26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
smartbrainactivity/smartbrain-skill-auditor
Skill Claude CodeCodex
A universal, dependency-free Node.js tool to statically audit AI Skills and local agents for malicious patterns.
Olaradiallysymmetrical491/web3-bug-bounty-hunting-ai-skills
Skill Claude CodeCodex
Complete reference for all 10 DeFi smart contract bug classes. Use this when hunting for specific vulnerability types, need attack patterns for accounting desync, access control, incomplete path, off-by-one, oracle manipulation, ERC4626 vaults, reentrancy, flash loans, signature replay, or proxy/upgrade bugs.
Cursor rule Cursor
Master rule — consumer identifiers are secrets; every git change in octo-cluster must pass this gate.
MCP server Claude CodeCodexCursor +2
Query and retrieve information about various adversarial tactics and techniques used in cyber atta… Remote server at server.smithery.ai.
MCP server Claude CodeCodexCursor +2
Enterprise AI Control Plane: governance, guardrails, spend tracking, compliance & smart routing. Remote server at mcp.thinkneo.ai.
mohamedelamraoui1/secure-mcp-cloudflare-auth0
MCP server Claude CodeCodexCursor +2
Secure execution layer for LLM/MCP agents. Runs locally from the secure-mcp Python package.
MCP server Claude CodeCodexCursor +2
MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine. Runs locally from the @kryptosai/mcp-seatbelt npm package.
MCP server Claude CodeCodexCursor +2
AI-safe credential broker for MCP — run saved SSH/MySQL/psql aliases; passwords never reach AI. Runs locally from the brokre npm package.
Deep-Identity-Inc/agent-skills
Skill Codex
Identity verification, KYC, face liveness, deepfake detection, adverse media screening, and AML/sanctions checks via the deepidv API. Use when a user needs to verify someone's identity, check if media is AI-generated, screen for sanctions/PEP status, or run adverse media checks.
MCP server Claude CodeCodexCursor +2
Rights-aware censorship, China-economic status, and tamper-evident AI evaluation tools. Remote server at api.seiche.info.
MCP server Claude CodeCodexCursor +2
Scan AI agents for security vulnerabilities. Audit MCP servers before installation. Runs locally from the @inkog-io/mcp npm package. Needs 1 environment variable to run.
MCP server Claude CodeCodexCursor +2
MCP server for npm package management, security analysis, and compatibility checking. Runs locally from the @alisaitteke/npm-mcp npm package.
MCP server Claude CodeCodexCursor +2
MCP adapter for x402station.io, the independent risk-signal layer for x402 agentic commerce: endpoint evidence before an agent authorizes payment. Runs locally from the x402station-mcp npm package. Needs 1 environment variable to run.
MCP server Claude CodeCodexCursor +2
Local keystore + MCP server. Claude can sign EVM transactions but never sees the private key. Runs locally from the sigild npm package. Needs 2 environment variables to run.
MCP server Claude CodeCodexCursor +2
Governed database access for AI assistants: masking, signed receipts, coverage reconciliation. Runs locally from the @conarium-ai/core npm package.
MCP server Claude CodeCodexCursor +2
Code quality analysis MCP server - detects security issues, deceptive patterns, and placeholders. Runs locally from the code-sentinel-mcp npm package.
Skill Claude CodeCodex
Operate only in authorized scope: bug bounty targets explicitly in scope, owned systems, defensive reviews, or labs. Decline or pause on requests involving unauthorized access, stealth, persistence, service disruption, credential abuse, real data theft, or abuse of third-party systems.
Skill Claude CodeCodex
Validates Kubernetes manifests and Terraform configs against the DeployGuard policy ruleset. Acts as a senior reviewer: every violation explains why it matters and what to fix, not just what's wrong.
Skill Claude CodeCodex
OWASP API Security Top 10 (2023) with production Next.js App Router code. Access control, authentication with MFA and password reset, input validation (SQL, NoSQL and command injection), rate limiting and per-account login throttling, security headers and CSRF, data exposure, supply chain and startup env checks, SSRF…
Skill Claude CodeCodex
A pragmatic workflow taking a software project from idea to a secured, GitHub-ready repository, for beginners and vibecoders who want to ship without the usual mistakes. Runs five phases - ideate (have an idea, or get one suggested from the user's profile and current trends), plan (structure, file names, boilerplate…
MCP server Claude CodeCodexCursor +2
Website health analysis: SEO, accessibility, performance, security, and broken links. Runs locally from the webcheck-mcp npm package.
Plugin Claude Code
Bundles 1 skill · 174 tokens together
Multi-agent security audit that reads and understands code, adversarially verifies every finding, and scores honest CVSS 3.1. Read-only by default.
Skill Claude CodeCodex
Distribute full OAuth Claude Code credentials (claude-accounts.json) from a single designated refresh-authority Mac to the rest of a fleet, and operate the scheduled automation that does it — the com.claude.fleet-refresh and com.claude.fleet-health LaunchAgents, their logs, and the proactive refresh that keeps…
Plugin Claude Code
Bundles 1 skill · 417 tokens together
Full security and enterprise architecture advisory for CISOs, CTOs, CPOs, Security Architects, Security Engineers, Enterprise Architects, Secure Developers, and Penetration Testers.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: