Security

noloman/Android-AI-skills

Skill Claude CodeCodex

Skill "android-auth-identity" from noloman/Android-AI-skills, covering android authentication & identity, hard rules, core patterns and references.

Contoso-State/red-team-agent-orchestration

Cursor rule Cursor

Coordinates an Azure cloud-security red team assessment end to end. The user interacts with this agent; it validates engagement scope, dispatches the specialist sub-agents (recon, identity, authorization, network, compute, containers/Kubernetes, data, web, AI/Foundry, attack-surface/EASM, governance/posture…

proluct/skanna

Plugin Claude Code

Bundles 3 skills, 1 hook · 205 tokens together

Security-scan a Claude Code skill, plugin, or MCP server before installing it. SAFE / CAUTION / DANGEROUS verdict with file:line findings. Read-only, never executes the target.

macaugh/super-rouge-hunter-skills

Skill Claude Code

Systematic methodology for developing reliable exploits from vulnerability discovery to weaponization.

killvxk/malskills-zh

Plugin Claude Code

Bundles 120 skills · 9,711 tokens together

Offensive security skills collection for authorized penetration testing, CTF challenges, and security research. Includes tools for reconnaissance, exploitation, C2 frameworks, evasion, reverse engineering, and programming patterns.

lacework/forticnapp-llm-plugins

Plugin Claude Code

Bundles 3 skills, 4 hooks · 65 tokens together

Fortinet Code Security — IaC and SCA scanning for Claude Code.

thesaadmirza/blindfold

Plugin Claude Code

Bundles 1 skill, 2 hooks · 55 tokens together

Blindfolds the LLM from your secrets. Stores API keys, tokens, and passwords in your OS keychain. The LLM works with placeholders, never sees actual values. Kernel-level sandbox enforcement on macOS.

tendhearth/wechat-cc

Skill Claude Code

Manage WeChat channel access — edit allowlists and set DM policy. Use when the user asks to add/remove users, check who's allowed, or change policy.

el95149/rapid7-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "rapid7-mcp-server" as configured in el95149/rapid7-mcp-server. Runs locally from the rapid7-mcp-server npm package.

mbeato/APIMesh

MCP server Claude CodeCodexCursor +2

MCP server for APIMesh — 76 x402-payable tools for AI agents (74 APIs + wallet usage + spend caps). Covers web vitals, security headers, SEO audits, email security and verification, tech-stack detection, brand assets, redirect chains, indexability, brand. Runs locally from the @mbeato/apimesh-mcp-server npm package.…

liangjunyu2010/mcp_server_safe_content_check

MCP server Claude CodeCodexCursor +2

MCP server "mcp-server-safe-content-check" as configured in liangjunyu2010/mcpserversafecontentcheck. Runs locally from the mcp-server-safe-content-check Python package.

vaultry/claude-secrets

Command Claude Code

Store a secret via native macOS dialog (hidden input). Value never appears in chat.

alexandriashai/mcp-guardian

MCP server Claude CodeCodexCursor +2

MCP security scanner - detect prompt injection in tool descriptions. Runs locally from the mcp-guardian npm package.

abdugafforov-bobur/hackerone-mcp

MCP server Claude CodeCodexCursor +2

MCP server "hackerone-mcp" as configured in abdugafforov-bobur/hackerone-mcp. Runs locally from the hackerone-mcp Python package.

KevinRabun/FedRAMP20xMCP

MCP server Claude CodeCodexCursor +2

MCP server for querying FedRAMP 20x requirements. Runs locally from the fedramp-20x-mcp Python package.

martc03/gov-mcp-servers

Skill Claude CodeCodex

CVE vulnerability lookup via NIST NVD, CISA KEV, EPSS scores, and MITRE ATT&CK. 7 tools for real-time cybersecurity intelligence.

darrenjrobinson/HIBP-MCP-Server

MCP server Claude CodeCodexCursor +2

A Model Context Protocol (MCP) server for the Have I Been Pwned (HIBP) API. Runs locally from the @darrenjrobinson/hibp-mcp npm package. Needs 2 environment variables to run.

pitimon/claude-cybersecurity-skill

Plugin Claude Code

Bundles 1 skill · 215 tokens together

Professional cybersecurity skill: 22 domains covering IR, DFIR, DevSecOps, SOC+SOAR, GitOps, Code Security, Container/Supply Chain, Threat Modeling, Compliance Frameworks, Cloud Security & CSPM, Zero Trust Architecture, AI/ML Security, API Security, Vulnerability Management, Threat Intelligence, Cross-Domain…

2389-research/fresh-eyes-review

Plugin Claude Code

Bundles 1 skill · 93 tokens together

Mandatory final sanity check before commits/PRs - catches security vulnerabilities, logic errors, and bugs that slip through tests.

olanokhin/agent-security-skill

Skill Codex

Use when reviewing or writing LLM, RAG, MCP, tool, or agent code for OWASP-aligned security issues; triggered by "owasp my code", "owasp this PR", AI security review, PR review, or changes to AI system code.

MrCl0wnLab/Skill-SimpleReconSubdomain

Skill Claude CodeCodex

Coleta o máximo de informação (recon/OSINT) sobre um ou mais domínios usando a ferramenta local SimpleReconSubdomain, entregando a saída em JSON por domínio. Use SEMPRE que o usuário quiser investigar um domínio do ponto de vista de segurança — mesmo que diga só "investiga o domínio X" ou cole uma lista de domínios.…

howshannon/trust-issues

Plugin Claude Code

Bundles 1 skill · 160 tokens together

Adversarial, attacker-minded security review of untrusted code before you install it. A read-only scanner plus a five-persona reasoning pass, ending in a GO / GO-WITH-MITIGATIONS / NO-GO verdict.

TheSethRose/Vulnerability-Scanning

Skill Claude CodeCodex

Local vulnerability scans: dependencies, secrets, GitHub Actions, SAST, SBOM, package intake, cron/predeploy.

sturec5/code-audit-protocol

Plugin Claude Code

Bundles 1 skill · 133 tokens together

Audits a code change against a 54-phase failure taxonomy and reports what it did not check, not just what it found. Domain overlays run first and force critical-path treatment.