24,943 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude CodeCodex
Collect natural-language environment context and generate evidence collection guidance for Mandate 2.2.3 Secure Training and Fine-Tuning. Use when code is insufficient and operational proof is required for final compliance evaluation.
Skill Claude CodeCodex needs its repo
Business logic vulnerability playbook. Use when reasoning about workflows, race conditions, price manipulation, coupon abuse, state machines, and multi-step authorization gaps.
Skill Claude CodeCodex
KENSHO (検証) — industry-grade playbook for offensive Web3 security assessment and responsible disclosure, covering EVM smart contracts / DeFi and Rust/Solana consensus & validator code. Usable by individual researchers, audit teams, and security firms. Invoke when a target is named (project, handle, repo, or website)…
cesschneider/cybersec-audit-skill
Skill Claude CodeCodex
Full-spectrum security audit for any project — SAST, DAST, SCA, secret scanning, IaC security, container hardening, IAM/RBAC review, threat modeling, and API security. Step-by-step investigation with context-gathering questions before scanning. Produces triage findings, autofix patches, and a structured report.
Skill Claude CodeCodex
A guide for querying 360 Quake, a Chinese internet asset-mapping service that reports hosts, services, domains, and certificates.
Skill Claude CodeCodex
Reverse engineering meta-cognitive activation engine. Manages attention allocation, noise suppression, task-mode routing, object typing, hypothesis branching, mental model switching, and analysis boundary judgment at a meta level. Use when performing reverse engineering, binary analysis, malware analysis, obfuscation…
Skill Claude CodeCodex
Security auditor for agent skills. Scans SKILL.md files, scripts, hooks, and commands for prompt injection, data exfiltration, destructive operations, obfuscation, and permission overreach. Generates trust scores and hardening recommendations. Use before installing any community skill.
krshmbb/android-security-skill
Skill Claude CodeCodex
Comprehensive Android app security best practices from official Android documentation. Use when implementing features, reviewing security issues, handling sensitive data, or ensuring compliance with Android security guidelines.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A guide to reverse engineering, the practice of examining software to understand how it works, using tools such as radare2.
yanglittlecat/electron-client-security-audit
Skill Claude CodeCodex
A security-audit guide for Electron desktop applications, which are desktop programs built with web technologies. It focuses on vulnerabilities that ordinary users can trigger through projects, files, links, or other normal actions.
Skill Claude CodeCodex
Audit and enable security-oriented Xcode build settings. Progressively enables compiler warnings, static analyzer checkers, and Enhanced Security features. Use when: user wants to secure their Xcode project, audit security settings, enable hardening, review security posture of build configuration, set up…
S-CClaw/openclaw-vulnerability-scanner
Skill Claude CodeCodex
Generates structured attack scenarios from Nuclei scan results (JSONL) by mapping CWE → CAPEC → ATT&CK and producing JSON output for dashboard visualization.
Diffuzmetall/security-hardening-skill
Skill Claude CodeCodex
Comprehensive security audit and hardening checklist for VPS servers, WordPress sites, and Next.js applications. Covers SSH hardening, firewall configuration, fail2ban, CrowdSec, kernel sysctl, Docker security, SSL/TLS, WAF, OWASP Top 10, headers, secrets management, backups, and incident response. Use this skill…
Skill Claude CodeCodex needs its repo
Read and apply this skill whenever you are helping a user build a non-custodial crypto wallet or wallet-related application and the conversation touches any of the following.
Skill Claude CodeCodex
An authorised reverse-engineering workflow for examining local software samples and recovering how they work. Reverse engineering means studying compiled or packaged software, such as an APK, ELF, PE, or firmware image, to infer its logic.
Plugin Claude Code
Bundles 10 skills, 10 commands, 1 agent, 1 hook · 604 tokens together
Harness Engineering for AI coding agents — CAR framework, security guardrails, quality gates, context monitoring, auto-formatters, trace logging, checkpoints, MCP validation.
Skill Claude CodeCodex
Use before committing to the public CTObot repo to catch company-specific or proprietary content that has drifted into the public files (AGENTS.md, SOUL.md, docs/, skills/, README). The agent reads the diff (or all files) and reasons about whether the content is generic and shareable or specific to our company…
Skill Claude CodeCodex
Scans Claude Code skills for security risks before installation. Checks for prompt injection, credential harvesting, exfiltration patterns, hooks, excessive permissions, and settings modification. Supports GitHub URLs, local paths, and bulk scanning. Use when asked to audit, scan, or check a skill for malware or…
chenxihuang1028-a11y/variant-analysis
Skill Claude CodeCodex
Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, analyzing security vulnerabilities, or performing systematic code audits after finding an initial issue.
Skill Claude CodeCodex
Recognize and defeat packers, obfuscators, and anti-analysis checks.
yanis7774/mac-security-audit-skill
Skill Claude CodeCodex
Run a comprehensive READ-ONLY macOS security audit and triage the findings. Checks open/listening ports and external exposure, firewall + stealth, SSH and remote access (Screen Sharing, ARD), VPN/tunnels (Tailscale, WireGuard, reverse SSH), persistence (LaunchAgents/Daemons, cron, login hooks, shell rc, BTM /…
Skill Claude CodeCodex
Security scanner using VirusTotal. Use when the user asks to scan a file for malware, check if a downloaded file or script is safe, verify a file hash against threat intelligence, or assess the security of any file. Returns both antivirus engine detections AND AI-powered Code Insight analysis (when available) in a…
Open-Paws/cryptpad-project-management
Command Claude Code
Node.js modules handling authenticated RPC commands from clients. The server never decrypts document content — it only processes metadata, access control, and storage operations on encrypted blobs and public keys.
Plugin Claude Code
Bundles 11 skills, 1 hook · 825 tokens together
Socratic lenses for software engineering: question batteries that examine your work from security, design, usability, test-quality, and operational-recovery perspectives — plus an orchestrator that surfaces caveats, rabbit holes, and blast radius before you build, and a memory loop that grows new lenses from your real.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: