24,516 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Plugin Claude Code
Bundles 1 skill · 142 tokens together
Every Avanan (Check Point Harmony Email and Collaboration) API operation, plus shift-start triage, phishing campaign clustering, single-message lifecycle timelines, one exception lookup across all seven security engines, and cross-tenant MSP fleet rollups that a stateless API mirror cannot answer in a single call.
sandraschi/windows-computer-use-mcp
Skill Claude CodeCodex
How to use windows-computer-use-mcp effectively — tool selection, focus rules, safety, and mission design.
Plugin Claude Code
Bundles 16 skills, 1 plugin · 1,929 tokens together
Brokers credentials for downstream services so agents never see raw keys or tokens, and bundles the synchronized Aevatar platform skill family. Operates through the NyxID CLI or authenticated Web API.
Plugin Claude Code
Bundles 4 skills, 4 agents, 3 hooks · 233 tokens together
A plugin to clone dependencies you don't trust. No more supply chain attacks.
frendysanusi/claude-pentest-skills
Skill Claude CodeCodex
Structured web application penetration testing with OWASP methodology, curated payload references, 6-gate validation, and professional report generation.
Vorim-AI-Labs/vorim-openclaw-skill
Skill Claude CodeCodex
AI agent identity, permissions, trust scores, and audit trails via Vorim AI. Gives your OpenClaw agent a cryptographic identity so every action is verified, permissioned, and logged.
MCP server Claude CodeCodexCursor +2
One of 4 in claude_desktop_config.json
MCP server "malicious" as configured in AIS2Lab/MCPSecBench. Launched with uv --directory /usr/games/mcp/MCPSecCode/mcpbench run maliciousadd.py.
MCP server Claude CodeCodexCursor +2
Lightweight MCP server for Ghidra-based reverse engineering with iOS, Linux, and game file support. Runs locally from the pyghidra-lite Python package. Needs 1 environment variable to run.
Yems221/securebydesign-llmskill
Skill Claude CodeCodex
Enforce security-by-design in every line of code, architecture decision, and system recommendation. Activate whenever the user is: building an app, writing code, designing an API, setting up infrastructure, integrating an LLM, reviewing code, planning a deployment, or asking about authentication, data storage, or…
Cursor rule Cursor
Omni access & roles — determine a caller's capabilities from whoami before deciding where model or content changes live (branch vs workbook), and assign model roles correctly. Apply when reasoning about permissions, branching, or where a new field/metric should be modeled.
Skill Claude CodeCodex
A security and deployment guide for the Dify platform, an application for building AI-powered services.
alpadalar/fortigate-mcp-server
MCP server Claude CodeCodexCursor +2
MCP server "fortigate-mcp-server" as configured in alpadalar/fortigate-mcp-server. Runs locally from the fortigate-mcp-server Python package.
advanced-security/codeql-development-mcp-server
Agent Claude Code
Create CodeQL query development workshops from production-grade queries.
MCP server Claude CodeCodexCursor +2
Model Context Protocol (MCP) server for Firewalla MSP API - Provides real-time network monitoring, security analysis, and firewall management through 28 specialized tools compatible with any MCP client. Runs locally from the firewalla-mcp-server npm package.
Skill Claude CodeCodex
Use for ANY bug bounty, penetration test, or web/API/mobile security assessment: recon, testing endpoints, analyzing Burp traffic or any bug-bounty platform's MCP (HackerOne, Intigriti, Bugcrowd, YesWeHack, Immunefi), reviewing APKs, bypassing a WAF, enforcing scope, hunting a specific vuln class, validating findings…
wrsmith108/varlock-claude-skill
Plugin Claude Code
Bundles 1 skill · 73 tokens together
Secure environment variable management with Varlock for secrets, API keys, credentials, and sensitive configuration.
Skill Claude CodeCodex
Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services.
Skill Claude CodeCodex
Audit this machine's AI coding sessions and assistant configs with skarn. Use when the user says scan this with skarn, run skarn, or skarn audit; asks whether a secret leaked into an AI coding session; wants an assistant config (hooks, MCP servers, permissions, plugins) vetted; or asks whether a Claude Code, Codex…
Plugin Cursor
47 security research tools over remote MCP — CVE + EPSS/KEV, MITRE CWE catalog + KEV detail, domain audit + DNS/SSL/WHOIS/subdomain enum + WAF detect, IP threat intel + cloud/Tor/FireHOL classification, IOC enrichment (ThreatFox/Feodo/URLhaus), email/phone/username OSINT, code security checks, MITRE ATLAS AI/ML attack.
MCP server Claude CodeCodexCursor +2
Evernote note management with OAuth and ENML conversion. Runs locally from the @verygoodplugins/mcp-evernote npm package.
Plugin Claude Code
Bundles 1 skill, 6 commands, 1 hook · 193 tokens together
Pre-execution safety layer that blocks dangerous shell commands and credential file reads using pattern matching + LLM analysis. Fail-closed design.
MCP server Claude CodeCodexCursor +2
MCP server that simulates malicious behaviors for security testing. Runs locally from the @promptfoo/evil-mcp-server npm package.
ivan-magda/swift-security-skill
Plugin Claude Code
Bundles 1 skill · 122 tokens together
Expert guidance for Apple Keychain Services, biometric authentication, CryptoKit cryptography, credential lifecycle management, certificate trust, and OWASP compliance mapping.
Agent Claude Code
MySQL database specialist for query optimization, schema design, security, and performance. Use PROACTIVELY when writing SQL, creating migrations, designing schemas, or troubleshooting database performance.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: