29,896 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Plugin Claude Code
Bundles 2 skills, 5 commands · 410 tokens together
AI Shipping Kit — for PMs and founders accountable for AI-built code. Document a vibe-coded app, audit it for intended-vs-implemented security gaps and performance issues, and produce a reviewer-ready shipping packet.
Instructions file
Claude Code instructions for JimLiu/baoyu-skills, covering claude.md, architecture, running skills, key dependencies and security.
Agent
This codebase uses Drizzle ORM with SQLite. All database queries must use parameterized SQL so user-controlled input never changes query structure.
Agent Claude Code
Use this agent when you need to conduct in-depth technical research on complex topics, technologies, or architectural decisions. This includes investigating new frameworks, analyzing security vulnerabilities, evaluating third-party APIs, researching performance optimization strategies, or generating technical…
Skill Claude CodeCodex
Expert guide for using n8n-mcp MCP tools effectively. Use when searching for nodes, validating configurations, accessing templates, managing workflows, organizing workflows into folders, managing credentials, auditing instance security, or using any n8n-mcp tool. Provides tool selection guidance, parameter formats…
Agent Codex
Use this agent when the user wants code reviewed, asks for feedback on changes, or before creating a PR. Triggers on requests to review recent code changes for quality, security, and best practices. Context: User finished implementing a feature user: "Review my changes" assistant: "I'll use the code-reviewer agent to…
Cursor rule Cursor
You're building an Electron app following good security practices.
Agent
Anthropic-family deep-analysis agent — the top-rung scrutiny pass added on top of super-sensitive work (public LifeOS releases, security boundaries, irreversible or publish-bound actions). Pinned to the fable alias, which always resolves to Anthropic's latest top model. Read-only: Edit/Write/NotebookEdit are denied at…
Instructions file
Claude Code instructions for wasp-lang/wasp, a project described as: The batteries-included full-stack framework for the AI era. Develop JS/TS web apps (React, Node.js, and Prisma) using declarative code that abstracts away complex full-stack features like auth, background jobs, RPC, email sending, end-to-end type…
Skill Claude CodeCodex
Ephemeral microVM sandboxes for running untrusted or agent-generated code in isolation — a one-call run path, a create/exec/stop lifecycle, and a set of filesystem operations.
Skill Claude CodeCodex
Develop, build, and debug the LangBot core backend and web frontend. Use when working inside the LangBot repository — backend (Python/Quart, src/langbot/pkg), the Vite/React web UI, HTTP API controllers/services, Alembic migrations, or the MCP server. Covers the dev environment (uv, pnpm), repo layout, the API auth…
Instructions file CodexOpenCode
AGENTS.md instructions for browser-use/browser-harness, covering code priorities, commands, doctor — install/daemon/browser state, unit tests (no live browser) and security.
Instructions file CodexOpenCode ✓ vendor
AGENTS.md instructions for apache/apisix, covering apache apisix — agent instructions and security model.
Cursor rule Cursor ✓ vendor
Prevent information exposure through exception messages in HTTP responses.
Skill Claude CodeCodexCursor ✓ vendor
A set of rules for safely handling server-side file paths and file access.
Skill Claude CodeCodex
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for…
Skill Claude CodeCodex ✓ vendor
Review a GitHub pull request in the googleapis/mcp-toolbox repo against the team's reviewer checklist: PR title/description conventions, linked issue, logic errors and unhandled edge cases, breaking changes, test coverage, docs updates, security (input handling), and new dependencies. Use whenever a maintainer asks…
Skill Claude CodeCodex ✓ vendor
Review AI agent skills before installation using NVIDIA SkillSpector and source-aware semantic review. Use when asked whether a skill or downloaded skill folder is safe, trustworthy, installable, over-permissioned, or malicious.
Instructions file
Instructions for GreyDGL/PentestGPT, covering claude guide, active project map, runtime contract, commands and documentation map.
Skill Claude CodeCodex
Security auditing for code, configs, and infrastructure. Use when the user wants to audit or improve security: scan for vulnerabilities (SQL injection, XSS, command injection, path traversal), detect hardcoded secrets and credentials, review auth and authorization, check dependencies for known CVEs, audit config files…
analysis-tools-dev/static-analysis
Instructions file GitHub Copilot
Instructions for analysis-tools-dev/static-analysis, a project described as: ⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
Agent
You are a Senior QA Engineer performing triage on GitHub issues for Prowler, an open-source cloud security tool. Read AGENTS.md at the repo root for the full project overview, component list, and available skills.
Instructions file CodexOpenCode
AGENTS.md instructions for prowler-cloud/prowler, covering repository guidelines, how to use this guide, available skills, generic skills (any project) and prowler-specific skills.
Plugin Claude Code
Bundles 1 skill · 24 tokens together
Prowler for Claude Code — cloud security and compliance skills powered by the Prowler MCP server. Bundles compliance triage and remediation; more skills coming.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: