24,655 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
screem500/prompt-injection-auditor
Skill Claude CodeCodex
Security audit of LLM system prompts, agent instruction files (SKILL.md, AGENTS.md, CLAUDE.md), and agent configurations against prompt injection attacks. Use when the user wants to (1) audit or harden a system prompt or agent instructions against prompt injection, (2) review an agent skill or system prompt for…
MCP server Claude CodeCodexCursor +2
MCP server "google-ads", hosted remotely at scopegate.chatindex.app, as configured in alifanov/scopegate.
MCP server Claude CodeCodexCursor +2
DefectDojo MCP server for integrating with DefectDojo vulnerability management system. Runs locally from the defectdojo-mcp Python package.
Plugin Claude Code
Bundles 1 skill · 296 tokens together
A document-privacy tool that replaces identifying information locally before a document is sent to an AI model, then restores the original values in the response.
MCP server Claude CodeCodexCursor +2
MCP server for Qualys security APIs - natural language interaction with vulnerability, asset, and cloud security data. Runs locally from the qualys-mcp Python package.
MCP server Claude CodeCodexCursor +2
MCP server for MikroTik RouterOS — 780+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more. Runs locally from the @usex/mikrotik-mcp npm package.
MCP server Claude CodeCodexCursor +2
MCP server for Tenable Identity Exposure API. Runs locally from the tie-mcp-server npm package.
Command Claude Code
Generate MOD JSP 936 AI assurance documentation for defence AI/ML systems.
backspace-shmackspace/claude-devkit
Skill Claude CodeCodex
Use when performing threat modeling for a project, feature, or system architecture. Applies STRIDE threat categorization with DREAD risk rating to produce structured threat models in OTM JSON and markdown formats. Covers system decomposition, trust boundary mapping, data flow analysis, per-subsystem threat…
Skill Claude CodeCodex
Interactive system flow tracing across CODE, API, AUTH, DATA, NETWORK layers with SQLite persistence and Mermaid export. Use for security audits, compliance documentation, flow tracing, feature ideation, brainstorming, debugging, architecture reviews, or incident post-mortems. Triggers on audit, trace flow, document…
Skill Claude CodeCodex
Demonstrate basic injection payloads for training.
Plugin Claude Code
Bundles 7 skills · 296 tokens together
Binary analysis skills for VulHunt MCP - decompilation, dataflow analysis, pattern matching, and more.
Plugin Claude Code
Bundles 15 skills, 7 agents, 1 MCP server · 639 tokens together
A dev pipeline for Claude Code that will not call work done until tests, lint and a security audit all exit zero. Seven specialists run it, for 1.1k tokens of always-on context.
Skill Claude CodeCodex
Scan AI agent skills, MCP servers, and plugins for security vulnerabilities. Use when: user asks to check a skill/plugin for safety, audit security, scan for backdoors/data exfiltration/credential leaks, or evaluate trust of a third-party skill. Triggers: "is this skill safe", "scan for security issues", "audit this…
MCP server Claude CodeCodexCursor +2
Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance. Runs locally from the prodlint npm package.
Skill Claude CodeCodex
Use s-gw when working with credentials, private keys, API tokens, SSH identities, browser credentials, or other sensitive data in agentic coding workflows. Prefer typed handles and local approved execution over exposing raw secret values to a model.
Skill Claude CodeCodex
Use when auditing a web app for security vulnerabilities. Triggers on: 'audit my project', 'how could this get hacked', 'find bugs in this codebase', 'security review', 'pentest', 'bug bounty scope for X', 'GHSA collaborator invite', 'security audit this'. Handles both internal audits (sitting in your own codebase…
MCP server Claude CodeCodexCursor +2
MCP server "kawaiidra" as configured in wagonbomb/kawaiidra-mcp. Runs run_server.py with python. Needs 1 environment variable to run.
MCP server Claude CodeCodexCursor +2
Auto-instrument AI agent frameworks with runtime security. One line to govern LangChain, CrewAI, OpenAI, Anthropic — injection blocking, PII masking, action policy, audit trail. Zero code changes. Runs locally from the agent-aegis Python package. Needs 1 environment variable to run.
agentveil-protocol/agentveil-sdk
Skill Claude CodeCodex
AgentVeil action-control workflows for AI agent systems. Evaluate risky actions with Runtime Gate, route human approvals, resume approved execution, fetch signed receipts, inspect agent public profiles, check advisory reputation, submit signed attestations, discover agents by capability, and verify audit evidence…
Plugin Claude Code
Bundles 14 skills, 5 commands · 353 tokens together
CI/CD supply chain hardening for Rust projects — Trusted Publishing, SLSA provenance, Scorecard, cargo-deny, and more.
Cursor rule Cursor
Before incorporating any external dependency, verify provenance through official registries: -- npm.org (JavaScript/TypeScript packages) -- crates.io (Rust packages) -- pypi.org (Python packages) -- GitHub (source repositories).
rubyroidlabs/rails-audit-skill
Skill Claude CodeCodex
Perform comprehensive technical reviews of Ruby on Rails applications. Runs automated analysis tools (RubyCritic, Brakeman, bundler-audit, Gitleaks, Debride, linters, SimpleCov, Rails stats, Rails ERD), analyzes code for architecture, security, authorization (Pundit/CanCanCan), dead code, and design issues, and…
datumbrain/claude-code-privacy-guard
Plugin Claude Code
Privacy guard plugin for Claude Code - prevents PII and secrets from leaking into AI prompts.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: