26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Plugin Claude Code
Bundles 7 skills, 16 commands, 3 agents, 2 hooks · 949 tokens together
Binary exploitation (pwn) toolkit for Hack The Box challenges - structured methodology with pwntools, GDB/pwndbg integration, and exploit templates.
Plugin Claude Code
Bundles 5 skills, 1 agent, 3 hooks · 208 tokens together
Sonomos Canary — persistent PII leak counter for Claude Code. 38 checksum-validated regex detectors (plus your own via rules.d) and Claude self-scan catch sensitive data you expose to AI, Canary Tokens give a CERTAIN alarm the instant a planted decoy secret reaches Claude, and Canary Wrapped turns your exposure…
Plugin Claude Code
Bundles 4 skills, 18 agents · 695 tokens together
Security audit automation. RECON → SCAN → ATTACK → REPORT.
Yashvendra/claude-security-skills
Plugin Claude Code
Bundles 1 skill, 1 plugin · 203 tokens together
Deep, architecture-aware vulnerability discovery for Claude Code — finds what static scanners miss.
Plugin Claude Code
Bundles 1 skill · 103 tokens together
Defensive, read-only security assessment of a local project (Semgrep + osv-scanner + gitleaks) with a reproducible reliability grade (0-100, A-F).
Plugin Claude Code
Bundles 6 skills, 1 MCP server · 162 tokens together
DNS, IP intelligence, AS routing, domain reputation, Bitcoin blockchain, Lightning Network, and threat intelligence. 50+ tools for network analysis, crypto investigation, and security research.
Plugin Claude Code
Bundles 2 skills, 1 agent · 215 tokens together
OWASP Top 10:2025 rules for writing and reviewing backend/API code in any language, plus /api-secure-report — a full security inventory of every HTTP route in a project.
Plugin Claude Code
Bundles 4 commands · 0 tokens together
Claude Code plugin for Terraform development with terraform-ls LSP integration, 17 automated hooks for security scanning (trivy, checkov), linting (tflint), formatting, and Terragrunt support.
runverdict/sf-security-review-toolkit
Plugin Claude Code
Bundles 14 skills, 1 hook · 1,677 tokens together
Skills that prepare an ISV partner for the AppExchange/AgentExchange security review end to end — autonomous multi-agent codebase audit, submission-artifact generation, scan orchestration, test-environment runbooks, and an honest readiness verdict.
davidmoneil/aifred-document-guard
Plugin Claude Code
Bundles 1 command, 1 hook · 14 tokens together
Prevents Claude from accidentally damaging important files. Intercepts Edit/Write operations and validates them against configurable protection rules including credential scanning, structural preservation, and semantic checks.
Command Claude Code
Brutal pre-submission audit of a Claude Code plugin marketplace — vulnerabilities, wiring integrity, standards compliance, skill gaps.
Skill Claude CodeCodex
Audit third-party agent skills for prompt injection, unsafe commands, downloads, permissions, and persistence before installation.
Plugin Claude Code
Bundles 8 commands · 177 tokens together
Adversarial audit suite: whole-repo codebase/docs/process/security audits, a diff-scoped change audit, an orchestrator that synthesizes one fixes backlog, and a human-gated fixing agent. Evidence labels, stable finding IDs, acceptance checks.
waleedkhanbaloch/claude-code-safety-net
Plugin Claude Code
Bundles 2 commands, 1 hook · 12 tokens together
Block destructive git and filesystem commands before execution.
Skill Claude Code
Cryptographic delegation for AI agents. Scope-confines what Claude Code can do in this session using Ed25519 delegation tokens. Every action is verified before execution and signed for the audit trail. Use when asked to "delegate", "restrict scope", "authorize", or "sudo mode".
Skill Claude CodeCodex
Security audit of a UniFi home or small-office network using the unifi-mcp tools. Use this skill when asked to audit, review, check, or assess the security posture of a UniFi network — including device inventory, firmware currency, WiFi configuration, firewall rules, network segmentation, DNS anomalies, VPN…
Plugin Claude Code
Bundles 3 skills, 1 MCP server · 93 tokens together
A2A Mesh workflows for endpoint validation, approved task operations, and security-bounded MCP consumption.
Skill Claude Code
Govern consequential Codex tool calls with Custodian before execution, including writes, network access, credentials, destructive commands, production changes, and money movement.
Skill Claude CodeCodex
Comprehensive security audit for web applications and APIs. Performs a full-stack security review covering authentication, authorization, rate limiting, input validation, secrets management, security headers, cost controls (AI/API spend), email abuse prevention, dependency vulnerabilities, and data exposure risks.…
Skill Claude CodeCodex
Use when asked to check, audit, or review a web application's security, authentication, permissions, access control, error handling, API/endpoint surface, or database management — including "is my app secure", "check my auth", "review my permissions", "find vulnerabilities", or a pre-launch/pre-handover review.
MLOps-Courses/agentops-open-course
Skill Claude CodeCodex
Add layered safety to an LLM agent — PII redaction, prompt-injection spotlighting, human approval on state-changing tools, and a configuration-controlled write kill-switch. Use when an agent can take consequential actions, when tool output could carry injected instructions, or when user data must be redacted before it…
Skill Claude CodeCodex
Classify AI system risk under EU AI Act (Reg 2024/1689), generate Article 50 disclosures, and design conformity audit trails.
dacuma-labs/agent-security-audit
Skill Claude CodeCodex
Audits AI agent projects for security risks in prompts, tools, memory, RAG, and permissions. Use when: the user asks to review agent security, harden an agentic system, check for prompt injection risks, audit tool permissions, or secure an AI assistant before deployment. Do NOT use for: projects with no agentic…
ASER-ho/coding-agent-safety-gate
Skill Claude CodeCodex
A set of safety rules for keeping an AI coding assistant within an approved workspace, task, file scope, and security boundary.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: