26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
MCP server Claude CodeCodexCursor +2
MCP server "sophos-firewall-mcp-server" as configured in jelmervdm/sophos-firewall-mcp. Runs locally from the sophos-firewall-mcp-server Python package.
cyanheads/sanctions-screening-mcp-server
Plugin Claude Code
Bundles 35 skills, 1 MCP server · 2,647 tokens together
Screen names against eleven OFAC, EU, UK, UN, BIS, and State sanctions and export-control lists and resolve legal entities against GLEIF, matched offline over a local SQLite + FTS5 mirror. A screening aid, not a compliance determination.
MCP server Claude CodeCodexCursor +2
MCP server for Blue Iris NVR — exposes read-only tools backed by the Blue Iris JSON API. Runs locally from the bi-mcp Python package.
utrawal9185-cmd/darknet-mcp-server
MCP server Claude CodeCodexCursor +2
Dark web intelligence MCP server — HIBP, ThreatFox, ransomware tracking, Tor .onion access, blockchain intel, exploit search, stealer logs, malware analysis. Runs locally from the darknet-mcp-server npm package.
TLS-Radar/tlsradar-claude-plugin
Plugin Claude Code
Bundles 1 skill, 6 commands, 1 MCP server · 146 tokens together
SSL/TLS certificate monitoring and free Let's Encrypt issuance inside Claude Code and Cowork, through a single MCP server. Free anonymous scans and cert issuance (private key stays local), plus ongoing monitoring after a one-time OAuth via /mcp.
almasumdev/awesome-mobile-security-agent-skills
Skill Claude CodeCodex
Biometric authentication on mobile using BiometricPrompt and LAContext, with keys cryptographically gated by user biometry. Use when adding unlock, re-auth, or step-up auth flows.
Plugin Claude Code
Bundles 8 skills, 8 commands, 3 hooks, 2 MCP servers · 136 tokens together
Deploy, preview, manage instances, set env vars, add domains, run security scans - all from Claude Code.
Plugin Claude Code
Bundles 8 skills, 1 agent · 564 tokens together
Claude Code plugin for Sitecore, Umbraco, and Optimizely CMS development — scaffolding, content modeling, accessibility scanning, security audits, best practices, and code generation.
seancrecord/scvd-general-store-repo
Cursor rule Cursor
Before paying an x402 endpoint, read its 402 terms and run scvd.store's free preflight and dry run; decide with every reason named.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 50 tokens together
A local cryptographic inventory for developers and AI agents that carries verifiable coverage and its own limits inside the CBOM.
Plugin Cursor
Bundles 1 skill, 2 MCP servers · 208 tokens together
Trusty Squire gives coding agents the ability to provision, ship, and pay — without your keys or card ever leaving the vault.
Plugin Cursor
Bundles 1 skill, 2 hooks, 1 MCP server · 49 tokens together
Audit trail and traceability for AI agents. See what every coding agent did and check each tool call against policy.
Cursor rule
Cursor rule "security" from Luxvil/ai-coding-rules, covering windsurf rules - security, 🔴 non-negotiable, authentication & authorization, session management and api security.
Skill Claude CodeCodex
Map CVE IDs or OSIDB flaw IDs to applicable CME controls. Use when the user provides a CVE ID or flaw identifier and asks about mitigations.
nohosa001-pixel/security-gate-x402
MCP server Claude CodeCodexCursor +2
MCP server "security-gate-x402" as configured in nohosa001-pixel/security-gate-x402. Runs mcp_server with python. Needs 1 environment variable to run.
Skill Codex
Install or add requested npm or pnpm dependencies through SafeInstall's existing artifact-bound installation gate. Use when a user requests dependency installation, including development dependencies. Never use for arbitrary registry-code execution or to bypass a policy block.
Skill Codex
Safely investigate, install, and update dependencies in pnpm-managed JavaScript and TypeScript projects through Socket Firewall and release-age checks. Use for dependency upgrades, security remediation, dependency installation, or pnpm lockfile reviews. Audit-only requests remain read-only. Execution requires the…
Skill Codex
Request a one-off human approval through Sanction for an exact proposed tool action, or resume that same request after review. Use for explicit approval requests and synthetic approval tests, not ordinary tool discovery or usage reporting.
Skill Claude CodeCodex
Administer a Strategy (formerly MicroStrategy) environment over REST — users and user groups, security roles, privileges, SCIM provisioning, per-user API tokens, multi-tenant (tenant partitioning), license audit and compliance, vault connections, project settings and load status, and Intelligence Server / Library…
Cursor rule Cursor
Core working principles for Jeff Otterson's portfolio repos — receipts, honest benchmarks, fail-closed, no employer data.
Skill Claude CodeCodex
Encrypted secrets vault for AI agents. Store API keys, tokens, and passwords encrypted at rest and resolve them at runtime over MCP so plaintext never appears in the conversation transcript. Use when an agent needs to store, retrieve, or sandbox secrets.
AleBrito124356/mcp-secret-sentinel
Plugin Claude Code
Bundles 1 skill, 3 hooks, 1 MCP server · 107 tokens together
Local secret guardrails for AI agents: blocks API keys in file writes, shell commands, MCP calls and prompts, redacts them from tool output, audits MCP client configs and scans staged changes, pushes and history. No account, nothing leaves the machine.
Skill Claude CodeCodex
Read the user's Strava activities, segments and training load through the local strava MCP server. Use when the user asks about runs, rides or swims on Strava, weekly volume, segment efforts, athlete stats, or a training review. Starts with connection status, uses synthetic demo data before OAuth, and never asks for…
MCP server Claude CodeCodexCursor +2
Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern. Runs locally from the 3ilm-mcp npm package.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: