Security

26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

vibe-ship

817

sudais-khalid/vibe-ship

Plugin Claude Code

Bundles 1 skill · 254 tokens together

Dockerize and deploy any app: detects the stack (Node, Next.js, Python, Django, FastAPI, Go, Rust, Java/Spring, .NET, Rails, Laravel, Phoenix, static, monorepos), writes hardened Dockerfiles, Compose, GitHub Actions/GitLab CI, Kubernetes and Fly/Render/Railway/Cloud Run/AWS/VPS configs, then verifies them with a…

not rated 18 changed 15d ago A tokens not measured original MIT

lictor-security-suite

818

Raffa-jarrl/Lictor-AI

Plugin Claude Code

Bundles 4 skills · 346 tokens together

Four free security skills for AI-built apps. Run lictor-security-check before you ship to scan for leaked API keys, exposed databases, broken access control (IDOR), injection (SQL/XSS/command), SSRF, exposed admin/debug surfaces, missing rate limits, and prompt-injection in AI features. Then lictor-explain, lictor-fix.

not rated 18 3mo ago A tokens not measured original Apache-2.0

mapick

819

mapick-ai/mapick

Skill Claude CodeCodex

Mapick — Skill recommendation & privacy protection for OpenClaw. Scans your local skills, suggests what you're missing, and keeps other skills from seeing your sensitive data.

not rated 18 5mo ago C 37 tokens original MIT

ai-iq

820

kobie3717/ai-iq

Plugin Claude Code

Bundles 1 skill, 5 hooks · 29 tokens together

Memory → Evaluation → Credential → Access Control for AI agents. Persistent memory with W3C Verifiable Credentials, capability-based access control, drift detection, and FSRS-6 spaced repetition.

not rated 18 4mo ago A tokens not measured original MIT

Nekzus/npm-sentinel-mcp

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend… Remote server at server.smithery.ai.

not rated 18 +1 2mo ago A tokens not measured original MIT

privacy

822

gpdir16/tabyAgent

Skill Claude CodeCodex

Privacy tools and alternatives to mainstream services with verified details on licensing, ads, and pricing.

not rated 18 2d ago A 20 tokens AGPL-3.0

AgentConnect/awiki-agent-id-message

Skill Claude Code

Verifiable DID identity and end-to-end encrypted inbox for AI Agents. Built on ANP (Agent Network Protocol) and did:wba. Provides self-sovereign identity, Handle (short name) registration, content pages publishing, federated messaging, group communication, and HPKE-based E2EE — Web-based, not blockchain. Designed…

not rated 18 7mo ago A 155 tokens original Apache-2.0

cs-policy

824

3D-Tech-Solutions/code-scalpel

Skill Claude Code

Verify code compliance with policies and standards: HIPAA, SOC2, PCI-DSS, custom style guides. Validate policy file integrity with cryptographic verification.

not rated 18 4mo ago A 34 tokens

opengrep

825

opengrep/skills

Skill Claude CodeCodex

Run Opengrep for pattern-based code search and security scanning. Use when grep is insufficient for finding code patterns that require structural understanding (function calls, data flow, nested structures). Also use for security vulnerability detection with custom YAML rules.

not rated 18 9mo ago B 51 tokens original MIT

google-ads

828

alifanov/scopegate

MCP server Claude CodeCodexCursor +2

MCP server "google-ads", hosted remotely at scopegate.chatindex.app, as configured in alifanov/scopegate.

not rated 18 4d ago A tokens not measured original MIT

aegis

829

Acacian/aegis

MCP server Claude CodeCodexCursor +2

Auto-instrument AI agent frameworks with runtime security. One line to govern LangChain, CrewAI, OpenAI, Anthropic — injection blocking, PII masking, action policy, audit trail. Zero code changes. Runs locally from the agent-aegis Python package. Needs 1 environment variable to run.

not rated 18 21d ago A tokens not measured original MIT

supply-chain-guard

830

ZarK/ai-supply-chain-guard

Skill Claude CodeCodex

Use before installing, updating, auditing, or executing dependencies, package-manager commands, project generators, CI actions/workflows, release jobs, IDE extensions, MCP servers, or AI-agent tools. Also use when investigating suspected compromise or advisories, debugging publish or release authentication, or…

not rated 18 changed 29d ago A 71 tokens original MIT

tene

831

tene-ai/tene

Cursor rule Cursor

Secret management with tene.

not rated 18 4mo ago A 549 tokens original MIT

piighost-docs

832

Athroniaeth/piighost

Skill Claude CodeCodex needs its repo

Use when writing, rewriting or reviewing any PIIGhost documentation page under docs/en/ or docs/fr/, the pitch of README.md or docs/README.fr.md, or the nav in docs/zensical.toml / docs/zensical.fr.toml. Also use when choosing between anonymisation and dé-identification, when a page mixes tutorial with reference, when…

not rated 18 +1 changed 1mo ago A SkillSpector: pass 138 tokens original MIT

ClawdStrike

833

cantinaxyz/clawdstrike-skill

Skill Claude CodeCodex

Security audit and threat model for OpenClaw gateway hosts. Use to verify OpenClaw configuration, exposure, skills/plugins, filesystem hygiene, and to produce an OK/VULNERABLE report with evidence and fixes.

not rated 18 9mo ago A 47 tokens

laravel-security

834

nklofy/code-agent-skills

Skill Claude CodeCodex

Laravel security best practices — authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and secure deployment configurations.

not rated 18 4mo ago A 32 tokens original Apache-2.0

arckit.jsp-936

835

tractorjuice/arckit-codex

Command Claude Code

Generate MOD JSP 936 AI assurance documentation for defence AI/ML systems.

not rated 18 changed 11d ago A 14 tokens

draugr

836

draugr-dev/draugr

Plugin Claude Code

Bundles 1 hook

Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

not rated 18 +9 changed yesterday A tokens not measured original Apache-2.0

skill-sentinel

837

EvolutionUnleashed/skill-sentinel

Skill Claude CodeCodex

Security scanner and threat analyzer for AI agent skills. Activate this skill whenever a new skill is added to the workspace, when the user imports or installs a skill from an external source, when asked to audit or review an existing skill for safety, or when the user mentions scanning, vetting, checking, or…

not rated 17 8mo ago D 125 tokens

ironcode

838

djfksjd/ironcode

Skill Claude CodeCodex

Production-grade engineering gate for writing OR reviewing code. Enforces security, resource safety (memory leaks, unclosed listeners/streams/timers), efficient data access (N+1, pagination/infinite-scroll, over-fetching, backend cost), defensive coding, and evidence-based verification. Use when the user invokes it…

not rated 17 3mo ago A 124 tokens original MIT

PSPDFKit-labs/pi-skills

Skill Claude CodeCodex

Multi-agent workflow (tracer/resolver/bypass) for secure code review, exploitability triage, and PoC validation in codebases. Use when conducting structured security research or penetration test analysis.

not rated 17 5mo ago A 45 tokens archived

lean-formal-audit

840

InternetMaximalism/lean-reinforced-concrete

Skill Claude CodeCodex

Audit and verify software systems in any domain — cryptographic protocols, ZK circuits, smart contracts, distributed systems, business logic (payments, inventory, access control), embedded systems, APIs, and more — by formalizing them in Lean 4. Use not only for auditing existing implementations but also for product…

not rated 17 4mo ago A 216 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: