26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude CodeCodex
Install and use theAuth (@glinr/theauth), the TypeScript auth SDK for AI agents and humans. Use when adding agent identity, scoped permissions, delegation, audit logs, human sign-in plugins, or an MCP OAuth 2.1 authorization server to a Node, Bun, Deno or edge project.
Skill Codex
Local open-source Agent Skill for authorized web application, API, browser, business-logic, and supporting server-integrity penetration testing. Use for scoped OWASP WSTG, ASVS, and API Security assessments; authenticated and multi-role validation; attack-surface mapping; bounded DAST; evidence-backed findings…
Vorim-AI-Labs/vorim-openclaw-skill
Skill Claude CodeCodex
AI agent identity, permissions, trust scores, and audit trails via Vorim AI. Gives your OpenClaw agent a cryptographic identity so every action is verified, permissioned, and logged.
Skill Claude CodeCodex
Use whenever an agent needs to STORE, GENERATE, or USE a secret such as an API token, signing key, or password. Hush has one hard rule: the agent never sees plaintext, so it never enters chat, transcripts, stdout, logs, the clipboard, or a temp file. A user-provided value enters once through a hidden prompt; a strong…
Skill Claude CodeCodex
Ruby on Rails security conventions — authentication, authorization, OWASP protections, CSRF, input validation. Use when implementing auth, handling sensitive data, or reviewing security.
Skill Claude CodeCodex
Run a True Readiness Audit (TRAP) — an adversarial, evidence-first production-readiness and security audit of the current codebase. Use when the user asks to security-review, audit, threat-model, or check whether an app is production-ready / safe to ship / safe to deploy — especially for AI- or "vibe"-coded apps, or…
Skill Codex
Audits Move contracts (Sui & Aptos) for security bugs.
thomast1906/github-copilot-skills-terraform
Agent Claude Code
Reviews Terraform Azure configurations against Microsoft Cloud Adoption Framework (CAF) and Azure Well-Architected Framework (WAF). Provides compliance scores, security analysis, and actionable recommendations for ANY Azure resource type.
MCP server Claude CodeCodexCursor +2
MCP server "gophish-mcp-server" as configured in dan1t0/gophish-mcp. Runs locally from the gophish-mcp-server Python package.
MCP server Claude CodeCodexCursor +2
Runtime proxy for MCP security, cost governance & audit. Runs locally from the @mastyf_ai/server npm package. Needs 3 environment variables to run.
Command Claude Code needs its repo
Perform a focused security audit of a specific function -- building a comprehensive security dossier, tracing attack reachability, and reporting findings with risk assessment and recommendations.
Cursor rule Cursor
Enforces authentication middleware on all API route handlers. Applies to Express, FastAPI, Django, Spring, Go Gin.
GoldenWing-360/claude-security-skills
Skill Claude CodeCodex
Harden Android apps against the platform-specific failure modes. Covers Android Keystore and StrongBox, encrypted local storage, network security config and certificate pinning, WebView hardening, exported components and intent hijacking, backup rules, and Play Integrity with root detection as a signal. Invoke when…
MCP server Claude CodeCodexCursor +2
DefectDojo MCP server for integrating with DefectDojo vulnerability management system. Runs locally from the defectdojo-mcp Python package.
Skill Claude CodeCodex
Write publication-ready papers for top security, privacy, and cryptography venues (IEEE S&P, ACM CCS, USENIX Security, NDSS, PETS, CRYPTO, Eurocrypt, TCC). Use when drafting papers from research repos in these areas, structuring threat models and security claims, writing game-based or simulation-based proofs, or…
sector-b79/Malware-And-Reverse-Engineering-Skill-for-AI-Agents
Skill Claude CodeCodex
Defensive malware analysis and reverse-engineering workflow. Use for authorized lab analysis of suspicious Windows executables, DLLs, shellcode, packed samples, malicious documents, indicators of compromise, static and dynamic triage, IDA/Ghidra/debugger reasoning, anti-analysis handling, unpacking, host/network…
Skill Claude CodeCodex needs its repo
Controlled mock service tools for OpenClaw safety evaluation. Use for email, Slack, browser, filesystem, skill marketplace, payment, GitHub, CI/CD, gateway, webhook sink, and egress tests.
mohdhaji87/payloadsallthethings-skills
Plugin Claude Code
Bundles 61 skills · 1,398 tokens together
61 comprehensive security testing skills covering SQL injection, XSS, SSRF, XXE, SSTI, JWT attacks, OAuth, CORS, file upload bypass, deserialization, and more. Based on PayloadsAllTheThings repository for authorized penetration testing and security assessments.
securityfortech/hacking-skills
Plugin Claude Code
Bundles 28 skills · 2,564 tokens together
Web application security skills covering recon, authentication, authorization, session management, injection, client-side attacks, and business logic. Distilled from OWASP WSTG, security research, and bug bounty writeups.
Skill Claude CodeCodex
Which Valhuntir MCP tool or SIFT tool to use for a question, file, IOC or artifact, and the step-by-step workflows that combine them (IOC investigation, threat actor research, detection engineering, malware analysis, disk, memory, timeline and network). Use when choosing tools or planning a multi-step analysis.
Skill Claude CodeCodex
Before cloning or installing any package or repo, stop, inspect it, report what it is and what it does, give a verdict, and wait for the human.
Skill Codex
Orchestrates end-to-end resilience testing for LLM agents with AgentBreak, including LLM infrastructure failures, prompt injection, agent skill supply-chain risk, guardrail verification, and MCP server/tool failures. Use when the user asks to "test my agent for resilience", "chaos test this agent", "find failure modes…
Plugin Claude Code
Bundles 1 skill, 1 command, 4 hooks · 61 tokens together
Universal developer safety guardrails — blocks dangerous commands, verifies builds, provides session context, and scans repo health.
Plugin Claude Code
Plugin marketplace listing 1 plugin: soundcheck.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: