Security

26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

mariana-audit

1825

ibaifernandez/mariana-audit

Skill Claude CodeCodex

Full-depth audit (a11y, UX, perf, SEO, security, DB, architecture, legal compliance, ops, observability) of a project. Audits by reading the source directly — installs nothing, writes nothing outside docs/audits/. Reports findings with file:line evidence and calibrated severity, optionally mitigates as discovered. Use…

not rated 2 2mo ago A 111 tokens original MIT

reverse-engineer

1826

mrigankad/SRE-CLI

Skill Claude CodeCodex

Authorized software reverse engineering, binary analysis, and program comprehension for legitimate purposes including security review, interoperability, migration, modernization, debugging, and documentation. USE WHEN: user needs to analyze software they own or have explicit authorization to inspect, including legacy…

not rated 2 7mo ago A 137 tokens

site-risk-check

1827

kobimantzur/agent-skills

Skill Claude CodeCodex

Checks whether a website is legally covered against the complaints and demand letters sites actually receive: trackers and session recording running without consent, missing privacy or cookie policies, accessibility gaps. Detects the business profile and which countries it sells to, then shows exposure only for the…

not rated 2 2d ago B 0 tokens original MIT

secagent-knowledge

1828

JesusConwellpy/secagent-skills

Skill Claude CodeCodex needs its repo

Local LLM-Wiki knowledge system. Bootstrap a structured wiki, write entries using precise templates, full-text search, cross-agent knowledge sharing, cross-session inheritance.

not rated 2 5mo ago A 37 tokens original MIT

open-codex-ui

1830

Sube-py/awesome-skills

Skill Codex

Install, update, secure, daemonize, expose through Cloudflare Tunnel, and enable speech input for the open-source Open Codex UI application. Use when a user asks to install or enable Open Codex UI, configure its login daemon, set its access password, install or manage the sherpa-onnx bilingual speech model…

not rated 2 3mo ago A 112 tokens

notes

1831

pashki975/thm-claude-kit

Command Claude Code

Maintain the ROOM BRAIN — the structured state file the coach reasons from.

not rated 2 2mo ago A 14 tokens original MIT

spam-filter-advisor

1832

idea2go2go/spam-filter-advisor-skill

Plugin Claude Code

Bundles 1 skill · 197 tokens together

Turn a folder of saved spam into mail filter rules, ranked honestly by how likely each is to catch real mail. Checks your sample for contamination first, gives exact copy-paste strings and the field to match, and says plainly which rules will decay. Also diagnoses rules you already have.

not rated 2 2mo ago A tokens not measured CC-BY-4.0

smiladinov/claude-saas-readiness

Skill Claude CodeCodex

Audits any SaaS / web application codebase for production readiness and delivers a prioritized report covering security, scalability, reliability, performance, testing, observability, data, APIs, CI/CD, infrastructure, cost, and compliance. Use when the user asks to "make my project production-grade", wants a final…

not rated 2 3mo ago A 106 tokens

devops-best-practices

1834

ronalships/claude-devops-skill

Skill Claude CodeCodex

Opinionated production-grade DevOps defaults for Terraform, Kubernetes, CI/CD, Docker, cloud security, observability, cost, and disaster recovery. ALWAYS use when generating, reviewing, or modifying any infrastructure code, Kubernetes manifests (Deployment, Service, StatefulSet, Helm, Kustomize), Terraform (.tf…

not rated 2 5mo ago B 209 tokens original MIT

ai-readiness

1835

Nordic-AI/production-readiness-skills

Skill Claude CodeCodex

Production readiness review for applications incorporating AI / ML — covering classical ML models, generative models, LLM-powered applications, RAG systems, and agentic workflows. Checks AI system inventory, EU AI Act classification, training data governance, model supply chain, evaluation harness, prompt injection…

not rated 2 6mo ago A 160 tokens original Apache-2.0

entry-point-analyzer

1837

Fodhol/skills

Plugin Claude Code

Bundles 1 skill · 110 tokens together

Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level, and generates structured audit reports.

not rated 2 25d ago A tokens not measured CC-BY-SA-4.0

add-mcp-oauth

1838

scalekit-inc/skills

Skill Claude CodeCodex

Adds MCP OAuth so an agent can protect the user's MCP server. Use when the user wants MCP OAuth or to protect their MCP server. It does not add API keys or client credentials (that's add-api-auth) or expose AgentKit tools over MCP (that's expose-agentkit-mcp).

not rated 2 1mo ago A 67 tokens archived

crypto-best-practices

1839

pedromneto97/custom-skills

Skill Claude Code

Cryptographic best practices for secure system design. Use when: choosing encryption algorithms, implementing password hashing, selecting key lengths, using secure random number generation, implementing digital signatures, designing TLS deployments, key management, or avoiding common cryptographic pitfalls.

not rated 2 4mo ago A 57 tokens original MIT

aaa-auth-config

1840

nanxiaoyao/network-huawei-skills

Skill Claude CodeCodex

This skill should be used when the user asks to configure or troubleshoot AAA (Authentication / Authorization / Accounting) on Huawei S / CE / USG series devices — including 802.1X, MAC authentication, Portal authentication, RADIUS, HWTACACS (TACACS+), local authentication, authentication profiles, free-rule, NAC…

not rated 2 3mo ago A 165 tokens original MIT

kinde-authorization

1841

ski043/kinde-agent-skills

Skill Claude CodeCodex

Kinde authorization: designs, provisions, assigns, enforces, refreshes, and verifies permission-first RBAC for organizations. Use when designing roles or permissions; provisioning or assigning organization access; enforcing permission checks in APIs or application code; troubleshooting claims or stale access; or when…

not rated 2 2mo ago A 68 tokens original MIT

setup-dev-env

1842

yu-iskw/skill-inspector

Skill Claude Code

Set up the development environment for the project. Use when starting work on the project, when dependencies are out of sync, or to fix environment setup failures.

not rated 2 6d ago A 35 tokens original Apache-2.0

dsh-security-audit

1843

yhny1001/dsh-security-audit

Skill Claude CodeCodex

A read-only security audit for DeepSeek Harness extensions, settings, dependencies, and runtime exposure. It looks for risks such as exposed secrets, unsafe file mounts, data leaving the system, persistence, and malware indicators.

not rated 2 2mo ago A 67 tokens original MIT

pwnote-engagement-file

1844

Pwnote/skills

Skill Claude CodeCodex

Create or validate a pwnote engagement import/export JSON file. Use when the user wants to generate, edit, or verify a pwnote engagement file for data transfer between pwnote instances. The file bundles an entire pentest engagement — metadata, notebook documents, code/host/credential blocks, findings with…

not rated 2 3mo ago A 113 tokens original MIT

skillforge

1845

yvzhou1111/skillforge

Plugin Claude Code

Bundles 2 skills · 139 tokens together

Intelligent Agent-Skill dependency butler: discover, security-audit, and install Agent Skills into your project. Scans tech stack, plans a vetted combination, audits each skill, and installs per-agent.

not rated 2 5mo ago A tokens not measured original MIT

pre-flight-check

1846

mirekondro/The-Pre-Flight-Check

Plugin Claude Code

Bundles 1 skill · 45 tokens together

Fail-fast quality gate (Typecheck → Lint → Test → Security Audit) that runs before any task is declared done or code is committed. Auto-detects Node.js and Python projects.

not rated 2 4mo ago A tokens not measured original MIT

grouchy-mentor

1847

emekdahl/skills

Skill Claude CodeCodex

Battle-hardened senior engineer who reviews plans and code before they cause a 3 AM incident. Stress-tests architecture, catches data-pipeline fragility, flags security gaps, and calls out missing error handling, then signs off with a severity summary and grudging approval if earned. Use when reviewing new or existing…

not rated 2 3mo ago A 82 tokens original MIT

user-facing-only

1848

Ljhhhhhh/user-facing-only-skill

Skill Codex

Keep finished deliverables limited to what their intended users need. Use when demo instructions, mock details, implementation rationale, temporary shortcuts, or superseded requirements might leak into user-facing pages, reports, exports, documentation, APIs, or CLI output. Do not use for general UX or code-quality…

not rated 2 2mo ago A 64 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: