Security

ronnycoding/.claude

Command Claude Code

Run parallel specialized PR reviews (Opus 4.6 for security/architecture, Sonnet 4.6 for the rest).

igor9silva/meseeks

Skill Claude CodeCodex

Deep security review patterns for authorization logic, data access boundaries, action isolation, rate limiting, and protecting sensitive operations.

yurukusa/claude-code-hooks

Plugin Claude Code

Bundles 2 skills, 5 hooks · 51 tokens together

Production safety hooks for autonomous Claude Code operation. Context monitoring, syntax checking, branch protection, activity logging, and more.

yultyyev/better-auth-firebase-auth

Skill Claude CodeCodex

Add Firebase Authentication (Phone SMS OTP, Google Sign-In, Email/Password) to a Better Auth app using the better-auth-firebase-auth plugin. Use when adding phone authentication to Better Auth without Twilio, integrating Firebase Auth with Better Auth sessions, working with the better-auth-firebase-auth package, or…

Bugb-Technologies/guardlink

Cursor rule Cursor

GuardLink security annotation rules.

ashlrai/phantom-secrets

MCP server Claude CodeCodexCursor +2

Value-blind secret metadata and gated workflows for AI coding agents through Phantom's local proxy. Runs locally from the phantom-secrets-mcp npm package.

jsonwebtoken/jwt-skills

Skill Claude CodeCodex

Verify and validate JSON Web Tokens (JWTs) by checking signatures, expiration, claims, and structure. Use when the user wants to verify, validate, or check a JWT — e.g. "verify this token", "is this JWT valid", "check the signature", "validate this token against my JWKS", "is this token expired". Supports HMAC, RSA…

PacktPublishing/The-Claude-Code-Operating-Model

Skill Claude Code

Review code for security vulnerabilities, performance issues, and coding best practices. Activate when the user asks to review code, check code quality, give feedback on code changes, or audit a file.

ogrodev/fsociety

Plugin Claude Code

Bundles 9 skills, 24 commands, 2 agents, 4 hooks · 4,114 tokens together

Elliot — offensive security engagement plugin with Hexstrike MCP integration for Kali Linux. Provides slash commands, auto-activating skills, and subagents for systematic penetration testing workflows.

Ray0907/security-scan

Plugin Claude Code

Bundles 1 skill · 35 tokens together

Use when a user asks to scan a repository for dependency vulnerabilities, insecure code patterns, CVEs, or OWASP Top 10 risks.

semgrep/guardian

Plugin Claude Code

Bundles 5 skills, 1 MCP server · 443 tokens together

Semgrep Guardian: Scans agent-generated code for security vulnerabilities.

AgentSafe-AI/tooltrust-scanner

MCP server Claude CodeCodexCursor +2

Scans MCP servers for prompt injection, data exfiltration, and privilege escalation. Runs locally from the tooltrust-mcp npm package.

stanfrbd/mcp-cyberbro

MCP server Claude CodeCodexCursor +2

Model Context Protocol server for Cyberbro IOC analysis and enrichment. Runs locally from the mcp-cyberbro Python package. Needs 9 environment variables to run.

Swader/agent-skills-audit

Skill Codex

For requested code audits or deep reviews, produce evidence-ranked findings across relevant risks.

okjpg/skill-checkup-openclaw

Skill Claude CodeCodex

Use when auditing OpenClaw agents, workspaces, or hosts for production readiness, safety, backup/GitHub, memory/recall, skills, heartbeat, crons, watchdog, security, access, runtime bloat, or course baseline fit.

Aero-Vance/awesome-cl-code

Command Claude Code

You are evaluating a repository intended for use in or alongside Claude Code, where certain features (such as hooks, commands, scripts, or automation) may execute implicitly or with elevated trust once enabled by a user.

agentward-ai/agentward

Skill Claude CodeCodex

Detect and redact PII from text files. Supports 15 categories including credit cards, SSNs, emails, API keys, addresses, and more — with zero dependencies.

walidboulanouar/pin-guard

Skill Claude CodeCodex

Enforce exact, pinned package versions across a JavaScript/TypeScript repo and its agent tooling. Scans package.json dependencies, npm scripts, MCP server configs (.mcp.json, Claude/Cursor settings), and CI workflows for unpinned specs (^, , , latest, missing versions on npx). Pins everything to exact versions…

dungnotnull/hybrid-harness-chaos-process-prm

Plugin Claude Code

Bundles 37 skills, 4 commands · 4,202 tokens together

A 36-skill agentic workflow for platform engineering — spanning CI/CD, security, chaos engineering, observability, governance, compliance, deep research, system optimization, documentation, and adversarial critique. Purpose-built for AI-assisted development.

kingggg5/shipproof

Plugin Claude Code

Bundles 3 skills · 247 tokens together

Evidence-first engineering and production audits for secure, efficient, scalable systems.

guaidao2/Xuanmu-Bugbounty-mcp

MCP server Claude CodeCodexCursor +2

MCP server "xuanmu-bugbounty-mcp" as configured in guaidao2/Xuanmu-Bugbounty-mcp. Runs locally from the xuanmu-bugbounty-mcp Python package.

lucasoeth/mitmproxy-mcp

MCP server Claude CodeCodexCursor +2

MITM proxy manager with MCP integration. Runs locally from the mitmproxy-mcp Python package.

liuyi0808/android-review

Plugin Claude Code

Bundles 7 skills · 625 tokens together

Android development review skills covering OWASP MASVS security audit, Clean Architecture, performance optimization, Jetpack Compose best practices, privacy compliance auditing, and Google Play Store compliance.

pentoshi007/clai

Skill Claude CodeCodex

Evidence-driven security operations, vulnerability research, pentesting and red teaming across web/API/JS, mobile, AD/identity, cloud, systems, wireless/IoT and AI/LLM agents. Use for security assessments, exploit validation, novel bug hunts, security code audits and incident/detection investigations; not routine…