24,943 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude Code
Parallel multi-agent code review using Agent Teams with 4 specialized reviewers. Spawns a coordinated team of security, performance, test coverage, and code quality agents. Teammates can share findings with each other for cross-domain insights. Produces unified report with severity-ranked findings saved to /output/.…
Skill Claude CodeCodex
Use when performing vulnerability research, security auditing, code analysis, bug bounty hunting, CTF challenges, penetration testing, or exploit development. Covers source audit across 30+ attack domains, sink analysis for 12 languages, SAST/DAST integration, vulnerability chaining, and proof-of-concept development.…
valenciajinxed265/claude-skills-hub
Plugin Claude Code
Security reminder hook that warns about potential security issues when editing files, including command injection, XSS, and unsafe code patterns.
Skill Claude CodeCodex
Comprehensive reference for the VirusTotal API v3, covering authentication, rate limits, endpoint usage, and the critical differences between Free (Public) and Premium (Enterprise) tiers. Use this skill whenever a user asks about VirusTotal, VT API, scanning files or URLs with VirusTotal, threat intelligence lookups…
Skill Claude CodeCodex
Audit a vibe-coded or AI-generated SaaS for security and payment failures before it ships, focused on the Next.js + Supabase + Stripe stack. Use this whenever the user is about to deploy, launch, or "ship" a web app that handles authentication, user data, or payments. Trigger on phrases like "is my app secure", "can…
Plugin Claude Code
Bundles 1 skill · 135 tokens together
Defensive, local-first security recon that briefs your AI coding agent on your OWN codebase. Read-only by default: facts + tailored probes + a calibrated findings ledger, code-in / artifacts-out, no LLM / no server / no running app. Live probes are opt-in against a TEST instance you own; production is out of scope.
CarolMonroe22/supabase-db-supervisor
Skill Claude CodeCodex
Fresh-eyes supervision pass for any database work an AI agent just built (schema, RLS policies, migrations, edge functions touching the database, storage policies). The builder never grades its own homework - a separate agent plays the "Investigate" role, proves who-can-see-what with real queries, and gives an…
Agent Claude Code
Use proactively when a dependency file changes (package.json, requirements.txt, Pipfile, pyproject.toml, Cargo.toml, go.mod, Gemfile, pom.xml, build.gradle), or on demand for a periodic audit. Identifies outdated, vulnerable, unused, duplicated, and license-incompatible dependencies.
Plugin Claude Code
Bundles 36 skills, 2 agents · 2,910 tokens together
Web application security review skills: architecture recon, 33 vulnerability-class detectors, and a consolidated severity-ranked report.
aniruddhavasudev/ai-debt-audit
Plugin Claude Code
Bundles 1 skill · 108 tokens together
Catches the garbage your AI assistant left behind — security shortcuts, secrets buried in git history, code nobody understands. One 0-100 score, 100% local, no LLM in the loop.
Skill Claude CodeCodex
Full-depth audit (a11y, UX, perf, SEO, security, DB, architecture, legal compliance, ops, observability) of a project. Audits by reading the source directly — installs nothing, writes nothing outside docs/audits/. Reports findings with file:line evidence and calibrated severity, optionally mitigates as discovered. Use…
Skill Claude CodeCodex
Authorized software reverse engineering, binary analysis, and program comprehension for legitimate purposes including security review, interoperability, migration, modernization, debugging, and documentation. USE WHEN: user needs to analyze software they own or have explicit authorization to inspect, including legacy…
Skill Claude CodeCodex
Checks whether a website is legally covered against the complaints and demand letters sites actually receive: trackers and session recording running without consent, missing privacy or cookie policies, accessibility gaps. Detects the business profile and which countries it sells to, then shows exposure only for the…
Skill Claude CodeCodex
Bug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi — report templates, human tone guidelines, impact-first writing, CVSS 3.1 scoring, title formula, impact statement formula, severity decision guide, downgrade counters, pre-submit checklist. Use after validating a finding and before submitting. Never use…
JesusConwellpy/secagent-skills
Skill Claude CodeCodex needs its repo
Local LLM-Wiki knowledge system. Bootstrap a structured wiki, write entries using precise templates, full-text search, cross-agent knowledge sharing, cross-session inheritance.
sjarmak/coding-agent-workflows
Agent Claude Code
Expert code review specialist. Proactively reviews code for quality, security, and maintainability. Use immediately after writing or modifying code. MUST BE USED for all code changes.
YankielDBC2/saas-cybersecurity
Skill Claude CodeCodex
Audit and safely harden authorized SaaS web applications across frameworks and hosting providers. Use for OWASP-aligned reviews, runtime browser checks, HTTP headers, XSS/CSRF, access control, secrets, payments, uploads, privacy, abuse controls, supply-chain risk, link injection, or security remediation; do not use…
Skill Claude Code
A Chinese-language guide for authorized penetration testing and security research. Penetration testing is controlled testing used to find security weaknesses in software or systems.
xataio/nextjs-claude-code-starter
Skill Claude Code
Clone a production database with automatic PII anonymization.
Skill Claude CodeCodex
Conduct a security-led audit of code, systems, APIs, infrastructure, dependencies, and AI workflows with threat modeling and exploitability-backed remediation. Use when security risk is the primary concern. Do not use for a generic code review, database design, or non-security debugging.
Skill Codex
Install, update, secure, daemonize, expose through Cloudflare Tunnel, and enable speech input for the open-source Open Codex UI application. Use when a user asks to install or enable Open Codex UI, configure its login daemon, set its access password, install or manage the sherpa-onnx bilingual speech model…
Command Claude Code
Maintain the ROOM BRAIN — the structured state file the coach reasons from.
idea2go2go/spam-filter-advisor-skill
Plugin Claude Code
Bundles 1 skill · 197 tokens together
Turn a folder of saved spam into mail filter rules, ranked honestly by how likely each is to catch real mail. Checks your sample for contamination first, gives exact copy-paste strings and the field to match, and says plainly which rules will decay. Also diagnoses rules you already have.
smiladinov/claude-saas-readiness
Skill Claude CodeCodex
Audits any SaaS / web application codebase for production readiness and delivers a prioritized report covering security, scalability, reliability, performance, testing, observability, data, APIs, CI/CD, infrastructure, cost, and compliance. Use when the user asks to "make my project production-grade", wants a final…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: