26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
MCP server Claude CodeCodexCursor +2
Authentication & authorization for appium-mcp when hosted over SSE / HTTP Stream. Bearer API keys + OAuth JWT, scope-based authorization, per-caller session ownership — built entirely on the appium-mcp Plugin API (no core changes). Runs locally from the @appclaw/appium-mcp-auth npm package.
g-greatdevaks/mcp-dev-summit-blr-2026
Skill Claude CodeCodex
Detects data exfiltration, lateral movement, and crypto-mining anomalies from ExamplePay observability signals (logs, metrics, traces). Returns a structured ThreatSignal with a confidence score (0.0–1.0).
MCP server Claude CodeCodexCursor +2
MCP server for signed machine-action records, offline tool-surface checks, with device-agnostic custody and CNSA 2.0 Category 5 crypto (ML-DSA-87, ML-KEM-1024). Runs locally from the matrixscroll Python package.
Skill Claude CodeCodex
Network scanning MCP server wrapping nmap. Provides 14 purpose-built tools for host discovery, port scanning (SYN/TCP/UDP), service & OS detection, NSE script execution, and vulnerability scanning. Returns structured JSON output. Includes scope enforcement (CIDR allowlist), audit logging, and scan persistence. Use…
MCP server Claude CodeCodexCursor +2
GitHub Advanced Security MCP server. Runs locally from the @rajbos/ghas-mcp-server npm package.
jonnybottles/patch-tuesday-mcp
Skill Claude CodeCodex
Monthly Patch Tuesday identity/security triage using the single msrcsearch tool with product watchlists.
MCP server Claude CodeCodexCursor +2
Unified MCP server for cross-platform (Windows/macOS/Linux) desktop automation, Android device control, security auditing, web inspection, cross-session communication, GitHub operations, and AI workflow persona. Runs locally from the sassymcp Python package.
MCP server Claude CodeCodexCursor +2
MCP server "kdbx" as configured in yarrasys/kdbx. Runs in Docker (ghcr.io/yarrasys/kdbx:0.3.2). Needs 2 environment variables to run.
MCP server Claude CodeCodexCursor +2
Static analysis scanner for MCP server code and multi-tenant SaaS applications. Runs locally from the mcp-tenant-isolation npm package.
Cursor rule Cursor
Security rules for handling trust-sensitive business data (IBANs, company registries, sanctions, PII) in AI-generated code. Prevents the most common vibe-coding vulnerabilities.
Skill Claude Code
Cryptography CTF attacks: RSA, AES, ECC, PRNG, hash length-extension, padding oracles, lattice/LWE/CVP, HNP, Coppersmith, Pollard, Wiener, ZKP/Circom/halo2, post-quantum KEM. Dispatch on prime shape, oracle type, or scheme artefact.
Skill Claude CodeCodex
Clerk authentication integration for Astro/Next.js. Use when implementing authentication, handling Clerk middleware, testing with Playwright, or debugging auth issues. Trigger phrases include "Clerk auth", "sign in", "authentication", "middleware", "E2E testing with Clerk".
Plugin Claude Code
Bundles 21 skills, 1 command · 1,557 tokens together
A persistent memory hub for Claude Code that loads into every session from any directory, plus a curated set of research and workflow skills.
Skill Claude CodeCodex
Code-quality gate and coding guardrail for AI coding agents. Always invoke when you finish editing and prepare to hand control back, even if the user did not explicitly ask. Trigger on commit, push, PR, or phrases like any slop, remove slop, review my code, run aislop, or score my code. Scans with aislop, fixes what…
Skill Claude CodeCodex
Use when querying or changing Drata/GRC data through the drata CLI, including compliance status, frameworks, certificates, Trust Center documents, controls, monitoring tests, evidence, risks, vendors, policies, personnel compliance, and background-check questions. Prefer versionless CLI commands, JSON output…
Skill Claude CodeCodex
Public-metadata domain intelligence - Microsoft 365 / Google Workspace tenant identification, email security configuration (DMARC, DKIM, SPF, MTA-STS, BIMI), SaaS fingerprinting from DNS, certificate-transparency findings, related-domain discovery. Use when a domain name appears alongside phrases like "what does use"…
Plugin Claude Code
Bundles 1 skill · 70 tokens together
AI-powered code review that analyzes your code for bugs, security issues, and best practices.
MCP server Claude CodeCodexCursor +2
MCP server "savvydfir" as configured in kismatkunwar89/SAVVYDFIR-MCP. Runs sift_mcp.server with ./venv/bin/python3. Needs 4 environment variables to run.
c0urag1/break-risk-intel-skill
Skill Codex
An assistant for analysing intelligence about black- and grey-market abuse, such as fraud, account attacks, and dishonest automation.
Plugin Claude Code
Bundles 4 skills · 334 tokens together
Intercepts build/create/implement requests to offer parallel design exploration (omakase-off) and parallel implementation competition (cookoff) — runs multiple variants simultaneously and lets tests and the judge pick the winner.
Cursor rule Cursor
Interact with 1Password CLI (op) — auth recovery, secret retrieval, SSH agent, git commit signing, shell plugins, service accounts, and troubleshooting. Use this skill when the user mentions 1Password, op CLI, or when you know their environment uses the 1Password SSH agent. Trigger on SSH "Permission denied" errors…
step-security/stepsecurity-mcp
MCP server Claude CodeCodexCursor +2
Model Context Protocol server for StepSecurity APIs. Runs locally from the @stepsecurity/stepsecurity-mcp npm package.
curlysasha/claude-max-messenger-plugin
Plugin Claude Code
Bundles 2 skills, 1 MCP server · 101 tokens together
Max messenger channel for Claude Code — messaging bridge with built-in access control. Manage pairing, allowlists, and policy via /max:access.
pluginagentmarketplace/custom-plugin-backend
Plugin Claude Code
Bundles 12 skills, 4 commands, 8 agents · 816 tokens together
Production-grade backend development plugin with 8 specialized agents and 12 skills covering programming fundamentals, databases, APIs, architecture, caching, DevOps, security, and observability for Claude Code.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: