24,655 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
MCP server Claude CodeCodexCursor +2
MCP server "macforensicsmcp" as configured in x746b/macforensics-mcp. Runs locally from the mac_forensics_mcp Python package.
MCP server Claude CodeCodexCursor +2
MCP server for FOFA, Quake, Hunter, and DayDayMap cyberspace mapping platforms. Runs locally from the fofa-quake-hunter-mcp Python package.
Skill Claude CodeCodex
A Capture The Flag, or CTF, security-competition assistant covering web attacks, binary exploitation, reverse engineering, cryptography, forensics, blockchain, and cloud security.
Plugin Claude Code
Bundles 7 skills · 0 tokens together
Varsel CNA point-of-contact skills: file and verify CVEs as Varsel cases through the Varsel MCP.
Plugin Claude Code
Bundles 7 skills, 4 hooks, 1 MCP server · 1,020 tokens together
Official JFrog plugin. Connect Claude Code to JFrog to manage, secure, and govern your software supply chain. Give agents the context to build secure, compliant software.
Plugin Claude Code
Bundles 2 commands · 27 tokens together
A collection of Claude Code plugins developed by PagerDuty for pre-commit risk assessment and PagerDuty skill creation for AI agents (Early Access).
MCP server Claude CodeCodexCursor +2
Multi-tenant MCP platform with OAuth 2.1, Entra SSO, RBAC and audit logging. Remote server at your-gateway.example.com.
MCP server Claude CodeCodexCursor +2
Independent A-F trust grade for any MCP server, watched for drift. Free, never for sale. Remote server at wmcp.sh.
MCP server Claude CodeCodexCursor +2
Reliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail. Runs locally from the mcp-bastion npm package.
MCP server Claude CodeCodexCursor +2
Secure grip for your agent's secrets - security-hardened MCP gateway with proxy token architecture. Runs locally from the pincer-mcp npm package. Needs 4 environment variables to run.
Skill Claude CodeCodex
Intent-aware destination verification for AI agents. Use before an agent opens a URL to assess destination risk, confirm task alignment, and obtain an explicit ALLOW or DENY decision before navigation.
MCP server Claude CodeCodexCursor +2
MCP server for managing pfSense firewalls through AI assistants. Runs locally from the mcp-pfsense Python package.
Skill Claude Code
Audit guardrails-kit compliance of the current session — run the transcript marker scorecard. Use when asked to audit compliance, check which guardrail rules fired or were missed, or score the session.
Skill Claude CodeCodex
A review tool for deciding whether a coding-agent skill is safe and worthwhile to install. It checks for risky behavior and scores how precisely, effectively, and efficiently the skill works.
maxwellokumu/okaudit-claude-skills
Skill Claude CodeCodex
Guide Claude through a structured application security audit covering threat modeling, testing, pipeline review, dependency risk, and vulnerability management.
1181652815-hub/clean-windows-c-drive-skill
Skill Codex
Provide a standalone Simplified Chinese Windows app and CLI workflows to assess C: drive health, clean a fixed allowlist of regenerable junk, find large user files, detect exact duplicates with SHA-256, and relocate or recycle explicitly approved ordinary user files without breaking Windows or installed applications.…
Skill Claude CodeCodex
Is the data sensitive (tokens, passwords, keys)? YES → Keychain (NEVER UserDefaults) NO ↓.
kylebrodeur/1password-ssh-setup
Skill Claude CodeCodex
1Password CLI integration for managing secrets, API keys, and authentication. Use when working with 1Password in Linux/WSL/Windows environments. Supports Service Account authentication, Desktop App integration, and Session Token Caching.
Skill Claude CodeCodex
Add OAuth 2.0 PKCE authentication to a remote MCP server. Use this skill whenever the user wants to add authentication to an MCP server, protect MCP tools with OAuth, implement login flow for an MCP connector, add user auth to an MCP endpoint, or set up token-based access for MCP. Also triggers on: 'MCP OAuth', 'MCP…
Zyoffsec/airtight-secure-coding
Plugin Claude Code
Bundles 1 skill, 1 hook · 63 tokens together
Secure-coding gates for AI-written code. 70 numbered gates mapped to OWASP Top 10 and CWE, plus a pre-write guard that denies the failures it can prove: open routes, IDOR, missing CSRF tokens, interpolated queries and shell commands, raw HTML sinks, unverified webhooks, any-origin CORS with credentials, passwords…
Onome-AJ/security-sweep-plugin
Plugin Claude Code
Bundles 1 skill · 43 tokens together
Comprehensive security scanner for codebases — finds hardcoded secrets, injection flaws, auth issues, misconfigurations, AI-specific vulnerabilities, and more. Covers OWASP Top 10, Mobile Top 10, and LLM Top 10.
Plugin Claude Code
Bundles 2 skills, 5 hooks · 41 tokens together
Session-aware shell guardrails for Claude Code backed by the Caushell runtime.
jassics/awesome-claude-security
Plugin Claude Code
Plugin marketplace listing 45 plugins: security-diagramming, security-reporting, security-integrations, security-knowledge, threat-modeling.
Skill Claude CodeCodex
Guide for using openlens to review code. Triggers on: "review my code", "check for bugs", "security scan", "run openlens", "set up code review", "openlens".
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: