Security

Matador-og/huntbot

Plugin Claude Code

Bundles 1 skill · 48 tokens together

Autonomous offensive security pipeline — bug bounty, pentesting, red teaming.

austintgriffith/evm-audit-skills

Skill Claude CodeCodex

Master index for EVM smart contract security audit skills. Load this FIRST for every audit to determine which specialized skills to load. Contains routing table and audit methodology.

sso-ss/vibe-ship-it

Skill Claude CodeCodex

Adds user authentication. Triggers: 'login', 'log in', 'sign in', 'sign up', 'register', 'authentication', 'auth', 'only I can see', 'protect this page', 'private page', 'admin area', 'user accounts', 'members only', 'password protect'.

CodeDuet/codeduet-microvm-ai-agent-sandbox

MCP server Claude CodeCodexCursor +2

MCP server "microvm-sandbox" as configured in CodeDuet/codeduet-microvm-ai-agent-sandbox. Runs src.mcp.server with python. Needs 3 environment variables to run.

guaidao2/gef-mcp-for-ctf

MCP server Claude CodeCodexCursor +2

MCP server "gef" as configured in guaidao2/gef-mcp-for-ctf. Runs /root/Desktop/gef-mcp/server.py with python.

Friz-zy/ai-capability-registry

Agent Claude Code

Never place secrets, credentials, tokens, PII, or production data in any field; reference affected files by redacted path only.

andypitcher/ponytail-sec

Plugin Claude Code

Bundles 5 skills, 1 agent · 379 tokens together

Ponytail security companion, audit, and triage: diff-scoped hardening, full-project scans, and context-aware finding review.

muchiny/bridge-mcp

Skill Claude Code

This skill should be used when the user asks to "run a security scan", "check for vulnerabilities", "audit compliance", "check certificate expiry", "scan open ports", or mentions security reviews, CIS benchmarks, or compliance assessments on remote servers.

cfgaudit/cfgaudit

Plugin Claude Code

Bundles 3 skills, 2 hooks · 57 tokens together

Security scanner for AI-agent configuration files — detects prompt injection, dangerous permissions, and credential exposure in settings.json, CLAUDE.md, MCP configs, and more.

liortesta/ClawdAgent

Skill Claude Code

Da7rkx0 represents dark web reconnaissance capabilities used during authorized threat intelligence gathering and security assessments. Understanding dark web monitoring is essential for proactive defense — identifying leaked credentials, sold data, and emerging threats before they are exploited.

google/chrome-enterprise-premium-mcp

Plugin Gemini CLI ✓ vendor

Bring AI agents to Chrome Enterprise Premium security management.

mars-tw/ai-instruction-detox

Skill Claude CodeCodex

An auditing and organizing skill for an AI project's instructions, rules, skills, and supporting context. It finds duplication, conflicts, outdated information, and prompt injection, then creates reviewable, reversible change proposals or applies approved changes.

phinn/KinetAios

Skill Claude CodeCodex

A security-audit method for reviewing code and systems for confirmed vulnerabilities, attack paths, and failures at trust boundaries. It uses separate discovery and verification, and ties severity to real-world impact.

aws-samples/sample-pellier-agentic-search-apg

Skill Claude CodeCodex ✓ vendor

Use when reviewing an agent tool that reads or writes PostgreSQL, such as whether an agent could read another customer's rows, lose a user's requirements on a retry, or write the same business effect twice. Not for building a new agent.

TheBarmaEffect/glassbox

MCP server Claude CodeCodexCursor +2

Runtime constitutional verification for AI answers — claim reasoning, ECS, red team, audits. Runs locally from the @glassbox-framework/mcp npm package. Needs 4 environment variables to run.

andrasfe/vulnicheck

MCP server Claude CodeCodexCursor +2

MCP server "vulnicheck" as configured in andrasfe/vulnicheck. Runs in Docker (docker.io/andrasfe/vulnicheck:main). Needs 7 environment variables to run.

mishahanin/heading-os

Skill Claude Code needs its repo

Reflective end-of-session self-improvement. Scans the current Claude Code session for corrections, preferences, repeated patterns, errors, success patterns, and voice violations, then proposes numbered concrete patches to memory, settings, ceo-only skills, and ceo-only rules. Corporate files route to a separate review…

0xUXDesign/ai-codebase-boilerplate

Command Claude Code

Adversarial security review via OpenAI model — second opinion from a different AI.

vitormiziara/saas-security

Skill Claude CodeCodex

Comprehensive SaaS security skill covering code auditing, checklist generation, and vulnerability reporting. TRIGGER this skill whenever the user asks to: audit code for security issues, review a codebase for vulnerabilities, generate a security checklist, check for OWASP compliance, review authentication or…

SomeStay07/claude-doctor-skill

Skill Claude Code

Audits any project for security, test coverage, and Claude Code automation. 46 checks across 6 layers: secrets, CLAUDE.md, hooks, skills, agents, rules, MCP, CI, memory. Adaptive scoring — auto-detects project maturity (Starter/Growing/Mature/Pro). Diagnoses gaps, prescribes project-specific fixes, applies them.…

Luxuzhou/skill-monitor-plugin

Skill Claude Code

A management tool for installed Claude Code skills, which are reusable instructions that extend an AI coding assistant. It checks their security, cost, conflicts, usage, versions, and capability groupings.

lambert0529/skills

Skill Claude CodeCodex

A guide for adding JWT authentication to a Spring Boot application. JWT is a signed token used to identify a user between requests, while role-based access control limits what different users may do.

Rodriguespn/improve-skills-workshop-aie-europe

Skill Claude CodeCodex

Use when writing any SQL for Supabase — creating views, tables, functions, or RLS policies. Supabase has several security behaviors that differ from vanilla Postgres in ways that silently create vulnerabilities. This skill makes sure those traps are caught before they ship. Trigger whenever the user is working with…

faanross/antisyphon_course_26062026

Skill Claude CodeCodex

Expert guidance for deep security investigations. Use this when the user asks to "investigate" a case, entity, or incident.