24,655 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude CodeCodex
Detect insecure file upload vulnerabilities in a codebase using a three-phase approach: discovery (find all upload sites), batched verify (check extension bypass and related issues in parallel subagents, 3 sites each), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first).…
Cursor rule Cursor ✓ vendor
Non-negotiable safety and scope constraints for Box MCP tool usage.
Plugin Claude Code
Bundles 1 skill, 3 commands · 108 tokens together
Static technical-debt analysis across 14 languages, exposed as MCP tools and resources (SQALE ratings, debt summaries, custom rules, dependency vulnerabilities).
MCP server Claude CodeCodexCursor +2
MCP server "safeagent" as configured in azender1/SafeAgent. Runs safeagent_exec_guard.mcp_server with python.
bzsasson/pre-launch-audit-skill
Plugin Claude Code
Bundles 1 skill · 92 tokens together
Run a comprehensive pre-launch website audit covering technical SEO, AI accessibility, security, performance, and on-page SEO.
Plugin Claude Code
Supply chain gate for Claude Code. Intercepts npm, pip, cargo, and go installs — blocks CRITICAL packages before they run. Powered by getcommit.dev.
Agent Claude Code
Evaluates code for proper authentication mechanisms, authorization checks, session management, token handling, and access control patterns.
MCP server Claude CodeCodexCursor +2
Author, validate, debug, and explain OPA Rego policies through any MCP-compatible client. Runs locally from the @orygn/opa-mcp npm package. Needs 7 environment variables to run.
Skill Claude CodeCodex
A Docker-based service for running Python, Shell, or Bash code in an isolated environment with time and resource limits.
Skill Claude CodeCodex
Evidence-driven application audit protocol for security, authorization, privacy, concurrency, state integrity, reliability, performance, accessibility, visual consistency, responsive behavior, and release readiness. Use for incremental checks, pre-merge review, pre-launch audits, high-stakes deep audits, AI-generated…
Plugin Claude Code
Bundles 6 skills, 7 agents · 584 tokens together
Codebase health tools: deep audits via orchestrated specialists (security, performance, libraries, quality, dead code), safe dependency updates, dead-code cleanup, and documentation maintenance.
antgroup/adversarial-ai-coding-plugin
Plugin Claude Code
Bundles 5 skills, 2 hooks · 706 tokens together
A coding plugin built around adversarial review, where opposing checks look for security problems in generated code.
Plugin Claude Code
Bundles 1 skill, 1 command, 2 hooks · 0 tokens together
A dependency security plugin for Claude Code. DepGuard intercepts package installs, checks reputation with Socket.dev, runs installs in a Modal sandbox, and blocks suspicious behavior before it reaches your machine.
Plugin Claude Code
Bundles 1 skill, 1 agent · 141 tokens together
Install/configure helper for @brainwebuk/payload-plugin-mcp-oauth — OAuth 2.1 + PKCE for a Payload @payloadcms/plugin-mcp server.
MCP server Claude CodeCodexCursor +2
Agentic MCP server for detecting fake LinkedIn recruiter / job-offer scams using free OSINT sources. Runs locally from the jobverify-mcp Python package.
Skill Claude CodeCodex
This skill should be used when the user asks to "scan for PHI", "detect PII", "HIPAA compliance check", "audit for protected health information", "find sensitive healthcare data", "generate HIPAA audit report", "check code for PHI leakage", "scan logs for PHI", "check authentication on PHI endpoints", "scan FHIR…
MCP server Claude CodeCodexCursor +2
Evidence-traced codebase understanding and security scanning for AI agents over MCP. Runs locally from the @moosl/rune npm package.
Plugin Claude Code
Bundles 3 skills, 2 hooks · 57 tokens together
Security scanner for AI-agent configuration files — detects prompt injection, dangerous permissions, and credential exposure in settings.json, CLAUDE.md, MCP configs, and more.
Cursor rule Cursor
Reviews Python code for unguarded AI agent tool calls. Use when reviewing agent code, scanning for security issues, or checking tool call safety.
chainguard-demo/claude-plugins
Plugin Claude Code
Bundles 6 skills, 1 MCP server · 149 tokens together
Generate secure Dockerfiles and apko configurations, and migrate existing Dockerfiles to use Chainguard Containers.
Plugin Claude Code
Bundles 8 skills, 11 hooks · 147 tokens together
Security enforcement layer for Claude Code. Blocks dangerous commands, audits every tool call, detects prompt injection.
Plugin Claude Code
Bundles 1 skill, 1 hook · 50 tokens together
Supply-chain security guard that intercepts package install commands across npm, pnpm, pip, go, and cargo ecosystems and enforces package risk policies before execution.
Skill Claude CodeCodex
Audytuje bezpieczeństwo skilla, pluginu lub agenta Claude Code przed instalacją. Warstwa statyczna (heurystyki) plus subagent-audytor tylko do odczytu wykrywają prompt injection, kradzież sekretów, exfiltrację danych, obfuskację i persistence. Pozyskuje kod do izolowanego katalogu tymczasowego, nigdy bezpośrednio do…
godlovepenn/attack-simulation-claude
Plugin Claude Code
Bundles 6 skills, 8 commands, 5 agents · 786 tokens together
Automate TTPForge TTP creation, validation, and management for adversary simulation.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: