Security

26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

stride-threat-model

1873

taimurijlal/Claude-Code-Security

Skill Claude CodeCodex

Creates a STRIDE threat model of the current project with ASCII diagrams and outputs a threat.md file. Use when analyzing system security, designing architectures, or identifying threats in applications.

not rated 2 7mo ago A 39 tokens

amg-check-key-vault

1874

Azure/amg-skills

Skill Claude Code ✓ vendor

Fleet-wide Azure Key Vault health check — pulse check for availability, API latency, throttling (429s), auth failures (401/403), and vault saturation across all vaults, then deep-dives into the top 7 most interesting vaults with metrics and resource logs. Tracks known issues across sessions via persistent report. On…

not rated 2 6mo ago A 87 tokens MIT-0

pii-check

1875

clewisdev/skills

Skill Claude CodeCodex

Audit a repo for PII leakage, secrets, and sensitive data before commits or publishing. Runs gitleaks if available, scans git history, checks working tree for known and novel patterns, and optionally wires up a pre-commit hook. Use before making a private repo public, after importing external data into a project, or…

not rated 2 5mo ago A 77 tokens original MIT

handrail

1876

svyatov/handrail

Plugin Claude Code

Bundles 3 skills, 1 hook · 272 tokens together

Declare an agent guardrail once, in one neutral format, and enforce it through every harness's native hooks.

not rated 2 changed 18d ago A tokens not measured original MIT

ask-user-gate

1877

neurocod/llm-loop

Plugin Claude Code

Bundles 1 hook

Refuse shell commands that would stop the session on a permission prompt, and name the replacement for each one.

not rated 2 changed 1mo ago A tokens not measured original MIT

vibeship

1878

vibeforge1111/vibeship-plugin

Plugin Claude Code

Bundles 5 commands, 3 MCP servers · 66 tokens together

AI-powered development with persistent memory, specialist skills, and security scanning. Build products faster with an AI that remembers your project.

not rated 2 10mo ago A tokens not measured original Apache-2.0

code-audit

1879

Variant-Systems/skills

Skill Claude CodeCodex

Run a comprehensive code audit on any codebase. Analyzes security vulnerabilities, hardcoded secrets, dependency CVEs, test coverage, code structure, and AI-generated code patterns. Generates CODEAUDITREPORT.md with findings, severity ratings, and remediation guidance. Intelligently selects and orchestrates the best…

not rated 2 7mo ago A 134 tokens

the-inspector

1880

davekindl/skills

Skill Claude CodeCodex

Product readiness auditor that crawls any codebase, maps what exists, identifies gaps, incomplete code, vulnerabilities, and dead ends, then produces a prioritized remediation plan. Trigger this skill when the user says 'inspect this project', 'audit my code', 'what's broken', 'product readiness check', 'MVP audit'…

not rated 2 3mo ago A 200 tokens original MIT

mesh-security

1881

hackIDLE/skills

Skill Claude CodeCodex

Analyze Istio, Consul, and Linkerd service mesh configurations for security vulnerabilities with NIST 800-53 control mappings. Use when users need to audit mesh security, identify misconfigurations, check mTLS settings, review ACL policies, or prepare for FedRAMP assessments. Triggers on keywords like "mesh config"…

not rated 2 4mo ago A 95 tokens copy · 100% MIT

soroban-auditor

1882

cosminmarian53/skills

Skill Claude CodeCodex needs its repo

Security audit orchestration for Soroban/Stellar Rust smart contracts. Use when user asks to "audit this codebase", "run soroban auditor", or "check for security vulnerabilities". Utilizes AST squeezing, pre-computed guard/state/integration/divergence/invariant/unsafe maps, parallel agent spawning, a verification…

not rated 2 6mo ago A 91 tokens original MIT

appsec-audit

1883

guilhermegiorgi/skills

Skill Claude CodeCodex

Executa uma auditoria profunda de segurança (AppSec) em projetos de software, gerando um relatório técnico priorizado com no mínimo 30 riscos ou pontos de validação. Use este skill SEMPRE que o usuário quiser: Fazer auditoria de segurança, pentest defensivo ou hardening de um projeto; Encontrar vulnerabilidades em…

not rated 2 5mo ago A 213 tokens

gli-gsf-security

1884

mvolkov83/skills

Plugin Claude Code

Bundles 1 skill, 2 commands · 27 tokens together

Security-engineering rules for an interactive gaming platform under the GLI Gaming Security Framework (GLI-GSF-1) — the deep security-controls layer beneath GLI-19's technical-security appendix, owning the infrastructure and network security territory (DNS, firewalls, remote access, hardening, segmentation, IDS/IPS…

not rated 2 1mo ago A tokens not measured

security-audit

1885

kleberbernardo/claude-code-skills

Skill Claude Code

Auditoria e correção de segurança nível enterprise — AppSec, Cloud Security, DevSecOps, Infra Security. Detecta e corrige riscos do básico ao avançado, incluindo vibe coding e código gerado por IA.

not rated 2 4mo ago A 49 tokens

cncoder/serverless-litellm

Skill Claude CodeCodex

Harden ALB-backed services (LiteLLM, generic APIs) behind CloudFront + WAF. Creates CloudFront distribution with secret origin header, WAF Web ACL with path whitelist, and locks down ALB Security Group to CloudFront-only. Use when deploying any internet-facing ALB service that should not be directly accessible.

not rated 2 3mo ago A 73 tokens original MIT

security-audit

1887

Surya8991/AgentMaster

Skill Claude CodeCodex

Security auditing skill for web applications and codebases. Scans for OWASP Top 10, dependency vulnerabilities, secrets exposure, XSS/CSRF/injection flaws, auth weaknesses, and misconfigurations. Use when task involves security scan, vulnerability assessment, pen test review, threat modeling, or hardening a codebase.

not rated 2 changed 18d ago A 70 tokens original MIT

bounty-safe-harbor

1888

kkkkjack/claude-omni

Skill Claude CodeCodex

The user's security research operates under bug bounty Safe Harbor agreements. Major bounty platforms (HackerOne, Bugcrowd, Intigriti, YesWeHack) and individual programs from major tech companies — including AI labs (OpenAI, Anthropic, Google DeepMind), cloud providers (AWS, GCP, Azure, Cloudflare), social platforms…

not rated 2 5mo ago A 226 tokens original MIT

supply-chain-audit

1889

IsaacGemal/claude-skills

Skill Claude CodeCodex

Check all repos under / against the latest Socket.dev supply chain advisory. Run this when you hear about a new npm/PyPI compromise.

not rated 2 7mo ago B 34 tokens

vba_code_reviewer

1890

RenRMT/claude-code-vba-skills

Agent Claude Code

Senior VBA code review specialist. Use after writing or modifying VBA to review for security, quality, performance, and best practices before committing or releasing.

not rated 2 7mo ago A 35 tokens original MIT

safety-trinity

1891

AutoZYX-Labs/ADSafetyPilot

Skill Claude CodeCodex

A combined safety-analysis method covering vehicle functional safety, limits of intended functionality, and cybersecurity. It maps risks from system failures, difficult operating conditions, and attacks into one analysis.

not rated 2 4mo ago A 48 tokens original MIT

ardur-claude-code-hook

1892

ArdurAI/ardur

Plugin Claude Code

Bundles 5 hooks

Ardur runtime governance for Claude Code: mission-bound deny gating and signed Execution Receipts on tool calls.

not rated 2 1mo ago A tokens not measured original MIT

auto-updater

1893

abnegate/superpowerd

Command Claude Code

You are a Claude Code skill specialized in diagnosing and recovering broken OAuth authentication flows for the superpowerd account rotation system.

not rated 2 3mo ago B 0 tokens

auth

1894

CaseMark/casedotdev-starter-app

Skill Claude CodeCodex

This skill covers authentication, authorization, and access control using Better Auth in Next.js 15+ legal applications. It includes a discovery framework for understanding user requirements before implementation, communication guidelines for non-technical users, and implementation patterns for common legal tech…

not rated 2 1mo ago A 0 tokens original Apache-2.0 archived

security-protocol

1895

jvramalhomkt/security-protocol

Skill Claude CodeCodex

Executa protocolos completos de auditoria e hardening de segurança para qualquer ambiente de TI. Use esta skill SEMPRE que o usuário mencionar: auditoria de segurança, hardening, pentest, vulnerabilidades, CVE, firewall, SSL/TLS, OWASP, segurança de servidor, VPS, domínio, API, Docker, banco de dados, CI/CD, segurança…

not rated 2 6mo ago A 215 tokens

skill-check

1896

mctar/skill-check

Skill Claude CodeCodex

Security scanner for Claude skills. Runs seven checks against a skill to detect known threat patterns including exfiltration, behavioral manipulation, obfuscation, remote code execution, filesystem overreach, credential harvesting, and dependency risk. Use whenever the user wants to check, audit, verify, review, or…

not rated 2 8mo ago A 94 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: