26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
allsmog/blackbox-claude-plugin
Plugin Claude Code
Bundles 17 skills, 11 commands, 9 agents · 2,590 tokens together
Black-box and grey-box penetration testing plugin for HackTheBox machine challenges. Provides automated reconnaissance, enumeration, exploitation guidance, and privilege escalation for Linux, Windows, and Active Directory environments.
ayuksel-tenb/tenable-attack-mapper
Plugin Claude Code
Bundles 1 skill, 1 agent · 149 tokens together
Map Tenable Security Center findings to MITRE ATT&CK techniques and export a VPR-scored ATT&CK Navigator layer.
Skill Claude Code
Sensitive data scanner — deterministic detection and obfuscation for text content.
zscaler/zguard-ai-integrations
Skill Claude Code
Scan prompts, AI responses, and code for security threats using Zscaler AI Guard. Supports 19 prompt detectors and 21 response detectors including: prompt injection, toxicity, DLP, PII, PII DeepScan, personal data, secrets, malicious URLs, code, gibberish, invisible text, brand risk, competition, language, legal…
Skill Codex needs its repo
Real-cluster security regression QA — backend auth enforcement, grant/session policy, gateway deny paths, audit emission, trust escalation, UI/API security headers, HTTPS redirect modes, and secret-leak scanning in live logs. Use when Codex is asked to verify a change did not regress auth, governance, gateway policy…
Skill Claude CodeCodex
A software security review based on South Korea’s KISA 2021 security weakness guide. It checks 69 design and implementation categories and labels each one as passed, vulnerable, needing review, or not applicable.
Skill Claude CodeCodex
When the user wants to analyze automotive requirements, check INCOSE/EARS compliance, review MISRA-C code, assess ADAS levels, or verify ISO 26262/AUTOSAR/SOTIF conformance. Also use when the user says 'check requirements', 'EARS check', 'INCOSE analysis', 'MISRA check', 'ASIL assessment', 'V-model check'…
Skill Claude CodeCodex
Operate the Rhombus physical-security platform (cameras, access control, sensors, alerts, footage) from the terminal using the official rhombus CLI. Use when a task involves checking camera or device status, pulling alerts or events, reviewing or stitching footage, managing access control, or automating anything in a…
Sierra-Code-Co/internal-speckit-template
Skill Claude Code
Pre-push gate for the current branch's diff. Runs review-plan-v2's deterministic analyzers (gitleaks, markdownlint, actionlint, shellcheck, ruff, structural) with --static-only, then the CodeRabbit CLI for the actual review. No API keys, nothing billed to you, and no diff leaves the machine on the first leg. The…
Skill Claude Code
Cortex XSOAR content pack development lifecycle - create packs, integrations, scripts, playbooks, run demisto-sdk lint/validate/pre-commit, build zip packs, manage versions and release notes, run unit tests, deploy to XSOAR instances, manage git branches/tags, handle marketplace vs local pack workflows. Use when the…
Skill Claude CodeCodex
Use when the user says something like "add login", "users need to sign in", "I want auth", "gate this behind a user account". The auth surface (login / signup / OAuth / sessions) is NOT something you build. Read this whole page before touching auth code.
Skill Claude CodeCodex
KENSHO (検証) — industry-grade playbook for offensive Web3 security assessment and responsible disclosure, covering EVM smart contracts / DeFi and Rust/Solana consensus & validator code. Usable by individual researchers, audit teams, and security firms. Invoke when a target is named (project, handle, repo, or website)…
Skill Claude CodeCodex
Reverse engineering meta-cognitive activation engine. Manages attention allocation, noise suppression, task-mode routing, object typing, hypothesis branching, mental model switching, and analysis boundary judgment at a meta level. Use when performing reverse engineering, binary analysis, malware analysis, obfuscation…
Skill Claude CodeCodex
Use when presenting shell commands or tool calls for user approval. Adds a human-readable explanation of intent, scope, and risk before the approval prompt.
vigilantshield/Claude-HunterKit
Skill Claude CodeCodex
Complete bug bounty workflow: recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload…
Cursor rule Cursor
Realiza uma auditoria de segurança completa em um projeto de código (web, API, backend, mobile etc), cobrindo OWASP Top 10 e CWE, dependências desatualizadas com CVEs, segredos expostos (incluindo histórico do git), CORS, TLS/HSTS, rate limiting, WAF, autenticação e cookies, controle de acesso, exposição excessiva de…
Skill Claude CodeCodex
An authorised reverse-engineering workflow for examining local software samples and recovering how they work. Reverse engineering means studying compiled or packaged software, such as an APK, ELF, PE, or firmware image, to infer its logic.
MCP server Claude CodeCodexCursor +2
MCP server "drata-mcp" as configured in sderosiaux/drata-mcp. Runs locally from the drata-mcp Python package.
Plugin Claude Code
Bundles 7 commands, 3 hooks · 100 tokens together
Sandbox every Bash tool call through binpash/try. Review the accumulated diff after the session and commit or discard.
Plugin Claude Code
Bundles 4 skills, 1 MCP server · 90 tokens together
Notepad++ automation MCP server - tool-awareness session injection.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 87 tokens together
Use the husk security scanner from Claude Code. Adds the husk MCP server (scan results, findings, packages, remediations, fresh scans) and a skill covering the husk CLI and MCP output.
austinsonger/GRC-Mapping-Analyst
Skill Codex
Use when asked to map, crosswalk, align, compare, or gap-analyze any two cybersecurity frameworks, control catalogs, or regulatory requirements using NIST IR 8477 Set-Theory Relationship Mapping (STRM). Triggers on terms like "map controls", "crosswalk", "framework alignment", "gap analysis", or producing a STRM CSV…
Skill Codex
A command-line tool for static reverse engineering, which means examining compiled files without running them, including ELF, PE, Mach-O, object files, and identified shellcode.
Skill Claude CodeCodex
Audit and harden the 4 pivoshenko brand sites on Vercel (pivoshenko.dev, pivoshenko.startpage, pivoshenko.wallpapers, pivoshenko.ai), team pivoshenko. Read-only sweep -> per-site report (ok/attention/action) -> confirmed fixes. Emphasizes security headers and analytics coverage. Use when the user says "audit vercel"…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: