26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
redhat-community-ai-tools/harness-eval
Plugin Claude Code
Bundles 4 skills, 5 commands · 313 tokens together
Evaluate AI agent setups for best practices, redundancy, security, and cross-component issues.
ludo-technologies/python-best-practices
Skill Claude Code
FastAPI web application best practices covering authentication and authorization, SQLAlchemy 2.0 async sessions, transactions, eager loading, and Alembic migrations, non-blocking I/O and shared HTTP clients, request/response schemas, error responses, pagination, typed settings, app factory and lifespan, request-ID…
MCP server Claude CodeCodexCursor +2
MCP server that simulates malicious behaviors for security testing. Runs locally from the @promptfoo/evil-mcp-server npm package.
Skill Claude CodeCodex
Drive the ReconBridge toolchain to reverse-engineer / recon / tamper Android apps on a rooted (KernelSU) device from the PC side. Use whenever the task involves: pulling an APK or native .so off a device, decompiling with jadx, locating classes/methods with DexKit/androguard, Ghidra native analysis, hooking or tracing…
Skill Claude CodeCodex
Review Flutter Android APK/AAB release artifacts for manifest, permission, cleartext traffic, exported component, embedded secret, signing, size, WebView, deep link, and third-party service risks.
wrsmith108/varlock-claude-skill
Plugin Claude Code
Bundles 1 skill · 73 tokens together
Secure environment variable management with Varlock for secrets, API keys, credentials, and sensitive configuration.
Skill Claude CodeCodex
Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services.
MCP server Claude CodeCodexCursor +2
Evernote note management with OAuth and ENML conversion. Runs locally from the @verygoodplugins/mcp-evernote npm package.
Skill Claude CodeCodex
Use Symaira Vault as the credential manager for AI agents through native MCP tools. Prefer this when storing, retrieving, generating, or rotating passwords, tokens, API keys, and TOTP codes.
Plugin Cursor ✓ vendor
Bundles 30 skills, 1 MCP server · 2,190 tokens together
Elastic skills and documentation — Elasticsearch, Kibana, Observability, Security, Cloud, ES|QL, OpenTelemetry, and MCP docs access.
Skill Claude CodeCodex
Deploy, verify, and troubleshoot the TFE SAML lab in hal. Use this skill when the user asks to enable SAML SSO for TFE, set up TFE single sign-on, debug SAML redirects or attribute mapping, configure SCIM provisioning for TFE teams, or reset the TFE SSO demo. Triggers include "enable saml", "TFE SSO", "TFE SAML"…
Plugin Claude Code
Bundles 1 skill, 6 commands, 1 hook · 193 tokens together
Pre-execution safety layer that blocks dangerous shell commands and credential file reads using pattern matching + LLM analysis. Fail-closed design.
Skill Claude CodeCodex
Execute requested Python code inside an isolated CubeSandbox MicroVM. Use when the user explicitly asks for CubeSandbox, MicroVM isolation, offline execution, or proof that code did not run on the DSH host.
Agent Claude Code
MySQL database specialist for query optimization, schema design, security, and performance. Use PROACTIVELY when writing SQL, creating migrations, designing schemas, or troubleshooting database performance.
MCP server Claude CodeCodexCursor +2
Local MCP proxy for tool restrictions, response redaction, audit logs, and database schema context. Runs locally from the januscope npm package. Needs 3 environment variables to run.
Skill Claude CodeCodex
Open security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust across MCP discovery, CVEs, SBOMs, CIS benchmarks (AWS, Azure, GCP, Snowflake), OWASP/NIST/MITRE compliance, AISVS v1.0, MAESTRO layer tagging, and vector database security checks. Use when the user mentions…
Plugin Claude Code
Bundles 17 skills · 717 tokens together
Skills for using the Pixee CLI: authentication, scans, workflows, repositories, findings, and API access.
Skill Claude Code
Use when the user says "/bugcheck", "/mxBugChecker", "check for bugs", "find bugs", "audit for vulnerabilities", "verify the code", "look for issues in this file", or otherwise requests bug analysis on VCS changes or specific files. Verified-knowledge bug finder — every finding requires concrete code proof. Analyzes…
Skill Claude CodeCodex
Composes multi-step exploit chains by correlating vulnerabilities across domains, calculates real impact of chained findings, generates end-to-end PoC scripts, and produces bug bounty ready reports. Use when user asks to "chain vulnerabilities", "compose exploit chain", "correlate findings", "calculate real impact"…
Agent Claude Code
Principal automotive SE specializing in ISO 26262 ASIL allocation, AUTOSAR Classic/Adaptive architecture, ISO 21434 cybersecurity, SOTIF, and multi-tool MBSE crosswalks for ADAS and powertrain programs.
Skill Codex
Audit, clean, and when explicitly requested uninstall local Claude Code, Claude Desktop/PWA, Anthropic browser bridges/extensions, auth/config residue, CC Switch app/data/routes, Claude network signals, DNS/WebRTC leaks, browser locale/timezone/font signals, PWR fingerprint signals, environment fingerprint baseline…
Plugin Claude Code
Bundles 22 skills, 3 commands, 1 agent · 2,278 tokens together
Coding guidelines and review tools. Skills for general coding, Ruby, Rails (including problem-details errors, protobuf-native APIs, psqldef schemas, Aurora DSQL, and running on AWS Lambda), Sorbet and Steep typing and adoption, developer toolchain (mise, hk), Rust, Terraform, GitHub Actions workflows, security, git…
Plugin Claude Code
Bundles 5 skills · 201 tokens together
ServiceNow Fluent (now-sdk) skills for building applications, querying live instances, and running security, general best-practice, performance, and domain separation (MSP) reviews.
Skill Claude CodeCodex
Secure API proxy that stores credentials encrypted and injects auth server-side. Use when: (1) making any external API call — "call the Stripe API", "enrich my data [from PeopleDataLabs]", "create an image [using Nano Banana API]", "use a [RapidAPI service]", (2) the user shares an API key, token, or secret — "here's…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: