26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude CodeCodex
Autonomous agentic bug bounty hunting framework v2.0. BugHunter orchestrator with state-machine-driven phases, credential vault, auth flow automation, intelligent skill routing, Burp MCP bridge, parallel agent execution, LLM/AI target track, configurable severity profiles, and live dashboard. USE WHEN bug bounty…
cesschneider/cybersec-audit-skill
Skill Claude CodeCodex
Full-spectrum security audit for any project — SAST, DAST, SCA, secret scanning, IaC security, container hardening, IAM/RBAC review, threat modeling, and API security. Step-by-step investigation with context-gathering questions before scanning. Produces triage findings, autofix patches, and a structured report.
Skill Claude CodeCodex
A guide for querying 360 Quake, a Chinese internet asset-mapping service that reports hosts, services, domains, and certificates.
Skill Claude Code
Review code changes for security, performance, and style issues.
Skill Claude CodeCodex
Analyze APKs from manifest to native libraries, statically and with instrumentation.
MCP server Claude CodeCodexCursor +2
MCP server for detecting and redacting PII (Personally Identifiable Information) in PDF documents. Remote server at api.pdf-redaction.com.
MCP server Claude CodeCodexCursor +2
The guardian layer for AI agents — scoped sessions, AES-256-GCM secrets, hash-chained audit, policy proxy. Runs locally from the haldir Python package.
sundsoffice-tech/ai-audit-trail
MCP server Claude CodeCodexCursor +2
Cryptographically verifiable audit trail for AI systems — Ed25519 signed, hash-chained Decision Receipts with ISO 42001 / NIST AI RMF compliance mappings. Runs locally from the ai-audit-trail Python package.
Skill Claude CodeCodex
Skill "ekyc-suite" from wefi-ai/eKYC-Suite, covering ekyc suite, what is ekyc suite?, quick reference, external endpoints and security & privacy.
vmware-skills/VMware-NSX-Security
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 186 tokens together
VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.
Skill Claude CodeCodex
Turn a large codebase into a short, ranked reading list of security-relevant code paths worth a human researcher's time, using the flyto-indexer MCP tools. Use when asked to find, prioritize, or triage potential vulnerabilities / taint flows / attack surface in a repository indexed (or indexable) by flyto-indexer …
MCP server Claude CodeCodexCursor +2
Secure secret management with a Human-In-The-Loop (HITL) interceptor for agent mutations. Runs locally from the @dinanathdash/envault-mcp-server npm package. Needs 2 environment variables to run.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 52 tokens together
MCP Fortress security scanning skill for Claude Code - scan MCP servers for vulnerabilities, prompt injection, and tool poisoning.
Plugin Claude Code
Bundles 1 skill · 138 tokens together
Multi-agent codebase audit skill for Claude Code — spawns parallel subagents (security, performance, tests, architecture, dead-code) and synthesizes their findings into a prioritized action plan.
MCP server Claude CodeCodexCursor +2
Crypto transaction firewall and risk tools for MCP agents. Remote server at seraph.kondux.io.
levelsofself/mcp-nervous-system
Skill Claude CodeCodex
Use this skill when building, managing, or auditing multi-agent AI systems. Provides governance patterns for behavioral enforcement, drift detection, audit trails, role management, and accountability across autonomous AI agents. Compatible with any orchestration framework.
MCP server Claude CodeCodexCursor +2
MCP Permission Auditor — scan, enumerate, and risk-score all locally configured MCP servers. Runs locally from the mcp-audits Python package.
Skill Claude Code
Backend security auditor for Django and DRF on an OWASP Top 10 (2025), API Security Top 10 (2023), and ASVS 5.0 foundation. Use when backend code is written or reviewed and touches authentication, sessions, cookies, JWT, OAuth2/OIDC, API keys, password hashing, permissions, access control, IDOR, SSRF, path traversal…
Skill Claude CodeCodex
Single-CVE applicability triage that evaluates whether a CVE actually applies to the user's environment by reasoning about discriminating conditions against a skill-maintained environment profile; triggers when a user asks whether they are affected by a CVE, whether a CVE applies to them, or wants to assess a CVE…
Skill Claude CodeCodex
Astro security review — render-mode attack surface (SSG/SSR/hybrid), set:html and MDX content collections (XSS + author trust), API routes and middleware (auth, scope), adapter-specific runtime models (Cloudflare/Vercel/Netlify/Node), env-var hygiene (PUBLIC prefix), and Decap CMS pairing (OAuth backend, token…
tinoimammp/vantage-security-agent
Plugin Claude Code
Bundles 1 skill, 6 commands · 384 tokens together
Artifact-driven, plugin-based multi-agent SAST pipeline for web and mobile app repositories. Web agents cover the OWASP Top 10; mobile agents cover the OWASP Mobile Top 10 (2024, M1-M10). Both share global validation/PoC/reporting agents. Run /vantage:scan-web or /vantage:scan-mobile to scan, then /vantage:fix-issue…
MCP server Claude CodeCodexCursor +2
MCP server "zap-mcp" as configured in pierre3/dotnet-zap-mcp. Launched with dotnet-zap-mcp. Needs 2 environment variables to run.
MCP server Claude CodeCodexCursor +2
Evidence-backed AppSec for AI applications and agents. Powered by HAIEC. Runs locally from the ai-appsec npm package.
MCP server Claude CodeCodexCursor +2
Git branch for your cloud. Understand AWS risk, prove fixes, and ship safer changes. Runs locally from the @emfirge/mcp npm package. Needs 2 environment variables to run.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: