26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
MCP server Claude CodeCodexCursor +2
MCP server for the Malcolm network traffic analysis platform (Zeek + Suricata + Arkime + OpenSearch + NetBox) — full read surface plus opt-in, audited write tools. Runs locally from the mcp-server-malcolm Python package.
Plugin Claude Code
Bundles 9 commands · 161 tokens together
AI-powered full codebase scanner. Opens a separate Claude session for every file — reads every line, misses nothing. Finds bugs, security vulnerabilities, performance issues, and auto-fixes them.
Instructions file GitHub Copilot
Instructions for erniker/understudy, covering 🎯 this file applies to all team agents, in vs code it auto-applies to all files (applyto: ""), in copilot cli it is activated with /instructions, │ what are guardrails? │ and │ │.
Skill Claude Code needs its repo
AI agent guardrails — defends prompts against injection attacks, jailbreaks, and evasion; scans LLM responses for leaked secrets and harmful content. Up to 36 inline defenses (24 default), 3 output scanners, and adaptive ranking. Keywords: shield, guardrails, prompt injection, defense, security, scan.
MCP server Claude CodeCodexCursor +2
security holding package. Runs locally from the chaos-mcp npm package.
presidio-v/presidio-hardened-x402-mcp
MCP server Claude CodeCodexCursor +2
MCP server exposing presidio-hardened-x402 pre-payment PII screening, policy, and replay-guard tools to autonomous agents. Runs locally from the presidio-hardened-x402-mcp Python package.
Skill Codex
Guard an autonomous agent's x402 payment with the live IntentFence service before it signs. Use when an agent receives a PAYMENT-REQUIRED challenge, is about to pay an x402 endpoint, needs to enforce a USDC price ceiling or payee allowlist, or needs signed evidence that an exact Base USDC quote was checked. Also use…
MCP server Claude CodeCodexCursor +2
DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools. Runs locally from the intodns-mcp npm package.
Skill Claude CodeCodex
Use when an OpenClaw-style or local autonomous computer-use agent needs a single Neura Relay preflight workflow for messages, file changes, browser submits, shell commands, package or publisher changes, workflow state, memory writes, or data exports before execution.
MCP server Claude CodeCodexCursor +2
Read-only MCP/agent-gateway readiness scanner — scores a repo across 7 security dimensions. Runs locally from the mcp-gateway-scan npm package.
MCP server Claude CodeCodexCursor +2
Detects leaked secrets (API keys, tokens, private keys) in source code. Runs locally from the @trestlescan/mcp npm package.
MCP server Claude CodeCodexCursor +2
The MCP server that vets MCP servers: identity, risk grade and per-tool risk before you install. Remote server at api.policylayer.com.
MCP server Claude CodeCodexCursor +2
The Cognitive Circuit Breaker for Autonomous Agents. Runs locally from the xaps-sdk Python package. Needs 2 environment variables to run.
MCP server Claude CodeCodexCursor +2
One of 2 in server.json
Tamper-evident action receipts, trust scoring & capability tokens for AI agents. 29 MCP tools. Runs locally from the @garl-protocol/mcp-server npm package. Needs 3 environment variables to run.
MCP server Claude CodeCodexCursor +2
Governance layer for agentic AI — signed, verifiable receipts for every agent action. Runs locally from the @yobekasbah/mcp-server npm package. Needs 2 environment variables to run.
MCP server Claude CodeCodexCursor +2
Open proof-required execution kernel for consequential actions. Runs locally from the actenon-kernel Python package.
Skill Claude CodeCodex
Comprehensive code review with security, performance, and style analysis for Python, TypeScript, and Go. Detects OWASP Top 10 vulnerabilities, N+1 queries, race conditions, and logic errors before they reach production.
MCP server Claude CodeCodexCursor +2
GDPR Shift-Left Compliance MCP Server — Azure-first GDPR guidance, code review, and audit tools. Runs locally from the gdpr-shift-left-mcp Python package.
extralabs/octowatch-mcp-server
Cursor rule Cursor
Public OSS boundary — never leak secrets or proprietary source from private OctoWatch repos.
Skill Claude CodeCodex
Pre-checkout verification for shopping agents. Before transacting with any storefront the user didn't explicitly type, fetch Ed25519-signed merchant facts (domain age, TLS age, brand-lookalike score, price deviation) from the Onyx oracle over x402, verify the signature, and surface the facts to the buyer. Use whenever…
MCP server Claude CodeCodexCursor +2
MCP security scanner plugin - scan your installed MCP servers with 16 engines. Runs locally from the mcpampel Python package. Needs 1 environment variable to run.
MCP server Claude CodeCodexCursor +2
Check an email before an AI agent sends it: send / ask a human / block. Detects prompt injection. Runs locally from the qorami-mcp npm package. Needs 1 environment variable to run.
Skill Claude CodeCodex
An AI and MCP security scanner aligned with the OWASP MCP Top 10, a list of common risks for tool-connected AI systems. It checks for issues such as prompt injection, command injection, poisoned tools, leaked secrets, unsafe permissions, supply-chain attacks, SSRF, and banned Chinese-language content.
MCP server Claude CodeCodexCursor +2
Scan GitHub repos and profiles for malware before cloning — commit-pinned risk verdicts for agents. Runs locally from the flagrix npm package. Needs 1 environment variable to run.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: