26,960 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
MCP server Cursor
MCP server "tirith-gateway" as configured in sheeki03/tirith. Launched with tirith gateway run --upstream-bin tirith --upstream-arg mcp-server --config ~/.c.
Skill Claude CodeCodex needs its repo ✓ vendor
Calculates the final risk score based on empirical evidence and architectural impact. Use when findings have been fully processed by previous stages and you need to append final risk scores to the finding files. Don't use for discovering new vulnerabilities or writing patches.
cisco-ai-defense/skill-scanner
Cursor rule Cursor
Framework & language security guides (Django/DRF, Laravel/Symfony/Rails, .NET, Java/JAAS, Node.js, PHP config).
Plugin Claude Code
Bundles 1 skill · 134 tokens together
A security testing tool for Apache Shiro, a Java framework used for user login and access control. It covers Shiro-550 vulnerability testing, including key guessing, gadget-chain detection, command execution, memory-shell injection, and key changes.
Skill Claude CodeCodex needs its repo
Business logic vulnerability playbook. Use when reasoning about workflows, race conditions, price manipulation, coupon abuse, state machines, and multi-step authorization gaps.
Skill Codex needs its repo
A scripted workflow for Kunlun-M, a static security scanner that examines source code without running it. It supports PHP, JavaScript, Solidity smart contracts, and Chrome extensions, and can create scanner rules and tamper settings.
Plugin Claude Code
Marketplace for pentest-ai-agents — specialist Claude Code subagents for authorized penetration testing.
Skill Claude CodeCodex
Configure fnox secret providers and profiles, inject secrets into commands, and diagnose missing secrets or authentication failures. Use for fnox.toml and fnox CLI workflows.
Skill Codex needs its repo
Choose or maintain repository Make/script workflows, builds, dependency selection, generated artifacts, and security CLI tools. Routes release work and documents local administration and standalone login commands.
Skill Claude CodeCodex
A procedure for auditing Java archive files for security problems using evidence stored in SQLite. A Java archive, or JAR, is a packaged file containing Java code and resources.
MCP server Claude CodeCodexCursor +2
MCP server "qu1cksc0pe" as configured in CYB3RMX/Qu1cksc0pe. Runs qu1cksc0pe.py with python3. Needs 1 environment variable to run.
MCP server Claude CodeCodexCursor +2
Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains. Runs locally from the @jshookmcp/jshook npm package.
Plugin Claude Code
Bundles 1 skill · 33 tokens together
Drive the agesec security harness through a policy-constrained CLI loop.
Skill Claude CodeCodex
Use this skill when the user wants to brute-force credentials, spray passwords, or enumerate services/subdomains against any network protocol (HTTP, SSH, FTP, SMB, RDP, databases, mail protocols, DNS, etc.) using legba. Also use it when the user asks how to use legba, how to write a recipe, how to configure the REST…
Plugin Claude Code
Bundles 6 skills, 1 hook · 477 tokens together
Block destructive commands and secret access.
Skill Claude CodeCodex
An enterprise-grade, AI-powered penetration testing automation CLI tool. Orchestrates multiple specialized AI agents (Planner, ToolAgent, Analyst, Reporter) backed by 4 AI providers (OpenAI, Claude, Gemini, OpenRouter) and 19 integrated security tools through YAML-defined workflows. Produces professional Markdown…
cloudflare/workers-oauth-provider
Skill Claude CodeCodex ✓ vendor
Upgrade a Cloudflare Worker's @cloudflare/workers-oauth-provider from 0.x, 1.0 or 1.1 to the latest 1.x. Use when bumping that dependency, or when OAuthProvider / OAuthAuthorizationServer / OAuthResourceServer construction throws after an upgrade.
Skill Claude CodeCodex
Use when operating the metabigor CLI for OSINT recon and infrastructure mapping without API keys. Covers finding network ranges from an ASN, org, domain, or IP (net); enumerating subdomains from certificate logs (cert); enriching IPs with ports/CVEs via Shodan InternetDB (ip); searching public GitHub code for secrets…
Plugin Claude Code
Bundles 2 skills, 1 MCP server · 156 tokens together
Passive OSINT and external exposure checks for domains, IPs and organizations: skills /osint and /exposure plus the OpenOSINT MCP server (passive mode).
Skill Claude CodeCodex
Subprocess CLI for ST3GG steganography — encode/decode, steganalysis, PNG chunk/EXIF injection, and AI red-team payloads. Runs as subprocess so output stays out of context. Use when hiding data in images, analyzing images for hidden content, injecting metadata, crafting steganographic PoCs, or detecting steganographic…
Skill Claude CodeCodex
A methodology for moving from a compromised Azure or Entra ID cloud account into an on-premises Active Directory network. Active Directory is commonly used to manage users and computers inside an organization.
Plugin Claude Code
Bundles 1 skill · 202 tokens together
WooYun business logic vulnerability methodology — security testing skill based on 22,132 real vulnerability cases covering 6 domains and 33 vulnerability classes.
MCP server Claude CodeCodexCursor +2
MCP server "cve-mcp" as configured in mukul975/cve-mcp-server. Runs cve_mcp.server with python. Needs 4 environment variables to run.
Plugin Claude Code
Bundles 2 skills · 63 tokens together
Quark Engine skills for Claude Code: run APK malware analysis and generate detection rules.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: