26,960 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Plugin Claude Code
Bundles 1 skill, 9 commands · 187 tokens together
Security scanning for MCP servers using YARA rules, LLM analysis, and Cisco AI Defense. Detect prompt injection, tool poisoning, and other threats in MCP tools, prompts, and resources.
Skill Claude CodeCodex
Run HOL Guard scanner and guard operations via uv run hol-guard. Use when the user asks to scan plugins/MCP/skills for security, quality, or ecosystem compliance, or when they ask to run guard detect/install/protect workflows for local AI harnesses.
Skill Claude Code
Install, configure, test, and uninstall ClawVault AI security proxy.
Skill Claude Code
A set of custom privacy rules for Snow CLI, using patterns such as regular expressions to redact or mask sensitive values in tool results.
Skill Cursor
Hunting skill for OAuth 2.0 / 2.1, OpenID Connect (OIDC), SAML SSO, and JWT authentication. Built from 365 public OAuth/SSO bug bounty reports across HackerOne, GitHub Security Advisories, PortSwigger Research, GitHub Security Lab, Detectify, Doyensec, Salt Labs, Semperis, Obsidian Security, Trace37 plus 2024-2026…
Skill Claude CodeCodex
Detect whether an API endpoint is backed by genuine Claude (not a wrapper, proxy, or impersonator) using 9 weighted rule-based checks that mirror the claude-verify project. Also extracts injected system prompts from providers that override Claude's identity. Fully self-contained — copy the code below and run, no extra…
Skill Claude CodeCodex
A skill for authorised, defensive security audits of Java, .NET, and PHP source code, deployed files, or decompiled software. It also covers related vulnerability checks and evidence collection.
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
Bundles 1 skill · 140 tokens together
CIS Controls v8 (CIS Top 18) advisor — Implementation Group scoping (IG1/IG2/IG3), gap assessments across all 153 safeguards, asset/software inventory, data protection, secure configuration, MFA and access control, vulnerability management, audit log management, malware defenses, incident response, penetration testing.
Skill Claude CodeCodex
Audit a software project for hardening — security, AI gaps, test coverage, code quality, and decoupling. Use when user wants to harden a project, audit for vulnerabilities, check test coverage, or separate private data from code.
Skill Claude Code
Fetch GitHub issues, spawn sub-agents to implement fixes and open PRs, then monitor and address PR review comments. Usage: /gh-issues [owner/repo] [--label bug] [--limit 5] [--milestone v1.0] [--assignee @me] [--fork user/repo] [--watch] [--interval 5] [--reviews-only] [--cron] [--dry-run] [--model glm-5]…
Plugin Claude Code
Bundles 3 skills · 186 tokens together
UniFi Access MCP server — manage door locks, credentials, visitors, and access policies.
Skill Claude Code
Conduct comprehensive code reviews of pending changes, a branch, or a PR using parallel specialist agents that audit the diff, compare against peer code, and verify claims. Use when the user asks to 'review this', wants pending changes, a PR, a branch, or a diff reviewed, or asks for a code review. Produces review…
Skill Claude CodeCodex
Analyze a Laravel application for complexity hotspots, security surface, and database access patterns using laravel-brain. Activate when: the user asks what needs work, what should be improved, what to work on next, where to focus, what is the most complex code, what are the security issues, audit the codebase…
Skill Claude CodeCodex
Android APK static analysis — OWASP Mobile Top 10, Retrofit API audit, transport security, smali reading, component export, auth flow analysis. Use when target is an APK/Android app. Triggers - APK, Android, mobile app, decompiled, smali, jadx, apktool.
Skill Claude CodeCodex
Professional code security audit skill covering 55+ vulnerability types. Enhanced with WooYun 88,636 real-world vulnerability cases (2010-2016). This skill should be used when performing security audits, vulnerability scanning, penetration testing preparation, or code review for security issues. Supports 9 languages…
Skill Claude CodeCodex
Use when auditing third-party AI API relays, LLM proxies, gateways, or resale APIs locally before trusting coding, tool, or wallet-sensitive traffic; works with Cursor, OpenClaw, Hermes, and other skill-capable agents.
Skill Claude CodeCodex
Skill "h5i" from h5i-dev/h5i, covering h5i, choose the workflow, build and verify and use the development tools.
Skill Claude Code
Expertise in LLVM-based dynamic binary instrumentation, runtime tracing, and program monitoring. Use this skill when implementing runtime analysis tools, code coverage systems, profilers, or dynamic security monitors.
Skill Claude CodeCodex needs its repo
Run commands in an isolated Linux microVM sandbox using the shuru CLI. Use when the user asks to execute untrusted code, install packages safely, test in a clean environment, run Docker containers or a headless browser inside a VM, or needs Linux-specific tooling on macOS.
MCP server Claude CodeCodexCursor +2
Python dead code, security and secrets scanner with a pull-request gate; narrower checks for TypeScript, Java and more. Runs locally from the skylos Python package. Needs 1 environment variable to run.
Plugin Claude Code
Bundles 13 skills · 710 tokens together
IoT security testing toolkit with skills for firmware analysis, network reconnaissance, UEFI security, and device exploitation.
Skill Claude Code
Review code changes or a pull request. Delegates to specialist agents (code quality, security, performance, silent failures, test quality, docs) in parallel.
Plugin Claude Code
Bundles 9 skills · 444 tokens together
Security audit your project with Ship Safe — 29 agents, 80+ attack classes, real-time Claude Code hooks, deep LLM analysis, and CI mode.
bodadotsh/npm-security-best-practices
Skill Claude CodeCodex
Prevent JavaScript/TypeScript projects from supply-chain attacks across package managers like npm, pnpm, yarn, bun, and deno. Use whenever planning, installing, updating dependencies or configuring package managers.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: