envskill
1273Skill Claude CodeCodex
Use when a command needs API keys or environment secrets. Inject only named variables through envskill without reading or printing values.
26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude CodeCodex
Use when a command needs API keys or environment secrets. Inject only named variables through envskill without reading or printing values.
Plugin Claude Code
Bundles 26 skills, 3 agents, 11 hooks · 3,491 tokens together
An agent-engineering workflow skill set (fg-) for Claude Code. Includes fg-security, a codebase security audit (methodology vendored from cloudflare/security-audit-skill, MIT) whose artefacts stay outside the repo and whose severity-gated findings become fix-forward plans, and fg-debug, a conversational diagnosis disc.
MCP server Claude CodeCodexCursor +2
MCP Server for Qianxin Hunter cyberspace mapping. Runs locally from the hunter-mcp Python package.
Skill Claude CodeCodex
Fill stored secrets (passwords, card numbers, API keys) into web pages through the secure-browser MCP server without ever seeing the secret values. Use when a task needs a login, checkout, payment form, or any credential entered into a website and the credentials live in a secret store rather than in the conversation.
MCP server Claude CodeCodexCursor +2
MCP server "eset-mcp" as configured in maciekaz/ESET-MCP. Runs in Docker (ghcr.io/maciekaz/eset-mcp:1.0.3).
MCP server Claude CodeCodexCursor +2
A compiler-precise code property graph with an embedded columnar store and a navigation layer for security reasoning over source code. Runs locally from the lachesis-cpg Python package.
MCP server Claude CodeCodexCursor +2
Universal digital fingerprinting MCP server — 100 tools for TCP/TLS/SSH/HTTP/DNS/WAF/IoT/SMTP/SMB fingerprinting, infrastructure topology, C2 detection, OSINT enrichment. Runs locally from the fingerprint-mcp npm package.
Plugin Claude Code
Bundles 56 skills · 6,343 tokens together
Agent Skills for DevOps: 88 SKILL.md field guides spanning CI/CD, containers, Kubernetes, infrastructure as code, cloud, GitOps, observability, reliability, security, networking, data, platform engineering, automation, FinOps, and performance.
Skill Claude CodeCodex
Verify or approve a workspace-scoped Codex agent baseline, inspect configuration drift, or generate signed Agent Manifest and TRACE Level 0 session records.
Skill Claude CodeCodex
Builder-level security assessment methodology for web services. Use when performing security header audits, identifying exposed API keys, analyzing cookie behavior, checking CSRF protection, or compiling security reports for site owners.
ctresb/hermes-security-auditor
Skill Claude CodeCodex
Use when auditing Rust backend code (Axum/Actix/Rocket/Tower) with PostgreSQL or similar relational stores; async runtimes, SQLx/Diesel/SeaORM, OAuth/OIDC, sessions, multi-tenant/RLS, connection pooling, migrations, crypto/secrets, dependency supply chain, unsafe boundaries, CI/CD, containers/IaC, GraphQL/gRPC…
Plugin Claude Code
Personal WhatsApp MCP server built directly on whatsmeow. Local-only Go bridge with SQLCipher-encrypted storage, Python FastMCP layer, Whisper voice-note transcription, accent-insensitive Spanish search, LID name resolution, vault-native CRM auto-injection, prompt-injection scrubbing, and mandatory draft+confirm on…
MCP server Claude CodeCodexCursor +2
Steganography analysis MCP server — 128 tools, 17 categories. Image steganalysis, JPEG/F5/JSteg detection, audio steganography, video stego, GIF palette analysis, network covert channels, MP3 stego, spread spectrum, BPCS, archive stego, QR code analysis. Runs locally from the steganography-mcp npm package.
MCP server Claude CodeCodexCursor +2
MCP server for OneLogin API - manage users, apps, roles, and authentication. Runs locally from the @onelogin/onelogin-mcp npm package. Needs 3 environment variables to run.
Agent Claude Code
OWASP A09 Security Logging and Monitoring Failures specialist for Enclave AI. Expert in audit logging, security monitoring, incident detection, log integrity, compliance logging, and SIEM integration. Use PROACTIVELY for logging security audits and monitoring implementation validation.
Skill Claude Code
Install Cordon, a deterministic layer between untrusted content and agent actions, and verify that the harness actually calls it. Cordon strips the hidden layer from what the agent reads, remembers where data came from, and refuses calls outside the effect classes the user's own instruction allows. No model call on…
Plugin Gemini CLI
Security MCP for vibe coding. 649 rules, 39 tools for Next.js, Supabase, Clerk, Stripe, Prisma, tRPC, Hono, GraphQL, Convex, Turso, Uploadthing, AI SDK, and the full AI-generated stack.
Plugin Claude Code
Bundles 9 skills, 4 agents, 3 hooks · 558 tokens together
Durable project state, evidence-backed "done", and gates enforced by hooks. Eight commands and four agents.
IPGeolocation/ipgeolocation-io-mcp
Plugin Cursor
Official IPGeolocation.io tools for IP geolocation, company information, ASN and network data, IP security (VPN, proxy, Tor, bot, hosting and spam detection), abuse contacts, time zones, astronomy, currency data and user-agent parsing.
Skill Claude CodeCodex
Add traceable NIST SP 800-53 control annotations to source code, infrastructure-as-code, and other technical files, then roll them up into control and evidence documents. Use when mapping implementation artifacts to controls or preparing code-level evidence for an ATO package.
Skill Claude CodeCodex
Checklist for reviewing a third-party MCP tool before adding it.
Plugin Claude Code
Bundles 3 skills · 94 tokens together
Vanta MCP server integration for Claude Code.
Plugin Claude Code
Bundles 2 skills, 5 hooks · 41 tokens together
Session-aware shell guardrails for Claude Code backed by the Caushell runtime.
Plugin Claude Code
Auto-approve safe bash commands validated against safecmd's allowlist.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: