Security

ppiankov/pastewatch

Skill Claude Code

Sensitive data scanner — deterministic detection and obfuscation for text content.

zscaler/zguard-ai-integrations

Skill Claude Code

Scan prompts, AI responses, and code for security threats using Zscaler AI Guard. Supports 19 prompt detectors and 21 response detectors including: prompt injection, toxicity, DLP, PII, PII DeepScan, personal data, secrets, malicious URLs, code, gibberish, invisible text, brand risk, competition, language, legal…

davideuler/cortex-auth

Skill Claude CodeCodex

How to autonomously obtain secrets and API keys from a Cortex Auth server and launch projects with those secrets injected as environment variables — without any human intervention to configure keys. Use this skill whenever you need to: Run a project that requires API keys (OpenAI, Anthropic, SMTP, database passwords…

coguardio/misconfiguration-detection-skill

Skill Claude CodeCodex

Scan infrastructure for security misconfigurations, interpret findings, and fix issues using the CoGuard CLI.

PericuloLimited/raigo

Skill Claude CodeCodex

RAIGO × OWASP LLM Top 10 — official OWASP LLM Application Security Top 10 (2025) enforcement rules for Hermes agents. Covers all 10 OWASP LLM risks: prompt injection, insecure output handling, training data poisoning, model denial of service, supply chain vulnerabilities, sensitive information disclosure, insecure…

nisconder/npm-safe

Skill Claude CodeCodex needs its repo

Automatically scan any npm package for supply-chain security risks BEFORE the user installs it. Trigger this skill whenever the user asks to install, add, or upgrade an npm package or dependency (e.g. "npm install X", "install X", "add X as a dependency", "yarn add X", "pnpm add X", "upgrade X"), or wants to…

songoao25/dsh-virtual-product-team

Skill Claude CodeCodex

A development and quality process for building software, testing it, and checking it for security problems. It separates implementation, quality assurance, and security review while coordinating their handoffs.

ssojet/skills

Skill Claude CodeCodex

Implement "Sign in with SSO" in native Android/Kotlin applications using SSOJet OIDC with AppAuth.

OutlineDriven/odin-gemini-cli-extension

Skill Claude Code

Install a Claude-Code PreToolUse hook that blocks destructive git commands (push variants including force-push, hard reset, force clean, branch -D, checkout/restore overwrites) before Bash runs them. Use when the user wants git safety rails, force-push prevention, or repository-wipe protection.

Falcon-Forge/PiRanha

Skill Claude CodeCodex

Autonomous agentic bug bounty hunting framework v2.0. BugHunter orchestrator with state-machine-driven phases, credential vault, auth flow automation, intelligent skill routing, Burp MCP bridge, parallel agent execution, LLM/AI target track, configurable severity profiles, and live dashboard. USE WHEN bug bounty…

aajj68/supply-chain-sentinel

Skill Claude CodeCodex

Security scanner for supply chain attacks, malicious dependencies, prompt injection, and suspicious code patterns. Use this skill whenever the user asks to audit a project, scan for malicious packages, check dependencies for threats, look for prompt injection, detect typosquatting, review supply chain security, or…

alaminfirdows/agentic-engineering-demo

Agent Claude Code

Security-focused review. Use before merging any PR touching auth, data handling, or external input.

MG-Cafe/agentic-coder-shield

Skill Claude Code

Security-hardened agentic coding assistant with 3 defense layers — input scanning, tool boundaries, and output scanning via Model Armor.

rico2035/security-skills

Plugin Claude Code

Bundles 8 skills, 1 command, 1 hook · 557 tokens together

Security and compliance audit toolkit for any codebase: HIPAA, SOC 2, OWASP, PQC, FDCPA/TCPA, HITRUST.

olucasevangelista/security-skill

Skill Claude CodeCodex

Secure web and desktop application development. Use when writing authentication, authorization, API endpoints, form handling, database queries, file uploads, Electron apps, Tauri apps, IPC handlers, cryptography, secrets management, security headers, input validation, or when reviewing code for vulnerabilities. Covers…

VeritasActa/verify

Skill Claude CodeCodex

Signs every Claude Code tool call with an offline-verifiable Ed25519 receipt. Lets you audit exactly what Claude did and when, without trusting any server.

fltman/nis2-compliance-agent

Skill Claude Code

NIS2 directive compliance knowledge and checklists for cybersecurity requirements assessment.

punishell/SKILLS

Skill Claude CodeCodex

Use this skill when the user wants to encode or obfuscate a prompt to evade content filters, use Base64, Hex, Leetspeak, Caesar cipher, Unicode encoding, Zero-Width characters, Variant Selector, Sneaky Bits, JSON wrapping, Synonym Substitution, Pig Latin translation, Chinese language bypass, Code Comment Smuggling…

justinnoh/security-skill

Skill Claude CodeCodex

A software security review based on South Korea’s KISA 2021 security weakness guide. It checks 69 design and implementation categories and labels each one as passed, vulnerable, needing review, or not applicable.

robertknight/skills

Skill Claude CodeCodex

Quickly audit the current project for obvious malicious or untrustworthy behavior so the user can decide whether it is safe to run, build, or install. This is a triage pass, not a full security review — aim for a dozen targeted checks, not an exhaustive audit.

enuno/tailscale-acl

Cursor rule Cursor

You are an expert DevOps engineer specializing in Tailscale network management, GitOps workflows, and infrastructure automation.

andrescaicedom/tribuia-taller-seguridad

MCP server Claude Code

One of 2 in .mcp.json

MCP server "kali-lab" as configured in andrescaicedom/tribuia-taller-seguridad. Runs /workspace/docker/operator/tools/mcp-kali.py with python3. Needs 1 environment variable to run.

dmaynor/dmaynor-skills-marketplace

Skill Claude CodeCodex

Determine whether a kernelcache-contained macOS kext changed semantically across releases despite relocation noise or unreliable bundle versions. Use for extraction, invariant comparison, masked ARM64 instruction comparison, and per-function review. Validate the method against the target OS build.

x-cookie/cbughunter-k2

Skill Claude CodeCodex

Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload…