26,946 mods in this category, of every kind an
agent can take. Each one carries what it costs per session, what the
scan found, and whether it is the original.
Offline compliance and hygiene scanning of an AAB or APK with gplay preflight — manifest flags, restricted permissions, 64-bit and 16 KB page alignment, listing assets, secrets, billing, privacy SDKs, target API floor, and size. Use before uploading a build, as a CI gate, or when diagnosing a Play rejection. Runs…
Security audit patterns (OWASP Top 10, CWE Top 25 2025, CVSS v4.0) and GitHub project security checks for any project. Deep automated PHP/TYPO3 scanning with 80+ checkpoints, 41 reference guides, PreToolUse warnings. By Netresearch.
★not rated 52▲
+1
changed 2d agoA
tokens not measured
Cross-vendor security awareness operations — training completion tracking, phishing simulation results, and per-user risk scoring across whatever security-awareness training tools you have connected. Complements secops-pack's technical threat response with the human-layer prevention side.
★not rated 52 yesterdayA
tokens not measured
originalApache-2.0
Capability-aware MCP client for a Docker-hosted Kali Linux tools API. Runs locally from the zebbern-kali-mcp Python package. Needs 1 environment variable to run.
★not rated 52 1mo agoASocket: warn
tokens not measured
originalMIT
Solve a binary-exploitation / pwn CTF challenge end to end — triage the binary, find the memory-corruption bug, and build a pwntools exploit that lands a shell and reads the flag. Use when given an ELF challenge binary (often with a libc and an nc host:port), or when the user mentions buffer overflow, ret2libc, ROP…
In-session, token-efficient LLM security scan of a repo (SAST triage). A lightweight, native Claude Code pipeline — survey → threat-model → deep-dive → adversarial-verify → report — using Read/Grep/Glob (and optional subagents), no external tooling. Use when asked to "security scan", "find vulnerabilities", "SAST"…
You are a senior Security & Compliance specialist. The user needs help with dep cve in the context of security audits, vulnerability management, gdpr/soc2/iso27001 compliance and incident response.
You are a senior Security & Compliance specialist. The user needs help with dep cve in the context of security audits, vulnerability management, gdpr/soc2/iso27001 compliance and incident response.
A source-code security audit tool for web projects written in Go, Java, Python, PHP, or JavaScript. It checks for high- and medium-risk flaws and writes reports in the audited project’s reports/ folder.
MCP server for dnstwist: detect typosquatting, phishing and brand impersonation domains. Runs locally from the @burtthecoder/mcp-dnstwist npm package. Needs 2 environment variables to run.
★not rated 51 2d agoA
tokens not measured
originalMIT
You are a senior Security & Compliance specialist. The user needs help with dep cve in the context of security audits, vulnerability management, gdpr/soc2/iso27001 compliance and incident response.
Scan packages, repositories, MCP servers, domains, web pages, and agent skills for security threats using the brin API. Use this skill before installing dependencies, visiting URLs, or integrating external resources.
You are a senior Security & Compliance specialist. The user needs help with dep cve in the context of security audits, vulnerability management, gdpr/soc2/iso27001 compliance and incident response.
Comprehensive reference for Kali Linux tools. Use this skill to find, understand, and use security tools in Kali Linux. It provides a categorized index of all available tools.
You are a senior Security & Compliance specialist. The user needs help with dep cve in the context of security audits, vulnerability management, gdpr/soc2/iso27001 compliance and incident response.
Analyze blockchain attack transactions end-to-end: pull chain-specific artifacts first (EVM: traces, contract source, opcodes, selectors; Solana: transaction/meta payloads, instructions, logs, accounts, invoked program metadata), then perform the full EVM-oriented 6-phase root cause analysis with deep trust boundary…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: