26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude Code
A code-review workflow that reads code without running it and checks technical correctness, coding standards, maintainability, and code-level security. It is triggered by requests to review code or after certain development workflows.
kraken222/sovereign-observer-mcp
MCP server Claude CodeCodexCursor +2
Scan AI-generated Terraform for security misconfigurations, in your editor, before it is committed. Runs locally from the sovereign-observer Python package. Needs 2 environment variables to run.
Skill Claude CodeCodex
Design authentication and authorization for the project's stack — JWT vs server sessions, refresh-token rotation, OAuth 2.1 + PKCE, magic links, passkeys (WebAuthn), TOTP/2FA + backup codes, RBAC vs ABAC vs ReBAC, secure cookie flags, mobile token storage. Use when adding sign-in to a new app, designing the token…
Plugin Cursor
Bundles 7 skills · 1,174 tokens together
JFrog Platform integration with MCP, security skills, Agent Package Resolution, supply-chain best practices, and JFrog Agent Guard governance for adding, removing, and listing MCP servers.
Skill Claude CodeCodex
Use when an agent must decide whether to proceed autonomously, ask for clarification, request approval, or select an appropriate verification scope for a coding or documentation task.
MCP server Claude CodeCodexCursor +2
Model Context Protocol (MCP) server for CTFd v3 instances. Runs locally from the ctfd-mcp-server Python package. Needs 6 environment variables to run.
Skill Claude Code
Run HefestoAI before committing AI-generated code: pre-commit / CI quality gate for semantic drift, security, and reliability. Use when the user asks about Hefesto, code quality gates, semantic drift, install hooks, or validating Claude/Codex/Cursor output before commit.
Plugin Claude Code
Bundles 7 skills, 4 hooks, 1 MCP server · 1,174 tokens together
Official JFrog plugin. Connect Claude Code to JFrog to manage, secure, and govern your software supply chain. Give agents the context to build secure, compliant software.
MCP server Claude CodeCodexCursor +2
Multi-tenant MCP platform with OAuth 2.1, Entra SSO, RBAC and audit logging. Remote server at your-gateway.example.com.
MCP server Claude CodeCodexCursor +2
Secure grip for your agent's secrets - security-hardened MCP gateway with proxy token architecture. Runs locally from the pincer-mcp npm package. Needs 4 environment variables to run.
Skill Claude CodeCodex
Intent-aware destination verification for AI agents. Use before an agent opens a URL to assess destination risk, confirm task alignment, and obtain an explicit ALLOW or DENY decision before navigation.
MCP server Claude CodeCodexCursor +2
MCP server for managing pfSense firewalls through AI assistants. Runs locally from the mcp-pfsense Python package.
Skill Claude CodeCodex
Integrate SanctifAI Trust Proof-of-Human attestations. Use when an app needs cryptographic proof a human performed a task or human-in-the-loop verification.
Skill Claude CodeCodex
A review tool for deciding whether a coding-agent skill is safe and worthwhile to install. It checks for risky behavior and scores how precisely, effectively, and efficiently the skill works.
1181652815-hub/clean-windows-c-drive-skill
Skill Codex
Provide a standalone Simplified Chinese Windows app and CLI workflows to assess C: drive health, clean a fixed allowlist of regenerable junk, find large user files, detect exact duplicates with SHA-256, and relocate or recycle explicitly approved ordinary user files without breaking Windows or installed applications.…
kylebrodeur/1password-ssh-setup
Skill Claude CodeCodex
1Password CLI integration for managing secrets, API keys, and authentication. Use when working with 1Password in Linux/WSL/Windows environments. Supports Service Account authentication, Desktop App integration, and Session Token Caching.
Zyoffsec/airtight-secure-coding
Plugin Claude Code
Bundles 1 skill, 1 hook · 63 tokens together
Secure-coding gates for AI-written code. 70 numbered gates mapped to OWASP Top 10 and CWE, plus a pre-write guard that denies the failures it can prove: open routes, IDOR, missing CSRF tokens, interpolated queries and shell commands, raw HTML sinks, unverified webhooks, any-origin CORS with credentials, passwords…
Skill Claude CodeCodex
Guide for using openlens to review code. Triggers on: "review my code", "check for bugs", "security scan", "run openlens", "set up code review", "openlens".
Skill Claude CodeCodex
Name: capybara-nexus-v2 Tier: Frontier (Capybara-class) Mandate: Autonomous Reasoning, Empirical Feedback, & Zero-Day Research.
Plugin Claude Code
Bundles 3 skills, 2 hooks, 2 MCP servers · 36 tokens together
Auto-obfuscates sensitive client data during pentesting so Claude never sees real PII, hostnames, or credentials.
Skill Codex
Use when hardening npm package release workflows with trusted publishing, OIDC, GitHub environments, pinned GitHub Actions, disabled publish-path caching, Changesets release PRs, direct tag-based npm publish flows, staged publishing, or npm release-supply-chain reviews.
ArmisSecurity/armis-appsec-mcp
Skill Claude CodeCodex
On-demand AI-powered security scanning. Use when the user asks to scan code for vulnerabilities, run a security check, scan code for security issues, scan a file, scan a diff, scan staged changes, check for security issues, check for secrets, find hardcoded credentials, or run an appsec scan. Triggers: /security-scan…
Cursor rule Cursor
End-to-end security threat modeling (STRIDE/PASTA, OWASP AppSec/API/LLM Top 10, MITRE ATT&CK/ATLAS) for AI and conventional application infrastructure, using this repo's Jira/Jenkins/ServiceNow/repo connectors.
Skill Claude Code
Review code for correctness, security, TypeScript quality, and performance. Run before any PR or deploy.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: