26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
OpenZeppelin/openzeppelin-skills
Plugin Claude Code
Bundles 12 skills · 1,169 tokens together
Skills for secure smart contract development with OpenZeppelin Contracts libraries and migration of Defender workflows.
Skill Claude Code
Retrieve login credentials, API keys, and secrets (username, password, TOTP) from the user's Bitwarden vault via aac. Use when you need credentials to sign into a website or service, or need an API key.
Skill Claude CodeCodex
The Inescapable Auditor. Runs the full Feynman Auditor (Stage 1) and full State Inconsistency Auditor (Stage 2) as primary steps, then fuses their outputs in a feedback loop (Stage 3) to find bugs at the intersection that neither alone would catch. Language-agnostic. Triggers on /nemesis or nemesis audit.
Joonghyun-Lee-Frieren/oh-my-antigravity
Agent Claude Code
Review one code section of at most 120 lines with concrete findings and explicit unknowns.
MCP server Claude CodeCodexCursor +2
A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more. Runs locally from the reversecore-mcp Python package.
Plugin Claude Code
Bundles 8 skills, 3 commands, 3 agents · 1,497 tokens together
Claude Code skills, agents and commands for Active Directory penetration testing: recon, Kerberoasting, AS-REP roasting, ADCS ESC1-17, DCSync, ACL abuse, coercion/NTLM relay, delegation, attack-path reasoning, environment constraints, OPSEC telemetry and conceptual compliance mapping.
Skill Claude CodeCodex
Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto-calibration, and result analysis.
Plugin Claude Code
Bundles 1 skill, 14 commands, 3 hooks · 52 tokens together
Local-only skill quality and security evaluator for Claude Code/OpenClaw. Scores six dimensions, runs local validators, and stores reports and snapshots under .skill-compass/.
Skill Claude CodeCodex
Pre-commit verification pipeline — static security scan, baseline-aware quality gates, independent reviewer subagent, and auto-fix loop. Use after code changes and before committing, pushing, or opening a PR.
Plugin Claude Code
Bundles 2 skills · 266 tokens together
Development guide for the jwt JSON Web Token library for Go: signing and verifying tokens, claims and expiry, algorithm choice (HMAC/RSA/RSA-PSS/ECDSA/EdDSA), kid-based key rotation, JWKS fetch/refresh/publish, blocklisting and testing.
Skill Codex
Use when creating, reviewing, or fixing OctoBus JavaScript service packages from API docs, request examples, existing implementations, or proto/service manifests. Helps generate npm-compatible service packages with service.json, package.json bin, proto contracts, SDK handlers, config/secret schemas, and tests.
Plugin Claude Code
Bundles 1 skill · 62 tokens together
Bypass bot detection using rebrowser-playwright (Node.js) or undetected-chromedriver (Python). Passes bot.sannysoft.com fingerprint checks and automates Google without triggering CAPTCHA. Authorized-use only — respect each site's ToS.
Cursor rule Cursor
Vet untrusted repos, skills, MCP servers, and packages with repo-forensics before installing them.
thomasxm/CrowdSentinels-AI-MCP
Skill Claude CodeCodex
Comprehensive threat hunting and incident response skill for CrowdSentinel MCP Server. Provides decision frameworks (MITRE ATT&CK, NIST IR, Pyramid of Pain, Diamond Model), workflow guidance, executable scripts for Elasticsearch queries, field mapping assistance, and debugging tools.
Skill Claude CodeCodex
Zero-knowledge secrets infrastructure — AI agents manage the complete credential lifecycle without ever seeing values.
Skill Claude Code
Security assessment of a codebase, minimal mode for runner validation.
databricks-industry-solutions/security-analysis-tool
Skill Claude CodeCodex
Audit npm and Python dependencies across all Databricks Apps in a workspace. Use when checking for malicious packages, generating dependency inventories, or investigating supply chain risks. Triggers on dependency audit, npm audit, package audit, supply chain, malicious package, dependency inventory.
Plugin Claude Code
Bundles 1 skill, 24 commands · 378 tokens together
GRC (Governance, Risk, and Compliance) domain knowledge — frameworks, controls, audits, evidence, ConMon, cross-framework mappings, document review, and operational workflows. Cloud-agnostic.
Plugin Claude Code
Bundles 1 skill, 2 commands, 1 agent, 1 MCP server · 82 tokens together
OpenClaw AI assistant integration. Chat, manage sessions, access memory, and run async tasks through your OpenClaw instance.
Plugin Claude Code
Bundles 1 skill, 5 commands · 100 tokens together
Code intelligence plugin for narsil-mcp. Provides guidance for using 90 code analysis tools including security scanning, call graph analysis, symbol search, supply-chain SBOM, and SPARQL/CCG knowledge graph export.
MCP server Claude CodeCodexCursor +2
MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries. Runs locally from the @burtthecoder/mcp-shodan npm package. Needs 1 environment variable to run.
Skill Claude Code
Generate SITF-compliant attack flow JSON files from attack descriptions or incident reports. Use when analyzing supply chain attacks, breaches, or security incidents.
Plugin Claude Code
Bundles 30 skills · 2,881 tokens together
The reverse-engineering and code-audit foundation both sides share. 30 dual-use security skills: native and Go/Rust/.NET/iOS/firmware reverse engineering, packers, and Flutter/React Native/Unity/Xamarin runtimes; source-code auditing with PHP-specific depth; webshell and backdoor hunting; multi-agent…
Skill Claude CodeCodex
Use the rsigma CLI and MCP server: engine eval, engine daemon, rule lint, rule draft, rule tune, rule backtest, backend convert, mcp serve. Prefer MCP tools when rsigma mcp serve is connected. For authoring Sigma YAML (detection, correlation, filters, pipelines, modifiers), use the sigma-rules skill. Use this skill…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: