Security

luongnv89/claude-howto

Plugin Claude Code

Bundles 3 commands, 3 agents · 53 tokens together

Complete PR review workflow with security, testing, and docs.

Wei-Shaw/sub2api

Skill Claude CodeCodex

Manage Sub2API admin APIs for accounts, redeem codes, groups, proxies, error passthrough rules, TLS fingerprint profiles, imports, exports, batch updates, and raw administrator API calls. Use when the user mentions Sub2API, admin API keys, account management, redeem code management, recharge codes, invitation codes…

novuhq/novu

Command Cursor

Comprehensive checklist for conducting thorough code reviews to ensure quality, security, and maintainability.

continuedev/continue

Agent ✓ vendor

Review dependency changes for security implications and breaking changes.

zhaoxuya520/reverse-skill

Skill Claude CodeCodex

Routes reverse engineering, exploitation, penetration testing, malware, mobile, firmware, browser automation, documentation, and security tasks to the appropriate specialist skill. Use when a task spans modules or the correct reverse-skill entrypoint is unclear.

OWASP/CheatSheetSeries

Agent Claude Code

Duplication and placement reviewer for OWASP cheat sheet changes. Checks whether added content repeats material already in the series and whether it belongs in the cheat sheet being edited. Invoked by /review-cheatsheet-pr.

OWASP/CheatSheetSeries

Agent Claude Code

Language and editorial reviewer for OWASP cheat sheet changes. Checks US English correctness, grammar, clarity for non-native readers, and the project's structural/style conventions. Invoked by /review-cheatsheet-pr.

OWASP/CheatSheetSeries

Agent Claude Code

Link and source-quality auditor for OWASP cheat sheet changes. Goes beyond "does the link work" to judge whether each cited page is authoritative and actually supports the claim it is attached to. Invoked by /review-cheatsheet-pr.

OWASP/CheatSheetSeries

Command Claude Code

Aggressively review an OWASP cheat sheet PR across security, practicality, links/sources, duplication, and language; produce a single MERGE/REQUESTCHANGES/CLOSE verdict.

OWASP/CheatSheetSeries

Instructions file CodexOpenCode

AGENTS.md instructions for OWASP/CheatSheetSeries, covering non-negotiable rules, 1. sources must be real, read, and supportive, 3. stay in scope — one topic, one pr, one branch, 4. don't duplicate — link instead and 5. architecture over code — for general topics.

OWASP/CheatSheetSeries

Instructions file

Claude Code instructions for OWASP/CheatSheetSeries, covering claude.md and for maintainers.

mukul975/Anthropic-Cybersecurity-Skills

Plugin Claude Code

Bundles 56 skills · 4,581 tokens together

818 cybersecurity skills covering web security, pentesting, DFIR, threat intelligence, cloud security, malware analysis, and more.

mukul975/Anthropic-Cybersecurity-Skills

Instructions file CodexOpenCode

AGENTS.md instructions for mukul975/Anthropic-Cybersecurity-Skills, covering agents.md, what this repository is, reading a skill, changing a skill and writing a description.

block/buzz

Agent ✓ vendor

Security reviewer — threat models, auth, injection, data exposure.

nanocoai/nanoclaw

Skill Claude CodeCodex

Give chosen NanoClaw agents a real phone number as a container tool — the dial CLI baked into the agent image plus OneCLI credential injection for api.getdial.ai, scoped per agent, so the agents you pick can send SMS, place AI voice calls, and receive verification codes from inside the sandbox. Independent of the Dial…

nanocoai/nanoclaw

Instructions file CodexOpenCode

AGENTS.md instructions for nanocoai/nanoclaw, a project described as: A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK.

davila7/claude-code-templates

Agent Claude Code

Expert component reviewer for Claude Code Templates. Use PROACTIVELY when adding or modifying components in cli-tool/components/ directory (agents, commands, MCPs, hooks, settings, skills, loops). Validates format, required fields, naming conventions, and security.

agentscope-ai/agentscope

Instructions file GitHub Copilot

Copilot instructions for agentscope-ai/agentscope, covering agentscope code review guide, 1. code quality, 2. [must] code security, 3. [must] testing & dependencies and 4. code standards.

sipeed/picoclaw

Skill Claude CodeCodex

Configure, extend, debug, or contribute to PicoClaw itself. Use when the task is about PicoClaw CLI commands, config.json, gateway, auth, models, skills, MCP servers, cron, routing, sessions, self-evolution, built-in slash commands, or repository internals. Use PicoClaw-native workflows, terminology, paths, and…

nrwl/nx

Skill Claude CodeCodex

Deep code review of a single open PR in nrwl/nx. Checks the PR out only inside an isolated sandbox, then runs four fixed reviewers: implementation (correctness, errors, types, performance), verification (tests, ticket grounding, comments, and docs), approach, and security. A reproduce-verifier executes a runnable…

can1357/oh-my-pi

Agent

Code review specialist for quality/security analysis.

can1357/oh-my-pi

Agent

Read-only security specialist for evidence-backed repository vulnerability discovery.

langchain-ai/deepagents

Instructions file CodexOpenCode ✓ vendor

AGENTS.md instructions for langchain-ai/deepagents, covering global development guidelines for the deep agents monorepo, corridor security analysis, development workflow, suppressing ruff rules and pr conventions.

trufflesecurity/trufflehog

Skill Claude CodeCodexCursor

Plan and apply Go dependency updates, including advisory-driven bumps, Trivy/govulncheck validation, and supply-chain review. Use when the user asks to update dependencies, refresh modules for security alerts, or run dependency vulnerability scans.