26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude CodeCodex
Add OAuth 2.0 PKCE authentication to a remote MCP server. Use this skill whenever the user wants to add authentication to an MCP server, protect MCP tools with OAuth, implement login flow for an MCP connector, add user auth to an MCP endpoint, or set up token-based access for MCP. Also triggers on: 'MCP OAuth', 'MCP…
Skill Claude Code
An AI-assisted workflow for investigating security alerts in a security operations center, or SOC—the team and systems that monitor an organisation for attacks. It can analyse alerts, investigate their origins, prepare response scripts, and record approved rules and reports.
Skill Claude CodeCodex
Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities.
Skill Claude CodeCodex
Run a structured codebase audit — map architecture, assess health (compliance / tests / docs), perform deep analysis (security / performance / code quality), and synthesize a prioritized roadmap. Use this skill when the user says things like 'audit the codebase', 'understand this project', 'find problems', '/audit'…
MCP server Claude CodeCodexCursor +2
MCP interface server fronting the Vulners API (https://vulners.com). Runs locally from the vulners-mcp Python package.
Bhanunamikaze/Code-VulnScan-Skill
Skill Claude CodeCodex
Use this when the user wants to find security vulnerabilities in a codebase, perform a security audit, scan for CVEs, detect secrets, review React/Next.js, Go, Java/Kotlin JVM, PHP, Ruby, .NET, or Rust web services, audit architecture/application/infrastructure flaws, review auth/API/crypto/business logic, check…
popoloni/non_deterministic_sw_eng
Cursor rule Cursor
When writing code that handles authentication, authorization, or sensitive data.
LeoKemp223/embedded-llm-guardrails
Skill Claude CodeCodex
Safety instructions for using an AI coding assistant in embedded projects, such as microcontroller, real-time operating system, driver, and board-support code. Embedded software runs on dedicated hardware, where mistakes can affect the device itself.
MCP server Claude CodeCodexCursor +2
MCP server "cwe-search-mcp" as configured in Bilel-Eljaamii/cwe-searchmcp. Runs locally from the cwe-search-mcp Python package.
MCP server Claude CodeCodexCursor +2
This is an MCP server that exposes red team tools for active directory pentesting to LLMs. Runs locally from the pentestMCP Python package.
MCP server Claude CodeCodexCursor +2
One of 2 in claude_desktop_config.json
MCP server "burp", hosted remotely at 127.0.0.1, as configured in titaniumtushar/burp-mcp-plus.
MCP server Claude CodeCodexCursor +2
Security middleware for MCP servers protecting LLM agents from prompt injection, resource exhaustion, and PII leakage. Runs locally from the mcp-bastion-python Python package.
Plugin Claude Code
Bundles 1 skill, 2 hooks, 1 MCP server · 118 tokens together
SWAG reverse proxy configuration management via MCP. Create, edit, view, and manage nginx proxy configurations with auth integration.
kcmadden/claude-code-1password-skill
Skill Claude CodeCodex
Integrate 1Password secrets management into Claude Code workflows. Use when the user wants to: store API keys or credentials in 1Password, read secrets from 1Password into scripts or config, set up .env files using 1Password secret references, rotate or update credentials, manage developer secrets across projects, use…
Skill Claude CodeCodex
Expert guide for the Osmedeus security automation workflow engine. Use when: (1) writing or editing YAML workflows (modules and flows), (2) running osmedeus CLI commands (scan, workflow management, installation, server), (3) configuring steps, runners, triggers, or template variables, (4) debugging workflow execution…
Cursor rule Cursor
Before generating or modifying any prompt.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A malware-analysis guide covering the process of examining harmful software, including static analysis and basic information about Windows PE files, the format used by many Windows programs.
Skill Claude Code
Provides binary exploitation (pwn) techniques for CTF challenges. Use when exploiting buffer overflows, format strings, heap vulnerabilities (House of Orange, Spirit, Lore, Apple 2, Einherjar, tcache stashing unlink), race conditions, kernel bugs, ROP chains, ret2libc, ret2dlresolve, shellcode, GOT overwrite…
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit topic for unsafe deserialization. Deserialization turns stored or received data back into program objects, and unsafe handling can create security risks.
netresearch/enterprise-readiness-skill
Plugin Claude Code
Bundles 1 skill, 2 commands · 126 tokens together
Assess and enhance software projects for enterprise-grade security, quality, and automation.
Plugin Claude Code
Bundles 11 commands, 1 hook · 214 tokens together
llm-redact proxy control: status, live traffic, sessions, redaction preview, routing and spend, audit verification, and guarded config editing as slash commands.
Skill Claude CodeCodex
Use the EnigmAgent encrypted vault to handle credentials, API keys, and private documents without those values ever appearing in your reasoning or output. Placeholders are resolved at execution time.
MCP server Claude CodeCodexCursor +2
Local AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys. Runs locally from the enigmagent-mcp npm package. Needs 2 environment variables to run.
sjarmak/coding-agent-workflows
Agent Claude Code
Expert code review specialist. Proactively reviews code for quality, security, and maintainability. Use immediately after writing or modifying code. MUST BE USED for all code changes.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: