26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude CodeCodex
Elite full-codebase security auditor for any language or stack (JavaScript, TypeScript, Python, Java, Kotlin, PHP, Go, Rust, C/C++, Ruby, C#). Trigger this whenever the user asks to review, audit, scan, harden, or "check the security" of any project, before deploying/shipping/launching a site or app, after adding…
Plugin Claude Code
Bundles 1 skill, 1 hook · 65 tokens together
Cross-platform secrets workflow for macOS, Windows, and Linux. The keys CLI routes values to explicit local sinks without returning plaintext in normal agent tool output. It also organizes local folders and explicit project scopes so approved workers receive only assigned entries and contributors can submit new entri.
Skill Claude CodeCodex
Comprehensive reference for the VirusTotal API v3, covering authentication, rate limits, endpoint usage, and the critical differences between Free (Public) and Premium (Enterprise) tiers. Use this skill whenever a user asks about VirusTotal, VT API, scanning files or URLs with VirusTotal, threat intelligence lookups…
Skill Claude CodeCodex
Bug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi — report templates, human tone guidelines, impact-first writing, CVSS 3.1 scoring, title formula, impact statement formula, severity decision guide, downgrade counters, pre-submit checklist. Use after validating a finding and before submitting. Never use…
Aladeen12541/claude-ip-rotator
Plugin Claude Code
Bundles 1 skill, 1 command · 211 tokens together
AWS API Gateway IP rotation for security testing. Single switch routes ALL HTTP/HTTPS traffic (nuclei, httpx, ffuf, curl, everything) through rotating AWS IPs to bypass WAF rate limits and IP blocks.
Skill Claude CodeCodex
Conduct a security-led audit of code, systems, APIs, infrastructure, dependencies, and AI workflows with threat modeling and exploitability-backed remediation. Use when security risk is the primary concern. Do not use for a generic code review, database design, or non-security debugging.
Skill Claude CodeCodex
Manage iCloud Hide My Email addresses — list, create, edit, deactivate, export.
Skill Codex
Reverse engineering of compiled, packed, virtualized, or obfuscated targets for authorized CTF challenges. Use when the task is to understand, decompile, disassemble, or unpack an unknown executable across ELF, PE, Mach-O, APK, WASM, firmware, bytecode, or custom-VM targets.
Skill Claude CodeCodex
Execute web-application assessment from setup and recon through injection, access control, auth/session issues, API, and SSRF chains.
Plugin Claude Code
Bundles 61 skills, 25 commands, 23 agents, 4 hooks · 6,334 tokens together
Senior-engineer toolkit: principled design (Clean Arch, DDD, SOLID, TDD, patterns, observability, concurrency), security review, language expertise (Bash, C#, Dart, Go, Java, Kotlin, Python, Ruby, Rust, SQL, Swift, TypeScript), and pragmatic workflows.
Cursor rule Cursor
Core mcpnuke development standards and superpowers workflow integration.
Skill Claude CodeCodex
Apply security guidelines when designing, building, or reviewing AI chatbots, LLM-powered apps, autonomous/tool-using agents, and mobile apps (React Native/Expo, Flutter) — covering agent controls (authorization checks, plan validation, execution limits, audit logging), LLM/prompt security (prompt injection, RAG…
mfkocalar/OWASP-Security-Skills
Plugin Claude Code
OWASP-aligned security audit and secure-coding-practices skills for Claude Code.
Skill Claude Code
Implement authentication and authorization in web applications. Use when adding login, signup, sessions, JWT tokens, OAuth, SSO, API key auth, role-based access control (RBAC), permissions, protected routes, middleware guards, password hashing, MFA/2FA, refresh token rotation, CSRF protection, or integrating auth…
jessefmoore/offensive-claude-code
Skill Claude CodeCodex needs its repo
Active Directory penetration testing — BloodHound enumeration, Kerberos attacks (Kerberoasting, AS-REP, Golden/Silver Ticket), NTLM relay, DCSync, lateral movement, domain dominance.
Skill Claude CodeCodex
Detect wildcard CORS origins, missing preflight handling, and insecure cross-origin configurations.
Skill Claude CodeCodex
A guide for examining compiled programs and mobile applications through binary analysis, decompilation, debugging, hooking, protocol analysis, and related techniques.
Skill Claude CodeCodex
SafeClaw validates every tool call, message, and agent action against OWL ontologies and SHACL constraints before execution. It acts as a governance gate between your AI agent and the tools it uses.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Establishes engagement rules, authorization boundaries, and operational guardrails for all security review skills. Must be invoked before any assessment work begins.
Skill Claude CodeCodex
Master-tier Roblox exploiter — standalone executor scripts only, no MCP. Remote spy via hookmetamethod, decompile hunt, recon, autofarm, teleport, dupe, quest skip, anti-cheat bypass, fuzz, kill aura, plan pivot A→B→C. Delivers complete copy-paste Luau for any executor. Use for: exploit, hack, vulnerability, autofarm…
Plugin Claude Code
Bundles 15 skills, 5 hooks · 809 tokens together
Agent Skills for dependency security including vulnerability scanning, package review, patching, setup and configuration, and secure dependency updates via Socket.dev.
vectra-ai-research/vectra-soc-agent-starter
Skill Claude CodeCodex
Enriches Vectra findings with VirusTotal threat intelligence — IOC reputation lookup for IPs, domains, URLs, and file hashes via the VirusTotal v3 API. Ships two paths — a standalone Bash CLI (scripts/vt-lookup.sh) for one-off lookups that needs only curl/jq, and a sourced framework adapter (scripts/virustotal.sh) for…
serenashenn3-art/wechat-forensic-pro
Skill Claude CodeCodex
A skill guide for wechat-forensic-pro, covering its available skills, when to call them, and legal restrictions for forensic work on WeChat data.
Cursor rule Cursor
Winston — System Architect agent.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: