Security

26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

envskill

1273

buhaistrikalo/envskill

Skill Claude CodeCodex

Use when a command needs API keys or environment secrets. Inject only named variables through envskill without reading or printing values.

not rated 6 2mo ago A 27 tokens original MIT

forge

1274

gyuha/forge

Plugin Claude Code

Bundles 26 skills, 3 agents, 11 hooks · 3,491 tokens together

An agent-engineering workflow skill set (fg-) for Claude Code. Includes fg-security, a codebase security audit (methodology vendored from cloudflare/security-audit-skill, MIT) whose artefacts stay outside the repo and whose severity-gated findings become fix-forward plans, and fg-debug, a conversational diagnosis disc.

not rated 6 changed 3d ago A tokens not measured

hunter-mcp

1275

PiggyHurry/hunter-mcp

MCP server Claude CodeCodexCursor +2

MCP Server for Qianxin Hunter cyberspace mapping. Runs locally from the hunter-mcp Python package.

not rated 6 5mo ago A tokens not measured copy · 100% MIT

secure-browser

1276

tkhq/secure-browser-mcp

Skill Claude CodeCodex

Fill stored secrets (passwords, card numbers, API keys) into web pages through the secure-browser MCP server without ever seeing the secret values. Use when a task needs a login, checkout, payment form, or any credential entered into a website and the credentials live in a secret store rather than in the conversation.

not rated 6 changed 3d ago C 66 tokens

eset-mcp

1277

maciekaz/ESET-MCP

MCP server Claude CodeCodexCursor +2

MCP server "eset-mcp" as configured in maciekaz/ESET-MCP. Runs in Docker (ghcr.io/maciekaz/eset-mcp:1.0.3).

not rated 6 2d ago A tokens not measured original MIT

lachesis

1278

UnboundCompute/lachesis

MCP server Claude CodeCodexCursor +2

A compiler-precise code property graph with an embedded columnar store and a navigation layer for security reasoning over source code. Runs locally from the lachesis-cpg Python package.

not rated 6 21d ago A tokens not measured AGPL-3.0

fingerprint-mcp

1279

badchars/fingerprint-mcp

MCP server Claude CodeCodexCursor +2

Universal digital fingerprinting MCP server — 100 tools for TCP/TLS/SSH/HTTP/DNS/WAF/IoT/SMTP/SMB fingerprinting, infrastructure topology, C2 detection, OSINT enrichment. Runs locally from the fingerprint-mcp npm package.

not rated 6 1mo ago A tokens not measured AGPL-3.0

devops-skills

1280

arjunprabhulal/devops-skills

Plugin Claude Code

Bundles 56 skills · 6,343 tokens together

Agent Skills for DevOps: 88 SKILL.md field guides spanning CI/CD, containers, Kubernetes, infrastructure as code, cloud, GitOps, observability, reliability, security, networking, data, platform engineering, automation, FinOps, and performance.

not rated 6 2mo ago A tokens not measured original MIT

agent-integrity

1281

agentrust-io/integrations

Skill Claude CodeCodex

Verify or approve a workspace-scoped Codex agent baseline, inspect configuration drift, or generate signed Agent Manifest and TRACE Level 0 session records.

not rated 6 today A 33 tokens original Apache-2.0

security-triage

1282

Cantara/kcp-triage

Skill Claude CodeCodex

Builder-level security assessment methodology for web services. Use when performing security header audits, identifying exposed API keys, analyzing cookie behavior, checking CSRF protection, or compiling security reports for site owners.

not rated 6 today A 43 tokens

rust-security-auditor

1283

ctresb/hermes-security-auditor

Skill Claude CodeCodex

Use when auditing Rust backend code (Axum/Actix/Rocket/Tower) with PostgreSQL or similar relational stores; async runtimes, SQLx/Diesel/SeaORM, OAuth/OIDC, sessions, multi-tenant/RLS, connection pooling, migrations, crypto/secrets, dependency supply chain, unsafe boundaries, CI/CD, containers/IaC, GraphQL/gRPC…

not rated 6 4mo ago B 131 tokens original MIT

whatsapp-mcp

1284

adelaidasofia/whatsapp-mcp

Plugin Claude Code

Bundles 1 hook, 2 MCP servers

Personal WhatsApp MCP server built directly on whatsmeow. Local-only Go bridge with SQLCipher-encrypted storage, Python FastMCP layer, Whisper voice-note transcription, accent-insensitive Spanish search, LID name resolution, vault-native CRM auto-injection, prompt-injection scrubbing, and mandatory draft+confirm on…

not rated 6 changed 6d ago A tokens not measured original MIT

steganography-mcp

1285

badchars/steganography-mcp

MCP server Claude CodeCodexCursor +2

Steganography analysis MCP server — 128 tools, 17 categories. Image steganalysis, JPEG/F5/JSteg detection, audio steganography, video stego, GIF palette analysis, network covert channels, MP3 stego, spread spectrum, BPCS, archive stego, QR code analysis. Runs locally from the steganography-mcp npm package.

not rated 6 +1 1mo ago A tokens not measured original MIT

onelogin-mcp

1286

onelogin/onelogin-mcp

MCP server Claude CodeCodexCursor +2

MCP server for OneLogin API - manage users, apps, roles, and authentication. Runs locally from the @onelogin/onelogin-mcp npm package. Needs 3 environment variables to run.

not rated 6 2d ago A tokens not measured original MIT

owasp-data-specialist

1287

NOMARJ/sigil

Agent Claude Code

OWASP A09 Security Logging and Monitoring Failures specialist for Enclave AI. Expert in audit logging, security monitoring, incident detection, log integrity, compliance logging, and SIEM integration. Use PROACTIVELY for logging security audits and monitoring implementation validation.

not rated 6 29d ago A 58 tokens original Apache-2.0

cordon-install

1288

ilyautov/cordon

Skill Claude Code

Install Cordon, a deterministic layer between untrusted content and agent actions, and verify that the harness actually calls it. Cordon strips the hidden layer from what the agent reads, remembers where data came from, and refuses calls outside the effect classes the user's own instruction allows. No model call on…

not rated 6 5d ago A 156 tokens original MIT

GuardVibe

1289

goklab/guardvibe

Plugin Gemini CLI

Security MCP for vibe coding. 649 rules, 39 tools for Next.js, Supabase, Clerk, Stripe, Prisma, tRPC, Hono, GraphQL, Convex, Turso, Uploadthing, AI SDK, and the full AI-generated stack.

not rated 6 changed 3d ago A tokens not measured original Apache-2.0

ipgeolocation-io-mcp

1291

IPGeolocation/ipgeolocation-io-mcp

Plugin Cursor

Bundles 2 MCP servers

Official IPGeolocation.io tools for IP geolocation, company information, ASN and network data, IP security (VPN, proxy, Tor, bot, hosting and spam detection), abuse contacts, time zones, astronomy, currency data and user-agent parsing.

not rated 6 changed yesterday A tokens not measured original MIT

nist-control-mapping

1292

adhocteam/activate-framework

Skill Claude CodeCodex

Add traceable NIST SP 800-53 control annotations to source code, infrastructure-as-code, and other technical files, then roll them up into control and evidence documents. Use when mapping implementation artifacts to controls or preparing code-level evidence for an ATO package.

not rated 6 8d ago A 58 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: