Security

asaotomo/FofaMap

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 67 tokens together

FofaMap MCP server and Agent Skill for safe FOFA asset research.

alinaqi/maggy

Agent

Performs security analysis on completed features - OWASP scanning, secrets detection, dependency audit. Blocks on Critical/High.

juicesharp/rpiv-mono

Skill Claude CodeCodex

Conduct comprehensive code reviews of pending changes, a branch, or a PR using parallel specialist agents that audit the diff, compare against peer code, and verify claims. Use when the user asks to 'review this', wants pending changes, a PR, a branch, or a diff reviewed, or asks for a code review. Produces review…

arcjet/arcjet-js

Skill Claude CodeCodex

Integrate Arcjet security into a Claude Agent SDK agent using @arcjet/guard — wrap tool() handlers, screen inbound prompts with UserPromptSubmit, and deny unwrapped built-in/MCP tools with PreToolUse. Use when asked to add Arcjet to a Claude Agent SDK or Claude Code agent, rate limit its tools, screen inbound…

vz-risk/VCDB

Skill Claude CodeCodex

Encode a GitHub issue describing a data breach into a VERIS-schema JSON incident for VCDB. Invoke with a vz-risk/VCDB issue URL (e.g. https://github.com/vz-risk/VCDB/issues/23372) and an optional analyst GitHub handle. Reads the issue and its linked sources, finds an additional independent source via web search, maps…

tufantunc/ssh-mcp

MCP server Claude CodeCodexCursor +2

Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log. Runs locally from the ssh-mcp npm package. Needs 4 environment variables to run.

Zyrexnn/Cybermes

Instructions file CodexOpenCode

Instructions for Zyrexnn/Cybermes, covering 🛡️ cybermes master operational directives (agents.md), 1. 🎯 persona & core mission, 2. ⚡ core operational principles, 3. 📁 strict target-scoped workspace & deliverables and mandatory rules for file creation.

paradigmxyz/iron-proxy

Instructions file CodexOpenCode

AGENTS.md instructions for paradigmxyz/iron-proxy, covering agents.md, repo at a glance, go conventions, simplicity and security invariants (do not weaken).

nexu-io/harness-engineering-guide

Skill Claude CodeCodex

Detect and investigate bulk registration abuse on SaaS platforms. Given access to a user database (or exported CSV/JSON), run a multi-dimensional anomaly analysis — email domain clustering, registration tempo, UA fingerprinting, session structure, usage patterns, and credit consumption — to produce a scored abuse…

alibaba/anolisa

Skill Claude CodeCodex ✓ vendor

A read-only tool for examining security events already saved by agent-sec-cli, a command-line security log. It can connect those events to an agent session, run, or trace.

ZacheryGlass/.claude

Agent

Use this agent when C source files (.c, .h) have been created or modified, especially code involving memory allocation, file descriptors, sockets, cryptographic operations, credential handling, or external input parsing. Should be triggered on every code change to C files to catch resource lifecycle bugs and security…

X1r0z/JNDIMap

Skill Claude CodeCodex

Use this skill for JNDIMap, a JNDI injection framework for RMI, LDAP, and LDAPS. It helps run the jar, choose flags and ports, build JNDI URLs for Basic payloads, MemShell injection, BeanFactory bypasses, JDBC RCE, Tomcat XXE, Hessian, LDAP deserialization gadgets, custom scripts, and advanced options such as JShell…

provos/ironcurtain

Instructions file

Claude Code instructions for provos/ironcurtain, covering claude.md, general workflow, git & worktrees, git workflow and platform considerations.

berabuddies/Semia

Skill Claude CodeCodex

This skill provides a comprehensive framework for designing professional multi-agent systems. It includes standardized role definitions for various AI applications and workflows.

emersonfelipesp/netbox-proxbox

Instructions file

Claude Code instructions for emersonfelipesp/netbox-proxbox, covering netbox-proxbox codebase guide, repository destination policy (hard rule), pre-commit checklist, framework stack preference and security and permissions.

chainloop-dev/chainloop

Skill Claude CodeCodex

Reviews vulnerability policy violations for the chainloop project recorded in Chainloop and performs fixes in Dockerfiles or go.mod. Use when asked to fix vulnerabilities, review CVEs, or remediate security issues in chainloop.

Fausto-404/js-reverse-automation--skill

Skill Claude CodeCodex

A workflow for examining JavaScript in a real browser to find where login data, API requests, form fields, or responses are encrypted or signed. It then produces code and connection documentation for using that logic elsewhere.

elastic/agent-skills

Plugin Claude Code ✓ vendor

Bundles 2 skills · 151 tokens together

Elastic Cloud skills - project setup, access management, network security, and Serverless project lifecycle.

secureagentics/Adrian

Plugin Claude Code

Bundles 2 commands, 7 hooks · 29 tokens together

Adrian runtime security: observability and blocking for Claude Code sessions.

TheDecipherist/claude-code-mastery

Skill Claude CodeCodex

Audit code and dependencies for security vulnerabilities. Use when reviewing PRs, checking dependencies, preparing for deployment, or when user mentions security, vulnerabilities, or audit.

yhy0/CHYing-agent

Skill Claude CodeCodex

Use when facing cryptography challenges involving cipher analysis, key recovery, mathematical attacks, or protocol weaknesses.

decionis/agent-safe-pipeline

MCP server Claude CodeCodexCursor +2

Authorize consequential AI agent actions before execution. Runs locally from the @decionis/mcp npm package. Needs 1 environment variable to run.

google/mcp-security

Skill Claude CodeCodex ✓ vendor

Helps the user configure the Google SecOps Remote MCP Server for Antigravity. Use this when the user asks to "set up" or "configure" the security tools for Antigravity.

kentcdodds/kody

Skill Claude CodeCodex

Build and review Remix 3 applications using the remix npm package and subpath imports. Use when working on Remix app structure, routes, controllers, middleware, validation, data access, auth, sessions, file uploads, server setup, UI components, hydration, navigation, or tests.