers: allow, hold for approval, or block each tool call. Runs locally from the node9-ai npm package.
Skill Codex
Guided workflow for authorized penetration testing, vulnerability validation, security reporting, CTF/local sandbox reverse engineering, and user-directed vulnerability research. Use when Codex is asked to run or plan a security assessment, triage a target or artifact, maintain pentest state, produce interim/final…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: