Security

26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

electron-development

1057

AI-Safeter/antigravity-cli-plugin

Skill Claude CodeCodex needs its repo

Master Electron desktop app development with secure IPC, contextIsolation, preload scripts, multi-process architecture, electron-builder packaging, code signing, and auto-update.

not rated 10 5mo ago A 33 tokens original MIT

panel-review

1058

mollyretter/forward-deployed-engineer-toolkit

Skill Claude CodeCodex

Multi-agent panel review of a PR or current-branch diff. Three-model fan-out across Opus, Sonnet, and Haiku. Opus and Sonnet review for regressions, security issues, and bugs; Haiku reviews convention drift, naming, dead code, and comment quality. Discrete severity levels (nit, question, blocker). Sonnet confidence…

not rated 10 +1 2mo ago A SkillSpector: pass 116 tokens original MIT

royal-mcp

1059

royalplugins/royal-mcp

MCP server Claude CodeCodexCursor +2

Security-first WordPress MCP server. 129 tools for Claude, ChatGPT, Gemini. Free on wp.org. Remote server at demo.royalplugins.com.

not rated 10 yesterday A tokens not measured

ibnsawad/Saudi-Regulatory-Compliance-Claude-Skill

Skill Claude CodeCodex

Senior cybersecurity, cloud, and data-protection compliance advisor for organisations in Saudi Arabia. Trigger for: NCA ECC-2:2024, CCC-2:2024, DCC-1:2022, CSCC-1:2019, OTCC-1:2022, TCC-1:2021, OSMACC-1:2021, CGEC-1:2019, CGESP-1:2019, NCS-1:2020; SAMA Cybersecurity/IT Governance/Business Continuity Frameworks; CST…

not rated 10 +1 3mo ago A 243 tokens

security-kb

1061

dinosn/security-knowledge-base

Skill Codex

Read, search, and inspect evidence in a Security Knowledge Base v1 repository, then validate or stage evidence-cited, revision-bound claim and finding proposals. Use when a task refers to a repository containing kb.json and the kb CLI, asks to check or update the security KB, or supplies an skb.context-packet/v1. Stop…

not rated 10 2mo ago A 92 tokens original MIT

tsm

1062

tashian/tsm

Plugin Claude Code

Bundles 1 skill · 106 tokens together

Touch-ID-gated secrets for AI coding agents. Provides safe credential injection for tools and MCP servers.

not rated 10 changed 28d ago A tokens not measured original MIT

prereview

1063

singhharsh1708/kitbash

Skill Claude CodeCodex

Review the current diff against this team's conventions and invariants before it ships. Invoke with /prereview before opening a PR, or run as a pre-push gate.

not rated 10 21d ago A 0 tokens original Apache-2.0

ai_llm_attacks

1064

1ikeadragon/awesome-offsec-claude

Skill Claude CodeCodex

Elite AI/LLM exploitation specialist - prompt injection, jailbreaking, agent exploitation, RAG poisoning, multi-modal attacks, model extraction, and system prompt leakage for CTF and red team engagements.

not rated 10 7mo ago A ✓ AI review 45 tokens

slartz/agent-security-awareness-training

Skill Claude CodeCodex

Mandatory security awareness onboarding for AI agents. Run this skill at the start of EVERY agent session, before performing any task — especially tasks involving tools, credentials, external content, email, file systems, cloud resources, or production systems. Also run it whenever the security policy file changes…

not rated 10 4mo ago A 117 tokens original MIT

crypto

1067

0xReisearch/crypto-mcp-beta

MCP server Claude CodeCodexCursor +2

Simple symmetric GPG file encryption and decryption. Runs locally from the crypto Python package.

not rated 10 1y ago A tokens not measured original MIT

protect-mcp

1068

ScopeBlind/scopeblind-gateway

Plugin Claude Code

Bundles 4 skills, 2 hooks, 1 MCP server · 199 tokens together

Local Cedar policy checks and signed decision receipts for Claude Code tool calls routed through the plugin hooks. Includes MCP tools for explicit evaluation and receipt inspection. Requires a running local gate.

not rated 10 changed 12d ago A tokens not measured fork MIT

rev-frida

1069

iceman1001/awesome_rfid_claude_skills

Skill Claude CodeCodex

Generate Frida hook scripts using modern Frida API. Activate when the user wants to write Frida scripts, hook functions at runtime, trace calls or arguments or return values, intercept native or ObjC or Java methods, dump memory or exports, or handle native module load timing for Android and other targets.

not rated 10 4mo ago A 65 tokens

sanctuary-framework

1070

eriknewton/sanctuary-framework

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 204 tokens together

Security for AI agents: an OS-enforced egress wall on macOS, operator-held keys, a hash-chained audit record. Wraps Claude Code, Cursor, Hermes, OpenClaw, Cline on tested config paths (partial). Linux wall: Ubuntu 24.04 x86-64 only, separate package.

not rated 10 changed 17d ago A tokens not measured original Apache-2.0

pre-launch-audit

1071

bzsasson/pre-launch-audit-skill

Plugin Claude Code

Bundles 1 skill · 92 tokens together

Run a comprehensive pre-launch website audit covering technical SEO, AI accessibility, security, performance, and on-page SEO.

not rated 10 6mo ago A tokens not measured copy · 86% MIT

rune

1072

thecolourfoundation/rune

MCP server Claude CodeCodexCursor +2

MCP server "rune" as configured in thecolourfoundation/rune. Launched with https://github.com/thecolourfoundation/rune/releases/download/v0.5.1/rune-mcp-li.

not rated 10 +1 changed 1mo ago A tokens not measured original MIT

mcp-threatintel

1073

aplaceforallmystuff/mcp-threatintel

MCP server Claude CodeCodexCursor +2

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker. Runs locally from the mcp-threatintel-server npm package. Needs 4 environment variables to run.

not rated 10 +1 yesterday A tokens not measured original MIT

anti-bot-scraping

1074

thirdwatch-dev/scraping-skills

Skill Claude CodeCodex

Use when a site blocks your scraper and you need to get past it — 403 Forbidden on the first request, JS challenges, CAPTCHAs, Cloudflare Turnstile, DataDome, Akamai, PerimeterX, "Just a moment...", access denied, IP bans, or an empty/skeleton page where data should be. Covers diagnosing transient failures vs real…

not rated 10 +1 4mo ago A 216 tokens original MIT

varsel-poc

1075

erlef-cna/varsel

Plugin Claude Code

Bundles 7 skills · 0 tokens together

Varsel CNA point-of-contact skills: file and verify CVEs as Varsel cases through the Varsel MCP.

not rated 10 changed yesterday A tokens not measured

security

1076

kok-o/contextos-agents

Cursor rule Cursor

Agent-requested: invoke when working on Application Security. Protect authentication, authorization, sensitive data, untrusted input, external integrations, and agent tool execution.

not rated 10 changed 10d ago A 31 tokens original Apache-2.0

duende-skills

1077

DuendeSoftware/duende-skills

Plugin Claude Code

Bundles 26 skills, 2 agents · 1,437 tokens together

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture.

not rated 9 changed 21d ago A tokens not measured

pentest

1078

8NobleTruths/sabba

Command Claude Code

Recon and scan an authorized target with Sabba's security tools, then confirm findings.

not rated 9 3mo ago A 16 tokens original Apache-2.0

HewlettPackard/gl-mcp

MCP server Claude CodeCodexCursor +2

One of 7 in server.json

HPE GreenLake audit-logs MCP Server. Runs locally from the greenlake-audit-logs-mcp Python package.

not rated 9 5mo ago A tokens not measured original Apache-2.0

skillrx

1080

felipeinf/skillRx

Plugin Claude Code

Bundles 1 command · 11 tokens together

Security scanner for AI agent skills and plugins (Claude Code, Codex, Cursor, and 40+ more).

not rated 9 6mo ago A tokens not measured

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: