26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude CodeCodex
Scan code for injection, hardcoded secrets, XSS, dynamic code execution, and unsafe shell use. Use after writing or modifying code that handles user input, builds queries or commands, touches authentication, or adds a dependency — and whenever the user asks for a security check, audit, or review. Runs locally with no…
Plugin Claude Code
Bundles 5 skills, 1 MCP server · 900 tokens together
Web accessibility (a11y) skills for Claude Code: audit a site for WCAG 2.2 conformance, scan a page with the rule engine, run hands-on keyboard and screen-reader checks, fix violations, and catch regressions in CI.
Skill Claude CodeCodex
Use when running chaitin-cli commands to manage Chaitin security products: SafeLine WAF (site management, IP blocking, ACL, policy rules, attack logs), X-Ray vulnerability scanner (scan tasks, results, assets), CodeInsight (projects, repository configs, scan tasks, reports), CodeForce (projects, AI tasks, denoise…
ricneves-ai/flowgrammers-skills
Skill Claude CodeCodex needs its repo
Use ao avaliar sistemas de IA/ML para injeção de prompt, vulnerabilidades de jailbreak, risco de inversão de modelo, exposição a envenenamento de dados ou abuso de ferramentas por agents. Cobre mapeamento de técnicas MITRE ATLAS, detecção de assinaturas de injeção e pontuação de robustez adversarial.
Skill Claude Code
Interactively validate and triage Hacktron findings against the actual source code and (optionally) a live deployment, separate true positives from false positives, adjust severity, then either propose fixes and commit them or set the finding's state in Hacktron (truepositive, falsepositive, acceptedrisk, resolved).…
SonarSource/sonarqube-agent-plugins
Plugin Claude Code
Bundles 10 skills, 1 agent · 453 tokens together
SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leaked secrets. This plugin enforces those standards in the agent coding loop: 7,500+ distinct issue types, secrets scanning, agentic analysis, and quality gates across 40+ languages.
Skill Claude CodeCodex
A security-review skill for examining agent skills across code, runtime behaviour, dependencies, network traffic, privacy, and threat intelligence.
Agent Claude Code
Security vulnerability detection and remediation specialist. Use PROACTIVELY after writing code that handles user input, authentication, API endpoints, or sensitive data. Flags secrets, SSRF, injection, unsafe crypto, and OWASP Top 10 vulnerabilities.
Skill Claude CodeCodex
Git for agent identity — one identity, any apps.
Command Claude CodeGitHub Copilot needs its repo ✓ vendor
Ingest CWE XML from MITRE and generate per-domain security audit taxonomies for PromptKit.
Skill Claude CodeCodex
Systematically audit Solidity smart contract codebases for security vulnerabilities using a 4-phase approach - load a vulnerability cheatsheet, sweep code with grep and semantic analysis, deep-validate candidates against reference files, and output a severity-ranked findings.
Skill Claude CodeCodex
Use on Windows for unexpected ALEGO sandbox access denials: workspace writes or listing fail, or an ordinarily readable path cannot be read. One bundled command inspects the path and every ancestor and repairs the ACL problems it proves in that same run. Expected confinement denials need no ACL repair.
Skill Claude CodeCodex
A skill for using IDA and the WPeGPT plugin to analyse executable files in PE or ELF formats. It produces a structured report about the program, network indicators, suspicious functions, and possible vulnerabilities.
kajogo777/the-agent-sandbox-taxonomy
Skill Claude CodeCodex
You are an expert in the Agent Sandbox Taxonomy (AST), a framework for evaluating and comparing AI agent sandbox security. This skill enables two capabilities.
Plugin Claude Code
Bundles 1 skill, 4 commands · 318 tokens together
Apply the SAIL V2 (Secure AI Lifecycle) framework by Pillar Security to secure AI applications and agents — gap analyses, security roadmaps, maturity assessments, compliance checklists, control prioritization, and vendor RFPs. Grounded in the full 91-risk SAIL catalog.
Skill Claude CodeCodex
Comprehensive Android mobile application penetration testing with rooted-device ADB and Frida-based MCP tooling. Covers OWASP MASTG full methodology: recon, static + dynamic analysis, SSL/root bypass, IPC fuzzing, data exfiltration, crypto audit, and reporting. Triggers on requests to pentest Android apps, analyze…
Plugin Claude Code
Bundles 2 skills, 1 MCP server · 233 tokens together
Website QA tool built for coding agents (Claude Code, Cursor). 300+ rules across SEO, performance, security, accessibility & agent experience: audit from the CLI, fix findings in code, publish reports, and connect over MCP.
MCP server Claude CodeCodexCursor +2
One of 6 in .mcp.json
MCP server "victoriametrics" as configured in Smana/cloud-native-ref. Launched with /usr/local/bin/mcp-victoriametrics. Needs 2 environment variables to run.
Skill Claude CodeCodex
Diagnose a denied Tenuo call and make the legitimate call work with the smallest change to authority. Use when a call, test, or agent step fails with a Tenuo denial, monotonicity, proof-of-possession, chain, expiry, approval, or unknown-argument error. Do not use to design new authority from scratch (use…
Skill Claude CodeCodex
Audit framework mappings — an existing entity's mappings, the whole corpus, or a candidate value proposed for an entity not yet in the corpus — against the framework mappings style guide. Use when reviewing, auditing, or pre-PR authoring mapping changes for risks.yaml, controls.yaml, or personas.yaml.
greatpie/smart-contract-audit-skill
Skill Claude CodeCodex
Script-backed, out-of-box auditing workflow for Solidity/EVM repositories based on EVMbench detect/patch/exploit methodology. Use when asked to audit a smart contract repo from a URL or local path, auto-prepare the environment, find high-severity loss-of-funds vulnerabilities, validate exploitability, propose safe…
Skill Claude CodeCodex
Deepfake detection and media safety — detect AI-generated audio, images, video, and text, trace synthesis sources, analyze media intelligence, and tell people from AI agents on a website (Agent Detection) using direct Resemble AI API calls.
Skill Claude CodeCodex
Render and read Markdown in the browser with the Secutils.dev Markdown Preview tool. Reading-first: the rendered preview is the default full-width view, with on-demand source editing, threaded review comments stored in the Markdown, and self-contained HTML/PDF export. Supports GitHub-flavored Markdown, Mermaid…
Skill Codex
Run local commands with API keys stored in EnvLatch instead of copying credentials between .env files or shell profiles. Use when an agent, CLI, script, SDK, test, or build needs a saved credential environment variable on macOS.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: