Security

26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

AgentStalker

338

Gach0ng/AgentStalker

Skill Claude CodeCodex

A security-audit skill for AI agents that examines seven attack areas, including user input, memory, tool calls, plugins, permissions, collaboration between agents, and monitoring.

not rated 132 3mo ago B 383 tokens

ida-reverse

339

haikow/claude-reverse-skills

Skill Claude CodeCodex

A Chinese-language assistant for IDA Pro, a program used to analyze compiled files such as Windows executables, libraries, and firmware.

not rated 132 +1 4mo ago A 176 tokens

xray-pre-audit

340

ccashwell/evm-cortex

Skill Claude CodeCodex

Use when preparing for a security audit, performing reconnaissance on a new codebase, or creating a protocol overview. Generates a structured pre-audit readiness report covering architecture overview, threat model, cross-linked protocol invariants, entry point classification and flow paths, composability analysis…

not rated 132 14d ago A SkillSpector: warn 73 tokens original MIT

codex-guard

341

Akimiya-z/codex-guard

Skill Claude CodeCodex

Pre-submit hygiene check for AI-agent-authored pull requests. Use this skill whenever you are about to open or update a pull request: it runs the codex-guard CLI locally, verifies the diff contains no leftover TODO/FIXME/XXX markers and no hardcoded secrets, checks that commit subjects follow conventional commits, and…

not rated 131 +1 15d ago A SkillSpector: warn 85 tokens original MIT

lgpd-skills

342

goul4rt/lgpd-skills

Plugin Claude Code

Bundles 19 skills · 2,167 tokens together

Conjunto modular e orquestrado de skills para Claude que cobre, ponta-a-ponta, conformidade com a LGPD (Lei 13.709/2018), resoluções da ANPD aplicáveis e o ECA Digital (Lei 15.211/2025). Inclui 1 skill maestro (lgpd-audit) que orquestra 18 sub-skills especializadas: base legal, mapeamento de dados, ROPA, RIPD…

not rated 131 +24 5mo ago A tokens not measured original MIT

defensive-invariants

343

ctxr-dev/llm-wiki-memory

Cursor rule Cursor

Defensive invariants — when a check may be deleted — Deleting a defensive check because a proof says it cannot fire is the most expensive class of mistake made in this codebase. Canonical file is .agents/rules/defensive-invariants.md.

not rated 129 1mo ago A 87 tokens original MIT

sc-auditor

344

Archethect/sc-auditor

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 35 tokens together

AI-powered smart contract security auditor with parallel hunt lanes, Devil's Advocate verification, static analysis (Slither, Aderyn), fuzz testing (Echidna, Medusa), symbolic execution (Halmos), Solodit intelligence, and interactive Map-Hunt-Attack methodology.

not rated 127 7mo ago A tokens not measured

harness-engineering

345

jrenaldi79/harness-engineering

Plugin Claude Code

Bundles 2 skills, 1 agent, 1 hook, 1 plugin · 199 tokens together

Analyze and enforce best practices for AI coding agent projects. Assess codebase readiness across 8 pillars with /readiness, then scaffold enforcement with /setup: TDD, secret scanning, file size limits, auto-generated docs, and git hooks.

not rated 126 +1 changed 3d ago A tokens not measured original MIT

skills-janitor

346

khendzel/skills-janitor

Plugin Claude Code

Bundles 6 skills · 365 tokens together

6 skill hygiene tools: health report, auto-fix + prune, value (honest token split + usage), security scan (prompt injection + malicious patterns), discover (search + precheck), swipe (interactive triage).

not rated 125 +1 1mo ago A tokens not measured original MIT

security-scanner

348

sinewaveai/agent-security-scanner-mcp

Skill Claude CodeCodex

Scan prompts and code for security threats using agent-security-scanner-mcp. Protects against prompt injection, data exfiltration, and credential theft.

not rated 123 20d ago A SkillSpector: warn 34 tokens original MIT

ultraship

349

Houseofmvps/ultraship

Plugin Claude Code

Bundles 45 skills, 16 commands, 13 agents, 3 hooks, 2 MCP servers · 2,579 tokens together

Claude Code plugin — 41 tools, 45 skills, 13 agents. Currency Guard keeps Claude on current docs, not stale training data. Elite SEO strategy with AI traffic tracking, IndexNow, GSC-GA4 cross-reference, CTR anomalies, brand filtering, keyword intelligence, index doctor, codebase index, pentest, ship, launch, grow…

not rated 123 4mo ago A tokens not measured original MIT

frida-mcp

350

zhizhuodemao/frida-mcp

MCP server Claude CodeCodexCursor +2

Model Context Protocol implementation for Frida. Runs locally from the frida-mcp Python package.

not rated 123 1y ago A tokens not measured

ethicore-guardian

351

OraclesTech/guardian-sdk

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 78 tokens together

Runtime AI-threat screening for Claude: analyze prompts, scan tool calls and outputs, and vet documents before you act, with BLOCK / CHALLENGE / ALLOW verdicts. Paid feature — needs a Pro-plan-or-higher Guardian API key.

not rated 123 +1 2d ago A tokens not measured

security-convex

352

IgorWarzocha/Opencode-Workflows

Skill OpenCode

Review Convex security audit patterns for authentication and authorization. Use for auditing query/mutation auth, row-level security, and validators. Use proactively when reviewing Convex apps (convex/ directory present). Examples: user: "Audit these Convex mutations" → check for missing ctx.auth and input validators…

not rated 122 9mo ago A 141 tokens archived

malchela-marketplace

354

dwmetz/MalChela

Plugin Claude Code

MalChela — A YARA & Malware Analysis Toolkit with Claude MCP integration for DFIR analysts.

not rated 122 +3 2d ago A tokens not measured original MIT

code-review-team

355

revfactory/harness-engineering-with-cc

Skill Claude Code

A coordinated code-review workflow with four reviewers: one for static analysis, one for design, one for security, and one for refactoring. A pull request is a proposed set of code changes submitted for review.

not rated 122 +2 5mo ago A 66 tokens original Apache-2.0

Auth0

356

auth0/auth0-mcp-server

Plugin Gemini CLI ✓ vendor

Manage your Auth0 tenants, apps and APIs.

not rated 122 3d ago A tokens not measured original MIT

mcp-observatory

357

KryptosAI/mcp-observatory

MCP server Claude CodeCodexCursor +2

MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF. Runs locally from the @kryptosai/mcp-observatory npm package.

not rated 121 +14 2d ago A tokens not measured original MIT

code-reviewer

358

einverne/dotfiles

Agent Claude Code

Expert code review specialist. Proactively reviews code for quality, security, and maintainability. Use immediately after writing or modifying code.

not rated 121 yesterday A 30 tokens GPL-3.0

faasjs-best-practices

360

faasjs/faasjs

Skill Claude CodeCodex

Use when working in any FaasJS repo and no narrower FaasJS skill is already selected, or when a task spans project conventions, validation gates, security boundaries, and multiple FaasJS subsystems. For focused work, also load the relevant FaasJS skill: faasjs-project-workflow, faasjs-react-ant-design…

not rated 120 2mo ago A Socket: passSnyk: pass 110 tokens original MIT archived

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: