26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
opensecurityarchitecture/osa-data
Skill Claude CodeCodex
Look up Open Security Architecture (OSA) security patterns, the NIST SP 800-53 controls each one calls for, the threats each control mitigates, and the matching clauses in 95 compliance frameworks (ISO 27001, PCI DSS, IEC 62443, NIS2, DORA, the EU Cyber Resilience Act and others). Use when someone asks which security…
TeamArtisanThrive/r03-anthropics-skills-security
Command Claude Code
You are a senior Security & Compliance specialist. The user needs help with dep cve in the context of security audits, vulnerability management, gdpr/soc2/iso27001 compliance and incident response.
senaykt/iac-security-scan-skills
Skill Claude CodeCodex
Deep IAM and identity-layer security analysis for Infrastructure-as-Code. Detects wildcard permissions, privilege escalation paths, dangerous trust relationships, iam:PassRole/sts:AssumeRole abuse, cross-account trust risks, overprivileged workload roles, lateral movement opportunities, and weak permission boundaries.…
protokol/solidity-typescript-hardhat-template
Agent Claude Code
Review Solidity contracts for security vulnerabilities, incentive design, and OpenZeppelin best practices.
Agent Claude Code
Part of the agentcheck package for automated code review. Analyzes security implications of code changes. Runs when user finishes commit work or requests agentic review. Relevant after any changes involving authentication, data handling, or external APIs. Focuses on new security risks introduced by modifications.…
salavender/antigravity-compound-engineering-plugin
Skill Claude CodeCodex needs its repo
Security & Authentication Specialist - Expert in JWT, cookie-based auth, MFA, and generic security patterns.
MCP server Claude CodeCodexCursor +2
Open-source AI security agent: SAST, DAST, and policy-as-code over MCP. Runs locally from the mythos-agent npm package.
Skill Claude CodeCodex
First-pass recon net for an Android APK — hunt secrets, insecure storage, weak crypto, broken TLS, and risky configuration in one broad sweep. Fires on manifest signals (android:debuggable="true", android:allowBackup="true", android:usesCleartextTraffic="true", a networkSecurityConfig that trusts user CAs or permits…
MCP server Claude CodeCodexCursor +2
Ephemora Cell — The execution layer for untrusted AI-generated code. Fast, capability-based WASM execution with explicit CPU, memory, time, I/O, and filesystem limits. Runs locally from the ephemora-cell Python package.
Cursor rule Cursor
Write detections, investigate alerts, and query logs from your favorite AI agents.
DensitySerfRemedy/r05-jqueryscript-awesome-claude-code-security
Command Claude Code
You are a senior Security & Compliance specialist. The user needs help with dep cve in the context of security audits, vulnerability management, gdpr/soc2/iso27001 compliance and incident response.
Skill Claude Code
Perform a security-focused code review of smart contracts, frontends, backends, and mobile apps. Use this skill for a security review, audit, vulnerability scan, or check of code for security issues, including reviewing a pull request, diff, or changed files, or asking "is this safe to merge or ship." Covers Solidity…
Skill Claude CodeCodex
Enforcement and accountability layer for AI agents. Bring your own identity (did:key, did:web, SPIFFE, OAuth, did:aps). Gateway enforcement boundary, monotonic narrowing, cascade revocation, spending controls, data lifecycle, observation governance (telemetry scopes, derivation rights, behavioral memory). Use when…
anthroos/claude-code-review-skill
Skill Claude CodeCodex
AI code review for PR or local changes. 280+ checks across security, architecture, performance, testing, and code quality. Posts findings as GitHub PR comments with confidence scores.
ChristophEnglisch/keycloak-model-context-protocol
MCP server Claude CodeCodexCursor +2
Manage Keycloak users, groups, roles and realms through the Keycloak Admin REST API. Runs locally from the keycloak-model-context-protocol npm package. Needs 14 environment variables to run.
Skill Claude CodeCodex
Set up WorkOS AuthKit sign-in in a project with npx workos@latest install, which needs no WorkOS account. Use when the user asks to add WorkOS or AuthKit authentication to an app, to scaffold a new app with WorkOS, or to claim the temporary WorkOS environment the installer created.
PulverizeDirector/b01-gbrain-security
Command Claude Code
You are a senior Security & Compliance specialist applying Threat Intelligence Brain methodology.
Avanderheyde/levelsio-vps-setup-skill
Skill Claude CodeCodex
Set up a web app on a single cheap, hardened VPS the "levels.io" way — one Hetzner/DigitalOcean box running Next.js (or any Node app) on SQLite + Caddy (auto-HTTPS) + systemd, secured with Tailscale, put behind a Cloudflare domain, and set up to charge money with Stripe. The whole "idea → app that makes money on a…
Skill Claude CodeCodex
Real-time AI agent security scanner. Detects prompt injection, jailbreak attempts, credential/secret leaks, PII exposure, and dangerous tool calls. Activate when: (1) scanning inbound messages or tool outputs for prompt injection, (2) checking outbound content for credential leaks or PII, (3) auditing agent session…
Plugin Claude Code
Bundles 3 skills, 23 agents · 1,077 tokens together
All-in-one Claude Code skill: build, fix, review, deploy with one /aura command. 46 modes, 23 agents, 6-layer security (OWASP+), 10 hooks, 8 languages, 55% token savings.
Cursor rule Cursor
Omni access & roles — determine a caller's capabilities from whoami before deciding where model or content changes live (branch vs workbook), and assign model roles correctly. Apply when reasoning about permissions, branching, or where a new field/metric should be modeled.
frangelbarrera/osint-agent-skills
MCP server Claude CodeCodexCursor +2
OSINT MCP server — 23 tools: DNS, WHOIS, Shodan, breaches, GEOINT, crypto. Works with Claude Code. Runs locally from the @frangelbarrera/osint-agent-skills npm package.
Skill Claude CodeCodex
A security checker for coding-agent skills that uses fixed checks and AI review to find possible vulnerabilities and threats.
Skill Claude Code
Deep-dive security risk analysis for a dependency flagged by uzomuzo diet.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: