26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude CodeCodex
MANDATORY pre-flight for ALL SQL operations. Fire this skill IMMEDIATELY whenever the conversation involves SQL of any kind — writing it, proposing it, executing it, reviewing it, or even talking about it concretely. Triggers include any of these keywords appearing in user input or your own draft output…
Plugin Claude Code
Skill router and context picker for coding agents — picks the right skill per prompt, scans both the request and every retrieved doc for prompt injection.
Cursor rule Cursor
Agent Inspector - AI Agent Security Analysis (scan, correlate static ↔ dynamic).
Cursor rule Cursor
CASE/UCO SDK usage patterns for building digital forensics investigation graphs.
ArianHobson333/claude-bug-bounty-stack
Skill Claude CodeCodex
Curated index of external hacking resources — meta-lists, frameworks, wordlists, payload banks, recon/OSINT, network, exploitation, and CTF tooling. Load when the user asks "what's the tool for X", "where do I find payloads for Y", "is there a wordlist for Z", or when planning which external resource to pull for a…
CaseyLabs/kc-secure-repo-template
Skill Claude CodeCodex
Review or update GitHub repository hardening guidance and its Terraform implementation under config/infra, including rulesets, required checks, scanning, permissions, provider pins, and plan/apply safety. Do not use for ordinary app code, generic template adaptation, release integrity, or routine workflow validation.
Skill Claude CodeCodex
Scans extensions, skills, and code for security threats: prompt injection, malicious code, obfuscation, data exfiltration. Also scans inbound messages for injection patterns automatically.
Skill Claude CodeCodex
Establish security boundaries before execution. Trigger this skill whenever involving command execution, file writing, sensitive data reading, external tool result adoption, or potential unauthorized requests; first output risk assessment and allowed/forbidden action lists.
kapital-legal/claude-for-tr-legal
Plugin Claude Code
Bundles 8 skills · 946 tokens together
KVKK m.10 aydınlatma metni üretir, ilgili kişi başvurularını (KVKK m.13/2 30 günlük süre içinde) yanıtlar, VERBİS uyumunu kontrol eder, veri ihlali triajı yapar (72 saatlik bildirim — KVKK m.12/5 + Kurul'un 24.01.2019 tarih ve 2019/10 sayılı kararı), KVKK iyi uygulama düzeyinde risk değerlendirmesi üretir ve…
MCP server Claude CodeCodexCursor +2
Official Anchore Grype MCP Server for AI-assisted vulnerability scanning. Runs locally from the grype-mcp Python package.
zephyrpersonal/sensitive-lexicon-mcp
MCP server Claude CodeCodexCursor +2
MCP server for sensitive word detection using Sensitive-lexicon library. Runs locally from the sensitive-lexicon-mcp npm package.
MCP server Claude CodeCodexCursor +2
MCP server "fortimanager-mcp" as configured in jmpijll/fortimanager-mcp. Runs locally from the fortimanager-mcp Python package.
MCP server Claude CodeCodexCursor +2
A comprehensive HTTP client MCP server for security testing, API testing, and web automation. Runs locally from the mcp-request Python package.
Skill Claude CodeCodex
Use when operating the vigolium CLI for web vulnerability scanning, security testing, or traffic analysis. Covers planning a scan with --dry-run, scanning a URL/spec/raw request, watching and waiting on scans, running AI agent scans (autopilot, swarm, audit, query), triaging, verifying and marking findings, diffing…
MCP server Claude CodeCodexCursor +2
StackHawk MCP Server for Security Analytics and Developer Integration. Runs locally from the stackhawk-mcp Python package. Needs 1 environment variable to run.
Skill Claude Code
Multi-angle code review that adapts to what is being reviewed — a mid-flight worktree increment, a full PR before production, a merge-window integration sweep, or a security-only pass. Findings are scored, adversarially refuted, widened to the same defect elsewhere in the codebase, and reported to the native review…
Plugin Claude Code
Bundles 1 command, 1 hook · 17 tokens together
Run Claude Code unattended: cap the spend, sandbox execution, and get a signed receipt, enforced from outside the agent's own process by the covguard binary.
Plugin Claude Code
Bundles 19 skills, 4 agents, 1 hook · 527 tokens together
Automated code review enforcement. Runs autofix, architecture verification, and conversation review -- and blocks sessions from finishing until they pass.
Cursor rule Cursor
Use Context Engine CLI (ctx-cli) to search code & the knowledge graph, investigate services, triage/resolve CVE & SAST findings, and apply coding guidelines.
Cyreslab-AI/burpsuite-mcp-server
MCP server Claude CodeCodexCursor +2
MCP server "burpsuite-server" as configured in Cyreslab-AI/burpsuite-mcp-server. Runs locally from the burpsuite-server npm package.
Cyreslab-AI/nist-nvd-mcp-server
MCP server Claude CodeCodexCursor +2
MCP server "nist-nvd-mcp-server" as configured in Cyreslab-AI/nist-nvd-mcp-server. Runs locally from the @cyreslab/nist-nvd-mcp-server npm package.
Plugin Claude Code
Supply chain gate for Claude Code. Intercepts npm, pip, cargo, and go installs — blocks CRITICAL packages before they run. Powered by getcommit.dev.
Plugin Claude Code
Bundles 1 skill, 1 agent · 141 tokens together
Install/configure helper for @brainwebuk/payload-plugin-mcp-oauth — OAuth 2.1 + PKCE for a Payload @payloadcms/plugin-mcp server.
ahernandez-developer/claude-crap
Plugin Claude Code
Bundles 4 skills, 5 hooks, 1 MCP server · 742 tokens together
Deterministic Quality Assurance plugin for Claude Code. Wraps every Write / Edit / Bash tool call with a PreToolUse gatekeeper, a PostToolUse verifier, and a Stop quality gate backed by CRAP index, Technical Debt Ratio, tree-sitter AST metrics, and SARIF 2.1.0 reports. Forbids the agent from writing functional code…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: