24,943 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude Code
Manage AgentLair email channel access — edit sender allowlists and set policy. Use when the user asks to allow or block email senders, check who can reach them, or change access policy.
Skill Claude CodeCodex
Security review of LLM applications and agents. Use when asked to review, red-team, threat-model or test an LLM feature, chatbot, RAG pipeline, MCP server or autonomous agent for prompt injection (direct or indirect), jailbreaks, system prompt or secret leakage, tool abuse, excessive agency, confused-deputy behavior…
beriktassuly/solana-audit-skill
Command Claude Code
Produce a machine-readable Solana release gate using the solana-audit release workflow and evidence-backed PASS, FAIL, or SKIP checks.
Skill Claude CodeCodex
Static malware reverse-engineering and threat-intelligence triage for unknown files, Windows EXE/PE binaries, scripts, archives, ISOs, JavaScript, PowerShell, documents, and unpacked payloads. Use when a user provides a sample path, hash, filename, or file and asks whether it is malicious, benign, suspicious, contains…
Skill Claude CodeCodex
Use this skill to audit an AI system for security vulnerabilities including prompt injection, sensitive data exposure, excessive agent permissions, unsafe tool calls, and insecure output handling. Grounded in OWASP GenAI LLM Top 10 (2026). Activates before production deployment of any LLM-based application, agent, or…
Plugin Claude Code
Bundles 5 skills, 1 agent, 1 MCP server · 176 tokens together
AI assistance for KrakenD API Gateway configuration, validation, security auditing, and Flexible Configuration support.
MCP server Claude CodeCodexCursor +2
Read-only Wazuh SIEM/XDR control CLI with an MCP adapter. Runs locally from the wazuh-mcp npm package.
MCP server Claude CodeCodexCursor +2
MCP server "kali" as configured in Hannes221/kali-mcp. Runs dist/index.js with node.
MCP server Claude CodeCodexCursor +2
A secure email gateway MCP server that protects AI agents from prompt injection attacks in emails. Runs locally from the read-no-evil-mcp Python package.
MCP server Claude CodeCodexCursor +2
Intelligent log analysis for LLMs - extract patterns, redact secrets, compress 50%+. Runs locally from the log-essence Python package.
badchars/supply-chain-mcp-server
MCP server Claude CodeCodexCursor +2
Software supply chain security MCP server — vulnerability scanning, package analysis, provenance verification, typosquatting detection, dependency intelligence across npm, PyPI, crates.io, Go, and more. Runs locally from the supply-chain-mcp-server npm package.
MCP server Claude CodeCodexCursor +2
Cryptographic identity, delegation, governance, and commerce for AI agents. 152 tools. Runs locally from the agent-passport-system-mcp npm package.
Plugin Claude Code
Bundles 56 skills · 6,343 tokens together
Agent Skills for DevOps: 88 SKILL.md field guides spanning CI/CD, containers, Kubernetes, infrastructure as code, cloud, GitOps, observability, reliability, security, networking, data, platform engineering, automation, FinOps, and performance.
Skill Claude CodeCodex
Evidence-first codebase audit for correctness, security, privacy, data, integration, operational, test, and docs-vs-reality risks. Use when the user asks for a Fable-5 audit, exhaustive audit, bug hunt, risk review, codebase audit, security/integration audit, or asks Codex to find issues before changing code.
xsourabhsharma/ai-security-audit-pro
Plugin Claude Code
Bundles 1 skill · 66 tokens together
Universal security-audit plugin and CLI engine for AI agents, built for defensive website, API, and codebase audits with professional Markdown, HTML, and PDF reports.
RedHatProductSecurity/agentic-threat-modeling
Skill Claude Code
Core threat analysis engine. Takes a system context profile and applies one or more threat modeling frameworks (STRIDE, PASTA, LINDDUN, VAST, Attack Trees, OCTAVE) with automatic threat actor profiling.
MCP server Claude CodeCodexCursor +2
MCP server "intigriti-mcp-server" as configured in alpernae/intigriti-mcp. Runs locally from the intigriti-mcp-server npm package.
Skill Claude CodeCodex
Use when reverse-engineering Android APKs on-device in Termux/Shizuku, including unpacking with apktool, inspecting with jadx/smali, patching manifests/resources/code, rebuilding, signing, installing, and iterating with the MCP shell.
HermeticOrmus/LibreSecOps-Claude-Code
Skill Claude CodeCodex
Not every action should be automated. The decision depends on three factors.
Plugin Cursor
Tiered AI code-review: triage -> relevant specialist reviewers -> synthesis. Reviews AI-written code using AI agents.
hashgraph-online/hol-guard-plugin
Plugin Claude Code
Bundles 1 skill, 2 commands, 1 MCP server, 1 plugin · 38 tokens together
Install and operate HOL Guard local security for AI coding agents, MCP, skills, plugins, and package actions.
Plugin Claude Code
Bundles 5 skills · 302 tokens together
Skills for working with NightVision, a DAST and API Discovery platform that finds exploitable vulnerabilities in web applications and REST APIs.
pentesttoolscom/pentesttools-pypi
MCP server Claude CodeCodexCursor +2
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM. Remote server at mcp.pentest-tools.com.
MCP server Claude CodeCodexCursor +2
Query and retrieve information about various adversarial tactics and techniques used in cyber atta… Remote server at server.smithery.ai.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: