26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
MCP server Claude CodeCodexCursor +2
Unified Memory Forensics MCP Server - Multi-tier engine (Rust + Python + Vol3). Runs locally from the mem-forensics-mcp Python package.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 175 tokens together
MCP server and CLI for Tailscale: inspect and manage tailnet devices, routes, users, keys, DNS, and ACL policy over stdio or streamable HTTP.
MCP server Claude CodeCodexCursor +2
Argus — the QA layer for AI-assisted development. Claude-native (MCP) Chrome audits across 67 categories — errors, visual regressions, a11y, security, performance — no test files, secrets redacted by default (Aegis). Runs locally from the argusqa-os npm package.
imouiche/complete-mitre-attack-mcp-server
MCP server Claude CodeCodexCursor +2
MCP server providing 50+ tools for MITRE ATT&CK techniques, groups, and mitigations. Runs locally from the @imouiche/mitre-attack-mcp-server npm package.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 54 tokens together
A deterministic guardrail your coding agent runs on itself — structured findings on just the changed lines, before the code reaches disk. Zero LLM tokens, 0 false blocks.
MCP server Claude CodeCodexCursor +2
Scan agent skills and MCP servers for malicious patterns before you load them. Remote server at eltociear-skill-audit.hf.space.
RadOrigin-LLC/RAD-Claude-Skills
Plugin Claude Code
Bundles 1 skill · 172 tokens together
The specialist lanes and memory that the built-in /code-review doesn't have. Invokes the built-in engine for general bug-finding (quick/standard/deep map to its effort levels), then adds what it lacks: a mechanical hallucinated-imports validator (lockfile-verified across Python/JS/TS/Rust/Go, with a vendored denylist…
MCP server Claude CodeCodexCursor +2
Instant SEO, performance, and security audits for any URL — an MCP server for AI agents. Runs locally from the siteaudit-mcp Python package.
Skill Claude CodeCodex
Detects whether a purchased AI API key/endpoint (Claude/Anthropic, OpenAI, etc.) — often bought cheap from a reseller or marketplace like GamsGo — is actually a man-in-the-middle proxy that intercepts, rewrites or degrades traffic. Trigger when the user says things like "I bought a third-party API key", "is this…
Plugin Claude Code
Bundles 4 skills, 8 hooks · 226 tokens together
A plugin for coding agents. They ship secure code. Steers the write and can ask or deny before a file is saved.
Skill Claude Code
Use when scoping allow/ask rules for a command family (kubectl, oc, terraform, aws, gcloud, docker, etc.) to one repository so routine invocations stop prompting only inside that repo. Triggers include "allow kubectl in this repo", "stop asking about X commands", "add longline rules for this project", "allowlist…
astrogilda/mcp-keyring-injector
Plugin Claude Code
Securely inject MCP API credentials from system keyring into Claude Code configuration at session start.
Plugin Claude Code
Bundles 1 skill · 95 tokens together
Scan codebases for hardcoded secrets, credentials, API keys, and common security vulnerabilities.
ch0ks/hackarandas-claude-toolbelt
Skill Claude Code
Triage security findings from Semgrep Pro and Claude security-code-review using IaC files as deployment context (Terraform, Kubernetes, Docker Compose, CloudFormation, Azure Pipelines). Detects whichever IaC files are present, extracts deployment facts, scores each finding with CVSS 4.0 with per-vector justification…
Command Claude CodeCursor
Fix CISA Known Exploited Vulnerabilities (KEV) if exists in your codebase. Search for vulnerabilities that are listed in the CISA Known Exploited Vulnerabilities (KEV) catalog using Trivy filesystem scanning. If any of these vulnerabilities are found, fix them by the CVE notes.
Meghshyams/Production-Readiness
Plugin Claude Code
Bundles 1 skill · 60 tokens together
Comprehensive production readiness audit — 75+ checks across 9 pillars: security & supply chain, visual QA, code quality, testing, error handling & observability, build, performance, accessibility (WCAG 2.2), and AI/LLM safety. Like having a senior engineer + QA tester do a final review before deploy.
xChechi/xche-ai-app-security-pack
Plugin Claude Code
Bundles 2 skills, 1 hook · 85 tokens together
Security guardrails for AI-built apps: OWASP/API/LLM/MCP rules applied while building, an /audit skill for full reviews, and a hook that blocks secret commits.
Plugin Claude Code
Security firewall + supply-chain verifier for Solana AI dev — gates transactions/deploys/secrets and verifies skills/MCPs.
goingli0324/web-security-reviewer
Skill Claude CodeCodex
A defensive review of web application code for security weaknesses, data-leak risks, performance risks, and code-quality problems. It covers Google Apps Script, browser code, and server APIs written in languages such as Node, Python, or PHP.
Skill Claude CodeCodex
Full security, correctness, and operability audit of code. Use when reviewing a diff, endpoint, or feature for vulnerabilities or bugs without a specific topic in mind — security review, audit, code review for safety, "check this for issues".
Skill Claude CodeCodex
Pre-installation security gate for agent skills. This skill should be used when the user or agent attempts to install any skill — including requests like "install X", "add X skill", "help me set up the X skill", "npx skills add", or when the agent autonomously decides to install a skill. Also triggers on skill cleanup…
Skill Claude CodeCodex
Guide for Attack Surface Analysis using AIDA MCP.
Skill Claude Code
Use when asked about a rebar repo's health, compliance, tier, or contract status — and before claiming any tier, badge, or "green" state in docs or commits. Runs the three status surfaces and reads them without conflating the two maturity vocabularies.
Skill Claude CodeCodex
How to autonomously obtain secrets and API keys from a Cortex Auth server and launch projects with those secrets injected as environment variables — without any human intervention to configure keys. Use this skill whenever you need to: Run a project that requires API keys (OpenAI, Anthropic, SMTP, database passwords…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: