Security

sergei-aronsen/claude-code-toolkit

Agent Claude Code

Deep security audit focusing on OWASP Top 10 and framework-specific vulnerabilities.

duonghvu/automotive-syseng

Skill Claude CodeCodex

When the user wants to analyze automotive requirements, check INCOSE/EARS compliance, review MISRA-C code, assess ADAS levels, or verify ISO 26262/AUTOSAR/SOTIF conformance. Also use when the user says 'check requirements', 'EARS check', 'INCOSE analysis', 'MISRA check', 'ASIL assessment', 'V-model check'…

RhombusSystems/rhombus-cli

Skill Claude CodeCodex

Operate the Rhombus physical-security platform (cameras, access control, sensors, alerts, footage) from the terminal using the official rhombus CLI. Use when a task involves checking camera or device status, pulling alerts or events, reviewing or stitching footage, managing access control, or automating anything in a…

BingJyun/repo-scout-skill

Skill Claude Code

Comprehensive GitHub repo analysis covering architecture, OWASP Top 10 security scanning (with file path + line number + fix), 4-dimension strategic value assessment (cost savings, efficiency, startup opportunities, community impact), auto-competitor discovery, and optional Traditional Chinese audio review via…

Sierra-Code-Co/internal-speckit-template

Skill Claude Code

Pre-push gate for the current branch's diff. Runs review-plan-v2's deterministic analyzers (gitleaks, markdownlint, actionlint, shellcheck, ruff, structural) with --static-only, then the CodeRabbit CLI for the actual review. No API keys, nothing billed to you, and no diff leaves the machine on the first leg. The…

VoicenterTeam/opensips-skills

Plugin Claude Code

Bundles 2 skills · 293 tokens together

OpenSIPs Skills: authoring and per-module reference for OpenSIPs SIP server configurations, plus security review across 12 vulnerability families.

prajapatimehul/comp-agent

Plugin Claude Code

Bundles 4 skills, 3 agents, 1 hook, 1 MCP server · 166 tokens together

AWS compliance engine — SOC 2 + HIPAA scanning, remediation, and audit reporting powered by Prowler.

JDDoesDev/goodvibesonly

Plugin Claude Code

Bundles 1 skill, 1 command, 1 hook · 109 tokens together

Security scanner for vibe-coded projects. Automatically scans for hardcoded secrets, SQL injection, XSS, and other vulnerabilities before commits.

outsmartchad/arcium-dev-skill

Skill Claude Code

End-to-end Arcium MPC development playbook (Jan 2026). Build privacy-preserving Solana programs using Arcium's Cerberus MPC protocol. Covers encrypted instructions (Arcis), three-instruction callback pattern, encryption/sealing, MXE configuration, offchain circuit storage, ArgBuilder patterns, and integration with…

stvm8/agentValentine

Skill Claude Code

Methodical deep-dive IDOR/BFLA testing with encoding tricks, parameter manipulation, and context-dependent failure detection (e.g., /idorDeep swagger.json --from-apiTesting).

clearfunction/cf-devtools

Plugin Claude Code

Bundles 3 skills, 1 hook · 273 tokens together

Production-ready Claude Code skills for presentations, secrets management, and developer workflows. Built by Clear Function.

nishilbhave/codeprobe

Skill Claude Code needs its repo

Whole-codebase code quality audit system with 9 specialized sub-skills covering security, SOLID principles, architecture, error handling, performance, test quality, code smells, design patterns, and framework best practices. Produces a scored health dashboard (0-100 per category), severity-rated findings (P0-P3) with…

XuebinMa/agent-guard

Plugin Claude Code

Bundles 2 hooks

Outbound change control for AI coding agents. Gates git push, npm publish, docker push, gh release, non-local HTTP mutations, and rm -rf before they happen, against a bundled policy, with Ed25519-signed audit receipts. Local-first: no cloud, no telemetry.

Evaneos/agent-callable

Plugin Claude Code

Bundles 1 hook

PreToolUse hook — automatically validates Bash commands against a deny-by-default policy before execution.

mdrobniu/xsoar-pack-dev-skill

Skill Claude Code

Cortex XSOAR content pack development lifecycle - create packs, integrations, scripts, playbooks, run demisto-sdk lint/validate/pre-commit, build zip packs, manage versions and release notes, run unit tests, deploy to XSOAR instances, manage git branches/tags, handle marketplace vs local pack workflows. Use when the…

karanb192/bouncer

Plugin Claude Code

Bundles 1 hook

A one-file PreToolUse door-guard that bounces destructive Bash commands (rm -rf, DROP TABLE, curl|sh, force-push, device wipes) before they run. Blocks 45/45 known footguns, 0 false positives.

d4rkNinja/code-guardian

Plugin Claude Code

Bundles 3 skills, 1 agent · 218 tokens together

INFYNON Package Security Manager — Universal secure package installation, CVE scanning, auto-fix, dependency auditing, and vulnerability monitoring across 14 ecosystems (npm, yarn, pnpm, bun, pip, uv, poetry, cargo, go, gem, composer, nuget, hex, pub).

semiotic-ai/agentsec

Skill Claude CodeCodex

Audit AI agent skills for security vulnerabilities. Use when scanning installed skills against the OWASP Agentic Skills Top 10, checking skills before running them, gating CI/CD on skill safety, or generating audit reports (text, JSON, SARIF, HTML) for stakeholders.

driftnode986/claude-multiagent-guide-en-samples

Agent Claude Code

Audits code for security vulnerabilities including OWASP Top 10. Use proactively when reviewing authentication, authorization, input handling, or data storage code.

romancestarrysky/skill-vetter

Skill Claude CodeCodex

A security review method for an external coding-agent skill file. It looks for prompt injection, credential theft, unsafe code execution, misleading names, and social-engineering tactics before installation.

ky2renzzz/acp-forge

Skill Claude CodeCodex

Perform a security audit on code, checking for common vulnerabilities including injection, auth bypass, secrets leakage, and unsafe dependencies.

a2ure123/ctf-pwn-skill

Skill Codex

CTF pwn solving workflow for Codex with tmux-CLI-driven persistent-GDB live debugging: protection checks, libc/loader matching, IDA or idalib reverse engineering, pwntools wrappers, mandatory GDB-pwndbg inferior-tty step debugging, heap/stack/libc state inspection, and exploit strategy selection by primitive, glibc…

cybersecwoman/Kiro-BugHunter

Skill Claude CodeCodex

Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload…

hugomrtz/skill-vetting-clawhub

Skill Claude CodeCodex

Vet ClawHub skills before installation. Use when the user asks about evaluating, auditing, or safely installing OpenClaw/ClawHub skills, or when a skill’s trustworthiness is in question.