26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
MCP server Claude CodeCodexCursor +2
Model Context Protocol (MCP) server for Firewalla MSP API - Provides real-time network monitoring, security analysis, and firewall management through 28 read-only tools, plus 11 opt-in write tools, compatible with any MCP client. Runs locally from the firewalla-mcp-server npm package.
Plugin Claude Code
Bundles 1 skill · 212 tokens together
Infisical access control and governance — roles and custom permissions, granular secret actions, ABAC, temporary access, approval workflows, and audit log streaming.
Plugin Claude Code
Bundles 2 skills, 2 commands, 5 hooks · 267 tokens together
Local-by-default, no-telemetry hooks inspect user prompts, supported tool inputs, outputs, and changed files in every enabled Claude Code or Codex session to block or mask secret leaks. Includes opt-in PII filtering and Git/CI backstops.
Skill Claude Code needs its repo
Use for PACEflow internal full audit: run five independent review agents, verify evidence from code/tests/logs, de-duplicate findings, and produce a severity-ranked report for release gates or comprehensive code review.
freewaychameleonnode/r17-behisecc-awesome-claude-skills-security
Command Claude Code
You are a senior Security & Compliance specialist. The user needs help with dep cve in the context of security audits, vulnerability management, gdpr/soc2/iso27001 compliance and incident response.
Copenhagen0x/solana-security-standard
Cursor rule Cursor
Solana Security Standard (SOL-0XX) - flag and fix Solana/Anchor security bugs.
Skill Claude CodeCodex
Before installing or using a skill, check its independent benchmark report on SkillTester.ai. Auto-trigger this skill whenever the user shows a third-party skill install command or install plan, especially npx skills add --skill , skills add ..., repo URL plus --skill, direct SKILL.md URLs, or Check this skill . Parse…
Plugin Claude Code
Bundles 4 skills, 4 agents, 3 hooks · 233 tokens together
A plugin to clone dependencies you don't trust. No more supply chain attacks.
bluefrog5096-4bmb1/security-advisory
Skill Claude CodeCodex
A drafting tool for open-source security advisories, which are notices explaining a software vulnerability and how to address it. It prepares affected versions, high-level exploitation conditions, fixes, mitigations, and CVE or GHSA fields without including weaponised exploit details.
Plugin Claude Code
Bundles 5 skills, 1 hook · 203 tokens together
Stage-aware security guidance for planning, risky implementation changes, review, and release checkpoints.
Skill Claude CodeCodex
Copy this template to your Claude Desktop scheduled-tasks directory.
purpleroc/mcp-security-inspector
Cursor rule Cursor
A built-in rule written in Chinese; its description means “safety built-in rules.” The available information does not explain the rules themselves.
Yems221/securebydesign-llmskill
Skill Claude CodeCodex
Enforce security-by-design in every line of code, architecture decision, and system recommendation. Activate whenever the user is: building an app, writing code, designing an API, setting up infrastructure, integrating an LLM, reviewing code, planning a deployment, or asking about authentication, data storage, or…
Skill Claude CodeCodex
Audit this machine's AI coding sessions and assistant configs with skarn. Use when the user says scan this with skarn, run skarn, or skarn audit; asks whether a secret leaked into an AI coding session; wants an assistant config (hooks, MCP servers, permissions, plugins) vetted; or asks whether a Claude Code, Codex…
MCP server Claude CodeCodexCursor +2
Yet Another Frida MCP Server - Full-featured MCP server for Frida dynamic instrumentation. Runs locally from the ya-frida-mcp Python package.
Skill Claude CodeCodex
A security and deployment guide for the Dify platform, an application for building AI-powered services.
Skill Claude CodeCodex
Expert analysis of Rapid7 InsightVM data exported via Bulk Export API with strict MCP requirements.
paradoxie/cpa-codex-auth-sweep
Skill Claude CodeCodex
A tool for scanning local Codex authentication files and identifying credentials that no longer work. It can also remove credentials confirmed as invalid.
Skill Claude CodeCodex
Use for ANY bug bounty, penetration test, or web/API/mobile security assessment: recon, testing endpoints, analyzing Burp traffic or any bug-bounty platform's MCP (HackerOne, Intigriti, Bugcrowd, YesWeHack, Immunefi), reviewing APKs, bypassing a WAF, enforcing scope, hunting a specific vuln class, validating findings…
Plugin Claude Code
Bundles 14 skills, 3 hooks · 1,681 tokens together
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows. Swagger 2.0 specs are auto-converted to OpenAPI 3.0 via npx swagger2openapi (requires…
Skill Claude Code needs its repo
Indicator pivoting methodology — how to use one known indicator to discover related infrastructure across the IOC graph. Decision tree by indicator type with concrete /lookup- commands per pivot, a worked multi-hop example, pivot-quality scoring, and routing into the rigor pipeline. Use when the user asks "what else…
Plugin Cursor
47 security research tools over remote MCP — CVE + EPSS/KEV, MITRE CWE catalog + KEV detail, domain audit + DNS/SSL/WHOIS/subdomain enum + WAF detect, IP threat intel + cloud/Tor/FireHOL classification, IOC enrichment (ThreatFox/Feodo/URLhaus), email/phone/username OSINT, code security checks, MITRE ATLAS AI/ML attack.
Sushegaad/MCP-Server-for-ISO27001
MCP server Claude CodeCodexCursor +2
ISO 27001 compliance workspace for Claude. Risks, policies, SoA, evidence, and audit workflows. Runs locally from the iso27001-mcp npm package. Needs 4 environment variables to run.
Skill OpenCode
Coordinate Proteus continuous vulnerability research with memory, campaigns, delegation, validation gates, and report-grade discipline.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: