24,516 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Codex
Open security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust across MCP discovery, CVEs, SBOMs, CIS benchmarks (AWS, Azure, GCP, Snowflake), OWASP/NIST/MITRE compliance, AISVS v1.0, MAESTRO layer tagging, and vector database security checks. Use when the user mentions…
Plugin Claude Code
Bundles 12 skills · 584 tokens together
Skills for using the Pixee CLI: authentication, scans, workflows, repositories, findings, and API access.
Sushegaad/MCP-Server-for-ISO27001
MCP server Claude CodeCodexCursor +2
ISO 27001 compliance workspace for Claude. Risks, policies, SoA, evidence, and audit workflows. Runs locally from the iso27001-mcp npm package. Needs 4 environment variables to run.
Skill Claude CodeCodex
Configure multi-tenant organizations, manage members and invitations, define custom roles and permissions, set up teams, and implement RBAC using Better Auth's organization plugin. Use when users need org setup, team management, member roles, access control, or the Better Auth organization plugin.
Skill Claude CodeCodex
Secure API proxy that stores credentials encrypted and injects auth server-side. Use when: (1) making any external API call — "call the Stripe API", "enrich my data [from PeopleDataLabs]", "create an image [using Nano Banana API]", "use a [RapidAPI service]", (2) the user shares an API key, token, or secret — "here's…
MCP server Claude CodeCodexCursor +2
Yet Another Frida MCP Server - Full-featured MCP server for Frida dynamic instrumentation. Runs locally from the ya-frida-mcp Python package.
Skill Claude CodeCodex
Check a side-effectful action against this organization's approved gnt rules before taking it, and stop on a blocked or needshuman verdict.
Plugin Claude Code
Bundles 1 skill, 12 agents · 464 tokens together
Full penetration testing framework - 69 attack categories across 16 domains covering OWASP, injection, authentication, cloud, and more.
Cursor rule Cursor
WebSocket endpoints (runstreamrouter.py, graphdisplaystreamrouter.py, qastreamrouter.py) follow a shared pattern.
Skill OpenCode
Coordinate Proteus continuous vulnerability research with memory, campaigns, delegation, validation gates, and report-grade discipline.
MCP server Claude CodeCodexCursor +2
Lightweight, plug-and-play AI safety middleware that protects humans. Runs locally from the humane-proxy Python package. Needs 2 environment variables to run.
Skill Claude CodeCodex
Expert analysis of Rapid7 InsightVM data exported via Bulk Export API with strict MCP requirements.
systempromptio/systemprompt-template
Skill Claude CodeCodex
Drive every stage of the governance pipeline end to end, then prove that each decision was audited. This is the guided tour of the enforcement spine: the same four stages run on every tool call in the workspace.
Plugin Claude Code
Bundles 1 skill · 212 tokens together
Infisical access control and governance — roles and custom permissions, granular secret actions, ABAC, temporary access, approval workflows, and audit log streaming.
Skill Claude CodeCodex
Use Symaira Vault as the credential manager for AI agents through native MCP tools. Prefer this when storing, retrieving, generating, or rotating passwords, tokens, API keys, and TOTP codes.
axdithyaxo/mcp-forensic-toolkit
MCP server Claude CodeCodexCursor +2
MCP server "mcp-forensic-toolkit" as configured in axdithyaxo/mcp-forensic-toolkit. Runs locally from the mcp-forensic-toolkit Python package.
Plugin Claude Code
Bundles 1 skill · 0 tokens together
Integrate the Vouch Protocol: cryptographic identity and accountability for autonomous AI agents. Signing and verifying agent actions, did:web and did:key, Data Integrity proofs, the post-quantum proof set, delegation chains, and revocation, across SDKs on every major platform.
redhat-community-ai-tools/harness-eval
Plugin Claude Code
Bundles 5 skills, 6 commands · 285 tokens together
Evaluate AI agent setups for best practices, redundancy, security, and cross-component issues.
MCP server Claude CodeCodexCursor +2
A local MCP server for detecting and cleaning memory-resident malware in Java processes. It runs from a Python package using uvx, a tool that downloads and runs Python command-line packages.
Skill Claude Code
REQUIRED before declaring a task done when the diff touches user input, SQL, shell, auth, credentials, file paths, serialization, crypto, network endpoints, data deletion, or dependency surface. Judge by that surface, not the task label — research/experimental/local-only code with none of it can skip this. Walks…
MCP server Claude CodeCodexCursor +2
An MCP server for automatic license plate recognition. Remote server at {baseurl}.
Plugin Claude Code
Bundles 9 skills, 4 agents, 1 hook · 820 tokens together
Autonomous security auditor. Scans a GitHub repo for vulnerabilities, triages false positives, writes a PoC, fixes each confirmed bug in its own PR, independently reviews the fix, and merges when the review is clean.
Skill Claude Code
Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.
Plugin Claude Code
Bundles 2 skills, 2 commands, 5 hooks · 208 tokens together
Local-by-default, no-telemetry hooks inspect user prompts, supported tool inputs, outputs, and changed files in every enabled Claude Code or Codex session to block or mask secret leaks. Includes opt-in PII filtering and Git/CI backstops.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: