26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude CodeCodex
Use s-gw when working with credentials, private keys, API tokens, SSH identities, browser credentials, or other sensitive data in agentic coding workflows. Prefer typed handles and local approved execution over exposing raw secret values to a model.
Plugin Claude Code
Bundles 14 skills, 5 commands · 353 tokens together
CI/CD supply chain hardening for Rust projects — Trusted Publishing, SLSA provenance, Scorecard, cargo-deny, and more.
Cursor rule Cursor
Before incorporating any external dependency, verify provenance through official registries: -- npm.org (JavaScript/TypeScript packages) -- crates.io (Rust packages) -- pypi.org (Python packages) -- GitHub (source repositories).
Skill Claude CodeCodex
Add policy evaluation, human approval, and audit trails to any tool. Powered by SidClaw.
MCP server Claude CodeCodexCursor +2
Security-first, self-hosted email archive with search, cited answers, and sending for AI agents. Remote server at {mailfathom_host}.
Skill Claude CodeCodex
Before running a risky shell command, check it with Sigil's assess and refuse anything Sigil would block. Use whenever you are about to execute a destructive, privileged, or unfamiliar command.
maludb-ed/skill-safety-checker
Plugin Claude Code
Bundles 1 skill · 79 tokens together
Security-audits installed Claude Code skills and marketplace plugins for data capture, secret exfiltration, prompt injection, and malicious code. Always leads with a disclaimer that detection cannot be guaranteed complete.
Skill Claude Code
System diagnostics using osquery. Use when asked about CPU usage, memory consumption, network connections, running processes, disk I/O, fan speeds, temperatures, or system security. Triggers: "why is my computer slow", "what's using memory", "what's using CPU", "network connections", "suspicious processes", "system…
MCP server Claude CodeCodexCursor +2
MCP server "palo-alto-mcp" as configured in cdot65/pan-os-mcp. Runs locally from the palo-alto-mcp Python package.
MCP server Claude CodeCodexCursor +2
MCP server for MITRE ATT&CK framework. Runs locally from the mitre-mcp Python package.
Skill Claude CodeCodex
CVE-oriented multi-agent code audit system. Use when user provides a git repository URL for vulnerability discovery with the goal of submitting CVEs. This skill orchestrates subagents to find exploitable vulnerabilities (RCE, SQLi, Auth Bypass, etc.), write weaponized POCs, and generate CVE-ready reports. ALWAYS use…
Skill Claude CodeCodex
Detect prompt injection, jailbreaks, and adversarial attacks in LLM inputs before processing. 5 analysis layers, F1 84.4% internal / 98.87% external, 24ms, runs offline.
Plugin Claude Code
Bundles 75 commands, 10 agents, 29 hooks · 3,359 tokens together
Shell-level guardrails for Claude Code. Command blocking, code security scanner, self-teaching, token economy, agent routing, MCP profiles, and session memory.
yanglittlecat/blackbox-pentest
Skill Codex
A set of rules for carrying out authorized black-box penetration tests, where the tester examines a system without access to its source code. It defines testing boundaries, safety limits, and the evidence needed to report a vulnerability.
MCP server Claude CodeCodexCursor +2
Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance. Runs locally from the @quantakrypto/mcp npm package.
Skill Codex
Audit Circom circuits for soundness, completeness, privacy, and constraint bugs. Use when the user asks to audit, review, check, or find vulnerabilities in Circom code, or when they ask to run circom-auditor on a repo or specific .circom files.
Skill Claude Code
OSINT investigation toolkit for profiling individuals. Uses Holehe for email-to-account discovery, Sherlock for username-to-social-media mapping, and GHunt for Gmail account intelligence. All tool outputs are saved to files for analysis.
Plugin Claude Code
Bundles 7 commands, 3 hooks · 56 tokens together
Iterative vulnerability hunter with four-phase explore/deep-dive methodology built on Ralph Wiggum's self-referential loop pattern.
julianobarbosa/claude-code-skills
Skill Claude CodeCodex
Comprehensive guide for Dependency-Track - Software Composition Analysis (SCA) and SBOM management platform. USE WHEN deploying Dependency-Track, integrating with CI/CD pipelines, configuring vulnerability scanning, managing SBOMs, setting up policy compliance, troubleshooting installation issues, or working with the…
Skill Claude CodeCodex
Bug bounty hunting and penetration testing skills for Claude, Codex, and other agentic AI tools.
Cursor rule Cursor
Use this rule whenever the user asks to extract, analyze, or reverse engineer an iOS app — IPA, .app bundle, Mach-O, .dylib, or .framework.
FarzamHabibi/pre-production-checklist
Skill Claude CodeCodex
Review this codebase against the prodcheck pre-production checklists — security, performance, scale, integrations, post-launch readiness and people. Use when asked to check whether a project is ready to ship, to audit an area before launch, or to work through a specific checklist. Produces evidence with file:line…
Plugin Claude Code
Bundles 11 skills · 614 tokens together
Claude-native, governed offensive-OSINT and external attack-surface platform for authorized security teams: multi-agent recon across web/API, identity, cloud, secrets, and people/breach intelligence, with deterministic scope, evidence, and approval controls, a governed agent-to-agent orchestrator, and human-reviewed…
Skill Claude Code
Tiered adversarial review orchestrator for a working tree, branch diff, pull request, or plan/markdown artifact before it lands on main — a staged reviewer panel (spec, quality, security, performance, docs), root-cause analysis, and a cross-model adversarial pass (codex, medium and up) scale with diff size via tier…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: