26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
Methodology reference for Mastermind Bug Bounty runtime. Iron Rules, Safe-First Layering, phase techniques, value pool linkage, SRC compliance, and Hook system.
Agent Claude Code
Navs sikkerhetsarkitektur, trusselmodellering, compliance og sikkerhetspraksis.
Skill Claude Code
Use when performing BLE security testing on Linux/BlueZ - device scanning, GATT enumeration, read/write/notify interaction, fuzzing, and security assessment (unauthenticated read/write exposure, encryption enforcement, DFU entry, write-without-response abuse, connection parameters). Drives the single Go caeruleus…
Skill Claude CodeCodex
Review Uniswap v4 hooks and integrations for permission-bit, callback-authentication, pool-identity, custom-accounting, delta, settlement, dynamic-fee, JIT-liquidity, shared-custody, and liveness bugs. Use when a Solidity system implements IHooks or BaseHook, returns hook deltas, or relies on a v4 hook for pricing…
Plugin Claude Code
Bundles 21 skills, 7 commands, 5 agents · 1,048 tokens together
CVE hunting harness for open source security research. A 5-agent team that systematically finds, validates, and reports real vulnerabilities in open source packages.
alpha-omega-security/threat-model
Plugin Claude Code
Bundles 8 skills · 1,074 tokens together
Produce threat models for open-source projects: the security contract between a project and its users, structured for downstream integrators and vulnerability triagers.
Plugin Claude Code
Bundles 1 skill, 1 plugin · 92 tokens together
Server security auditing, hardening, and fleet management. Runtime-derived audit catalog, CIS/PCI-DSS/HIPAA compliance, production hardening workflows, and first-party MCP tools. Supports Hetzner, DigitalOcean, Vultr, Linode with Coolify, Dokploy, and bare VPS modes.
Skill Claude CodeCodex
Free, local, read-only security self-audit for your own OpenClaw agent. Reads your OpenClaw config, bootstrap files, logs, agent session logs, and installed skills, plus a bounded host-security scan. It changes no OpenClaw config, skill or bootstrap file; its own history and state stay under /.clawseccheck…
Skill Claude Code needs its repo
Complete VPN server setup from scratch — takes a fresh VPS (IP + root password from the hosting provider) through full server hardening and a 3x-ui (Xray) install with two VLESS+Reality inbounds (XHTTP for best DPI resistance, TCP+Vision for iOS), delivered as one subscription link and connected via the Happ client.…
JosiahSiegel/claude-plugin-marketplace
Plugin Claude Code
Bundles 4 skills, 1 agent · 871 tokens together
Comprehensive Clerk authentication expertise across Next.js, React, JavaScript, Node/Express/Fastify, Go, Ruby, Python, Java, .NET, PHP, sessions, JWT templates, organizations, middleware/proxy, API auth, webhooks, dev/prod environments, JWT clock skew and nbf/iat/exp failures, and production security. PROACTIVELY…
Plugin Claude Code
Bundles 1 skill, 1 command · 61 tokens together
Execute commands in isolated Docker/Podman containers for security. Auto-detects runtime for Python, Node, Rust, Go, Ruby, and more.
Skill Claude Code needs its repo
Detects exploitable GitHub Actions workflow vulnerabilities, including pullrequesttarget pwn requests, unsafe PR checkout, expression injection in run steps and actions/github-script blocks, workflowdispatch and workflowcall input command injection, comment- and discussion-triggered commands, TOCTOU between approval…
Skill Claude CodeCodex
Use for Vajra code review stages to perform a blocking review of the implementation, writing findings or approval.
Skill Claude Code
Autonomous AI pentester for web apps and APIs. Run white-box security assessments with Shannon — analyzes source code, identifies attack vectors, and executes real exploits to prove vulnerabilities. Triggered by 'shannon', 'pentest', 'security audit', 'vuln scan'.
Cursor rule Cursor
Deny ctg/ctgx command execution and secret file access.
MCP server Claude CodeCodexCursor +2
Easily find and fix security issues in your applications leveraging Snyk platform capabilities. Runs locally from the snyk npm package.
Plugin Claude Code
Bundles 2 skills, 1 agent, 1 hook, 1 MCP server · 310 tokens together
Self-audit AI agent, tool, and MCP-server code for security and reliability misconfigurations with Trustabl, the agent reliability scanner for the OpenAI Agents SDK, Claude Agent SDK, Google ADK, and MCP. Ships two skills (trustabl-scan and trustabl-enrich) and a subagent (trustabl) that together form a scan → enrich…
timenavigatorrage/r16-voltagent-awesome-agent-skills-security
Command Claude Code
You are a senior Security & Compliance specialist. The user needs help with dep cve in the context of security audits, vulnerability management, gdpr/soc2/iso27001 compliance and incident response.
Plugin Claude Code
Bundles 2 skills · 240 tokens together
Create, validate, import, execute, and export CrowdStrike Falcon Fusion SOAR workflows using natural language.
Skill Claude CodeCodex
AI-native agent runtime with typestate-enforced ORGA reasoning loop, Cedar policy authorization, CommunicationPolicyGate for inter-agent governance, ToolClad declarative tool contracts, knowledge bridge, zero-trust security, multi-tier sandboxing including a daemon-free Landlock tier, governed workflow improvements…
L-LesterYu/OpenClaw-hot-skills-zh
Skill Claude CodeCodex
A security-checking workflow for OpenClaw, an environment for running AI agents, and for the skills installed in it.
RedHatProductSecurity/prodsec-skills
Plugin Claude Code
Plugin marketplace listing 2 plugins: prodsec-skills, prodsec-skills-ge-core.
killvxk/cybersecurity-skills-zh
Plugin Claude Code
Bundles 58 skills · 4,355 tokens together
A Chinese-language collection of more than 734 cybersecurity skills covering areas such as web security, penetration testing, digital forensics, threat intelligence, cloud security, and malware analysis.
Skill Claude CodeCodex
Generate structured CSV security audit reports from vulnerability data with proper filtering and formatting. This skill covers CSV schema design for security reports, using Python csv.DictWriter, severity-based filtering, and field mapping from JSON to tabular format.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: