Security

adamsjack711-ux/pkgxray

Skill Claude CodeCodex

Audit supplied evidence for AI coding-agent extensions, Codex plugins, Claude Code extensions, and MCP servers using concrete supply-chain security indicators.

mishahanin/heading-os

Skill Claude Code needs its repo

Second-opinion advisor. Default roster is Kimi k3 alongside Claude's own view; Gemini and Grok are opt-in via --gemini / --grok / --all. Two modes: independent (the models see the problem only, reason fresh) and critique (they stress-test a draft). Distinct from /deep-think (Claude reasoning structured, alone) and…

DouglasRao/Claude-Pentest-Skills

Plugin Claude Code

Bundles 8 skills · 902 tokens together

Professional penetration testing skills for Claude Code — structured offensive workflows covering two independent tracks: (1) Web track: web-recon, web-exploitation, web-postexploitation, web-report; (2) AD track: ad-recon, ad-exploitation, ad-postexploitation, ad-report. All skills include automatic evidence capture.

victorsodre/remotion-agent-catalog

Cursor rule Cursor

Never leak private chat, home paths, or personal data into this public repo. Comments explain code only.

0xUXDesign/ai-codebase-boilerplate

Command Claude Code

Adversarial security review via OpenAI model — second opinion from a different AI.

fullstackcrew-alpha/privacy-mask

Plugin Claude Code

Bundles 1 skill · 113 tokens together

Auto-mask sensitive info in images before AI upload. 100% local.

Mikaru0Mystic/sectinel

Cursor rule Cursor

Sectinel - 784-skill cybersecurity arsenal. Select the right security playbook on demand.

vitormiziara/saas-security

Skill Claude CodeCodex

Comprehensive SaaS security skill covering code auditing, checklist generation, and vulnerability reporting. TRIGGER this skill whenever the user asks to: audit code for security issues, review a codebase for vulnerabilities, generate a security checklist, check for OWASP compliance, review authentication or…

SomeStay07/claude-doctor-skill

Skill Claude Code

Audits any project for security, test coverage, and Claude Code automation. 46 checks across 6 layers: secrets, CLAUDE.md, hooks, skills, agents, rules, MCP, CI, memory. Adaptive scoring — auto-detects project maturity (Starter/Growing/Mature/Pro). Diagnoses gaps, prescribes project-specific fixes, applies them.…

prompt-armor/prompt-armor

Skill Claude CodeCodex

Detect prompt injection, jailbreaks, and adversarial attacks in LLM inputs before processing. 5 analysis layers, F1 84.4% internal / 98.87% external, 24ms, runs offline.

99999G/AK47

Skill Claude CodeCodex

Generate AK47 plugin YAML from vulnerability details using the official syntax docs. Use this skill for plugin authoring, conversion, or refinement.

harshith-vaddiparthy/outskill-owasp-security-review

Skill Claude CodeCodex

Launch-gate security review for the Vibe CRM Security Lab (NorthStar CRM) — a Next.js 16 App Router + Supabase + OpenAI app. Audits the codebase against the OWASP Top 10 2025, reports each issue in plain language with the exact file, severity, and the concrete fix (using the repo's own /api/fixed/ routes and…

Luxuzhou/skill-monitor-plugin

Skill Claude Code

A management tool for installed Claude Code skills, which are reusable instructions that extend an AI coding assistant. It checks their security, cost, conflicts, usage, versions, and capability groupings.

lambert0529/skills

Skill Claude CodeCodex

A guide for adding JWT authentication to a Spring Boot application. JWT is a signed token used to identify a user between requests, while role-based access control limits what different users may do.

Rodriguespn/improve-skills-workshop-aie-europe

Skill Claude CodeCodex

Use when writing any SQL for Supabase — creating views, tables, functions, or RLS policies. Supabase has several security behaviors that differ from vanilla Postgres in ways that silently create vulnerabilities. This skill makes sure those traps are caught before they ship. Trigger whenever the user is working with…

faanross/antisyphon_course_26062026

Skill Claude CodeCodex

Expert guidance for deep security investigations. Use this when the user asks to "investigate" a case, entity, or incident.

guelfoweb/malware-analysis-static

Skill Claude CodeCodex

Use this skill for static malware analysis and reverse engineering of suspicious binaries, Android APKs, Office documents, web payloads, scripts, source-code droppers, and multi-stage chains across Linux, macOS, and Windows. It guides Codex through safe lab workflow, tool discovery with per-install authorization…

cyj4578/chen-skillshub

Skill Claude CodeCodex

Use when user provides a WeChat Mini Program AppID and asks about mini program security, vulnerabilities, source code audit, data leakage risks, wxapkg analysis, or whether a mini program stores sensitive data in plaintext. Also use when user wants to check a mini program for hardcoded keys, client-side logic bypass…

neverinfamous/db-mcp

MCP server Claude CodeCodexCursor +2

SQLite MCP server with OAuth 2.1, HTTP/SSE, 122 tools, and smart tool filtering. Runs locally from the db-mcp npm package.

brolag/neural-claude-code

Plugin Claude Code

Bundles 8 skills, 3 hooks · 551 tokens together

Lightweight Claude Code harness: 5 security hooks + a discover -> spec -> craft -> vet/exercise pipeline. Zero dependencies; runs on vanilla Claude Code.

MingyiSecLab/Mingyi-Atlas

Skill Claude Code

Nuclei CLI parameter reference and usage patterns - YAML-template vulnerability scanning, target input modes, template filters, output formats, rate limits, ProjectDiscovery dashboard upload, and common scan commands.

Seldaek/zizmorify

Skill Claude CodeCodex

Add zizmor (GitHub Actions security analysis) CI to a repository and fix every finding it surfaces. Use when asked to "add zizmor", harden a repo's GitHub Actions workflows, pin actions to SHAs, or make workflows pass a security audit. Adds a zizmor workflow + a dependabot config (on the default branch; other branches…

itsbroken-ai/forge-plugin

Plugin Claude Code

Bundles 6 skills · 603 tokens together

Security-first development skills powered by the F.O.R.G.E. framework. Built by operators, not consultants. Makes Claude security-aware by default with audit, threat modeling, code hardening, attack surface recon, and structured security workflows.

Aradotso/security-skills

Skill Claude CodeCodex

Security & compliance skill suite providing OWASP scanning, CVE detection, GDPR/SOC2 audits, threat modeling, and incident response workflows for AI coding agents.