26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude CodeCodex
Comprehensive system control operations for security testing. Use this skill when you need unified access to file operations, process management, system information, and command execution through a single interface during authorized penetration testing.
Skill Claude CodeCodex
Web2 bug bounty hunting agent — evidence-based vulnerability finder and report writer. Use when: auditing web apps/APIs for HackerOne, Bugcrowd, Intigriti, YesWeHack; hunting XSS, SQLi, NoSQLi, SSRF, IDOR, auth bypass, RCE, SSTI, LFI, XXE, CORS, CSRF, prototype pollution, subdomain takeover, HTTP smuggling, open…
Skill Claude Code
Full health and security audit for Rails apps, the review a principal engineer would do. Runs rubycritic, Brakeman, bundler-audit and rubyaudit, triages every finding with the LLM as judge, brings an OWASP Top 10 arsenal of checks for what scanners miss, and returns one impact-ranked action plan. Use for a Rails…
yoanbernabeu/supabase-pentest-skills
Skill Claude CodeCodex
Create a test user (with explicit permission) to audit what authenticated users can access vs anonymous users. Detects IDOR, cross-user access, and privilege escalation.
MCP server Claude CodeCodexCursor +2
Open-source, read-only AWS security scanner. 110 checks across 25 services, 31 attack-chain rules, 64 IAM escalation methods (incl. lateral AssumeRole graph), Proof Mode exploitability verification, data perimeter and Bedrock AgentCore checks, Blast Radius CLI, Threat Feed, What-If simulator, AI-SPM, 6 compliance…
UseAI-pro/openclaw-skills-security
Skill Claude CodeCodex
Comprehensive security auditor for OpenClaw skills. Checks for typosquatting, dangerous permissions, prompt injection, supply chain risks, and data exfiltration patterns — before you install anything.
sparkfinderoven/r01-hesreallyhim-awesome-claude-code-security
Command Claude Code
You are a senior Security & Compliance specialist. The user needs help with dep cve in the context of security audits, vulnerability management, gdpr/soc2/iso27001 compliance and incident response.
Plugin Claude Code
Bundles 3 skills, 3 commands, 3 hooks, 1 MCP server · 232 tokens together
Security for AI coding: pre-coding threat review, dependency checks, code review checklists, threat models, and an opt-in runtime guard (asc-guard) for agent tool calls.
Skill Codex
A security review of project dependencies managed by npm, Yarn, or pnpm. It can inspect a local project directory or a remote Git repository for known dependency risks.
sonatype/dependency-management-mcp-server
MCP server Claude CodeCodexCursor +2
Sonatype component intelligence: versions, security analysis, and Trust Score recommendations. Remote server at mcp.guide.sonatype.com.
Cursor rule Cursor
Core project conventions — code style, error handling, testing, security, git.
Skill Claude CodeCodex
An open-source security gateway that sits between an AI application and an LLM service. It can remove or clean sensitive information from requests and responses before they are passed through.
Skill Claude CodeCodex
Sigillo is a self-hostable open-source alternative to Doppler. Use when working with sigillo run, sigillo setup, sigillo login, managing secrets, projects, or environments. Also load when integrating Sigillo into CI, Cloudflare Workers, Docker, Vercel, or any other deployment target.
microsoftgbb/agentic-platform-engineering
Agent Claude Code
An expert Kubernetes administrator agent specializing in cluster troubleshooting, networking, NetworkPolicy, security posture, admission controllers, and GitOps workflows. The agent assesses initial reports, independently verifies or rejects claims, triages root causes, and proposes or applies fixes (including GitOps…
Skill Claude CodeCodex
Manage OAuth credentials & tokens for Google, Facebook, TikTok.
frendysanusi/claude-pentest-skills
Skill Claude CodeCodex
Structured web application penetration testing with OWASP methodology, curated payload references, 6-gate validation, and professional report generation.
ricmmartins/azure-sre-agent-skills
Skill Claude CodeCodex
Assess security, reliability, and cost posture of Azure OpenAI and Microsoft Foundry deployments. Detects critical anti-patterns: API keys instead of Managed Identity, public endpoints without firewall, disabled content filtering, missing diagnostic settings, deprecated model versions, over-provisioned PTU, absence of…
Plugin Claude Code
Bundles 2 skills, 1 agent, 1 plugin · 591 tokens together
AI application security for Claude — generate an AI Bill of Materials (AI-SBOM), run static analysis, behavioral validation, and adversarial red-team testing for AI agents and LLM-powered applications.
huaweicloud/huaweicloud-devkit
Cursor rule Cursor
Cursor rule "huawei-agent-rules" from huaweicloud/huaweicloud-devkit, covering huaweicloud devkit — agent rules, core principles, secret safety, iam security and network security.
MCP server Claude CodeCodexCursor +2
MCP server "sonarqube" as configured in dismine/valentina. Launched with sonar run mcp --project dismine_valentina.
Skill Claude CodeCodex
Drive aimy-skill's defense-bypass (破甲) capability. Use when a payload is blocked by a WAF or filter, when an injection is suspected but the request is rejected, or when the operator needs fingerprint -> bypass -> encode -> verify against a hardened target with the project's own CLI commands and Python API.
Skill Claude Code
Complete security remediation workflow. Scans code for vulnerabilities using Snyk, fixes them, validates the fix, and optionally creates a PR. Supports both single-issue and batch mode for multiple vulnerabilities. Use this skill when: User asks to fix security vulnerabilities User mentions "snyk fix", "security fix"…
Skill Claude CodeCodex
AI agent security platform — audit skills, scan for threats, and run 24/7 protection with 9,700+ detection rules.
Skill Claude CodeCodex
GDPR compliance audit of code, plans, schemas, or IaC. Produces a findings report with article citations, severity, confidence, and fixes; flags evidence gaps. Not a substitute for a DPO/lawyer.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: