Security

26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

raigo-owasp-llm

1322

PericuloLimited/raigo

Skill Claude CodeCodex

RAIGO × OWASP LLM Top 10 — official OWASP LLM Application Security Top 10 (2025) enforcement rules for Hermes agents. Covers all 10 OWASP LLM risks: prompt injection, insecure output handling, training data poisoning, model denial of service, supply chain vulnerabilities, sensitive information disclosure, insecure…

not rated 5 7mo ago C 120 tokens archived

dev-qa

1323

songoao25/dsh-virtual-product-team

Skill Claude CodeCodex

A development and quality process for building software, testing it, and checking it for security problems. It separates implementation, quality assurance, and security review while coordinating their handoffs.

not rated 5 2mo ago A 50 tokens original MIT

supply-chain-sentinel

1324

aajj68/supply-chain-sentinel

Skill Claude CodeCodex

Security scanner for supply chain attacks, malicious dependencies, prompt injection, and suspicious code patterns. Use this skill whenever the user asks to audit a project, scan for malicious packages, check dependencies for threats, look for prompt injection, detect typosquatting, review supply chain security, or…

not rated 5 7mo ago B 159 tokens copy · 100% MIT

MG-Cafe/agentic-coder-shield

Skill Claude Code

Security-hardened agentic coding assistant with 3 defense layers — input scanning, tool boundaries, and output scanning via Model Armor.

not rated 5 7mo ago C 33 tokens

security

1327

olucasevangelista/security-skill

Skill Claude CodeCodex

Secure web and desktop application development. Use when writing authentication, authorization, API endpoints, form handling, database queries, file uploads, Electron apps, Tauri apps, IPC handlers, cryptography, secrets management, security headers, input validation, or when reviewing code for vulnerabilities. Covers…

not rated 5 7mo ago A 87 tokens

Veritas Acta Verify

1328

VeritasActa/verify

Skill Claude Code

Signs every Claude Code tool call with an offline-verifiable Ed25519 receipt. Lets you audit exactly what Claude did and when, without trusting any server.

not rated 5 changed 1mo ago A 37 tokens original Apache-2.0

nis2-compliance

1329

fltman/nis2-compliance-agent

Agent Claude Code

NIS2 compliance expert. Use PROACTIVELY when reviewing code, infrastructure, or documentation for cybersecurity compliance. Automatically triggered for security reviews, risk assessments, incident handling, and compliance documentation.

not rated 5 9d ago A 44 tokens original MIT

obfuscation-bypass

1330

punishell/SKILLS

Skill Claude CodeCodex

Use this skill when the user wants to encode or obfuscate a prompt to evade content filters, use Base64, Hex, Leetspeak, Caesar cipher, Unicode encoding, Zero-Width characters, Variant Selector, Sneaky Bits, JSON wrapping, Synonym Substitution, Pig Latin translation, Chinese language bypass, Code Comment Smuggling…

not rated 5 7mo ago A 130 tokens

audit

1331

robertknight/skills

Skill Claude CodeCodex

Quickly audit the current project for obvious malicious or untrustworthy behavior so the user can decide whether it is safe to run, build, or install. This is a triage pass, not a full security review — aim for a dozen targeted checks, not an exhaustive audit.

not rated 5 6mo ago A 0 tokens

tailscale-acl

1332

enuno/tailscale-acl

Cursor rule Cursor

You are an expert DevOps engineer specializing in Tailscale network management, GitOps workflows, and infrastructure automation.

not rated 5 11mo ago A 460 tokens original Apache-2.0

kali-lab

1333

andrescaicedom/tribuia-taller-seguridad

MCP server Claude Code

One of 2 in .mcp.json

MCP server "kali-lab" as configured in andrescaicedom/tribuia-taller-seguridad. Runs /workspace/docker/operator/tools/mcp-kali.py with python3. Needs 1 environment variable to run.

not rated 5 6mo ago A tokens not measured

bb-local-toolkit

1334

x-cookie/cbughunter-k2

Skill Claude CodeCodex

Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload…

not rated 5 5mo ago A ✓ AI review 372 tokens

security-audit

1336

ADORSYS-GIS/agentic-workflow

Skill Claude CodeCodex

Audits code for security vulnerabilities covering OWASP Top 10, dependency risks, and infrastructure misconfigurations.

not rated 5 7mo ago A 26 tokens

repository-audit

1337

this-is-tobi/tools

Skill Claude Code

Comprehensive repository review covering code quality, security, performance, DevOps, and architecture. Use when asked to audit a repository, perform a full review, or analyze an entire codebase.

not rated 5 changed 26d ago A 42 tokens original MIT

repo-scout

1338

BingJyun/repo-scout-skill

Skill Claude Code

Comprehensive GitHub repo analysis covering architecture, OWASP Top 10 security scanning (with file path + line number + fix), 4-dimension strategic value assessment (cost savings, efficiency, startup opportunities, community impact), auto-competitor discovery, and optional Traditional Chinese audio review via…

not rated 5 6mo ago A 127 tokens original MIT

opensips

1339

VoicenterTeam/opensips-skills

Plugin Claude Code

Bundles 2 skills · 293 tokens together

OpenSIPs Skills: authoring and per-module reference for OpenSIPs SIP server configurations, plus security review across 12 vulnerability families.

not rated 5 3mo ago A tokens not measured GPL-3.0

arcium-dev

1342

outsmartchad/arcium-dev-skill

Skill Claude Code

End-to-end Arcium MPC development playbook (Jan 2026). Build privacy-preserving Solana programs using Arcium's Cerberus MPC protocol. Covers encrypted instructions (Arcis), three-instruction callback pattern, encryption/sealing, MXE configuration, offchain circuit storage, ArgBuilder patterns, and integration with…

not rated 5 9mo ago A 93 tokens

idorDeep

1343

stvm8/agentValentine

Skill Claude Code

Methodical deep-dive IDOR/BFLA testing with encoding tricks, parameter manipulation, and context-dependent failure detection (e.g., /idorDeep swagger.json --from-apiTesting).

not rated 5 5mo ago A 37 tokens

cf-devtools

1344

clearfunction/cf-devtools

Plugin Claude Code

Bundles 3 skills, 1 hook · 273 tokens together

Production-ready Claude Code skills for presentations, secrets management, and developer workflows. Built by Clear Function.

not rated 5 10mo ago A tokens not measured original Apache-2.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: