26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Plugin Claude Code
Bundles 3 skills, 1 command · 192 tokens together
Java quality toolkit — security (OWASP), performance (N+1, memory, threading), and testing (JUnit 5, Mockito, Testcontainers) for Java 8+ projects.
MCP server Claude CodeCodexCursor +2
The dependency bloodhound for AI coding agents. Zero API keys, zero config. Runs locally from the hound-mcp npm package.
Skill Claude CodeCodex
Agentic DFIR orchestrator that autonomously investigates security incidents by chaining forensic skills (IOC extraction, Windows artifact triage, timeline correlation, YARA generation) with an autonomous reasoning loop, persistent case state, and human-in-the-loop approvals. Use this skill whenever the user mentions…
tracebit-com/tracebit-canary-honeytokens-skill
Skill Claude CodeCodex
Use when the user wants to protect their workspace from credential theft, prompt injection, or data exfiltration — even if they don't mention "canaries" or "honeytokens" directly. Covers deploying Tracebit security canaries (fake decoy credentials that alert on use), detecting when they're triggered via the user's…
Evaluris-Solutions/claude-active-directory
Skill Claude CodeCodex
Use when classifying or explaining authorized Active Directory attack techniques—Kerberos and NTLM paths, coercion awareness, delegation and RBCD, ACL and DCSync concepts, LAPS and shadow credentials, GPP, trust paths, AD-joined SQL pivots, and lateral movement by protocol. Use as a reference when writing findings or…
Skill Claude CodeCodex
Demonstrate basic injection payloads for training.
MCP server Claude CodeCodexCursor +2
MCP server "kawaiidra" as configured in wagonbomb/kawaiidra-mcp. Runs run_server.py with python. Needs 1 environment variable to run.
kirollosatef/customgpt-claude-quadruple-verification
Plugin Claude Code
Quadruple verification for Claude Code — automatically blocks placeholder code, security vulnerabilities, and ensures output quality on every operation. Built by CustomGPT.ai for production teams.
Skill Claude CodeCodex
Use when the user sends BB:, CTF:, Target:, or Pentest: followed by a domain or IP — activates autonomous JSON-only daemon mode for authorized penetration testing, bug bounty, and CTF challenges.
MCP server Claude CodeCodexCursor +2
MCP server for Qualys security APIs - natural language interaction with vulnerability, asset, and cloud security data. Runs locally from the qualys-mcp Python package.
Skill Claude CodeCodex
A toolkit for taking software apart to inspect how it works, across formats such as Android packages, Windows programs, Linux binaries, JavaScript, and firmware.
jayelbotvibe-web/hermes-pentest-lab
Skill Claude CodeCodex needs its repo
Pentest finding interpretation encyclopedia — maps tool output to finding severity, CVSS scoring rules, and report-ready language. Answers 'What severity is this? What's the CVSS? How do I write this up?'.
Skill Claude CodeCodex
Inspect and remove identifying metadata and provenance marks from files — GPS coordinates, camera serial numbers, author names, editing timestamps, C2PA content credentials, and invisible Unicode carriers. Works on PNG, JPEG, WebP, PDF, DOCX, ODT, SVG, HTML, Markdown and plain text. Use when someone asks to strip…
MCP server Claude CodeCodexCursor +2
MCP server for Tenable Identity Exposure API. Runs locally from the tie-mcp-server npm package.
Indium-AI-Labs/indium-agentkit
Skill Claude CodeCodex
Implement or review application cryptography with vetted high-level libraries, covering authenticated encryption with key IDs for rotation, nonce strategy, signatures, key derivation, password hashing, TLS and mTLS configuration, and hybrid post-quantum key exchange. Use when code must encrypt, sign, derive keys, hash…
Skill Claude CodeCodex
Advanced detection system identifying Sybil attacks, bot networks, and insider trading using multi-heuristic analysis, machine learning clustering, and transaction graph algorithms.
Plugin Cursor
Bundles 1 skill · 118 tokens together
1Password Developer Environments for Cursor: MCP tools to create, import, and manage project secrets; an agent skill with the full import-and-mount workflow; and a hook that validates local .env mounts before shell commands run. Requires the 1Password desktop app on macOS or Linux with Integrate with MCP clients…
Skill Claude CodeCodex
Determine which Singapore Government System Security Plan(s) apply to a system under the ICT&SS Policy Reform (IM8's successor) and emit the resulting control baseline — including stacking the Generative AI overlay and Digital Service Standards profiles on top of a cybersecurity SSP. Use whenever a project touches SG…
Skill Claude CodeCodex
Use the skael CLI to find, install, pull and publish agent skills from a Skael registry, and to read its exit codes. Use when a task mentions skael, a skill set, a skill registry, or when you need a skill this repo does not have.
Cursor rule Claude CodeCursor
HawkScan DAST security scanning. Use when the user asks to run or perform a security or DAST scan, to test an app or API for vulnerabilities, or to verify a vulnerability is fixed — and proactively right after you complete a code change (feature, bugfix, refactor); "done" means "done and secure" (configure, scan, fix…
Skill Claude CodeCodex
Cryptographic tool schema verification to prevent MCP Rug Pull attacks — ECDSA P-256 signing, SHA-256 hashing, TOFU key pinning, .well-known discovery, signed revocation documents, and (v1.4-alpha across all four languages) signature expiration, DNS TXT cross-verification, and schema version binding (lineage chain).
Skill Claude CodeCodex
Map Azure architectures and operations to security and compliance controls. Use this skill when users ask for governance, policy enforcement, audit readiness, or regulatory alignment. Covers ISO, SOC2, HIPAA, PCI-DSS, and custom compliance frameworks.
skjortan23/read-team-mcp-server
MCP server Claude CodeCodexCursor +2
MCP server "red-team-mcp" as configured in skjortan23/read-team-mcp-server. Runs locally from the red-team-mcp Python package.
MCP server Claude CodeCodexCursor +2
Model Context Protocol (MCP) Server for OpenCTI. Runs locally from the pycti-mcp Python package.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: