Security

sandraschi/notepadpp-mcp

Plugin Claude Code

Bundles 4 skills, 1 MCP server · 90 tokens together

Notepad++ automation MCP server - tool-awareness session injection.

rajbos/ghas-mcp-server

MCP server Claude CodeCodexCursor +2

GitHub Advanced Security MCP server. Runs locally from the @rajbos/ghas-mcp-server npm package.

austinsonger/GRC-Mapping-Analyst

Skill Codex

Use when asked to map, crosswalk, align, compare, or gap-analyze any two cybersecurity frameworks, control catalogs, or regulatory requirements using NIST IR 8477 Set-Theory Relationship Mapping (STRM). Triggers on terms like "map controls", "crosswalk", "framework alignment", "gap analysis", or producing a STRM CSV…

s0fractal/warrant

MCP server Claude CodeCodexCursor +2

Verify what an AI agent decided — signed, hash-addressed decision records with reasons you can re-run on your own machine. Runs locally from the warrant-verify Python package. Needs 3 environment variables to run.

ManceRayder42/jarvis-os

Plugin Claude Code

Bundles 16 skills, 1 command · 1,122 tokens together

A persistent memory hub for Claude Code that loads into every session from any directory, plus a curated set of research and workflow skills.

timwhitez/AutoRE-CLI

Skill Codex

A command-line tool for static reverse engineering, which means examining compiled files without running them, including ELF, PE, Mach-O, object files, and identified shellcode.

UnboundCompute/security-agent-skills

Plugin Claude Code

Bundles 194 skills · 32,602 tokens together

Security-testing methodology as portable agent skills, spanning white-box bug hunting, AI-agent and LLM red-teaming, cloud identity and CI/CD trust, client-app trust surfaces across browser and editor extensions and Electron, wire-protocol and token trust across gRPC, WebSocket, and JWT, enterprise identity lifecycle…

prangishviliAbe/agent-skills

Skill Codex

Perform evidence-based application security work — threat modeling, code auditing, exploitability analysis, secure implementation, incident triage, and remediation — across web apps, APIs, authentication, sessions, authorization, databases, file uploads, third-party integrations, AI agents and LLM tooling, WordPress…

netresearch/enterprise-readiness-skill

Plugin Claude Code

Bundles 1 skill, 2 commands · 126 tokens together

Assess and enhance software projects for enterprise-grade security, quality, and automation.

Olaradiallysymmetrical491/web3-bug-bounty-hunting-ai-skills

Skill Claude CodeCodex

Complete reference for all 10 DeFi smart contract bug classes. Use this when hunting for specific vulnerability types, need attack patterns for accounting desync, access control, incomplete path, off-by-one, oracle manipulation, ERC4626 vaults, reentrancy, flash loans, signature replay, or proxy/upgrade bugs.

blisspixel/recon

Skill Claude CodeCodex

Public-metadata domain intelligence - Microsoft 365 / Google Workspace tenant identification, email security configuration (DMARC, DKIM, SPF, MTA-STS, BIMI), SaaS fingerprinting from DNS, certificate-transparency findings, related-domain discovery. Use when a domain name appears alongside phrases like "what does use"…

curlysasha/claude-max-messenger-plugin

Plugin Claude Code

Bundles 2 skills, 1 MCP server · 101 tokens together

Max messenger channel for Claude Code — messaging bridge with built-in access control. Manage pairing, allowlists, and policy via /max:access.

gyuha/forge

Plugin Claude Code

Bundles 23 skills, 3 agents, 2 hooks · 2,308 tokens together

An agent-engineering workflow skill set (fg-) for Claude Code. Includes fg-security, a codebase security audit (methodology vendored from cloudflare/security-audit-skill, MIT) whose artefacts stay outside the repo and whose severity-gated findings become fix-forward plans, and fg-debug, a conversational diagnosis disc.

Dbuzek/anonymix-mcp

Skill Claude CodeCodex

Anonymizuje české právní dokumenty (smlouvy, rozsudky, žaloby, znalecké posudky) před odesláním do Claude. Nahrazuje osobní údaje pseudonymy [OSOBA1], [IČO1] apod. Po zpracování Claudem deanonymizuje výsledek zpět do originálu.

megamind-0x/skillaudit

MCP server Claude CodeCodexCursor +2

Security scanner for AI agent skills — scan SKILL.md files for threats, exfiltration, and malicious patterns. Runs locally from the skillaudit npm package.

mirage-security/knowbe4-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server for KnowBe4 Reporting REST API. Runs locally from the knowbe4-mcp-server npm package.

badchars/fingerprint-mcp

MCP server Claude CodeCodexCursor +2

Universal digital fingerprinting MCP server — 100 tools for TCP/TLS/SSH/HTTP/DNS/WAF/IoT/SMTP/SMB fingerprinting, infrastructure topology, C2 detection, OSINT enrichment. Runs locally from the fingerprint-mcp npm package.

akashrpatil/awesome-offensive-security-skills

Plugin Claude Code

Bundles 191 skills · 11,572 tokens together

191 battle-tested offensive security skills for AI agents — Bug Hunting, Pentesting, Red Teaming, AI Red Teaming, Incident Response.

agentrust-io/integrations

Skill Claude CodeCodex

Verify or approve a workspace-scoped Codex agent baseline, inspect configuration drift, or generate signed Agent Manifest and TRACE Level 0 session records.

I4cTime/q-ring

Cursor rule Cursor

Enforce secret hygiene — never hardcode credentials in source code, always use q-ring.

onelogin/onelogin-mcp

MCP server Claude CodeCodexCursor +2

MCP server for OneLogin API - manage users, apps, roles, and authentication. Runs locally from the @onelogin/onelogin-mcp npm package. Needs 3 environment variables to run.

LiHongwei-cn/lihongwei-cn

Skill Claude CodeCodex

Build communication features with Twilio: SMS messaging, voice calls, WhatsApp Business API, and user verification (2FA). Covers the full spectrum from simple notifications to complex IVR systems and multi-channel authentication.

NOMARJ/sigil

Agent Claude Code

OWASP A01 Broken Access Control specialist for Enclave AI. Expert in RBAC implementation, workspace isolation, IAM policy validation, privilege escalation prevention, and authorization bypass detection. Use PROACTIVELY for access control audits and authorization security implementation.

MasRama/nara

Skill Claude CodeCodex

Adding auth guards, permission checks, role management, or session handling.