26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
davccavalcante/supreme-coding-guidelines-skill.ah
Cursor rule Cursor
First-in-the-world AI governance and compliance discipline for AI Governance Officers, Compliance Leads, Risk Managers, DPOs, Legal Counsel, CISOs, and AI and ML and LLM engineers and architects. Operationalizes ISO/IEC 42001:2023 (AI Management System clauses 4 to 10, roughly 38 Annex A controls across 9 objectives…
akirtok/preflight-security-audit
Plugin Claude Code
Bundles 1 skill, 1 command, 6 agents · 979 tokens together
Comprehensive 360 pre-ship audit: 61 checks across security, reliability, performance, AI/LLM, privacy/compliance, and launch readiness — including live-database, serverless/edge, GraphQL, client-side, and modern-attack (Trojan Source) checks. Reports a 0–100 security score with severity-ranked findings and proposes…
Skill Claude CodeCodex
Finds and ranks open-source packages worth auditing for passive CVE/VulDB research. Use when the user asks for vulnerability research targets, CVE hunting candidates, packages to audit, projects to fuzz, or /omv-find. Supports npm, Python, Go, Rust, Java, Ruby, PHP, C#, Swift, Dart, Elixir, Perl, R, and Lua, with…
Plugin Claude Code
Bundles 2 skills · 184 tokens together
Local ownership gate and multiple choice question approval skill for AI-assisted code diffs.
Skill Claude CodeCodex
Govern release-affecting, policy-changing, externally mutating, destructive, or otherwise high-risk work through typed effects, mandatory evidence, independent safety gates, and an explicit go/no-go decision. Do not use for ordinary answers, read-only inspection, tiny reversible edits, or a task made "multi-skill"…
0xlayerghost/solidity-agent-kit
Skill Claude CodeCodex
When this skill is triggered, DO NOT directly implement all strategies. Follow this workflow.
Plugin Claude Code
Bundles 27 skills · 4,819 tokens together
IndyKite skills for coding agents — Agent Gateway deployment, Intent Agent calls (prompt to AuthZEN evaluations), MCP server calls, KBAC authorization policy authoring and lifecycle, AuthZEN decisions and search (single evaluation, batch evaluations, action / resource / subject search), runtime listing of a project's…
parousia8888/web-app-security-skill
Plugin Claude Code
Bundles 1 skill · 225 tokens together
Audit and harden authorized Web projects with explainable, reproducible evidence.
Plugin Claude Code
Bundles 5 commands, 4 hooks · 70 tokens together
AI API key & subscription manager. Out-of-band key entry, OS-keychain storage, and a PreToolUse hook that injects real keys into commands so the model only ever sees placeholders.
Plugin Claude Code
Bundles 4 skills, 1 agent, 1 hook · 239 tokens together
Stop shipping vulnerabilities. 156 automated security checks for Claude Code. Blocks exposed API keys, disabled Supabase RLS, missing rate limiting, open CORS, and 150+ more before they reach your codebase.
getaxonflow/axonflow-claude-plugin
Plugin Claude Code
Bundles 7 skills, 10 commands, 2 hooks, 1 MCP server · 459 tokens together
Policy enforcement, PII detection, and audit trails for Claude Code. Govern tool execution, scan outputs for sensitive data, and maintain compliance-grade records of every action.
Plugin Claude Code
Bundles 1 skill · 82 tokens together
Authenticate AI agents with auth servers using the Agent Identity (AID) protocol. Ed25519 identity documents, proof of possession, and OAuth 2.0 token exchange.
Skill Claude Code
Reviews code for quality, bugs, security, and best practices. Use when changing code or before merge. Checks security, authentication, and validation; ensures new code follows project rules and conventions.
ayalaphiscan/web-security-guard
Plugin Claude Code
Bundles 15 skills, 4 commands · 2,806 tokens together
Integrated security for websites and apps, built for social and location apps on Supabase too: hardening, SPA/front-end, OWASP API, secure Supabase (RLS, grants, Realtime, keys), location privacy and GDPR art. 9, trust & safety, incident response, domain and email, provider accounts, runtime patching, secure…
Command Claude Code
A design-stage security review for product requirement documents and other planning documents; a PRD is a document describing what a product should do.
froggeric/claude-smart-approval
Plugin Claude Code
AI permission tier for Claude Code Bash commands: deny-list gate plus smart AI evaluation for unknown commands. Requires Claude Code >= 2.0.45, shfmt, jq (brew install shfmt jq).
adamoutler/joplin-server-vector-memory
Skill Claude CodeCodex
Run the skillsafe scan on the adamoutler/joplin-server-vector-memory package, then operate and improve/complete all issues identified. Use this when asked to scan or fix skillsafe issues.
MCP server Claude CodeCodexCursor +2
Safety boundary for agent written GitHub PR reviews: pending and invisible, submitting is opt-in. Runs locally from the @eclipsesource/review-guard-mcp npm package. Needs 1 environment variable to run.
Skill Claude CodeCodex
Cage, run, and audit MCP servers with mcpvessel: install an MCP server into an isolated container, serve it to Claude Code, and watch what it does with the network and the user's secrets. Use this whenever the user mentions mcpvessel by name, or wants to add, install, set up, try, run, or sandbox an MCP server, or…
Skill Codex
Operate BurpSuite MCP Bridge for professional, authorized web testing. Use when Codex needs to inspect Burp live/history/logger/selection traffic, prioritize one target, retrieve a decisive request/response, intercept and edit a request or response before forwarding, replay one controlled mutation, manage temporary…
Skill Claude CodeCodex
Search, scan, install, and manage Claude Code skills with built-in security scanning. Every installation is gated behind a 60+ pattern threat scan.
sunhao123456sun-svg/toolpermit
Skill Codex
Install, configure, operate, and troubleshoot ToolPermit, the local-first permission policy, one-time approval, and redacted audit layer for MCP stdio tool calls. Use when Codex needs to protect or inspect an MCP server, wrap an MCP stdio command, create or review allow/ask/deny policies, manage approvals, replay…
Skill Claude CodeCodex
Skill "marq" from rhaist/marq, covering marq — cyber assistant, start here — scope and domains, how to call a tool, discover tools and long-running scans.
Plugin Claude Code
Bundles 2 skills · 460 tokens together
Intelligent permission gate for Claude Code shell, file, search, Skill, and MCP tool surfaces. AST-parses Bash commands, guards file reads/writes, and blocks configured tool invocations. Defers benign asks to CC's resolver so the prompt UI shows the 'Yes, and don't ask again for X' button, while keeping a deny floor…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: