Security

26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

gplay-preflight

529

tamtom/gplay-cli-skills

Skill Claude CodeCodex needs its repo

Offline compliance and hygiene scanning of an AAB or APK with gplay preflight — manifest flags, restricted permissions, 64-bit and 16 KB page alignment, listing assets, secrets, billing, privacy SDKs, target API floor, and size. Use before uploading a build, as a CI gate, or when diagnosing a Play rejection. Runs…

not rated 52 3mo ago A SkillSpector: pass 83 tokens original MIT

security-audit

530

netresearch/security-audit-skill

Plugin Claude Code

Bundles 1 skill, 1 hook · 61 tokens together

Security audit patterns (OWASP Top 10, CWE Top 25 2025, CVSS v4.0) and GitHub project security checks for any project. Deep automated PHP/TYPO3 scanning with 80+ checkpoints, 41 reference guides, PreToolUse warnings. By Netresearch.

not rated 52 +1 changed 2d ago A tokens not measured

awareness-pack

531

WYRE-AI/msp-claude-plugins

Plugin Claude Code

Bundles 3 skills, 3 commands, 3 agents · 537 tokens together

Cross-vendor security awareness operations — training completion tracking, phishing simulation results, and per-user risk scoring across whatever security-awareness training tools you have connected. Complements secops-pack's technical threat response with the human-layer prevention side.

not rated 52 yesterday A tokens not measured original Apache-2.0

kali-tools

532

zebbern/zebbern-kali-mcp

MCP server Claude CodeCodexCursor +2

Capability-aware MCP client for a Docker-hosted Kali Linux tools API. Runs locally from the zebbern-kali-mcp Python package. Needs 1 environment variable to run.

not rated 52 1mo ago A Socket: warn tokens not measured original MIT

pwn

534

nemanjan00/dev-environment

Skill Claude CodeCodex

Solve a binary-exploitation / pwn CTF challenge end to end — triage the binary, find the memory-corruption bug, and build a pwntools exploit that lands a shell and reads the flag. Use when given an ELF challenge binary (often with a libc and an nc host:port), or when the user mentions buffer overflow, ret2libc, ROP…

not rated 51 16d ago A 95 tokens

secscan

535

atgreen/secscan-skill

Skill Claude CodeCodex

In-session, token-efficient LLM security scan of a repo (SAST triage). A lightweight, native Claude Code pipeline — survey → threat-model → deep-dive → adversarial-verify → report — using Read/Grep/Glob (and optional subagents), no external tooling. Use when asked to "security scan", "find vulnerabilities", "SAST"…

not rated 51 changed 1mo ago B 89 tokens original Apache-2.0

dep-cve

537

Pennantpholeap/r18-anthropics-claude-code-security

Command Claude Code

You are a senior Security & Compliance specialist. The user needs help with dep cve in the context of security audits, vulnerability management, gdpr/soc2/iso27001 compliance and incident response.

not rated 51 6mo ago A 0 tokens

web-vuln-audit

538

zhiyuwang720-dev/CodeAuditSkill

Skill Claude CodeCodex

A source-code security audit tool for web projects written in Go, Java, Python, PHP, or JavaScript. It checks for high- and medium-risk flaws and writes reports in the audited project’s reports/ folder.

not rated 51 +1 4mo ago A 172 tokens original MIT

dnstwist

539

w0h1v/mcp-dnstwist

MCP server Claude CodeCodexCursor +2

MCP server for dnstwist: detect typosquatting, phishing and brand impersonation domains. Runs locally from the @burtthecoder/mcp-dnstwist npm package. Needs 2 environment variables to run.

not rated 51 2d ago A tokens not measured original MIT

brin-check

541

superagent-ai/brin

Skill Claude CodeCodex

Scan packages, repositories, MCP servers, domains, web pages, and agent skills for security threats using the brin API. Use this skill before installing dependencies, visiting URLs, or integrating external resources.

not rated 50 7mo ago A 44 tokens

SafeAgent-Beihang/clawguard

Skill Claude CodeCodex

ClawGuard Threat Detector - Real-time behavioral monitoring, attack pattern detection, MITRE ATT&CK mapping, and AI-powered anomaly detection for OpenClaw runtime environments.

not rated 50 7mo ago A ✓ AI review 40 tokens

cursor

544

Synvoya/codeinspectus

Cursor rule Cursor

CodeInspectus — scan, surface findings, fix only with user consent.

not rated 50 changed 1mo ago A 1,125 tokens original Apache-2.0

dep-cve

545

victorsenatorbear59/r12-vincenthopf-my-claude-code-security

Command Claude Code

You are a senior Security & Compliance specialist. The user needs help with dep cve in the context of security audits, vulnerability management, gdpr/soc2/iso27001 compliance and incident response.

not rated 49 6mo ago A 0 tokens

cybercloudskills/cyber-cloud-skills

Skill Codex

Authorized Kubernetes, Docker, container runtime, workload and image supply-chain security testing. Use for scoped cluster, pod, node, container, registry or image assessment involving RBAC, service accounts, exposed control-plane services, workload isolation, runtime configuration, posture review, and explicitly…

not rated 49 2mo ago A 72 tokens

kali-tools

547

tzf1003/ChatKali

Skill Claude CodeCodex

Comprehensive reference for Kali Linux tools. Use this skill to find, understand, and use security tools in Kali Linux. It provides a categorized index of all available tools.

not rated 49 9mo ago A 38 tokens GPL-3.0

dep-cve

548

CraftsmanTuck/r08-composiohq-awesome-claude-skills-security

Command Claude Code

You are a senior Security & Compliance specialist. The user needs help with dep cve in the context of security audits, vulnerability management, gdpr/soc2/iso27001 compliance and incident response.

not rated 49 6mo ago A 0 tokens

attack-tx-analysis

550

BradMoonUESTC/TxAnalyzer

Skill Claude CodeCodex

Analyze blockchain attack transactions end-to-end: pull chain-specific artifacts first (EVM: traces, contract source, opcodes, selectors; Solana: transaction/meta payloads, instructions, logs, accounts, invoked program metadata), then perform the full EVM-oriented 6-phase root cause analysis with deep trust boundary…

not rated 49 6mo ago C 130 tokens GPL-3.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: