26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude CodeCodex
Performs thorough code reviews with focus on best practices, security, performance, and maintainability. Use this skill when reviewing pull requests, auditing code quality, or getting feedback on implementations.
Plugin Claude Code
Bundles 1 skill · 85 tokens together
Carves safety-adjacent requests into a safe scope, executed by a genuinely isolated fresh-context subagent, with an adversarial verify pass and a descope ledger.
Skill Claude CodeCodex
The Dependency Auditor is a comprehensive toolkit for analyzing, auditing, and managing dependencies across multi-language software projects. This skill provides deep visibility into your project's dependency ecosystem, enabling teams to identify vulnerabilities, ensure license compliance, optimize dependency trees…
Agent Claude Code
Phase 1 intelligence gathering agent that collects security advisories (CVE, GHSA, OSV) with adaptive time expansion, builds architecture inventory, compiles a general component inventory (SBOM) of every software component the target relies on, and synthesizes vulnerability pattern analysis (recurring components, bug…
Skill Claude CodeCodex
Static security review that hunts exploitable vulnerabilities, prioritizing unauthenticated and cross-tenant attack paths.
EastSword/skill-dfyx_code_security_review
Skill Claude CodeCodex
A white-box code security review tool that examines source code, data flows, and business logic for security problems.
awslabs/aws-cloudformation-iam-policy-validator
Skill Claude CodeCodex ✓ vendor
Validate the IAM policies in a CloudFormation template against AWS IAM Access Analyzer before deploying, using the cfn-policy-validator CLI. Use when reviewing or gating a CloudFormation (or CDK-synthesized) template that defines IAM identity or resource policies, when asked to check a template for policy errors…
Skill Claude CodeCodex
Security-audit a third-party skill bundle (folder with SKILL.md, or .zip / .tar.gz archive) before installing it, using the SkillWard cloud scanner. Trigger on any natural safety question about an external skill — "is this skill safe?", "audit / scan / review this skill", "should I install this?", "trustworthy?", "any…
Awarexone/web3-bug-bounty-hunting-ai-skills
Skill Claude CodeCodex
Complete reference for all 10 DeFi smart contract bug classes. Use this when hunting for specific vulnerability types, need attack patterns for accounting desync, access control, incomplete path, off-by-one, oracle manipulation, ERC4626 vaults, reentrancy, flash loans, signature replay, or proxy/upgrade bugs.
MCP server Claude CodeCodexCursor +2
Python SDK for code-pathfinder static analysis for modern security teams. Runs locally from the codepathfinder Python package.
Skill Claude CodeCodex
Security audit for web apps, especially AI-built ("vibe coded") ones. Scans the running app for exposed .env/.git files, public source maps, weak CSP/HSTS/security headers, wildcard CORS, insecure cookies, and public debug/API-docs endpoints, then audits the codebase across 17 vulnerability categories (RLS, auth…
Skill Claude CodeCodex
A scheduled review process that studies past coding-agent sessions and proposes improvements to project instructions and memory.
jar-analyzer/jar-analyzer-claude
Plugin Claude Code
Bundles 2 skills · 84 tokens together
jar-analyzer project for java vulnerability analysis.
sugarforever/01coder-agent-skills
Plugin Claude Code
Bundles 23 skills · 1,992 tokens together
Content creation, publishing, analytics, and security scanning skills by VerySmallWoods.
Plugin Claude Code ✓ vendor
Bundles 1 skill, 1 hook, 11 plugins · 131 tokens together
Apache Magpie — a reusable, governance-agnostic framework of agentic skills for maintaining open-source projects: release management, security triage, PR and issue workflows, contributor growth, and repo health.
Skill Claude CodeCodex
A compliance audit procedure for an AI codebase under Chinese rules, including the Cybersecurity Law, the Personal Information Protection Law, MLPS 2.0, cross-border data transfer, and AI-content labeling.
Skill Claude CodeCodex
Use when loading .env credentials, running authenticated commands, or keeping secret values out of Pi context.
Skill Claude Code
Triage open security alerts on the current GitHub repo — both Dependabot (dependency CVEs) and Code Scanning (CodeQL / SnykCode / other tools that emit to GitHub's code-scanning API). For each alert, decide whether the bug's threat model is actually exploitable given this codebase's archetype, calling code, and…
Skill Claude CodeCodex
Coralogix AI Center — observe, evaluate, and guard GenAI/LLM applications and agents. Use for questions or actions about the user's AI/GenAI applications or agents — their behavior, prompts/responses, chats, quality, hallucinations, guardrails, cost/tokens, evaluations/policies, model pricing or comparing or tracking…
Skill Claude CodeCodex
Teaches AI agents to recognize and avoid security threats during normal activity. Covers phishing detection, credential protection, domain verification, and social engineering defense. Use when building agents that access email, credential vaults, web browsers, or sensitive data.
incogbyte/android-reverse-engineering-claude-skill
Plugin Claude Code
Bundles 1 skill, 1 command · 215 tokens together
Decompile Android APK/JAR/AAR with jadx, trace call flows through libraries, and document extracted APIs.
Skill Claude Code
Review code for best practices, bugs, and security issues.
Skill Claude CodeCodex
Autonomous GDPR compliance auditor that scans a codebase to identify PII collection, storage, and sharing, then produces an article-by-article gap analysis, a pre-filled Data Processing Agreement (DPA), and a ROPA (Record of Processing Activities) starter kit — all exported as downloadable files (.docx recommended).…
quillai-network/quillshield_skills
Plugin Claude Code
Bundles 1 skill · 50 tokens together
Blue-team release-gate skill for smart contract systems. Classifies projects, reviews deployment and upgrade execution paths, inspects CI/CD and dependency trust boundaries, evaluates signer/admin operational security, and produces evidence-based release blockers, warnings, and release verdicts.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: