24,612 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
pantheraudits/web3-sec-ai-prompts
Skill Claude CodeCodex
Automated smart contract security audit pipeline. Auto-detects codebase size and scales accordingly — standard mode for small codebases, chunk mode with persistent state for large ones. Runs context building, dual-expert review, adversarial triage, and structured reporting. Use when auditing smart contracts, reviewing…
MCP server Claude CodeCodexCursor +2
MCP server for 1Password service accounts — tools and resources for vaults and credentials. Runs locally from the @takescake/1password-mcp npm package. Needs 3 environment variables to run.
Skill Codex
Orchestrates end-to-end resilience testing for LLM agents with AgentBreak, including LLM infrastructure failures, prompt injection, agent skill supply-chain risk, guardrail verification, and MCP server/tool failures. Use when the user asks to "test my agent for resilience", "chaos test this agent", "find failure modes…
Skill Claude CodeCodex
Implement authentication and authorization using JWT, Basic Auth, or custom schemes. Use for securing API endpoints and user management.
Skill Codex
QA testing and validation of GoGatoZ features against the local GoGatoZ CTF lab. Invoke for post-change testing, live flag validation, lab infrastructure checks, payload smoke tests, enumerate/attack/search/pivot/notify validation, or any request to confirm that GoGatoZ still works.
Plugin Claude Code
Bundles 1 skill, 1 command, 4 hooks · 61 tokens together
Universal developer safety guardrails — blocks dangerous commands, verifies builds, provides session context, and scans repo health.
Plugin Claude Code
Plugin marketplace listing 1 plugin: soundcheck.
Command Claude Code
Run parallel specialized PR reviews (Opus 4.6 for security/architecture, Sonnet 4.6 for the rest).
miles990/claude-software-skills
Skill Claude Code
Enterprise-grade repository analysis with arc42/C4 architecture documentation, technical debt quantification, security assessment, and multi-stakeholder reporting.
MCP server Claude CodeCodexCursor +2
MCP server "gophish-mcp-server" as configured in dan1t0/gophish-mcp. Runs locally from the gophish-mcp-server Python package.
Skill Claude CodeCodex
Deep security review patterns for authorization logic, data access boundaries, action isolation, rate limiting, and protecting sensitive operations.
Skill Claude CodeCodex
Scans a repo's GitHub Actions workflows for the ten critical CI/CD attack vectors — template injection, fork code executed with privileges (pwn requests), cache poisoning, impostor action SHAs, secrets dumps, GITHUBENV hijack, write-token untrusted triggers, credentials in caches/artifacts, unverified remote code…
Skill Claude CodeCodex
Gate dependency installs (npm/pip/cargo/go/gem/maven/nuget) with OSV-backed advisory checks, approved-spec ledger, and post-install reorg rollback. Run safedeps check @ before any install command.
hesreallyhim/proton-pass-community-mcp
Skill Claude CodeCodex
Canonical protocol for model-side skill behavior when orchestrating proton-pass-community-mcp tools in chat sessions.
Skill Claude CodeCodex
A general reverse-engineering toolkit for Windows programs, Android apps, iOS apps, web interfaces, and APIs. Reverse engineering means examining software to understand how it works and, where appropriate, how to modify and rebuild it.
Skill Claude CodeCodex
Audit and enable security-oriented Xcode build settings. Progressively enables compiler warnings, static analyzer checkers, and Enhanced Security features. Use when: user wants to secure their Xcode project, audit security settings, enable hardening, review security posture of build configuration, set up…
Plugin Claude Code
Bundles 9 skills, 24 commands, 2 agents, 4 hooks · 4,114 tokens together
Elliot — offensive security engagement plugin with Hexstrike MCP integration for Kali Linux. Provides slash commands, auto-activating skills, and subagents for systematic penetration testing workflows.
Skill Claude CodeCodex
Auth/lab dev: Windows + Linux detection-resilience research; syscall dispatch, stack/call-chain spoofing, sleep-state, memory permissions, ETW/AMSI + eBPF/iouring/LDPRELOAD telemetry tradeoffs, kernel-visible signals, and cross-platform loader OPSEC with signal-cost budgeting.
Plugin Claude Code
Bundles 2 skills, 5 hooks · 51 tokens together
Production safety hooks for autonomous Claude Code operation. Context monitoring, syntax checking, branch protection, activity logging, and more.
Plugin Claude Code
Bundles 3 skills · 307 tokens together
Give a local AI agent a remote hand over SSH: read, run, diagnose and pull data from a remote Linux server behind a tiered, unprivileged, ACL-read-only safety model.
Plugin Claude Code
Bundles 9 skills, 2 agents · 1,032 tokens together
OpenText Fortify AppSec skills. Use for SAST/DAST/SCA scanning, vulnerability triage, audit workflows, CI/CD pipeline integration, and FCLI commands. Supports Fortify on Demand (FoD) and Software Security Center (SSC).
AgentSafe-AI/tooltrust-scanner
MCP server Claude CodeCodexCursor +2
Scans MCP servers for prompt injection, data exfiltration, and privilege escalation. Runs locally from the tooltrust-mcp npm package.
yultyyev/better-auth-firebase-auth
Skill Claude CodeCodex
Add Firebase Authentication (Phone SMS OTP, Google Sign-In, Email/Password) to a Better Auth app using the better-auth-firebase-auth plugin. Use when adding phone authentication to Better Auth without Twilio, integrating Firebase Auth with Better Auth sessions, working with the better-auth-firebase-auth package, or…
Plugin Claude Code
Cyberbro IOC analysis toolkit. Extract, enrich, and analyze observables with 5 MCP tools.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: