Security

24,655 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

skjortan23/aws-security-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "aws-security-mcp-server" as configured in skjortan23/aws-security-mcp-server. Runs locally from the aws-security-mcp-server Python package.

not rated 7 6mo ago A tokens not measured

mcp-nvd

1058

gkhays/mcp-nvd-server

MCP server Claude CodeCodexCursor +2

An MCP server to interact with a the NVD Database API. Runs locally from the mcp-nvd Python package.

not rated 7 1y ago A tokens not measured original Apache-2.0

mcp-pentest

1059

adriyansyah-mf/mcp-pentest

MCP server Claude CodeCodexCursor +2

SquatGuard MCP Template for Python. Runs locally from the mcp-pentest npm package.

not rated 7 11mo ago A tokens not measured

365-vigilant-spark

1060

microsoft/aibast-agents-library

Agent Claude Code needs its repo ✓ vendor

Autonomous steward for the CommunityRAPP installation. Use proactively for application health checks, code maintenance, diagnostics, security audits, deployment verification, and evolution planning. Invoke when the user mentions health issues, deployment problems, maintenance tasks, code quality, security concerns, or…

not rated 7 today A 66 tokens original MIT

mcp-exploitdb

1061

CyberRoute/mcp_exploitdb

MCP server Claude CodeCodexCursor +2

MCP server "mcp-exploitdb" as configured in CyberRoute/mcpexploitdb. Runs locally from the mcp-exploitdb Python package.

not rated 7 9mo ago A tokens not measured

mcp-web-audit

1062

Shen-zhihao/mcp-web-audit

MCP server Claude CodeCodexCursor +2

A local Node.js MCP server for security audits of frontend projects. It checks dependencies, which are external software packages a project relies on, in local projects and remote repositories.

not rated 7 9mo ago A tokens not measured

safebreach-mcp-server

1063

SafeBreach/safebreach-mcp

MCP server Claude CodeCodexCursor +2

MCP server "safebreach-mcp-server" as configured in SafeBreach/safebreach-mcp. Runs locally from the safebreach-mcp-server Python package.

not rated 7 2d ago A tokens not measured original BSD-3-Clause

discord-access

1064

lilyzhng/agent-channels

Skill Claude CodeCodex

Manage Discord channel access for cursor-discord-channels — pairing, allowlists, trustedBots. Use when configuring the bridge or when the user asks about Discord bot access.

not rated 7 1mo ago A 37 tokens

okta-mcp-server

1065

YiyangLi/okta-mcp-server

MCP server Claude CodeCodexCursor +2

A Model Context Protocol server used to integrate Okta resources and Claude Desktop. Runs locally from the @yiyang.1i/okta-mcp-server npm package.

not rated 7 1y ago A tokens not measured original MIT

cwaf-external-mcp

1066

ThalesGroup/imperva-cloud-WAF-MCP-server

MCP server Claude CodeCodexCursor +2

MCP server "cwaf-external-mcp" as configured in ThalesGroup/imperva-cloud-WAF-MCP-server. Runs locally from the cwaf-external-mcp Python package.

not rated 7 10d ago A tokens not measured original Apache-2.0

mcp-threatintel

1067

aplaceforallmystuff/mcp-threatintel

MCP server Claude CodeCodexCursor +2

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker. Runs locally from the mcp-threatintel-server npm package. Needs 4 environment variables to run.

not rated 7 1mo ago A tokens not measured original MIT

skill

1068

artvepa80/Agents-Hefesto

Skill Claude CodeCodex

HefestoAI is a pre-commit code quality guardian that detects semantic drift, security vulnerabilities, and reliability anti-patterns in AI-generated code.

not rated 7 4mo ago A 0 tokens

SHADOWPR0/security-bluebook-builder

Skill Claude CodeCodex

Create or refine a concise, normative security policy ("Blue Book") for sensitive applications. Use when users need a threat model, data classification rules, auth/session policy, logging and audit requirements, retention/deletion expectations, incident response, or security gates for apps handling PII/PHI/financial…

not rated 7 8mo ago A 66 tokens

skill-scout

1070

Brain-ai-biz/skill-scout

Skill Claude Code

Discover the best Claude Code extensions on the web AND tell the user how safe each one is before installing. Reads the user's Claude Code setup (project context, memory, history), asks a few questions to understand their goal (general or a specific idea), then surfaces a ranked shortlist - name, what it does, what…

not rated 7 2mo ago A 193 tokens original MIT

EresusSecurity/appsec-skills

Skill Claude CodeCodex

Elite manual security code review skill for deep, adversarial vulnerability hunting and exploit-chain discovery. Trigger when the user asks to: "do a deep security audit", "manual code review", "find exploit chains", "hunt for logic bugs", "red-team this codebase", "do an offensive security review", "review this like…

not rated 7 5mo ago A 145 tokens original Apache-2.0

penthera

1072

danoszz/penthera

Plugin Claude Code

Bundles 1 skill · 118 tokens together

Find and fix security issues in vibecoded apps. Scan a live URL, a local repo, or your macOS machine for TLS, headers, auth, secrets, IDOR/OAuth, and injection issues, then apply framework-aware fixes and re-scan to verify. Mapped to OWASP with SARIF output. Runs as a skill or CLI. Authorized testing only.

not rated 7 +1 28d ago A tokens not measured original MIT

soc-copilot

1073

G4rb3n/SOC-Copilot

Skill Claude Code

An AI-assisted workflow for investigating security alerts in a security operations center, or SOC—the team and systems that monitor an organisation for attacks. It can analyse alerts, investigate their origins, prepare response scripts, and record approved rules and reports.

not rated 7 6mo ago A 125 tokens original MIT

cursor-rules

1074

zhurong2020/pyobfus

Cursor rule Cursor

This project uses pyobfus (the Python obfuscator). The canonical agent protocol is AGENTS.md at the project root, which Cursor reads natively. Copy AGENTS.md into your repo; keep this .mdc only for Cursor-scoped glob targeting.

not rated 7 today A 0 tokens original Apache-2.0

cwe-search-mcp

1075

Bilel-Eljaamii/cwe-search_mcp

MCP server Claude CodeCodexCursor +2

MCP server "cwe-search-mcp" as configured in Bilel-Eljaamii/cwe-searchmcp. Runs locally from the cwe-search-mcp Python package.

not rated 7 1y ago A tokens not measured original MIT

github-advisory-mcp

1076

microsoft/github-advisory-mcp

MCP server Claude CodeCodexCursor +2 ✓ vendor

MCP server "github-advisory-mcp" as configured in microsoft/github-advisory-mcp. Runs locally from the @microsoft/github-advisory-mcp npm package.

not rated 7 +1 2mo ago A tokens not measured original MIT

Aaronjacobs000/sophos-central-mcp

MCP server Claude CodeCodexCursor +2

MCP server for Sophos Central API - SOC monitoring, endpoint management, admin automation, and XDR investigation. Runs locally from the sophos-central-mcp-server npm package.

not rated 7 +1 6d ago A tokens not measured original MIT

mac_forensics_mcp

1078

x746b/mac_forensics-mcp

MCP server Claude CodeCodexCursor +2

MCP server "macforensicsmcp" as configured in x746b/macforensics-mcp. Runs locally from the mac_forensics_mcp Python package.

not rated 7 +1 7mo ago A tokens not measured original MIT

fofa-quake-hunter-mcp

1079

RuoJi6/fofa_quake_hunter_mcp

MCP server Claude CodeCodexCursor +2

MCP server for FOFA, Quake, Hunter, and DayDayMap cyberspace mapping platforms. Runs locally from the fofa-quake-hunter-mcp Python package.

not rated 7 +1 1mo ago A tokens not measured original MIT

varsel-poc

1080

erlef-cna/varsel

Plugin Claude Code

Bundles 7 skills · 0 tokens together

Varsel CNA point-of-contact skills: file and verify CVEs as Varsel cases through the Varsel MCP.

not rated 7 changed 5d ago A tokens not measured

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: