Security

26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

sast-ssti

1153

capture0x/YeepForge

Skill Claude CodeCodex

Detect Server-Side Template Injection (SSTI) vulnerabilities in a codebase using a three-phase approach: recon (find template rendering sites that use dynamic strings), batched verify (trace user input to those sites in parallel subagents, 3 candidates each), and merge (consolidate batch results). Requires…

not rated 8 2mo ago A 99 tokens

box

1154

box/box-for-ai

Cursor rule Cursor ✓ vendor

Non-negotiable safety and scope constraints for Box MCP tool usage.

not rated 7 24d ago A 629 tokens original MIT

pagerduty

1155

PagerDuty/claude-code-plugins

Plugin Claude Code

Bundles 2 commands · 27 tokens together

A collection of Claude Code plugins developed by PagerDuty for pre-commit risk assessment and PagerDuty skill creation for AI agents (Early Access).

not rated 7 changed 7d ago A tokens not measured original Apache-2.0

tech-debt-mcp

1156

PierreJanineh/TechDebtMCP

Plugin Claude Code

Bundles 1 skill, 3 commands · 108 tokens together

Static technical-debt analysis across 14 languages, exposed as MCP tools and resources (SQALE ratings, debt summaries, custom rules, dependency vulnerabilities).

not rated 7 3mo ago A tokens not measured original MIT

app-audit

1157

playbookTV/Ironclad

Skill Claude CodeCodex

Evidence-driven application audit protocol for security, authorization, privacy, concurrency, state integrity, reliability, performance, accessibility, visual consistency, responsive behavior, and release readiness. Use for incremental checks, pre-merge review, pre-launch audits, high-stakes deep audits, AI-generated…

not rated 7 3mo ago A 92 tokens

dependency-guard

1159

yongquantan/dependency-guard

Plugin Claude Code

Bundles 1 skill, 1 command, 2 hooks · 0 tokens together

A dependency security plugin for Claude Code. DepGuard intercepts package installs, checks reputation with Socket.dev, runs installs in a Modal sandbox, and blocks suspicious behavior before it reaches your machine.

not rated 7 7mo ago A tokens not measured original MIT

auth

1160

Justdvp/claude-code-templates

Command Claude Code

Complete authentication system with JWT tokens, OAuth2, and role-based access control.

not rated 7 26d ago A 0 tokens original MIT

diplomat-reviewer

1161

Diplomat-ai/diplomat-agent

Cursor rule Cursor

Reviews Python code for unguarded AI agent tool calls. Use when reviewing agent code, scanning for security issues, or checking tool call safety.

not rated 7 16d ago A 0 tokens original Apache-2.0

knox

1162

QORIS-AI/knox

Plugin Claude Code

Bundles 8 skills, 11 hooks · 147 tokens together

Security enforcement layer for Claude Code. Blocks dangerous commands, audits every tool call, detects prompt injection.

not rated 7 2mo ago A tokens not measured

attach-guard

1163

attach-dev/attach-guard

Plugin Claude Code

Bundles 1 skill, 1 hook · 50 tokens together

Supply-chain security guard that intercepts package install commands across npm, pnpm, pip, go, and cargo ecosystems and enforces package risk policies before execution.

not rated 7 5mo ago A tokens not measured original MIT

skill-audit

1164

simplybychris/skill-audit

Skill Claude CodeCodex

Audytuje bezpieczeństwo skilla, pluginu lub agenta Claude Code przed instalacją. Warstwa statyczna (heurystyki) plus subagent-audytor tylko do odczytu wykrywają prompt injection, kradzież sekretów, exfiltrację danych, obfuskację i persistence. Pozyskuje kod do izolowanego katalogu tymczasowego, nigdy bezpośrednio do…

not rated 7 +1 4mo ago B 131 tokens original MIT

skjortan23/aws-security-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "aws-security-mcp-server" as configured in skjortan23/aws-security-mcp-server. Runs locally from the aws-security-mcp-server Python package.

not rated 7 8mo ago A tokens not measured

mcp-nvd

1167

gkhays/mcp-nvd-server

MCP server Claude CodeCodexCursor +2

An MCP server to interact with a the NVD Database API. Runs locally from the mcp-nvd Python package.

not rated 7 1y ago A tokens not measured original Apache-2.0

mcp-pentest

1168

adriyansyah-mf/mcp-pentest

MCP server Claude CodeCodexCursor +2

SquatGuard MCP Template for Python. Runs locally from the mcp-pentest npm package.

not rated 7 1y ago A tokens not measured

mcp-exploitdb

1169

CyberRoute/mcp_exploitdb

MCP server Claude CodeCodexCursor +2

MCP server "mcp-exploitdb" as configured in CyberRoute/mcpexploitdb. Runs locally from the mcp-exploitdb Python package.

not rated 7 11mo ago A tokens not measured

mcp-web-audit

1170

Shen-zhihao/mcp-web-audit

MCP server Claude CodeCodexCursor +2

A local Node.js MCP server for security audits of frontend projects. It checks dependencies, which are external software packages a project relies on, in local projects and remote repositories.

not rated 7 11mo ago A tokens not measured

safebreach-mcp-server

1171

SafeBreach/safebreach-mcp

MCP server Claude CodeCodexCursor +2

MCP server "safebreach-mcp-server" as configured in SafeBreach/safebreach-mcp. Runs locally from the safebreach-mcp-server Python package.

not rated 7 1mo ago A tokens not measured original BSD-3-Clause

discord-access

1172

lilyzhng/agent-channels

Skill Claude CodeCodex

Manage Discord channel access for cursor-discord-channels — pairing, allowlists, trustedBots. Use when configuring the bridge or when the user asks about Discord bot access.

not rated 7 2mo ago A 37 tokens

okta-mcp-server

1173

YiyangLi/okta-mcp-server

MCP server Claude CodeCodexCursor +2

A Model Context Protocol server used to integrate Okta resources and Claude Desktop. Runs locally from the @yiyang.1i/okta-mcp-server npm package.

not rated 7 1y ago A tokens not measured original MIT

mcp-bastion

1174

Gowthaman90/mcp-bastion

MCP server Claude CodeCodexCursor +2

Reliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail. Runs locally from the mcp-bastion npm package.

not rated 7 2d ago A tokens not measured original Apache-2.0

skill-scout

1175

Brain-ai-biz/skill-scout

Skill Claude Code

Discover the best Claude Code extensions on the web AND tell the user how safe each one is before installing. Reads the user's Claude Code setup (project context, memory, history), asks a few questions to understand their goal (general or a specific idea), then surfaces a ranked shortlist - name, what it does, what…

not rated 7 4mo ago A 193 tokens original MIT

EresusSecurity/appsec-skills

Skill Claude CodeCodex

Elite manual security code review skill for deep, adversarial vulnerability hunting and exploit-chain discovery. Trigger when the user asks to: "do a deep security audit", "manual code review", "find exploit chains", "hunt for logic bugs", "red-team this codebase", "do an offensive security review", "review this like…

not rated 7 7mo ago A 145 tokens original Apache-2.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: