24,943 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Cursor rule Cursor
Backend security review and secure-by-default coding for Django and DRF, on an OWASP Top 10:2025, API Security Top 10:2023, and ASVS 5.0 foundation. Apply when backend code is written or reviewed and touches authentication, sessions, cookies, JWT, OAuth2/OIDC, API keys, password hashing, permissions, access control…
Skill Claude CodeCodex
Single-CVE applicability triage that evaluates whether a CVE actually applies to the user's environment by reasoning about discriminating conditions against a skill-maintained environment profile; triggers when a user asks whether they are affected by a CVE, whether a CVE applies to them, or wants to assess a CVE…
Skill Claude CodeCodex
Symfony / PHP webapp security review — Security Component (firewalls, voters, accesscontrol, role hierarchies), Doctrine ORM injection patterns (raw DQL, QueryBuilder, expr()), Twig auto-escape and |raw, CSRF + session, PHP-specific RCE classes (unserialize, include/require, system/exec, eval, type juggling)…
MCP server Claude CodeCodexCursor +2
Static analysis scanner for MCP server code and multi-tenant SaaS applications. Runs locally from the mcp-tenant-isolation npm package.
tinoimammp/vantage-security-agent
Plugin Claude Code
Bundles 1 skill, 6 commands · 384 tokens together
Artifact-driven, plugin-based multi-agent SAST pipeline for web and mobile app repositories. Web agents cover the OWASP Top 10; mobile agents cover the OWASP Mobile Top 10 (2024, M1-M10). Both share global validation/PoC/reporting agents. Run /vantage:scan-web or /vantage:scan-mobile to scan, then /vantage:fix-issue…
MCP server Claude CodeCodexCursor +2
MCP server "zap-mcp" as configured in pierre3/dotnet-zap-mcp. Launched with dotnet-zap-mcp. Needs 2 environment variables to run.
MCP server Claude CodeCodexCursor +2
Evidence-backed AppSec for AI applications and agents. Powered by HAIEC. Runs locally from the ai-appsec npm package.
MCP server Claude CodeCodexCursor +2
Git branch for your cloud. Understand AWS risk, prove fixes, and ship safer changes. Runs locally from the @emfirge/mcp npm package. Needs 2 environment variables to run.
Skill Claude Code
Cryptography CTF attacks: RSA, AES, ECC, PRNG, hash length-extension, padding oracles, lattice/LWE/CVP, HNP, Coppersmith, Pollard, Wiener, ZKP/Circom/halo2, post-quantum KEM. Dispatch on prime shape, oracle type, or scheme artefact.
davccavalcante/supreme-coding-guidelines-skill.ah
Cursor rule Cursor
First-in-the-world AI governance and compliance discipline for AI Governance Officers, Compliance Leads, Risk Managers, DPOs, Legal Counsel, CISOs, and AI and ML and LLM engineers and architects. Operationalizes ISO/IEC 42001:2023 (AI Management System clauses 4 to 10, roughly 38 Annex A controls across 9 objectives…
Skill Claude CodeCodex
Clerk authentication integration for Astro/Next.js. Use when implementing authentication, handling Clerk middleware, testing with Playwright, or debugging auth issues. Trigger phrases include "Clerk auth", "sign in", "authentication", "middleware", "E2E testing with Clerk".
akirtok/preflight-security-audit
Plugin Claude Code
Bundles 1 skill, 1 command, 6 agents · 979 tokens together
Comprehensive 360 pre-ship audit: 61 checks across security, reliability, performance, AI/LLM, privacy/compliance, and launch readiness — including live-database, serverless/edge, GraphQL, client-side, and modern-attack (Trojan Source) checks. Reports a 0–100 security score with severity-ranked findings and proposes…
Plugin Claude Code
Bundles 1 skill · 106 tokens together
Runs real security scanners over code, full git history, dependencies, IaC and Supabase/Firebase row-level security, then verifies every finding against source before reporting.
Skill Claude CodeCodex
Finds and ranks open-source packages worth auditing for passive CVE/VulDB research. Use when the user asks for vulnerability research targets, CVE hunting candidates, packages to audit, projects to fuzz, or /omv-find. Supports npm, Python, Go, Rust, Java, Ruby, PHP, C#, Swift, Dart, Elixir, Perl, R, and Lua, with…
smartbrainactivity/smartbrain-skill-auditor
Skill Claude CodeCodex
A universal, dependency-free Node.js tool to statically audit AI Skills and local agents for malicious patterns.
Plugin Claude Code
Bundles 2 skills · 184 tokens together
Local ownership gate and multiple choice question approval skill for AI-assisted code diffs.
0xlayerghost/solidity-agent-kit
Skill Claude CodeCodex
When this skill is triggered, DO NOT directly implement all strategies. Follow this workflow.
Plugin Claude Code
Bundles 23 skills · 3,661 tokens together
IndyKite skills for coding agents — Agent Gateway deployment, MCP server calls, KBAC authorization policy authoring and lifecycle, AuthZEN decisions and search (single evaluation, batch evaluations, action / resource / subject search), Capture API ingests and deletes (nodes, relationships, properties, property…
Skill Claude CodeCodex
Code-quality gate and coding guardrail for AI coding agents. Always invoke when you finish editing and prepare to hand control back, even if the user did not explicitly ask. Trigger on commit, push, PR, or quality questions like any slop, is this clean, review my changes, score my code, any duplicates, or is this…
parousia8888/web-app-security-skill
Plugin Claude Code
Bundles 1 skill · 225 tokens together
Audit and harden authorized Web projects with explainable, reproducible evidence.
Skill Claude CodeCodex
Use when querying or changing Drata/GRC data through the drata CLI, including compliance status, frameworks, certificates, Trust Center documents, controls, monitoring tests, evidence, risks, vendors, policies, personnel compliance, and background-check questions. Prefer versionless CLI commands, JSON output…
Plugin Claude Code
Bundles 5 commands, 4 hooks · 70 tokens together
AI API key & subscription manager. Out-of-band key entry, OS-keychain storage, and a PreToolUse hook that injects real keys into commands so the model only ever sees placeholders.
Plugin Claude Code
Bundles 4 skills, 1 agent, 1 hook · 239 tokens together
Stop shipping vulnerabilities. 156 automated security checks for Claude Code. Blocks exposed API keys, disabled Supabase RLS, missing rate limiting, open CORS, and 150+ more before they reach your codebase.
getaxonflow/axonflow-claude-plugin
Plugin Claude Code
Bundles 7 skills, 10 commands, 2 hooks, 1 MCP server · 459 tokens together
Policy enforcement, PII detection, and audit trails for Claude Code. Govern tool execution, scan outputs for sensitive data, and maintain compliance-grade records of every action.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: