26,960 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Plugin Claude Code
Bundles 48 skills, 5 commands, 9 agents, 1 hook · 3,021 tokens together
Claude Code skills and agents for authorized security testing, bug bounty hunting, and pentesting workflows.
Skill Claude CodeCodex ✓ vendor
A read-only tool for examining security events already saved by agent-sec-cli, a command-line security log. It can connect those events to an agent session, run, or trace.
Plugin Claude Code ✓ vendor
Bundles 2 skills · 151 tokens together
Elastic Cloud skills - project setup, access management, network security, and Serverless project lifecycle.
Skill Claude Code
Use this skill for JNDIMap, a JNDI injection framework for RMI, LDAP, and LDAPS. It helps run the jar, choose flags and ports, build JNDI URLs for Basic payloads, MemShell injection, BeanFactory bypasses, JDBC RCE, Tomcat XXE, Hessian, LDAP deserialization gadgets, custom scripts, and advanced options such as JShell…
Agent Claude Code
Use this agent when C source files (.c, .h) have been created or modified, especially code involving memory allocation, file descriptors, sockets, cryptographic operations, credential handling, or external input parsing. Should be triggered on every code change to C files to catch resource lifecycle bugs and security…
Skill Claude Code
Use when facing cryptography challenges involving cipher analysis, key recovery, mathematical attacks, or protocol weaknesses.
Plugin Claude Code
Bundles 2 commands, 7 hooks · 29 tokens together
Adrian runtime security: observability and blocking for Claude Code sessions.
KeyValueSoftwareSystems/agent-opfor
Skill Claude CodeCodex
Run red-team attacks and generate a report for an agent target.
Cursor rule Cursor
Multi-registry support and authentication system.
emiliaprotocol/emilia-protocol
Skill Claude CodeCodex
Verify the authenticity of AI-agent authorization receipts and human-device signoffs. Use this whenever a user shares a "trust receipt", an "authorization receipt", a "signoff", or WebAuthn/passkey approval evidence and asks whether it is valid, genuine, or tampered with. Pairs with the public EMILIA Protocol MCP…
TheDecipherist/claude-code-mastery
Skill Claude CodeCodex
Audit code and dependencies for security vulnerabilities. Use when reviewing PRs, checking dependencies, preparing for deployment, or when user mentions security, vulnerabilities, or audit.
Skill Claude CodeCodex
Precision-first adversarial bug hunting for runtime, logic, data, concurrency, and security defects. Uses deterministic risk triage, evidence-bounded retrieval, Hunter/Skeptic/Referee review, optional hybrid verification, and explicit immutable Fixer scope. Scan-only and single-pass by default; complete-coverage…
Masriyan/Claude-Code-CyberSecurity-Skill
Plugin Claude Code
Bundles 22 skills · 823 tokens together
Evidence-driven cybersecurity toolkit with 22 domain skills.
Skill Claude CodeCodex ✓ vendor
Helps the user configure the Google SecOps Remote MCP Server for Antigravity. Use this when the user asks to "set up" or "configure" the security tools for Antigravity.
Skill Codex
Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide Codex Security scan. Run repeated independent repository-wide discovery passes with worker-specific threat models, semantically merge candidates, synthesize one canonical validation threat model, then run validation…
Skill Claude CodeCodex
Operates Flounder, an autonomous white-hat security auditor. Use when a user asks for a security audit, bug-bounty review, vulnerability investigation, or exploit proof for a public-source or authorized repository, source tree, package, smart contract, Solidity/EVM project, ZK or proof-system code, deployed address…
Skill Claude CodeCodex
Discover, verify, security-screen, and maintain Solana wallet products using the canonical local registry in packages/ecosystem-data and current web research. Use when asked to refresh wallet data, find new Solana wallets, add or remove wallets, check wallets for scam or security concerns, audit wallet features or…
proffesor-for-testing/agentic-qe
Plugin Claude Code
Bundles 41 skills, 143 commands, 10 agents, 10 hooks, 1 plugin · 2,441 tokens together
Agentic Quality Engineering — AI-powered QE platform with 60 specialized agents, 75+ skills, sublinear coverage analysis, ReasoningBank pattern learning, and deep MCP integration for Claude Code and 11 coding agent platforms.
Skill Claude Code
Run a goal end to end inside an isolated K8E sandbox pod (gVisor / Kata / Firecracker) instead of on the host: exec bash / Python / Node / TypeScript, install packages, move files in and out, reuse one session across calls, snapshot and restore the workspace, run background jobs, and publish an in-sandbox service…
slowmist/slowmist-agent-security
Skill Claude CodeCodex
Comprehensive security review framework for AI agents. Covers skill/MCP installation, GitHub repos, URLs/documents, on-chain addresses, products/services, and social shares. Built from real-world attack patterns and incident response experience.
Plugin Claude Code
Bundles 4 skills · 657 tokens together
Dogwood policy authoring tools for Claude Code. Bundles the autoformalize-policies skill, which turns a natural-language authorization requirement into a validated Dogwood (.dw) policy and checks it with the dogwood CLI.
Skill Claude CodeCodex
An OSINT guide for open-source intelligence, meaning information collected from publicly available sources. It organizes reconnaissance across servers, websites, domains, and, when appropriate, people.
MCP server Claude CodeCodexCursor +2
Metacognitive AI agent oversight: adaptive CPI interrupts for alignment, reflection and safety. Runs locally from the @pv-bhat/vibe-check-mcp npm package. Needs 1 environment variable to run.
briiirussell/cybersecurity-skills
Cursor rule Cursor
Audit application source code against the OWASP Top 10:2025 categories — broken access control (incl. SSRF), security misconfiguration, software supply chain failures, cryptographic failures, injection, insecure design, authentication failures, software and data integrity, logging and alerting failures, mishandling of…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: