Security

BugTraceAI/BugTraceAI-CLI

Skill Claude CodeCodex

Cross-site scripting skill vision validation.

nagisanzenin/production-grade

Plugin Claude Code

Bundles 14 skills, 2 hooks · 690 tokens together

Enhances Claude Code from producing raw code into delivering production-ready systems. 14 specialized agents handle architecture, tested code, security audit, CI/CD, and documentation. Use for building apps/websites/services, adding features, hardening, deployment, testing, review, or architecture design.

seojoonkim/prompt-guard

Skill Claude CodeCodex

600+ pattern AI agent security defense covering prompt injection, supply chain injection, memory poisoning, action gate bypass, unicode steganography, and cascade amplification. Optional API for early-access and premium patterns. Tiered loading, hash cache, 11 SHIELD categories, 10 languages.

vinayaklatthe/microsoft-security-skills

Skill Claude CodeCodex

Guidance for governing the identities of AI agents and non-human identities (NHIs) — Microsoft 365 Copilot Studio agents, Microsoft Foundry agents, custom AI agents, and traditional service principals/managed identities — through their full lifecycle. Covers ownership and tagging, scoped permissions and consent…

x-glacier/kali-pentest

Skill Claude Code

Execute authorized penetration testing via Kali Linux CLI tools over SSH or Docker. Covers: information gathering, vulnerability analysis, sniffing & spoofing, web/API testing, exploitation, password attacks, wireless, cloud-native security, RFID/NFC, VoIP/ICS, reverse engineering, forensics, post-exploitation/C2, and…

Fausto-404/ai-mobile-reverse-skills

Skill Claude CodeCodex

A six-stage workflow for authorized security analysis of Android apps using decompiled code, captured network traffic, and native libraries such as JNI or SO files.

jmckinley/claude-code-resources

Agent Claude Code

Performs security audits and vulnerability checks.

wellwelwel/lagune

Plugin Claude Code

Lists 1 plugin

Lagune's Security-Driven Hardening commands, from the repository that authors them.

seqra/opentaint

Plugin Claude Code

Bundles 16 skills · 513 tokens together

Find application-specific vulnerabilities with whole-program static taint analysis and write rules and dependency models for future scans.

25smoking/Gwxapkg

Skill Claude CodeCodex

Use when auditing a Gwxapkg unpacked WeChat Mini Program directory with LLM assistance; consumes .gwxapkg semantic artifacts, route maps, sensitivereport.json, and optional Burp raw requests to produce evidence-backed security findings.

Claude-Reverser/IDA-instances-MCP

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 77 tokens together

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

maluta/privacy-scanner

Plugin Claude Code

Bundles 1 skill · 123 tokens together

Scan WiFi networks to detect hidden cameras and surveillance devices in rental accommodations.

zero-lab-ai/skills

Plugin Claude Code

Bundles 4 skills · 205 tokens together

Reviews agent and MCP surfaces, tests prompt-injection and runtime controls, and maps identity and authority across agent handoffs.

frappe/skills

Skill Claude Code

Deep audit of a Frappe app for security, correctness, and customization defects. Runs every security scope and every quality rule in a separate agent, verifies each candidate in a fresh context, and compiles one report. User-invoked only - run /deep-app-audit [app path] [options].

Strategic-Automation/violin

Skill Claude CodeCodex

Supervised authorized pentest: scope, route, validate, report.

NeoTheCapt/RedteamAgent

Skill Claude CodeCodex

Detect PII, credentials, and corporate sensitive data in API responses, source code, files, headers, and database extracts.

CommonHuman-Lab/nyxstrike

Skill Claude CodeCodex

Binary analysis and reverse engineering workflow using checksec, strings, binwalk, radare2, ropgadget, and gdb for CTF and vulnerability research.

CyberStrategyInstitute/ai-safe2-framework

Skill Claude CodeCodex

Apply AI SAFE2 v3.1 to design, build, audit, test, and govern AI agents, multi-agent systems, RAG, MCP/tool integrations, and AI infrastructure. Use the 161-control core taxonomy plus applicable profile overlays such as CP.5.MCP MCP-1 through MCP-19. Classify autonomy with ACT tiers, enforce HEAR and replication…

AppThreat/vulnerability-db

Skill Claude CodeCodex

A practical guide for AI agents that need to use vdb. If you are changing the code rather than using it, read AGENTS.md instead.

w0h1v/mcp-virustotal

MCP server Claude CodeCodexCursor +2

MCP server for querying VirusTotal API with comprehensive security analysis tools. Runs locally from the @burtthecoder/mcp-virustotal npm package. Needs 1 environment variable to run.

byt3bl33d3r/figaro

Skill Claude Code

Solves reCAPTCHA by clicking the checkbox, with audio challenge fallback.

DjangoPeng/agentic-ai

Skill Claude CodeCodex

An automated workflow for checking an authorized GitHub repository for exposed secrets such as API keys, tokens, passwords, private keys, and webhook URLs.

depalmar/ai-dfir-toolkit

Skill Claude CodeCodex needs its repo

Research, author, and validate AI agent artifact catalog entries documenting the forensic artifacts AI agents leave on endpoints - install paths, config and credential files, MCP server configs, listening ports, process trees, registry keys, and the Windows event log records that prove a tool ran. Use this skill…

forefy/.context

Skill Claude CodeCodex

Comprehensive smart contract security audit framework with multi-expert analysis. Use for full audits of Ethereum / EVM Solidity and Vyper, Solana / SVM Anchor Rust, TON / FunC / Tact, or Sui / Move projects.