26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Muhammad-Qasim-Munir/skillguard
Skill Claude CodeCodex
Review Claude/Cursor Skills for security issues (prompt injection, agentic/tool injection, data exfiltration, unsafe automation). Use when evaluating a Skill package/folder or SKILL.md + bundled scripts for risks like hidden instructions, tool misuse, credential theft, network exfil, destructive commands, and policy…
RayaSatriatama/wazuh-mcp-server
MCP server Claude CodeCodexCursor +2
MCP server "wazuh-mcp-server" as configured in RayaSatriatama/wazuh-mcp-server. Runs locally from the wazuh-mcp-server Python package.
MCP server Claude CodeCodexCursor +2
Web-based tool for visualizing data from network scanning and reconnaissance tools. Runs locally from the looking_glass Python package.
MCP server Claude CodeCodexCursor +2
MCP server for searching and retrieving CVE vulnerability information from NVD. Runs locally from the nvd-cve-mcp-server npm package.
MCP server Claude CodeCodexCursor +2
Basic Model Context Protocol (MCP) server for OpenSSF Scorecard. Runs locally from the scorecard-mcp Python package.
Project-Navi/grippy-code-review
MCP server Claude CodeCodexCursor +2
AI code review agent with personality — security-focused MCP server and CI action, built on Agno. Runs locally from the grippy-mcp Python package. Needs 9 environment variables to run.
MCP server Claude CodeCodexCursor +2
Model Context Protocol server for the Rapid7 InsightIDR SIEM platform. Runs locally from the rapid7-mcp npm package.
MCP server Claude CodeCodexCursor +2
Okta login toolkit with an interactive CLI and MCP session reuse. Runs locally from the okta-auth-cli Python package.
Skill Claude CodeCodex
Secure agent-to-agent hiring and execution skill for OpenClaw MCP with escrowed settlement, x402 facilitator payments, ERC-8004 identity/reputation checks, strict replay protection, DNS-safe endpoint validation, and MPC wallet signing. Use when building or operating production A2A workflows that require…
Skill Claude CodeCodex
Analyze AWS infrastructure security using Cyntrisec MCP tools. Use when asked about AWS attack paths, security findings, IAM permissions, compliance status, or remediation recommendations. Guides tool selection and workflow patterns for comprehensive security assessments.
MCP server Claude CodeCodexCursor +2
Mint, resolve, audit, and rotate scope-limited expiring access links (qURLs) for AI agents. Runs locally from the @layervai/qurl-mcp npm package. Needs 16 environment variables to run.
Nikhil-Patil-RI/MCP-Github-Oauth
MCP server Claude CodeCodexCursor +2
MCP server "github-oauth" as configured in Nikhil-Patil-RI/MCP-Github-Oauth. Runs locally from the github-oauth Python package.
fingerprintjs/fingerprint-mcp-server
Plugin Claude Code
Fingerprint Device Intelligence.
MCP server Claude CodeCodexCursor +2
MCP server "hackerone-mcp" as configured in AxiomSec/hackerone-mcp-server. Runs locally from the hackerone-mcp Python package.
MCP server Claude CodeCodexCursor +2
MCP server "ctf-times-mcp" as configured in 0x-Professor/CTF-time-mcp. Runs locally from the ctf-times-mcp Python package.
pentesttoolscom/pentesttools-pypi
MCP server Claude CodeCodexCursor +2
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM. Remote server at mcp.pentest-tools.com.
MCP server Claude CodeCodexCursor +2
MCP server wrapping LINDAT NLP tools — production-grade anonymization, multilingual NER (35 languages), UDPipe (961 models), Charles Translator (8 languages), PONK readability, Korektor spellcheck. Non-commercial use only. Runs locally from the anonymize-mcp Python package.
MCP server Claude CodeCodexCursor +2
MCP server "ziti-mcp-server" as configured in openziti/ziti-mcp-server. Launched with https://github.com/openziti/ziti-mcp-server/releases/download/v0.9.0/ziti-mcp-se.
MCP server Claude CodeCodexCursor +2
MCP for Roblox Studio and Open Cloud: drive Studio, run headless tests, and review game security. Runs locally from the tripwire-roblox npm package. Needs 3 environment variables to run.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 233 tokens together
VMware compliance scanning (CIS, vSphere SCG, GB/T 22239, PCI-DSS) with drift detection.
MCP server Claude CodeCodexCursor +2
Security, cost, and health governance proxy for MCP infrastructure. Runs locally from the @mcp-guardian/server npm package. Needs 3 environment variables to run.
Plugin Claude Code
Bundles 7 skills, 50 commands, 2 agents, 4 hooks, 1 MCP server · 650 tokens together
Nitpicker — hostile audit toolkit: /nitpicker dispatches specialist audit commands (adversarial review, security, tests, docs, types, architecture, perf, reliability, caching, concurrency, error handling, leaks, deps, licensing, CI, commits, migrations, observability, API contracts, a11y, i18n, privacy, confi.
Skill Claude CodeCodex
Security review of LLM applications and agents. Use when asked to review, red-team, threat-model or test an LLM feature, chatbot, RAG pipeline, MCP server or autonomous agent for prompt injection (direct or indirect), jailbreaks, system prompt or secret leakage, tool abuse, excessive agency, confused-deputy behavior…
Skill Claude CodeCodex
A free DIY reimplementation of Vercel's $150/mo Advanced Deployment Protection add-on — all three features (Password Protection, private/prod deployments, Deployment Protection Exceptions) plus named automation bypass tokens — a middleware gate for ANY framework on Vercel (Next.js proxy, or…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: