26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
MCP server Claude CodeCodexCursor +2
Dependency graph + 24 MCP tools. Impact analysis, simulation, security, agent coordination. Runs locally from the depwire-cli npm package.
Skill Claude CodeCodex needs its repo
Scrub AI provenance marks from text and files using the markscrub CLI: invisible Unicode (Layer A), optional statistical rewrite (Layer B), and C2PA/EXIF/XMP/container metadata on PNG/JPEG/SVG/PDF/DOCX/HTML/MD. Use when the user asks to strip watermarks, remove Content Credentials, clean AI metadata, remove invisible…
Skill Claude CodeCodex
ZettelForge v2.0.0 — Production CTI agentic memory system. Hybrid TypeDB (STIX 2.1 ontology) + LanceDB (vector search). Zero external AI dependencies: fastembed for embeddings, llama-cpp-python for LLM. 75% accuracy on CTI queries, 18% on LOCOMO. Use when agents need persistent memory, threat intel retrieval, entity…
Plugin Gemini CLI ✓ vendor
MCP configuration declaring 1 server: vault.
MCP server Gemini CLI
snyk library and cli utility. Runs locally from the snyk npm package.
agentrust-io/awesome-ai-governance
Skill Claude CodeCodex
Patterns and techniques for adding governance, safety, and trust controls to AI agent systems. Use this skill when: Building AI agents that call external tools (APIs, databases, file systems) Implementing policy-based access controls for agent tool usage Adding semantic intent classification to detect dangerous…
Skill Claude CodeCodex
HSM-backed secret management for AI agents — store, retrieve, rotate, and share secrets via the 1Claw vault without exposing them in context.
Plugin Claude Code
Bundles 1 skill · 184 tokens together
Praxen — agent behavior verifier. Compares an AI agent's declared policy (Worker Remit) against the available evidence — source code, live deployment state, or behavioral artifacts — and reports where observed behavior diverges from declared intent. Make sure your agent does its job — and only its job.
Skill Claude CodeCodex
This skill should be used when the user asks to "run Preflight", "scan launch readiness", "check production readiness", "audit before deploy", "fix preflight findings", "set up preflight.yml", "wire Preflight into CI", or mentions the Preflight.sh CLI.
app-incubator-xyz/skill-vetter
Skill Claude Code
Multi-scanner security gate. TRIGGER when: user mentions installing, adding, or reviewing a skill to Claude Code, OpenClaw, or any other AI agent. Detects malicious code, vulnerabilities, and suspicious patterns.
Plugin Claude Code
Bundles 2 skills, 17 commands, 9 agents · 2,398 tokens together
Solana + full-stack security auditor: 20 checklists / 1,459 items / 140 known-vectors, severity 1-10, scope-gated loading. A full audit-firm lifecycle (automated + interactive), history-seeded threat models, executable PoC + fix-patch delivery, a Rust pre-scanner + cross-audit memory for token efficiency, native rigor.
MCP server Claude CodeCodexCursor +2 ✓ vendor
Official Microsoft MCP Server to query Microsoft Entra data using natural language. Remote server at mcp.svc.cloud.microsoft.
MCP server Claude CodeCodexCursor +2
Model Context Protocol server for Vanta's security compliance platform. Runs locally from the @vantasdk/vanta-mcp-server npm package.
Skill Claude Code
Guide for understanding and contributing to the awesome-ai-security curated resource list. Use this skill when adding resources, organizing categories, or maintaining README.md consistency (no duplicates).
Plugin Claude Code
Bundles 8 skills · 1,216 tokens together
Sysdig's cloud security expertise, packaged as agent skills that work natively in your AI environment.
Skill Claude CodeCodex
Use when auditing Solana programs for security vulnerabilities, reviewing Anchor or Pinocchio/native Rust smart contracts, checking CPI safety, PDA validation, account ownership, signer verification, or Token-2022 security.
Skill Claude CodeCodex
A web security audit system for PHP, Java, .NET, and Node.js applications. It identifies the technology used, checks code and runtime behaviour for common weaknesses, and documents fixes.
Skill Claude CodeCodex
Use when building, changing, or deploying an instancez backend - editing instancez.yaml (tables, RLS, auth, storage, rpc, functions), running the inz CLI, or debugging why a query is denied. instancez is a single-binary Supabase-compatible backend defined by one YAML file.
MCP server Claude CodeCodexCursor +2
Install deptrust, a local package vulnerability checker and MCP server for AI agents. Runs locally from the @clidey/deptrust npm package.
Cursor rule Cursor
VibeRaven launch check for AI-built apps on Vercel + Supabase (advice, not a gate).
Skill Claude Code
Provides cryptography attack techniques for CTF challenges. Use when attacking encryption, hashing, signatures, ZKP, PRNG, or mathematical crypto problems involving RSA, AES, ECC, lattices, LWE, CVP, number theory, Coppersmith, Pollard, Wiener, padding oracle, GCM, key derivation, or stream/block cipher weaknesses.
Skill Claude Code
Map incidents, control checks and SCA results to ISO 27001:2022, PCI DSS v4.0.1, NIST SP 800-53r5 and CIS Controls v8.1 and write auditor-ready evidence statements; use for compliance checks, audit questions, or incidents on regulated assets.
Skill Claude CodeCodex
Set up, connect to, or troubleshoot BibaVPN clients and servers, including the local Docker lab, SOCKS5 connectivity, invitations, and per-user access. Use when a user asks to run or diagnose BibaVPN; consult the repository's own documentation for implementation changes.
Skill Claude CodeCodex
Expert YARA rule authoring, review, and optimization. Use when writing new YARA rules, reviewing existing rules for quality issues, optimizing rule performance, or converting detection logic to YARA syntax. Covers rule naming conventions, string selection, condition optimization, performance tuning, and automated…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: