Security

26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

dep-cve

577

RestraintSound/r19-iannuttall-claude-agents-security

Command Claude Code

You are a senior Security & Compliance specialist. The user needs help with dep cve in the context of security audits, vulnerability management, gdpr/soc2/iso27001 compliance and incident response.

not rated 44 6mo ago A 0 tokens

access-control-review

578

Robotti-io/copilot-security-instructions

Skill Claude CodeCodex

Analyze repository-grounded identity, access control, and authorization design with evidence-first reporting and script-validated Mermaid diagrams.

not rated 44 +1 5mo ago A 27 tokens original Apache-2.0

agent-verifier

579

Aurite-ai/agent-verifier

Plugin Claude Code

Bundles 5 skills · 218 tokens together

Verifies AI agent code before it ships: hardcoded secrets, unbounded loops and retries, hallucinated tool references, oversized prompts, and language-specific quality checks. No telemetry.

not rated 44 changed 24d ago A tokens not measured original MIT

vulnmcp

580

vulnerability-lookup/VulnMCP

MCP server Claude CodeCodexCursor +2

MCP server "vulnmcp" as configured in vulnerability-lookup/VulnMCP. Runs locally from the vulnmcp Python package.

not rated 43 yesterday A tokens not measured AGPL-3.0

pe-reverse-analyzer

582

DamonZS/PE-reverse-skill

Skill Claude CodeCodex

A general reverse-engineering toolkit for Windows programs, Android apps, iOS apps, web interfaces, and APIs. Reverse engineering means examining software to understand how it works and, where appropriate, how to modify and rebuild it.

not rated 42 2mo ago A 90 tokens

kernel-vuln-analyzer

583

winmin/kernel-vuln-analyzer

Plugin Claude Code

Bundles 1 skill · 130 tokens together

Analyze Linux kernel vulnerabilities from KASAN/UBSAN/BUG crash logs or CVE descriptions. Full root cause analysis, exploitability assessment, patch development, and QEMU verification.

not rated 42 3mo ago A tokens not measured original MIT

ludus-mcp

584

NocteDefensor/LudusMCP

MCP server Claude CodeCodexCursor +2

MCP server for managing Ludus cybersecurity training environments through natural language commands. Runs locally from the ludus-mcp npm package.

not rated 41 6mo ago A tokens not measured GPL-3.0

auth

585

himself65/auth-spec

Plugin Claude Code

Bundles 2 skills · 93 tokens together

Auth skills for Claude Code — scaffold hand-rolled auth endpoints and audit auth code against security best practices.

not rated 41 28d ago A tokens not measured

skill-sanitizer

586

cyberxuan-XBX/skill-sanitizer

Skill Claude CodeCodex

Skill "skill-sanitizer" from cyberxuan-XBX/skill-sanitizer, covering skill sanitizer, why you need this, the 7 layers, usage and in python.

not rated 41 4mo ago A ✓ AI review 0 tokens original MIT

openclaw-plugin

587

christopherkarani/ryk

Skill Claude CodeCodex

Skill "openclaw-plugin" from christopherkarani/ryk, covering ryk, when to use ryk, how it works, prerequisites and example policy behavior.

not rated 41 +1 2mo ago A ✓ AI review 0 tokens original Apache-2.0

code-review

589

msober/mini-agent

Skill Claude CodeCodex

Perform thorough code reviews with security, performance, and maintainability analysis. Use when user asks to review code, check for bugs, or audit a codebase.

not rated 41 +1 7mo ago A 35 tokens

server-security-init

590

DeerYang/server-security-init-skill

Skill Codex

Use when safely initializing or hardening a newly installed or rebuilt Ubuntu/Debian server over SSH, including SSH keys, a non-root sudo user, SSH policy, server timezone, UFW, fail2ban, local SSH config, and lockout-safe verification.

not rated 41 2mo ago A SkillSpector: warn 57 tokens original MIT

nyxid-cli

591

ChronoAIProject/NyxID

Plugin Claude Code

Bundles 16 skills, 2 plugins · 1,929 tokens together

CLI edition: NyxID skills for agents that drive the nyxid CLI or the authenticated Web API, plus the synchronized Aevatar platform skill family. For the hosted MCP connection, install the nyxid plugin.

not rated 41 +1 changed 17d ago A tokens not measured original Apache-2.0

malicious

592

AIS2Lab/MCPSecBench

MCP server Claude CodeCodexCursor +2

One of 4 in claude_desktop_config.json

MCP server "malicious" as configured in AIS2Lab/MCPSecBench. Launched with uv --directory /usr/games/mcp/MCPSecCode/mcpbench run maliciousadd.py.

not rated 41 +1 8mo ago A tokens not measured original MIT

signet

593

Prismer-AI/signet

Plugin Claude Code

Bundles 1 skill, 1 hook · 16 tokens together

Cryptographic signing for every AI agent tool call — Ed25519 receipts + hash-chained audit log.

not rated 40 2d ago A tokens not measured original Apache-2.0

fortigate-mcp-server

594

alpadalar/fortigate-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "fortigate-mcp-server" as configured in alpadalar/fortigate-mcp-server. Runs locally from the fortigate-mcp-server Python package.

not rated 40 +1 16d ago A tokens not measured original MIT

swift-security-expert

595

ivan-magda/swift-security-skill

Plugin Claude Code

Bundles 1 skill · 122 tokens together

Expert guidance for Apple Keychain Services, biometric authentication, CryptoKit cryptography, credential lifecycle management, certificate trust, and OWASP compliance mapping.

not rated 40 4mo ago A tokens not measured original MIT

presio

596

benedict-armstrong/presio

MCP server Claude CodeCodexCursor +2

Present PDFs from the browser: upload to start a slideshow or validate Presio sidecars. No auth. Remote server at presio.xyz.

not rated 40 17d ago A tokens not measured original MIT

chambear2809/splunk-cisco-skills

Skill Codex

Use when installing or validating Cisco Isovalent products, or when mapping a product request to a supported, gated, or handoff workflow. Installs and operates the Kubernetes Cilium/Tetragon slice with Enterprise add-ons; inventories Isovalent Networking for Virtualization, Runtime Security, Isovalent Load Balancer…

not rated 40 changed 29d ago A SkillSpector: warn 146 tokens original Apache-2.0

persona-engineer

598

toolprint/awesome-mcp-personas

Agent Claude Code needs its repo

DevOps configuration validation specialist for MCP persona packages. Ensures schema compliance, security standards, and configuration integrity.

not rated 39 1y ago A 26 tokens original MIT

railguard

599

railyard-dev/railguard

Plugin Claude Code

Bundles 3 hooks

A secure runtime for Claude Code. Intercepts every tool call with policy-based allow/block/ask decisions, evasion detection, path fencing, file snapshots, and audit logging.

not rated 39 7mo ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: