26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Pantheon-Security/notebooklm-mcp-secure
MCP server Claude CodeCodexCursor +2
Security-hardened NotebookLM MCP with post-quantum encryption. Runs locally from the @pan-sec/notebooklm-mcp npm package.
Institut-du-Numerique-Responsable/green-claude
Plugin Claude Code
Bundles 1 skill · 125 tokens together
Éco-conception de services numériques (RGESN 2024 / GR491 / Green Software Foundation) appliquée pendant que Claude Code écrit ou revoit du code, avec un audit déterministe et des pratiques d'usage responsable maintenues par le projet. Présentation : https://institut-du-numerique-responsable.github.io/green-claude/.
Plugin Claude Code
Bundles 1 skill, 1 hook · 81 tokens together
Secrets vault workflow for agents: aliases and ciphers only, never plaintext. Pairs with the envault CLI.
Plugin Gemini CLI
Multi-agent coordination layer for Gemini CLI — atomic shared blackboard (propose/validate/commit), permission gating with HMAC/Ed25519-signed tokens, federated token-budget tracking, and append-only audit-log queries over MCP.
Skill Claude CodeCodex
Iteratively review an instar-development spec with multi-angle internal reviewers (security, scalability, adversarial, integration, decision-completeness, lessons-aware) and real cross-model external reviewers routed through the agent's own installed CLIs (codex → GPT-tier, gemini → Gemini-tier; one pass per available…
Plugin Claude Code
Bundles 1 skill, 1 command · 268 tokens together
Audit PHP engine deserialization surface (unserialize, session decoders, WDDX, phar metadata, custom ce->unserialize handlers) for UAF, type confusion, partial-object destruct, signed-length heap overflow, and parse inconsistency.
Skill Claude CodeCodex
Master orchestration skill that coordinates the entire 4-phase security scanning pipeline.
Skill Claude CodeCodex
Audit and enable security-oriented Xcode build settings. Progressively enables compiler warnings, static analyzer checkers, and Enhanced Security features. Use when: user wants to secure their Xcode project, audit security settings, enable hardening, review security posture of build configuration, set up…
elliot35/deterministic-agent-control-protocol
Cursor rule Cursor
Enforce governance on all file and system operations.
Cursor rule Cursor
You're building an Electron app following good security practices.
Plugin Claude Code
Bundles 1 skill, 3 commands · 181 tokens together
Audit your Mac's security posture from Claude Code, understand what each finding means and why it matters, then fix what's safe. Drives the fort CLI over your shell and remediates only what you approve. Read-only by default. Findings map to SOC 2 / ISO 27001 / NIST / CIS when you need audit evidence.
Skill Claude CodeCodex
Simultaneous Launch Button - Two-person rule for destructive commands. Use when coordinating dangerous operations between agents, requiring peer review for rm -rf, git push --force, kubectl delete, DROP TABLE, or terraform destroy.
Skill Claude Code
A scam-message checker that analyzes suspicious texts, images, or conversation descriptions. It can identify the likely stage of a scam and suggest what the sender may try next.
MCP server Claude CodeCodexCursor +2
One of 3 in .mcp.json
MCP server "kali" as configured in SeaC-25/Kali-Security-MCP. Launched with C:\Windows\py.exe -3 mcp_server.py --tool-profile harness. Needs 2 environment variables to run.
Skill Claude CodeCodex
Bootstrap a workstation with the dotfiles framework. Takes a GitHub user / owner+repo / explicit clone URL and runs dot config init (which shells out to chezmoi) with the right safety prompts. Honors the active agent profile (ask / plan / apply / audit) so it defaults to dry-run in safer modes and full apply in apply.
Security-Phoenix-demo/security-skills-claude-code
Plugin Claude Code
Bundles 13 skills · 2,210 tokens together
Security-first specification pipeline. prd-generator writes a full PRD with a threat model from a plain-language feature description. The 12 phoenix- roles run the same pipeline stage by stage: context curation, scope, constraints, RFC 2119 requirements, ambiguity hunting, threat model, API contracts, verification mat.
Skill Claude CodeCodex
Review application source code for broken authorization — IDOR / Broken Object Level Authorization (OWASP API1), Broken Function Level Authorization (API5), mass assignment (API3), multi-tenant isolation gaps, and privilege escalation. Reads routes, controllers, resolvers, and data models offline and reports the…
Plugin Claude Code
Bundles 1 skill, 14 agents · 557 tokens together
Full penetration testing framework - 90 attack categories across 19 domains covering OWASP, injection, authentication, cloud, mobile, IoT/OT, wireless, and more.
Skill Claude CodeCodex
Scans a repo's GitHub Actions workflows for the ten critical CI/CD attack vectors — template injection, fork code executed with privileges (pwn requests), cache poisoning, impostor action SHAs, secrets dumps, GITHUBENV hijack, write-token untrusted triggers, credentials in caches/artifacts, unverified remote code…
Plugin Claude Code
Bundles 15 skills, 5 agents, 5 hooks · 1,196 tokens together
A task conductor for Claude Code: multi-agent orchestration with an enforced evidence contract, repo-specific learning, and update-safe local evolution.
Cursor rule Cursor
Security Skill — Enterprise-grade security engineering.
Skill Claude CodeCodex
Run and troubleshoot privacy-preserving, local DSPy RLM security audits for large legacy .NET codebases. Use when asked to scan repositories for vulnerabilities, tune RLM/tool limits, fix truncation/stall issues, or produce actionable markdown/json audit outputs without loading entire codebases into model context.
Skill Claude CodeCodex
Exploit development curriculum covering core vulnerability classes with real-world CVE case studies: stack/heap buffer overflows, use-after-free, integer overflows, format strings, type confusion, and race conditions. Use when learning or teaching vuln classes, researching specific CVE patterns, or building exploit…
Skill Claude Code
Preflight security scanner for AI coding agents — scans deployment config, skills/MCP servers, memory/sessions, and AI agent config files (hooks injection) for secrets, PII, prompt injection, and dangerous patterns. Runs 4 model behavior probes (persuasion, sandbagging, deception, hallucination). Supports LLM-enhanced…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: