26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
MCP server Claude CodeCodexCursor +2
Author, validate, debug, and explain OPA Rego policies through any MCP-compatible client. Runs locally from the @orygn/opa-mcp npm package. Needs 7 environment variables to run.
Skill Claude CodeCodex
Audit and enable security-oriented Xcode build settings. Progressively enables compiler warnings, static analyzer checkers, and Enhanced Security features. Use when: user wants to secure their Xcode project, audit security settings, enable hardening, review security posture of build configuration, set up…
Plugin Claude Code
Bundles 6 skills, 7 agents · 584 tokens together
Codebase health tools: deep audits via orchestrated specialists (security, performance, libraries, quality, dead code), safe dependency updates, dead-code cleanup, and documentation maintenance.
MCP server Claude CodeCodexCursor +2
Agentic MCP server for detecting fake LinkedIn recruiter / job-offer scams using free OSINT sources. Runs locally from the jobverify-mcp Python package.
Skill Claude CodeCodex
This skill should be used when the user asks to "scan for PHI", "detect PII", "HIPAA compliance check", "audit for protected health information", "find sensitive healthcare data", "generate HIPAA audit report", "check code for PHI leakage", "scan logs for PHI", "check authentication on PHI endpoints", "scan FHIR…
Cursor rule Cursor
Snyk API & Web behavioral rules - safety constraints, proactive monitoring, and vulnerability handling.
Skill Claude CodeCodex
Amazon Cognito — Custom UI with Passkeys, Social Login & Face ID. Reference skill (loaded via skill:// from the ios agent).
chainguard-demo/claude-plugins
Plugin Claude Code
Bundles 6 skills, 1 MCP server · 149 tokens together
Generate secure Dockerfiles and apko configurations, and migrate existing Dockerfiles to use Chainguard Containers.
microsoft/aibast-agents-library
Agent Claude Code needs its repo ✓ vendor
Autonomous steward for the CommunityRAPP installation. Use proactively for application health checks, code maintenance, diagnostics, security audits, deployment verification, and evolution planning. Invoke when the user mentions health issues, deployment problems, maintenance tasks, code quality, security concerns, or…
7Majesty-M/terminal-guardian-mcp
MCP server Claude CodeCodexCursor +2
Secure Model Context Protocol server for safe, sandboxed terminal access for AI assistants. Runs locally from the terminal-guardian-mcp npm package.
ThalesGroup/imperva-cloud-WAF-MCP-server
MCP server Claude CodeCodexCursor +2
MCP server "cwaf-external-mcp" as configured in ThalesGroup/imperva-cloud-WAF-MCP-server. Runs locally from the cwaf-external-mcp Python package.
mayurrathi/awesome-agent-skills
Skill Claude CodeCodex
Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities.
SHADOWPR0/security-bluebook-builder
Skill Claude CodeCodex
Create or refine a concise, normative security policy ("Blue Book") for sensitive applications. Use when users need a threat model, data classification rules, auth/session policy, logging and audit requirements, retention/deletion expectations, incident response, or security gates for apps handling PII/PHI/financial…
MCP server Claude CodeCodexCursor +2
Independent A-F trust grade for any MCP server, watched for drift. Free, never for sale. Remote server at wmcp.sh.
Command Claude Code
Audit agent configuration files for security vulnerabilities and misconfigurations. Classifies findings as P0 or P1.
Aaronjacobs000/sophos-central-mcp
MCP server Claude CodeCodexCursor +2
MCP server for Sophos Central API - SOC monitoring, endpoint management, admin automation, and XDR investigation. Runs locally from the sophos-central-mcp-server npm package.
MCP server Claude CodeCodexCursor +2
MCP server for Microsoft 365 and Intune management with 33 tools for Entra ID, devices, Autopilot, and more. Runs locally from the mcp-m365-mgmt Python package.
Cholulaa/claude-code-hardening-skill
Skill Claude Code
Complete security hardening of a Linux server based on CIS Benchmarks, NIST 800-123, and ANSSI BP-028. Smart service discovery to avoid disruption. 4 hardening levels (minimal/standard/enhanced/paranoid). Installs open-source security tools, hardens SSH/kernel/firewall/systemd/permissions, runs all scans, generates a…
Newmcpe/ida-reverse-engineering-skill
Skill Claude CodeCodex
Drive IDA Pro through the IDA Pro MCP like a senior reverse engineer: don't just narrate decompiler output, transform the database. Use this whenever the user is reverse engineering, analyzing malware, working a crackme or CTF, or doing binary/firmware analysis with IDA Pro over an MCP connection (mrexodia/ida-pro-mcp…
Agent Claude Code
Session orchestrator for one domain. Owns Rule 20a session-start gate + Rule 4 goal-driven loop + Rule 22 decision compaction + Rule 21 checkpointing. Promotes confirmed cross-target patterns into KB/skill proposals. On-demand only.
Skill Codex
A workflow for reconstructing calculations in web JavaScript from their final outputs, such as request parameters, cookies, headers, or WebSocket messages. It covers signatures, encryption, verification challenges, WebAssembly, and heavily obfuscated code.
Skill Claude CodeCodex
Playbook for Xray Suite scanner, crawlergo, and headless browser usage with safe request pacing.
MCP server Claude CodeCodexCursor +2
MCP server "fortimanager-mcp" as configured in rstierli/fortimanager-mcp. Runs locally from the fortimanager-mcp Python package.
MCP server Claude CodeCodexCursor +2
Read-only Wazuh SIEM/XDR control CLI with an MCP adapter. Runs locally from the wazuh-mcp npm package.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: