Security

24,516 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

aurakit

529

smorky850612/Aurakit

Plugin Claude Code

Bundles 3 skills, 23 agents · 1,077 tokens together

All-in-one Claude Code skill: build, fix, review, deploy with one /aura command. 46 modes, 23 agents, 6-layer security (OWASP+), 10 hooks, 8 languages, 55% token savings.

not rated 41 +1 4mo ago A tokens not measured original MIT

security-audit

530

netresearch/security-audit-skill

Plugin Claude Code

Bundles 1 skill, 1 hook · 61 tokens together

Security audit patterns (OWASP Top 10, CWE Top 25 2025, CVSS v4.0) and GitHub project security checks for any project. Deep automated PHP/TYPO3 scanning with 80+ checkpoints, 19 reference guides, PreToolUse warnings. By Netresearch.

not rated 41 +1 changed 6d ago A tokens not measured

agent-governance

531

agentrust-io/awesome-ai-governance

Skill Claude CodeCodex

Patterns and techniques for adding governance, safety, and trust controls to AI agent systems. Use this skill when: Building AI agents that call external tools (APIs, databases, file systems) Implementing policy-based access controls for agent tool usage Adding semantic intent classification to detect dangerous…

not rated 41 +2 2d ago A 126 tokens copy · 100% CC0-1.0

skill-sanitizer

532

cyberxuan-XBX/skill-sanitizer

Skill Claude CodeCodex

Skill "skill-sanitizer" from cyberxuan-XBX/skill-sanitizer, covering skill sanitizer, why you need this, the 7 layers, usage and in python.

not rated 40 2mo ago A ✓ AI review 0 tokens original MIT

code-review

533

anthroos/claude-code-review-skill

Skill Claude CodeCodex

AI code review for PR or local changes. 280+ checks across security, architecture, performance, testing, and code quality. Posts findings as GitHub PR comments with confidence scores.

not rated 40 +1 6mo ago A 40 tokens copy · 97% MIT

masvs-checklist

534

dweinstein/mobile-security-skills

Skill Claude Code

Generate a MASVS v2 compliance checklist with MASTG test mappings for a mobile app. Use when you need a complete security checklist, compliance tracking document, or gap analysis against OWASP MASVS for Android or iOS apps.

not rated 40 +1 6mo ago A 52 tokens

persona-engineer

535

toolprint/awesome-mcp-personas

Agent Claude Code needs its repo

DevOps configuration validation specialist for MCP persona packages. Ensures schema compliance, security standards, and configuration integrity.

not rated 39 12mo ago A 26 tokens original MIT

openclaw-plugin

536

christopherkarani/ryk

Skill Claude CodeCodex

Skill "openclaw-plugin" from christopherkarani/ryk, covering ryk, when to use ryk, how it works, prerequisites and example policy behavior.

not rated 39 20d ago A ✓ AI review 0 tokens original Apache-2.0

code-review

538

msober/mini-agent

Skill Claude CodeCodex

Perform thorough code reviews with security, performance, and maintainability analysis. Use when user asks to review code, check for bugs, or audit a codebase.

not rated 39 5mo ago A 35 tokens

security-advisory

539

bluefrog5096-4bmb1/security-advisory

Skill Claude CodeCodex

A drafting tool for open-source security advisories, which are notices explaining a software vulnerability and how to address it. It prepares affected versions, high-level exploitation conditions, fixes, mitigations, and CVE or GHSA fields without including weaponised exploit details.

not rated 39 +12 1mo ago A 117 tokens original MIT

railguard

540

railyard-dev/railguard

Plugin Claude Code

Bundles 3 hooks

A secure runtime for Claude Code. Intercepts every tool call with policy-based allow/block/ask decisions, evasion detection, path fencing, file snapshots, and audit logging.

not rated 38 5mo ago A tokens not measured original MIT

audit

542

paceaitian/paceflow

Skill Claude Code needs its repo

Use for PACEflow internal full audit: run five independent review agents, verify evidence from code/tests/logs, de-duplicate findings, and produce a severity-ranked report for release gates or comprehensive code review.

not rated 38 23d ago A SkillSpector: pass 44 tokens original MIT

signet

543

Prismer-AI/signet

Plugin Claude Code

Bundles 1 skill, 1 hook · 16 tokens together

Cryptographic signing for every AI agent tool call — Ed25519 receipts + hash-chained audit log.

not rated 38 3mo ago A tokens not measured original Apache-2.0

server-security-init

545

DeerYang/server-security-init-skill

Skill Codex

Use when safely initializing or hardening a newly installed or rebuilt Ubuntu/Debian server over SSH, including SSH keys, a non-root sudo user, SSH policy, server timezone, UFW, fail2ban, local SSH config, and lockout-safe verification.

not rated 38 16d ago A SkillSpector: warn 57 tokens original MIT

viberaven-core

546

ohad6k/VibeRaven

Cursor rule Cursor

VibeRaven production gate — canonical agent commands and gate loop.

not rated 38 +3 1mo ago A 201 tokens original MIT

openghost-skill

548

VAIBHAVSING/openghost

Skill Codex

Local open-source Agent Skill for authorized web application, API, browser, business-logic, and supporting server-integrity penetration testing. Use for scoped OWASP WSTG, ASVS, and API Security assessments; authenticated and multi-role validation; attack-surface mapping; bounded DAST; evidence-backed findings…

not rated 37 1mo ago A SkillSpector: pass 120 tokens original Apache-2.0

rule

550

purpleroc/mcp-security-inspector

Cursor rule Cursor

A built-in rule written in Chinese; its description means “safety built-in rules.” The available information does not explain the rules themselves.

not rated 37 3mo ago A 46 tokens

cpa-codex-auth-sweep

551

paradoxie/cpa-codex-auth-sweep

Skill Claude CodeCodex

A tool for scanning local Codex authentication files and identifying credentials that no longer work. It can also remove credentials confirmed as invalid.

not rated 37 2mo ago A 55 tokens original MIT

skilltester

552

skilltester-ai/skilltester

Skill Claude CodeCodex

Before installing or using a skill, check its independent benchmark report on SkillTester.ai. Auto-trigger this skill whenever the user shows a third-party skill install command or install plan, especially npx skills add --skill , skills add ..., repo URL plus --skill, direct SKILL.md URLs, or Check this skill . Parse…

not rated 37 2mo ago A 134 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: