26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude Code needs its repo
Whole-codebase code quality audit system with 9 specialized sub-skills covering security, SOLID principles, architecture, error handling, performance, test quality, code smells, design patterns, and framework best practices. Produces a scored health dashboard (0-100 per category), severity-rated findings (P0-P3) with…
Plugin Claude Code
Decision-only outbound policy hook for AI coding agents. Gates git push, package publication, non-local HTTP mutations, and destructive shell commands before they happen. Local-first: no cloud, no telemetry.
Plugin Claude Code
Bundles 1 skill, 1 hook · 93 tokens together
PreToolUse hook — automatically validates Bash commands against a deny-by-default policy before execution.
Plugin Claude Code
A one-file PreToolUse door-guard that bounces destructive Bash commands (rm -rf, DROP TABLE, curl|sh, force-push, device wipes) before they run. Blocks 45/45 known footguns, 0 false positives.
Plugin Claude Code
Bundles 3 skills, 1 agent · 218 tokens together
INFYNON Package Security Manager — Universal secure package installation, CVE scanning, auto-fix, dependency auditing, and vulnerability monitoring across 14 ecosystems (npm, yarn, pnpm, bun, pip, uv, poetry, cargo, go, gem, composer, nuget, hex, pub).
Skill Claude CodeCodex
Audit AI agent skills for security vulnerabilities. Use when scanning installed skills against the OWASP Agentic Skills Top 10, checking skills before running them, gating CI/CD on skill safety, or generating audit reports (text, JSON, SARIF, HTML) for stakeholders.
driftnode986/claude-multiagent-guide-en-samples
Agent Claude Code
Audits code for security vulnerabilities including OWASP Top 10. Use proactively when reviewing authentication, authorization, input handling, or data storage code.
Skill Claude CodeCodex
A security review method for an external coding-agent skill file. It looks for prompt injection, credential theft, unsafe code execution, misleading names, and social-engineering tactics before installation.
Skill Claude CodeCodex
Perform a security audit on code, checking for common vulnerabilities including injection, auth bypass, secrets leakage, and unsafe dependencies.
Skill Codex
CTF pwn solving workflow for Codex with tmux-CLI-driven persistent-GDB live debugging: protection checks, libc/loader matching, IDA or idalib reverse engineering, pwntools wrappers, mandatory GDB-pwndbg inferior-tty step debugging, heap/stack/libc state inspection, and exploit strategy selection by primitive, glibc…
Skill Claude CodeCodex
Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload…
hugomrtz/skill-vetting-clawhub
Skill Claude CodeCodex
Vet ClawHub skills before installation. Use when the user asks about evaluating, auditing, or safely installing OpenClaw/ClawHub skills, or when a skill’s trustworthiness is in question.
Skill Claude CodeCodex
Collect natural-language environment context and generate evidence collection guidance for Mandate 2.2.3 Secure Training and Fine-Tuning. Use when code is insufficient and operational proof is required for final compliance evaluation.
Skill Claude CodeCodex needs its repo
Business logic vulnerability playbook. Use when reasoning about workflows, race conditions, price manipulation, coupon abuse, state machines, and multi-step authorization gaps.
Skill Claude CodeCodex
Security patterns, auth approach, and what NOT to do in this codebase.
Skill Claude CodeCodex
Security auditor for agent skills. Scans SKILL.md files, scripts, hooks, and commands for prompt injection, data exfiltration, destructive operations, obfuscation, and permission overreach. Generates trust scores and hardening recommendations. Use before installing any community skill.
krshmbb/android-security-skill
Skill Claude CodeCodex
Comprehensive Android app security best practices from official Android documentation. Use when implementing features, reviewing security issues, handling sensitive data, or ensuring compliance with Android security guidelines.
Skill Claude CodeCodex
A meta-skill that automatically synthesizes a safe counterpart for any OpenClaw skill through a spec-driven, closed-loop safety engineering pipeline. Use when creating, auditing, or hardening skills. Implements threat modeling, specification generation, adversarial testing, and iterative refinement to produce a…
yanglittlecat/electron-client-security-audit
Skill Codex
A security-audit guide for Electron desktop applications, which are desktop programs built with web technologies. It focuses on vulnerabilities that ordinary users can trigger through projects, files, links, or other normal actions.
S-CClaw/openclaw-vulnerability-scanner
Skill Claude CodeCodex
Generates structured attack scenarios from Nuclei scan results (JSONL) by mapping CWE → CAPEC → ATT&CK and producing JSON output for dashboard visualization.
Skill Claude CodeCodex
A decision framework for judging whether university work materials are safe to put into AI services. It classifies information as public, university-only, or confidential, including file metadata, EXIF data, OCR risks, and information saved in AI workspace settings.
Diffuzmetall/security-hardening-skill
Skill Claude CodeCodex
Comprehensive security audit and hardening checklist for VPS servers, WordPress sites, and Next.js applications. Covers SSH hardening, firewall configuration, fail2ban, CrowdSec, kernel sysctl, Docker security, SSL/TLS, WAF, OWASP Top 10, headers, secrets management, backups, and incident response. Use this skill…
Skill Claude CodeCodex needs its repo
Read and apply this skill whenever you are helping a user build a non-custodial crypto wallet or wallet-related application and the conversation touches any of the following.
Plugin Claude Code
Bundles 10 skills, 10 commands, 1 agent, 1 hook · 604 tokens together
Harness Engineering for AI coding agents — CAR framework, security guardrails, quality gates, context monitoring, auto-formatters, trace logging, checkpoints, MCP validation.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: