Security

Aradotso/security-skills

Skill Claude CodeCodex

Security & compliance skill suite providing OWASP scanning, CVE detection, GDPR/SOC2 audits, threat modeling, and incident response workflows for AI coding agents.

mrmyothet/zach-hair-studio

Agent Claude Code

Verifies threat mitigations from PLAN.md threat model exist in implemented code. Produces SECURITY.md. Spawned by /gsd-secure-phase.

synaptent/aragora

Skill Claude CodeCodex

Multi-agent adversarial code review for pull requests.

MohibShaikh/clawvet

Skill Claude CodeCodex

Use before installing, trusting, or running any third-party OpenClaw skill, and when the user says "scan this skill", "is this skill safe", "vet/check this skill", "should I install this", "audit my skills", or "clawvet". Also use when reviewing a SKILL.md pulled from ClawHub or an untrusted source.

intimatep/PenTestClaw

Skill Claude CodeCodex

An asset-discovery workflow that searches Fofa, checks which results are reachable, removes duplicates, and exports the results. Fofa is a search engine for internet-connected systems and services.

JinNing6/CyberHuaTuo

Skill Claude CodeCodex

An AI-assisted workflow for diagnosing and fixing coding errors, agent problems, and security issues. CyberHuaTuo is the name of the included AI clinic concept.

zircote-plugins/sdlc-quality

Plugin Claude Code

Bundles 10 skills, 5 commands, 1 hook · 778 tokens together

Software Development Lifecycle standards and requirements for project quality, security, and compliance.

falcoschaefer99-eng/michael-security-agent

Skill Claude CodeCodex

Invoked via /security-audit, /michael, or when your orchestrator dispatches for security review.

akasecurity/claude-tools

Skill Claude CodeCodex

Audit the shell startup chain (the rc file + every file it sources) for hardcoded credentials, persistence-suspicious patterns, duplicate or dangling aliases, and git-baseline drift. USE WHEN the user wants to review, secure, clean up, or maintain their shell aliases or startup files; check /.zshrc / /.bashrc for…

0x-Professor/Agent-Skills-Hub

Skill Claude CodeCodex

Aggregate SAST, SCA, DAST, secrets, API, frontend, and backend security checks into one report.

Aiyakami/PWN-MCP

MCP server Claude CodeCodexCursor +2

MCP server "ctf-debugger" as configured in Aiyakami/PWN-MCP. Runs locally from the ctf-debugger Python package.

tomjwxf/scopeblind-gateway

MCP server Claude CodeCodexCursor +2

Scan, protect, and monitor APIs from AI coding tools. Device-level rate limiting. Runs locally from the scopeblind-mcp npm package.

omermaksutii/RugProof

Plugin Claude Code

Bundles 35 commands, 23 agents · 1,912 tokens together

Smart contract security auditor for Claude Code. Rugproof your code before someone else does.

EvilFreelancer/secs

Skill Claude CodeCodex

Container and Kubernetes security assessment — image vulnerability scanning, SBOM diff analysis, K8s cluster auditing, RBAC privilege mapping, NetworkPolicy review, container escape testing, and runtime monitoring (Falco/Tetragon). Use when scanning Docker/OCI images, auditing K8s clusters, reviewing Dockerfiles…

DollhouseMCP/collection

Agent Claude Code

Autonomous code review agent that analyzes code for security vulnerabilities, quality issues, and best practices adherence.

crunchtools/mcp-trentina

MCP server Claude CodeCodexCursor +2

Secure MCP gateway and quarantine for AI agent traffic — three-layer defense against prompt injection. Runs locally from the mcp-trentina-crunchtools Python package.

Xplo8E/hacktricks-mcp-server

MCP server Claude CodeCodexCursor +2

Search and query HackTricks pentesting documentation with quick lookup and section extraction. Runs locally from the hacktricks-mcp-server npm package.

IvanBBaev/servicenow-mcp-ai

Plugin Claude Code

Bundles 8 skills, 2 agents, 3 hooks, 1 MCP server · 572 tokens together

Drive ServiceNow from your AI assistant — 100 tools over the full REST surface, with plan-and-apply write safety, capability preflight, an ACL security scan, eight workflow skills (discover, triage, impact, drift, safe write, UI Builder review, upgrade review, security) and two read-only subagents (investigator…

holistis/bug-bounty-intelligence-mcp

MCP server Claude CodeCodexCursor +2

AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates. Remote server at wazir-x402.duckdns.org.

jassics/awesome-claude-security

Plugin Claude Code

Lists 32 plugins

Plugin marketplace listing 45 plugins: security-diagramming, security-reporting, security-integrations, security-knowledge, threat-modeling.

zhurong2020/pyobfus

Cursor rule Cursor

This project uses pyobfus (the Python obfuscator). The canonical agent protocol is AGENTS.md at the project root, which Cursor reads natively. Copy AGENTS.md into your repo; keep this .mdc only for Cursor-scoped glob targeting.

SyedAnas01/mcp-safeguard

MCP server Claude CodeCodexCursor +2

Security scanner for MCP servers — detect prompt injection, credential leaks, exposed endpoints, tool poisoning, and source-level credential-handling flaws. Runs locally from the mcp-safeguard Python package.

aryaminus/controlkeel

Plugin Cursor

Bundles 31 skills, 1 MCP server · 1,499 tokens together

ControlKeel governance for Cursor — validation, findings, budgets, proofs, memory, agent routing, and human review via MCP.

snyk/agentic-integration-wrappers

Plugin Gemini CLI

MCP configuration declaring 1 server: snyk.