24,943 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
ronalships/claude-devops-skill
Skill Claude CodeCodex
Opinionated production-grade DevOps defaults for Terraform, Kubernetes, CI/CD, Docker, cloud security, observability, cost, and disaster recovery. ALWAYS use when generating, reviewing, or modifying any infrastructure code, Kubernetes manifests (Deployment, Service, StatefulSet, Helm, Kustomize), Terraform (.tf…
Nordic-AI/production-readiness-skills
Skill Claude CodeCodex
Production readiness review for applications incorporating AI / ML — covering classical ML models, generative models, LLM-powered applications, RAG systems, and agentic workflows. Checks AI system inventory, EU AI Act classification, training data governance, model supply chain, evaluation harness, prompt injection…
uttej-badwane/secure-cloud-prompt-engineering
Plugin Claude Code
Bundles 1 skill, 5 commands, 3 agents, 3 hooks · 471 tokens together
Security-focused prompts and Claude Code skills for Infrastructure as Code review. Includes a comprehensive IaC security review skill with compliance mapping to CIS, NIST 800-53, NIST 800-171, PCI-DSS, SOC 2, HIPAA, GDPR, and ISO 27001.
Plugin Claude Code
Agent plugins for Ping Identity — teach any AI coding agent how to build with Ping Identity.
Skill Codex
Scan AI agent skills, plugins, and MCP servers for malicious code BEFORE installation — catches prompt injection, credential theft, data exfiltration, and backdoors. Skills and the static MCP source scan use NVIDIA SkillSpector (static patterns + taint tracking + YARA + live OSV.dev CVE lookup + LLM semantic analysis…
Plugin Claude Code
Bundles 1 skill · 110 tokens together
Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level, and generates structured audit reports.
Skill Claude Code
Use when the user asks about NIST SP 800-53 Rev. 5 from an engineering perspective — selecting baselines, tailoring controls, modeling control inheritance from cloud providers and shared services, emitting OSCAL artifacts, or implementing controls in IaC and code rather than running them as a documentation exercise.…
Skill Claude Code
Cryptographic best practices for secure system design. Use when: choosing encryption algorithms, implementing password hashing, selecting key lengths, using secure random number generation, implementing digital signatures, designing TLS deployments, key management, or avoiding common cryptographic pitfalls.
Skill Claude CodeCodex
Manage iCloud Hide My Email addresses — list, create, edit, deactivate, export.
nanxiaoyao/network-huawei-skills
Skill Claude CodeCodex
This skill should be used when the user asks to configure or troubleshoot AAA (Authentication / Authorization / Accounting) on Huawei S / CE / USG series devices — including 802.1X, MAC authentication, Portal authentication, RADIUS, HWTACACS (TACACS+), local authentication, authentication profiles, free-rule, NAC…
Skill Codex
Reverse engineering of compiled, packed, virtualized, or obfuscated targets for authorized CTF challenges. Use when the task is to understand, decompile, disassemble, or unpack an unknown executable across ELF, PE, Mach-O, APK, WASM, firmware, bytecode, or custom-VM targets.
Skill Claude Code
Set up the development environment for the project. Use when starting work on the project, when dependencies are out of sync, or to fix environment setup failures.
Skill Claude CodeCodex
A read-only security audit for DeepSeek Harness extensions, settings, dependencies, and runtime exposure. It looks for risks such as exposed secrets, unsafe file mounts, data leaving the system, persistence, and malware indicators.
Skill Claude CodeCodex
Create or validate a pwnote engagement import/export JSON file. Use when the user wants to generate, edit, or verify a pwnote engagement file for data transfer between pwnote instances. The file bundles an entire pentest engagement — metadata, notebook documents, code/host/credential blocks, findings with…
Plugin Claude Code
Bundles 2 skills · 139 tokens together
Intelligent Agent-Skill dependency butler: discover, security-audit, and install Agent Skills into your project. Scans tech stack, plans a vetted combination, audits each skill, and installs per-agent.
mirekondro/The-Pre-Flight-Check
Plugin Claude Code
Bundles 1 skill · 45 tokens together
Fail-fast quality gate (Typecheck → Lint → Test → Security Audit) that runs before any task is declared done or code is committed. Auto-detects Node.js and Python projects.
Skill Claude CodeCodex
Battle-hardened senior engineer who reviews plans and code before they cause a 3 AM incident. Stress-tests architecture, catches data-pipeline fragility, flags security gaps, and calls out missing error handling, then signs off with a severity summary and grudging approval if earned. Use when reviewing new or existing…
Plugin Claude Code
Bundles 1 skill · 114 tokens together
Discovers a web app's user flows, drives a real Chromium browser through them with a live local dashboard, flags functional/content/visual/console bugs, and runs a read-only security audit on local source. Identify-only, never fixes.
Ljhhhhhh/user-facing-only-skill
Skill Codex
Keep finished deliverables limited to what their intended users need. Use when demo instructions, mock details, implementation rationale, temporary shortcuts, or superseded requirements might leak into user-facing pages, reports, exports, documentation, APIs, or CLI output. Do not use for general UX or code-quality…
Skill Claude CodeCodex
Review application changes for evidence-based security vulnerabilities and hardening opportunities across authentication, authorization, input handling, APIs, dependencies, and data protection.
Plugin Claude Code
Bundles 7 skills, 16 commands, 3 agents, 2 hooks · 949 tokens together
Binary exploitation (pwn) toolkit for Hack The Box challenges - structured methodology with pwntools, GDB/pwndbg integration, and exploit templates.
Plugin Claude Code
Bundles 5 skills, 1 agent, 3 hooks · 208 tokens together
Sonomos Canary — persistent PII leak counter for Claude Code. 38 checksum-validated regex detectors (plus your own via rules.d) and Claude self-scan catch sensitive data you expose to AI, Canary Tokens give a CERTAIN alarm the instant a planted decoy secret reaches Claude, and Canary Wrapped turns your exposure…
Plugin Claude Code
Bundles 4 skills, 18 agents · 695 tokens together
Security audit automation. RECON → SCAN → ATTACK → REPORT.
Yashvendra/claude-security-skills
Plugin Claude Code
Bundles 1 skill, 1 plugin · 203 tokens together
Deep, architecture-aware vulnerability discovery for Claude Code — finds what static scanners miss.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: