26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
xsourabhsharma/ai-security-audit-pro
Plugin Claude Code
Bundles 1 skill · 66 tokens together
Universal security-audit plugin and CLI engine for AI agents, built for defensive website, API, and codebase audits with professional Markdown, HTML, and PDF reports.
Cursor rule Cursor
Explain or plan Zama FHEVM applications — encrypted state, handles, access control (ACL), decryption, costs, package choice and deployed addresses. Load first for any Zama Solidity or TypeScript work, then load zama-solidity for contracts or zama-typescript for client code.
Plugin Claude Code
Bundles 4 skills · 0 tokens together
Query Cisco Secure Workload (CSW/Tetration) API: environment reports, policy analysis, scopes, filters, connectors, workload inventory, plus guided workflows (lifecycle, investigate, onboard, upgrade, audit, triage, incident) with a per-call approval gate for any write action, focused operator reports (posture, drift.
vaquarkhan/compliance-agent-skills
Skill Claude CodeCodex
Implements FedRAMP Moderate baseline assessments using NIST SP 800-53 Revision 5 controls—authorization boundary definition, System Security Plan (SSP), Plan of Action and Milestones (POA&M), and continuous monitoring (ConMon)—with Cloud Service Provider (CSP) and agency customer responsibility matrices. Trigger when…
Skill Claude CodeCodex
Audit and fix security vulnerabilities in "vibe-coded" apps — projects built fast with AI assistance, especially on Supabase, Firebase, or other BaaS backends. Trigger when building, reviewing, debugging, or deploying a web app with a BaaS backend, or when code touches databases, API keys, authentication, environment…
Plugin Claude Code
Bundles 1 skill, 8 commands, 3 agents · 379 tokens together
Full lifecycle nginx hardening: audit configs, analyze logs, generate rules, respond to IoCs, deploy and monitor.
MCP server Claude CodeCodexCursor +2
MCP server "mobsf-mcp" as configured in plur1bu5/mobsf-mcp. Runs locally from the mobsf-mcp Python package.
Plugin Claude Code
Bundles 7 skills, 1 hook · 570 tokens together
The integration layer a product needs once it has users: Stripe subscription billing reconciled into your own database, crypto payments that survive over-payment and duplicate webhooks, ad and conversion tracking under Consent Mode v2, Google sign-in with the account-linking guards, the wider Google auth surface, and…
MCP server Claude CodeCodexCursor +2
MCP server "acunetix-mcp" as configured in McxM123/acunetix-mcp-server. Runs locally from the acunetix-mcp Python package.
Cursor rule Cursor
Use q-ring MCP tools for all secret operations — never access the OS keychain directly.
MCP server Claude CodeCodexCursor +2
MCP server "intigriti-mcp-server" as configured in alpernae/intigriti-mcp. Runs locally from the intigriti-mcp-server npm package.
Skill Claude CodeCodex
A set of tools for replaying and capturing Yakit traffic. Yakit is a security-testing tool that can resend network requests and capture the results.
HermeticOrmus/LibreSecOps-Claude-Code
Skill Claude CodeCodex
Microsegmentation operates at multiple layers, each providing different granularity and capabilities.
Asaiuta/reverse-workbench-skill
Skill Claude CodeCodex
Use when analyzing suspected malware through static, dynamic, and behavioral techniques, including IOC extraction, YARA or Sigma rules, sandboxing, and anti-analysis behavior.
Skill Claude CodeCodex
Use when configuring C# Arc authentication, endpoint authorization, identity providers or React identity integration. Not for command validation or Chronicle tenant namespaces alone.
nsasoft/nsauditor-ai-agent-skill
Plugin Claude Code
Bundles 1 skill · 242 tokens together
Network security scanning, vulnerability assessment and cloud compliance-evidence auditing with NSAuditor AI, via its MCP server.
Skill Claude CodeCodex
Check domains, URLs and IP addresses against ten aggregated security blacklists (OpenPhish, PhishStats, URLhaus, PhishTank, Spamhaus DROP, DShield, CINS Score, Emerging Threats, Feodo Tracker, Blocklist.de) via the sec-mcp MCP server or Python library — in-process, no API key, no request leaving the machine.
Plugin Claude Code
Tierward governance skills for Claude Code: commit enforcement, audits, code quality.
Skill Claude CodeCodex
Set up and operate Trustcard gates for MCP coding tools, explain tool denials, check manifest drift and expiry, renew unchanged contracts, and inspect local tool access. Use for Trustcard or MCP tool governance requests.
alelaguard/agentguards-plugins
Plugin Claude Code
Bundles 3 skills, 3 hooks · 143 tokens together
LLM security guardrails for Claude Code — jailbreak detection, prompt-injection and web-content scanning, data-exfiltration blocking, and destructive-command authorization. Enforced by hooks on every prompt, shell command, fetched page and file write. Never answers a permission prompt for you: it blocks or asks, and…
Plugin Gemini CLI
Agentic Application Security Platform (ASPM) for Gemini CLI prevents risk before code exists by rewriting prompts into secure prompts using each repository’s Software Graph and organizational security and compliance policies. Run differential SAST, SCA, and Secrets scans and AutoFix risks directly from your terminal…
Phaedra-Solutions/cursor-rules
Skill Claude CodeCodex
Vet a package before it is added to a project. Checks that it exists under the exact name (hallucination and typosquat check), its age, maintainers, downloads, source repository, ownership changes, install scripts, license and advisories, and whether existing code already covers the need. Returns approve, ask or…
Plugin Claude Code
Bundles 7 skills · 428 tokens together
Skills for working with NightVision, a DAST and Source Intelligence platform that finds exploitable vulnerabilities in web applications, REST APIs and AI-backed endpoints.
Skill Claude CodeCodex
Check this prompt or output against EU AI Act Article 5 and Article 50 rules and cite the article, via the ComplyEdge TrustLint MCP. Use when the user wants agent I/O checked and cited, not system classification, FRIA forms, or C2PA watermarking.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: