24,943 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
cmersman/security-review-plugin
Plugin Claude Code
Bundles 1 agent · 66 tokens together
Security-focused code review agent for identifying vulnerabilities, auditing authentication logic, and ensuring OWASP compliance.
Plugin Claude Code
Bundles 1 skill, 1 command, 2 hooks · 203 tokens together
Safety guardian that prevents Claude Code from executing dangerous commands, exposing secrets, and performing destructive operations.
agilekalaf/Cybersecurity-skills
Skill Claude CodeCodex
Evaluate AI agent configurations, plugin skill files, MCP server connections, and tool permissions for security risks. Use this skill whenever the user mentions scanning plugins, reviewing agent security, auditing AI tools, evaluating MCP configurations, checking skill files for vulnerabilities, prompt injection…
its-animay/claude-security-linter
Plugin Claude Code
Pre-tool-use security linter that blocks code containing eval(), Function constructor abuse, hardcoded API keys, Bearer tokens, AWS credentials, and innerHTML assignments before they are written to disk.
almanax-ai/almanax-security-plugin
Plugin Claude Code
Plugin marketplace listing 1 plugin: almanax-security.
Plugin Claude Code
Bundles 2 commands, 2 hooks · 20 tokens together
Operational discipline framework for AI-assisted development. Deployment gates, epistemic humility enforcement, Docker hygiene, and completion verification. Born from $39.5K in mistakes so you don't have to make them.
Plugin Claude Code
Bundles 1 skill, 2 hooks · 79 tokens together
Vault-agnostic secret handling for Claude Code: store, list, and inject secrets without the model ever seeing plaintext. Multi-backend (file/Keychain/1Password) with PreToolUse blocking and output redaction.
lexbeam-software/eu-ai-governance-plugin
Plugin Claude Code
Bundles 6 skills, 6 commands, 1 MCP server · 489 tokens together
Source-grounded EU AI Act governance for European legal, compliance, privacy, security, and AI governance teams: classification, DPIA and FRIA workflows, vendor review, policy review, and evidence packs.
Plugin Claude Code
Bundles 7 skills, 6 agents · 1,465 tokens together
Security auditor and guard-builder for vibecoded apps. Finds vulnerabilities and missing guards across web, AI/LLM, Supabase/Firebase, Android, iOS, Electron, backend/IaC and CI/CD, then generates paste-ready hardening code. Community project, not an official Anthropic product.
Plugin Claude Code
Bundles 1 skill, 6 agents · 885 tokens together
Static security audit for projects extending Claude (skills, agents, hooks, plugins, MCP servers, slash commands, etc.) before installing them in Claude Code. Detects backdoors, prompt injection, persistence hooks, and supply-chain risks via parallel sub-agents.
Plugin Claude Code
Bundles 4 skills · 165 tokens together
Tools for installing and security-auditing plugins, skill sets, and modules from local sources.
at-dan/claude-security-scanner
Plugin Claude Code
Scans tool calls and user prompts for leaked API keys, credentials, private keys, and HIPAA/PII data. Blocks dangerous actions before they execute.
Plugin Claude Code
Bundles 1 command, 3 hooks · 21 tokens together
File and directory protection for Claude Code using .block marker files with pattern matching.
ReeperReepx/Security-Audit-Claude-Skill
Plugin Claude Code
Bundles 1 skill, 1 agent · 58 tokens together
Enterprise-grade security audit skill for Claude Code. Performs comprehensive SAST, secrets detection, dependency auditing, IaC review, API security, and auto-remediation across any codebase with PDF report generation.
MCP server Claude CodeCodexCursor +2
MCP server "cybersecurity-professor-mcp" as configured in yesidleon1393/cybersec-mcp. Runs locally from the cybersecurity-professor-mcp npm package.
MCP server Claude CodeCodexCursor +2
MCP server "osv-mcp" as configured in EdenYavin/OSV-MCP. Runs locally from the osv-mcp Python package.
MCP server Claude CodeCodexCursor +2
MCP server "tls-mcp-server" as configured in malaya-zemlya/tls-mcp. Runs /path/to/your/tls-mcp/tls_mcp_server/main.py with /path/to/your/tls-mcp/venv/bin/python. Needs 1 environment variable to run.
MCP server Claude CodeCodexCursor +2
MCP server "jwtauditor-mcp" as configured in mohdhaji87/JWTAuditorMCP. Runs locally from the jwtauditor-mcp Python package.
MCP server Claude CodeCodexCursor +2
MCP server for comprehensive security scanning of code repositories. Runs locally from the @rupeshpanwar/security-scanner-mcp npm package.
rnadjqaim/RedTeam-ML-PenTest-MCP
MCP server Claude CodeCodexCursor +2
MCP server "redteam-ml-api-mcp" as configured in rnadjqaim/RedTeam-ML-PenTest-MCP. Runs locally from the redteam-ml-api-mcp Python package.
MCP server Claude CodeCodexCursor +2
MCP server that scans AI-generated code for security vulnerabilities (OWASP Top 10, hardcoded secrets, SQL injection, XSS). Runs locally from the security-scanner-mcp npm package.
MCP server Claude CodeCodexCursor +2
MCP server "nessus" as configured in chanakayaa/nessusmcpserver. Runs C:\path\to\nessus_mcp_server.py with python. Needs 3 environment variables to run.
snilld-ai/openai-assistant-mcp
MCP server Claude CodeCodexCursor +2
A Model Context Protocol server providing tools to manage OpenAI API keys & spending. Runs locally from the mcp-server-openai Python package.
adobe-rnd/mcp-remote-with-okta
MCP server Claude CodeCodexCursor +2
MCP remote server with Adobe IMS/Okta authentication wrapper. Runs locally from the mcp-remote-with-okta npm package.