vulhunt
865Plugin Claude Code
Bundles 7 skills · 296 tokens together
Binary analysis skills for VulHunt MCP - decompilation, dataflow analysis, pattern matching, and more.
not rated 16 8mo ago A
tokens not measured
screem500/prompt-injection-auditor
Skill Claude CodeCodex
Security audit of LLM system prompts, agent instruction files (SKILL.md, AGENTS.md, CLAUDE.md), and agent configurations against prompt injection attacks. Use when the user wants to (1) audit or harden a system prompt or agent instructions against prompt injection, (2) review an agent skill or system prompt for…
not rated 16
changed 1mo ago A 159 tokens
original Apache-2.0
agent-shield
867Skill Claude CodeCodex
Scan AI agent skills, MCP servers, and plugins for security vulnerabilities. Use when: user asks to check a skill/plugin for safety, audit security, scan for backdoors/data exfiltration/credential leaks, or evaluate trust of a third-party skill. Triggers: "is this skill safe", "scan for security issues", "audit this…
not rated 16 7mo ago A 92 tokens
original MIT
security-audit
868Skill Claude CodeCodex
Use when auditing a web app for security vulnerabilities. Triggers on: 'audit my project', 'how could this get hacked', 'find bugs in this codebase', 'security review', 'pentest', 'bug bounty scope for X', 'GHSA collaborator invite', 'security audit this'. Handles both internal audits (sitting in your own codebase…
not rated 16 5d ago B 250 tokens
original Apache-2.0
agentveil-protocol/agentveil-sdk
Skill Claude CodeCodex
AgentVeil action-control workflows for AI agent systems. Evaluate risky actions with Runtime Gate, route human approvals, resume approved execution, fetch signed receipts, inspect agent public profiles, check advisory reputation, submit signed attestations, discover agents by capability, and verify audit evidence…
not rated 16
+1 17d ago A SkillSpector: warn 71 tokens
original MIT
rubyroidlabs/rails-audit-skill
Skill Claude CodeCodex
Perform comprehensive technical reviews of Ruby on Rails applications. Runs automated analysis tools (RubyCritic, Brakeman, bundler-audit, Gitleaks, Debride, linters, SimpleCov, Rails stats, Rails ERD), analyzes code for architecture, security, authorization (Pundit/CanCanCan), dead code, and design issues, and…
not rated 16 2mo ago B 118 tokens
original MIT
corsair
871Skill Claude CodeCodex
Cryptographic compliance verification. Sign security tool output into verifiable CPOEs (JWT-VC), verify vendor proofs via trust.txt, detect drift with diff, and assess third-party risk. Use when the user mentions compliance proofs, CPOE, trust.txt, SCITT, vendor assessment, GRC evidence, or compliance drift.
not rated 16
+1 8mo ago A 70 tokens
original Apache-2.0
aegis
872Skill Claude Code
Route API calls through the Aegis credential proxy — keeps raw API keys out of the agent context.
not rated 16
+1 3mo ago A 24 tokens
original Apache-2.0
MCP server Claude CodeCodexCursor +2
MCP server "fortianalyzer-mcp" as configured in rstierli/fortianalyzer-mcp. Runs locally from the fortianalyzer-mcp Python package.
not rated 16 yesterday A
tokens not measured
original MIT
Skill Claude CodeCodex
Generate AK47 plugin YAML from vulnerability details using the official syntax docs. Use this skill for plugin authoring, conversion, or refinement.
not rated 16 2mo ago C 32 tokens
original MIT
Skill Claude CodeCodex
This skill teaches Claude Code how to write detection rules for the AI Traffic Control rule engine. Read this before creating or modifying anything in rules/. The full rule schema is Rule in packages/schema/src/zod/rule.ts — it is the source of truth for every field below.
not rated 16
+3
changed 23d ago A SkillSpector: warn 0 tokens
original Apache-2.0
bob-reis/claude-pentest-skills
Skill Claude CodeCodex
Network reconnaissance and port scanning using Naabu, hping3, and complementary tools.
not rated 16
+1 5mo ago A 22 tokens
straw-hat-kjones/cql-best-practices
Skill Claude CodeCodex
Expert guidance for CrowdStrike LogScale CQL queries. Use for threat hunting, detection rules, security analytics, and incident response. Provides syntax rules, optimization techniques, event schemas, and hunting patterns.
not rated 16
+1 6mo ago A 47 tokens
akashrpatil/awesome-offensive-security-skills
Plugin Claude Code
Bundles 191 skills · 11,572 tokens together
191 battle-tested offensive security skills for AI agents — Bug Hunting, Pentesting, Red Teaming, AI Red Teaming, Incident Response.
not rated 17
+2 6mo ago A
tokens not measured
original Apache-2.0
misp-mcp
879MCP server Claude CodeCodexCursor +2
MCP server "misp-mcp" as configured in MISP/misp-mcp. Runs locally from the misp-mcp Python package.
not rated 16
+1 4mo ago A
tokens not measured
sdlc-regulatory
880Skill Claude CodeCodex
AI-driven SDLC governance framework with quality gates, risk-based autonomy caps, change traceability, Definition of Done, and a compliance crosswalk (EU AI Act, NIST AI RMF, ISO/IEC 42001, SOC 2, GDPR). Use when running or reviewing work through the BMad-style subagent SDLC, enforcing gates, classifying risk, or…
not rated 16 10d ago A 91 tokens
original MIT
Plugin Claude Code
Checks packages for malicious indicators before the agent installs them.
not rated 16 yesterday A
tokens not measured
original Apache-2.0
aikido
882AikidoSec/aikido-claude-plugin
Plugin Claude Code
Bundles 4 skills, 1 MCP server · 342 tokens together
Aikido Security for Claude Code: scan code (SAST, secrets, IaC) and list all issues from your Aikido feed powered by the Aikido MCP server.
not rated 15
+1
changed yesterday A
tokens not measured
luffy-arm
883Plugin Claude Code
Bundles 3 skills · 307 tokens together
Connect a local AI agent to registered SSH servers with user-opened key or password authentication, scoped sessions and explicit shutdown.
not rated 15
changed 6d ago A
tokens not measured
original MIT
Plugin Claude Code
Bundles 1 skill · 54 tokens together
Evaluates packages, manages dependencies, and addresses supply chain security.
not rated 15 8mo ago A
tokens not measured
original CC0-1.0
threat-model
885backspace-shmackspace/claude-devkit
Skill Claude CodeCodex
Use when performing threat modeling for a project, feature, or system architecture. Applies STRIDE threat categorization with DREAD risk rating to produce structured threat models in OTM JSON and markdown formats. Covers system decomposition, trust boundary mapping, data flow analysis, per-subsystem threat…
not rated 15 2mo ago A SkillSpector: warn 70 tokens
original MIT
audit-flow
886Skill Claude CodeCodex
Interactive system flow tracing across CODE, API, AUTH, DATA, NETWORK layers with SQLite persistence and Mermaid export. Use for security audits, compliance documentation, flow tracing, feature ideation, brainstorming, debugging, architecture reviews, or incident post-mortems. Triggers on audit, trace flow, document…
not rated 15 8mo ago A 84 tokens
copy · 100% MIT
Plugin Claude Code
Bundles 15 skills, 7 agents, 1 MCP server · 639 tokens together
A dev pipeline for Claude Code that will not call work done until tests, lint and a security audit all exit zero. Seven specialists run it, for 1.1k tokens of always-on context.
not rated 15 3mo ago A
tokens not measured
original MIT
prodlint
888MCP server Claude CodeCodexCursor +2
Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance. Runs locally from the prodlint npm package.
not rated 15 5d ago A
tokens not measured
original MIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: