Security

24,395 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

scope-investigate

433

tayontech/SCOPE

Agent Claude Code needs its repo

SOC alert investigation assistant. Guides analysts through CloudTrail-based alert investigation in Splunk — step-by-step guided queries, investigation timelines, and IOC correlation. Invoke with /scope:investigate.

not rated 54 2mo ago A 42 tokens original MIT

security_reporter

434

EastSword/dfyx_skills_lib

Skill Claude CodeCodex

A security report writing assistant for network vulnerabilities. Given a vulnerability identifier, name, or scanner report, it produces an analysis covering the issue, how it works, conditions for exploitation, and required fixes.

not rated 54 5mo ago A 96 tokens

symbiont

435

ThirdKeyAI/Symbiont

Skill Claude CodeCodex

AI-native agent runtime with typestate-enforced ORGA reasoning loop, Cedar policy authorization, CommunicationPolicyGate for inter-agent governance, ToolClad declarative tool contracts, knowledge bridge, zero-trust security, multi-tier sandboxing, webhook verification, markdown memory, skill scanning, metrics…

not rated 54 changed 3d ago A 96 tokens original Apache-2.0

caeruleus

436

praetorian-inc/caeruleus

Skill Claude Code

Use when performing BLE security testing on Linux/BlueZ - device scanning, GATT enumeration, read/write/notify interaction, fuzzing, and security assessment (unauthenticated read/write exposure, encryption enforcement, DFU entry, write-without-response abuse, connection parameters). Drives the single Go caeruleus…

not rated 54 +1 1mo ago A SkillSpector: warn 82 tokens original Apache-2.0

univ4-hook-harbinger

437

zerocoolailabs/ZeroSkills

Skill Claude CodeCodex

Review Uniswap v4 hooks and integrations for permission-bit, callback-authentication, pool-identity, custom-accounting, delta, settlement, dynamic-fee, JIT-liquidity, shared-custody, and liveness bugs. Use when a Solidity system implements IHooks or BaseHook, returns hook deltas, or relies on a v4 hook for pricing…

not rated 54 27d ago A 90 tokens

threat-model

438

alpha-omega-security/threat-model

Plugin Claude Code

Bundles 8 skills · 1,074 tokens together

Produce threat models for open-source projects: the security contract between a project and its users, structured for downstream integrators and vulnerability triagers.

not rated 54 +7 19d ago A tokens not measured original MIT

security-scan

439

Seeed-Projects/Seeed-Jetson-DevelopTool

Skill Claude CodeCodex

Deploy a knife detection model on Triton Inference Server using reComputer J1010 for X-ray security scanning, with Raspberry Pi clients sending images for inference and displaying detection results.

not rated 54 today A SkillSpector: warn 40 tokens original MIT

mcp-server-for-oscal

440

awslabs/mcp-server-for-oscal

MCP server Claude CodeCodexCursor +2 ✓ vendor

AI agent tools for Open Security Controls Assessment Language (OSCAL). Runs locally from the mcp-server-for-oscal Python package. Needs 5 environment variables to run.

not rated 53 2mo ago A tokens not measured original Apache-2.0 archived

edgeone-clawscan-zh

441

L-LesterYu/OpenClaw-hot-skills-zh

Skill Claude CodeCodex

A security-checking workflow for OpenClaw, an environment for running AI agents, and for the skills installed in it.

not rated 53 5mo ago A 144 tokens original MIT

nist-ai-rmf

442

mastepanoski/claude-skills

Skill Claude CodeCodex

AI risk assessment using NIST AI RMF 1.0 framework. Evaluate AI systems across 4 core functions (Govern, Map, Measure, Manage) for trustworthy and responsible AI deployment.

not rated 53 +1 3mo ago A 44 tokens original MIT

net-route-mapper

443

RuoJi6/net-audit-skills

Skill Claude CodeCodex

A tool that maps HTTP routes and their parameters in .NET applications. It can inspect source code or decompiled files and save the results as a Markdown document.

not rated 53 +1 3mo ago A 158 tokens

clerk-auth-master

444

JosiahSiegel/claude-plugin-marketplace

Plugin Claude Code

Bundles 4 skills, 1 agent · 871 tokens together

Comprehensive Clerk authentication expertise across Next.js, React, JavaScript, Node/Express/Fastify, Go, Ruby, Python, Java, .NET, PHP, sessions, JWT templates, organizations, middleware/proxy, API auth, webhooks, dev/prod environments, JWT clock skew and nbf/iat/exp failures, and production security. PROACTIVELY…

not rated 54 2mo ago A tokens not measured original MIT

auditor

445

solanabr/auditor-skill

Plugin Claude Code

Bundles 1 skill, 15 commands, 8 agents · 1,800 tokens together

Solana + full-stack security auditor: 20 checklists / 1,390 items / 134 known-vectors, severity 1-10, scope-gated loading. A full audit-firm lifecycle (automated + interactive), executable PoC + fix-patch delivery, a Rust pre-scanner + cross-audit memory for token efficiency, native rigor gates (context reconstruction.

not rated 53 +1 changed 2d ago A tokens not measured original MIT

EnterpriseMCP

446

microsoft/EnterpriseMCP

MCP server Claude CodeCodexCursor +2 ✓ vendor

Official Microsoft MCP Server to query Microsoft Entra data using natural language. Remote server at mcp.svc.cloud.microsoft.

not rated 53 +1 3mo ago A tokens not measured CC-BY-4.0

pwn

447

nemanjan00/dev-environment

Skill Claude CodeCodex

Solve a binary-exploitation / pwn CTF challenge end to end — triage the binary, find the memory-corruption bug, and build a pwntools exploit that lands a shell and reads the flag. Use when given an ELF challenge binary (often with a libc and an nc host:port), or when the user mentions buffer overflow, ret2libc, ROP…

not rated 52 3d ago A 95 tokens

sigillo

448

remorses/sigillo

Skill Claude CodeCodex

Sigillo is a self-hostable open-source alternative to Doppler. Use when working with sigillo run, sigillo setup, sigillo login, managing secrets, projects, or environments. Also load when integrating Sigillo into CI, Cloudflare Workers, Docker, Vercel, or any other deployment target.

not rated 52 13d ago A 66 tokens

mcpcap

450

mcpcap/mcpcap

MCP server Claude CodeCodexCursor +2

A modular Python MCP Server for analyzing PCAP files. Runs locally from the mcpcap Python package.

not rated 52 +1 1mo ago A tokens not measured original MIT

java-audit-skill

451

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A security-audit workflow for Java, Kotlin, JavaScript, TypeScript, React, and Vue codebases. It is intended to find vulnerabilities and produce structured security findings.

not rated 52 1mo ago A 184 tokens

3x-ui-setup

453

AndyShaman/3x-ui-skill

Skill Claude Code needs its repo

Complete VPN server setup from scratch — takes a fresh VPS (IP + root password from the hosting provider) through full server hardening and a 3x-ui (Xray) install with two VLESS+Reality inbounds (XHTTP for best DPI resistance, TCP+Vision for iOS), delivered as one subscription link and connected via the Happ client.…

not rated 52 1mo ago D 134 tokens original MIT

rust-audit-prep

455

CDSecurity/cdsecurity-skills

Skill Claude CodeCodex

Prepare Solana/Rust projects for a security audit — test coverage analysis, Rust doc-comment checks, code hygiene sweeps, dependency health verification, compute-unit optimization tips, and best-practice enforcement. Supports both Anchor-based and native solanaprogram Rust programs. Generates a scored Audit Readiness…

not rated 52 +1 5mo ago A 181 tokens original MIT

lgpd-skills

456

goul4rt/lgpd-skills

Plugin Claude Code

Bundles 19 skills · 2,167 tokens together

Conjunto modular e orquestrado de skills para Claude que cobre, ponta-a-ponta, conformidade com a LGPD (Lei 13.709/2018), resoluções da ANPD aplicáveis e o ECA Digital (Lei 15.211/2025). Inclui 1 skill maestro (lgpd-audit) que orquestra 18 sub-skills especializadas: base legal, mapeamento de dados, ROPA, RIPD…

not rated 52 +3 3mo ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: