26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
MCP server Claude CodeCodexCursor +2
DNS lookups, health reports, SSL certs, security scans, GEO scoring, uptime checks. Runs locally from the @nslookup-io/mcp-server npm package.
Cursor rule Cursor
Akira pentest skill suite - activates for security testing, bug bounty, and CTF tasks.
cockroachlabs/cockroachdb-skills
Skill Claude CodeCodex
Audits the security posture of a CockroachDB cluster (Cloud or self-hosted) across network, authentication, authorization, encryption, audit logging, and backup dimensions. Use when assessing cluster security readiness, preparing for compliance reviews, or investigating security configuration gaps.
pantheraudits/web3-sec-ai-prompts
Skill Claude CodeCodex
Automated smart contract security audit pipeline. Auto-detects codebase size and scales accordingly — standard mode for small codebases, chunk mode with persistent state for large ones. Runs context building, dual-expert review, adversarial triage, and structured reporting. Use when auditing smart contracts, reviewing…
datumbrain/claude-code-privacy-guard
Plugin Claude Code
Privacy guard plugin for Claude Code - prevents PII and secrets from leaking into AI prompts.
Plugin Claude Code
Bundles 1 skill · 296 tokens together
A document-privacy tool that replaces identifying information locally before a document is sent to an AI model, then restores the original values in the response.
Skill Claude CodeCodex
Turnkey cybersecurity lab — 2,077 skills, 131+ tools, 28 frameworks, and evolving methodology for security research, pentesting, forensics, and threat intelligence. Includes one-step ecosystem cloner for 8 repositories.
lingfengz/llm-dengbao-assessment
Skill Claude CodeCodex
A Chinese-language assessment method for checking large-language-model systems against China’s classified cybersecurity protection requirements and related AI security standards.
Skill Claude CodeCodex
Test reflected/stored/DOM XSS, SQL injection, LDAP injection, ORM injection, command injection, format string.
Agent Claude Code
Read-only Claude agent that correlates Tenable vulnerabilities with same-asset CIS failures and verified business context, ranks candidate fixes deterministically, and adds evidence-cited Claude decision briefs and correlation proposals.
martinholovsky/claude-project-scaffold
Command Claude Code
Review staged changes for bugs, security issues, and style.
Skill Codex
Use when reviewing source code for security issues and CodeScan MCP tools or CLI are available, especially for pre-merge diff review, repository intake, suspicious auth or input-handling code, or when a user explicitly asks for a CodeScan-based security scan.
tungnk123/mobile-best-practices
Command Claude Code
Audit mobile app for security vulnerabilities using the mobile-best-practices database.
rhysha/claude-security-research-skill
Skill Claude CodeCodex
Full-spectrum security research skill for web servers, REST APIs, web applications, and network/port enumeration. Triggers whenever the user wants to: find vulnerabilities, run a security assessment, scan a target, test an API for security issues, enumerate ports or services, check for OWASP Top 10 vulnerabilities…
Cursor rule Cursor
Enforce parity between Claude Code and Cursor sandbox settings.
scholarly360/owasp-top10-web-skills
Skill Claude CodeCodex
Expert Python security testing skill for OWASP A05:2025 — Injection vulnerabilities in FastAPI and Flask applications. Use this skill whenever the user asks about: SQL injection, XSS, SSTI (Server-Side Template Injection), OS command injection, ORM injection, LLM prompt injection, input validation, parameterized…
Hook Claude Code
One of 7 in settings.json
Runs before the agent uses a tool for Write, Edit, Update, Bash, WebFetch and WebSearch tool calls, executing token_manager.py, command_restrictor.py, pattern_enforcer.py, no_mock_code.py, secret_scanner.py, timestamp_validator.py and validate_git_commit.py via python3 (11 commands). From meloncafe/claude-code-hooks.
Skill Claude CodeCodex
Business logic vulnerability testing covering workflow bypass, price manipulation, coupon abuse, rate limit bypass, and TOCTOU race conditions.
MCP server Claude CodeCodexCursor +2
MCP server for 1Password service accounts — tools and resources for vaults and credentials. Runs locally from the @takescake/1password-mcp npm package. Needs 3 environment variables to run.
Skill Claude CodeCodex
Apply architectural guardrails when building software. Runs an intake questionnaire to determine the project's tier, then enforces security, reliability, and best practice rules appropriate to the tier while writing code.
Plugin Claude Code
Bundles 4 skills · 106 tokens together
Auxiliary skills for threat modeling - with and without OWASP pytm.
SOsintOps/claudii-exploratores
Skill Claude CodeCodex
OSINT investigation toolkit. Use when the user wants to investigate or gather open-source intelligence on an indicator — a person's name, email, username, domain, IP address, phone number, company, coordinates, IBAN, crypto address, Telegram channel, Italian law (Normattiva URN), EU case or EU VAT number — and needs…
neodeer3244-w5dry/trust-center-outline
Skill Claude CodeCodex
A planning guide for a public security and trust section on a SaaS or developer-tool website. It covers the site structure, page notes, evidence links, owners, and information gaps.
TexasFortress-AI/rs_filesystem
Cursor rule Cursor
// src/mcp/tools.rs validatepathorerror(&filepath)?
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: