26,946 mods in this category, of every kind an
agent can take. Each one carries what it costs per session, what the
scan found, and whether it is the original.
Master Electron desktop app development with secure IPC, contextIsolation, preload scripts, multi-process architecture, electron-builder packaging, code signing, and auto-update.
Multi-agent panel review of a PR or current-branch diff. Three-model fan-out across Opus, Sonnet, and Haiku. Opus and Sonnet review for regressions, security issues, and bugs; Haiku reviews convention drift, naming, dead code, and comment quality. Discrete severity levels (nit, question, blocker). Sonnet confidence…
Read, search, and inspect evidence in a Security Knowledge Base v1 repository, then validate or stage evidence-cited, revision-bound claim and finding proposals. Use when a task refers to a repository containing kb.json and the kb CLI, asks to check or update the security KB, or supplies an skb.context-packet/v1. Stop…
Review the current diff against this team's conventions and invariants before it ships. Invoke with /prereview before opening a PR, or run as a pre-push gate.
Elite AI/LLM exploitation specialist - prompt injection, jailbreaking, agent exploitation, RAG poisoning, multi-modal attacks, model extraction, and system prompt leakage for CTF and red team engagements.
Mandatory security awareness onboarding for AI agents. Run this skill at the start of EVERY agent session, before performing any task — especially tasks involving tools, credentials, external content, email, file systems, cloud resources, or production systems. Also run it whenever the security policy file changes…
Local Cedar policy checks and signed decision receipts for Claude Code tool calls routed through the plugin hooks. Includes MCP tools for explicit evaluation and receipt inspection. Requires a running local gate.
★not rated 10
changed 12d agoA
tokens not measured
forkMIT
Generate Frida hook scripts using modern Frida API. Activate when the user wants to write Frida scripts, hook functions at runtime, trace calls or arguments or return values, intercept native or ObjC or Java methods, dump memory or exports, or handle native module load timing for Android and other targets.
Security for AI agents: an OS-enforced egress wall on macOS, operator-held keys, a hash-chained audit record. Wraps Claude Code, Cursor, Hermes, OpenClaw, Cline on tested config paths (partial). Linux wall: Ubuntu 24.04 x86-64 only, separate package.
★not rated 10
changed 17d agoA
tokens not measured
originalApache-2.0
MCP server "rune" as configured in thecolourfoundation/rune. Launched with https://github.com/thecolourfoundation/rune/releases/download/v0.5.1/rune-mcp-li.
Use when a site blocks your scraper and you need to get past it — 403 Forbidden on the first request, JS challenges, CAPTCHAs, Cloudflare Turnstile, DataDome, Akamai, PerimeterX, "Just a moment...", access denied, IP bans, or an empty/skeleton page where data should be. Covers diagnosing transient failures vs real…
Agent-requested: invoke when working on Application Security. Protect authentication, authorization, sensitive data, untrusted input, external integrations, and agent tool execution.
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture.
Security scanner for AI agent skills and plugins (Claude Code, Codex, Cursor, and 40+ more).
★not rated 9 6mo agoA
tokens not measured
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: