24,395 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude CodeCodex
A skill for using IDA and the WPeGPT plugin to analyse executable files in PE or ELF formats. It produces a structured report about the program, network indicators, suspicious functions, and possible vulnerabilities.
Skill Claude CodeCodex
Comprehensive Android mobile application penetration testing with rooted-device ADB and Frida-based MCP tooling. Covers OWASP MASTG full methodology: recon, static + dynamic analysis, SSL/root bypass, IPC fuzzing, data exfiltration, crypto audit, and reporting. Triggers on requests to pentest Android apps, analyze…
Plugin Claude Code
Bundles 1 skill · 161 tokens together
Production readiness audit for apps built with AI coding tools. Detects your stack, audits 5 domains, and produces a scored punch list with copy-paste fixes.
Plugin Claude Code
Bundles 5 skills, 1 MCP server · 900 tokens together
Web accessibility (a11y) skills for Claude Code: audit a site for WCAG 2.2 conformance, scan a page with the rule engine, run hands-on keyboard and screen-reader checks, fix violations, and catch regressions in CI.
Clear-Capabilities/agentic-security
Plugin Claude Code
Bundles 7 skills, 14 commands, 9 agents, 5 hooks, 1 MCP server · 1,230 tokens together
Agentic-Security is a powerful Claude Code plugin that automatically performs Application Security Testing (SAST, SCA, secrets detection, and more). Think of it as the easy button for making your Claude-generated code safe and secure.
Skill Claude Code
Pre-commit code review using code-reviewer agent for bug detection, security analysis, and quality assurance. Manual invocation only. Use before git commits to catch issues early. Blocks commits on REQUESTCHANGES verdict.
Agent Claude Code needs its repo
Quantitative risk scoring agent that enriches threat model findings with four-dimensional scores (CVSS 3.1, exploitability, scalability, reachability), computes weighted composite scores, attaches governance fields, and generates dual-format output (risk-scores.md and risk-scores.sarif).
Skill Claude CodeCodex
Use when an agent needs isolated, forkable compute, running untrusted or model-written code safely, or exploring several attempts in parallel (best-of-N) and keeping the winner. Mitos boots Firecracker microVMs and forks a running VM via copy-on-write snapshots, so a fan-out is cheap and each attempt is…
Skill Claude CodeCodex
Authors, reviews, and hardens GitHub Actions workflows, reusable workflows, and composite actions with least-privilege GITHUBTOKEN permissions, action references pinned by commit SHA to the latest published release, injection-safe handling of untrusted event data, safe trigger and runner choices, and a structure that…
Agent Claude Code
Scan the target codebase for vulnerabilities in a single category. Use grep patterns to find candidates, read code to confirm in context, eliminate false positives, and produce evidence-grounded findings.
Skill Claude CodeCodex
Create tenuo warrants (capability tokens) for AI agents from natural language descriptions. Use this skill when someone wants to create, mint, design, or delegate a warrant; authorize an agent; set up agent permissions; or add tenuo to a project. Do NOT trigger for auditing, reviewing, or explaining existing warrants…
elliot35/deterministic-agent-control-protocol
Cursor rule Cursor
Enforce governance on all file and system operations.
Jamkris/everything-gemini-code
Agent Claude Code
Security vulnerability detection and remediation specialist. Use PROACTIVELY after writing code that handles user input, authentication, API endpoints, or sensitive data. Flags secrets, SSRF, injection, unsafe crypto, and OWASP Top 10 vulnerabilities.
Plugin Claude Code
Bundles 2 skills, 1 MCP server · 195 tokens together
Website audit tool built for AI agents. 249+ SEO, performance, security & agent readiness rules: run audits from the CLI, fix findings in code, publish reports, and connect over MCP.
Plugin Claude Code
Bundles 15 skills, 5 agents, 5 hooks · 1,196 tokens together
A task conductor for Claude Code: multi-agent orchestration with an enforced evidence contract, repo-specific learning, and update-safe local evolution.
justi/claude-code-project-boundary
Plugin Claude Code
Blocks destructive commands outside the project directory. Allows file operations within the project (refactoring, cleanup) but prevents accidental damage outside it.
stefan-jansen/claude-code-toolkit
Skill Claude CodeCodex
API authentication patterns including JWT, OAuth 2.0, API keys, and session-based auth. Covers token generation, validation, refresh strategies, security best practices, and when to use each pattern. Use when implementing API authentication, choosing auth strategy, securing endpoints, or debugging auth issues.…
Skill Claude CodeCodex
Supervised authorized pentest: scope, route, validate, report.
Skill Codex
A security review of project dependencies managed by npm, Yarn, or pnpm. It can inspect a local project directory or a remote Git repository for known dependency risks.
Plugin Claude Code
Bundles 1 skill, 1 command, 1 agent · 80 tokens together
Build deep architectural context through ultra-granular code analysis before vulnerability hunting.
Command Claude Code
Run host-side task validation and record sanitized evidence.
Pantheon-Security/notebooklm-mcp-secure
MCP server Claude CodeCodexCursor +2
Security-hardened NotebookLM MCP with post-quantum encryption. Runs locally from the @pan-sec/notebooklm-mcp npm package.
MCP server Claude CodeCodexCursor +2
One of 3 in .mcp.json
MCP server "kali" as configured in SeaC-25/Kali-Security-MCP. Launched with C:\Windows\py.exe -3 mcp_server.py --tool-profile harness. Needs 2 environment variables to run.
TheArchitectit/agent-guardrails-template
Skill Claude CodeCodex
Topic-based content filtering to block harmful or unauthorized content in agent output.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: