26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Agent Claude Code
Read-only adversarial reviewer. Pre-PR it returns a verdict for the arbiter; on an open PR it posts true line-anchored INLINE comments via the git-host API, written in the PR's own language. Scores risk and checks cross-service compatibility. Never edits code.
Plugin Claude Code
Bundles 1 skill, 3 hooks · 76 tokens together
GoPlus AgentGuard — AI agent security guard. Blocks dangerous commands, prevents data leaks, protects secrets. 20 detection rules, runtime action evaluation, trust registry.
Skill Claude CodeCodex
Secure dependency upgrades with supply chain protection, cooldowns, and staged rollout. Use when upgrading deps, configuring security policies, or preventing supply chain attacks.
leancoderkavy/premiere-pro-mcp
Cursor rule Cursor
ES3 ExtendScript generation and string escaping for CEP/AE host scripts.
jumodada/Drissionpage-MCP-Server
Skill Claude CodeCodex
Use when testing an authorized Cloudflare Turnstile integration or operating an authorized production challenge with drissionpage-mcp. Covers official visible, invisible, pass, fail, and forced-interactive test keys; fresh iframe geometry; bounded coordinate interaction; refresh recovery; parent-page postconditions…
Skill Claude CodeCodex
Runtime security for AI coding agents. Use when about to install a package, paste a secret, run a destructive command, reach an unfamiliar host, govern MCP servers, pick a governance mode, set up a new workspace, respond to a changed-instruction-file notice, read a pasted Prismor session link, or recover from a…
Skill Claude CodeCodex
Prevent Kubernetes hallucinations by diagnosing and fixing failure modes: insecure workload defaults, resource starvation, network exposure, privilege sprawl, fragile rollouts, and API drift. Use when generating, reviewing, refactoring, or migrating manifests, Helm charts, Kustomize overlays, cluster policies, and…
Skill Codex
Analyze supplied deployed EVM runtime bytecode with EVMole or guide a separate application in integrating a published EVMole Rust, Go, Python, or JavaScript binding. Use for unverified-contract inspection, ABI reconstruction from runtime code, selector discovery, storage-access analysis, EVM control-flow inspection…
Agent Claude Code
Distills a past security report into a reusable agentgg agent that catches the same anti-pattern if it recurs in this codebase.
Skill Claude CodeCodex
Read ghtkn's documentation with ghtkn docs list and ghtkn docs show before answering. ghtkn is a CLI that creates short-lived (8h) GitHub user access tokens from GitHub Apps. Use for any question about ghtkn, GHTKN environment variables, ghtkn get / exec / auth / agent / revoke, the ghtkn git credential helper, or…
Skill Claude CodeCodex
Install, observe, tune, and enforce Sponsio: a runtime contract layer for LLM agents that blocks unsafe tool calls and scores output quality against declared rules. Use when the user wants to set up / add / install Sponsio, add guardrails or runtime safety to an LLM agent, generate or refine a sponsio.yaml, audit tool…
Skill Claude Code
Use this checklist when performing security audits. Check each category systematically against the codebase.
Skill Claude CodeCodex
A Chinese-language knowledge base for practical security testing, including penetration testing, vulnerability research, security audits, CTFs, and AI or LLM security. It combines recorded vulnerability cases with security methods and risk frameworks.
Plugin Claude Code
Bundles 7 skills · 587 tokens together
Enterprise grade AI-native application security scanning, validation, and remediation.
MCP server Claude CodeCodexCursor +2
Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. Remote server at emisar.dev.
Plugin Claude Code
Bundles 1 skill · 109 tokens together
Security review and secure-coding skill covering OWASP Top 10:2025, ASVS 5.0, the OWASP LLM Top 10 (2026), and the OWASP Agentic Top 10 (2026).
Plugin Claude Code
Bundles 1 skill · 46 tokens together
Security code review skill based on Project CodeGuard's comprehensive security rules. Helps AI coding agents write secure code and prevent common vulnerabilities.
Skill Claude CodeCodex
Grade a periodic outbound flow as c2, suspicious, or benign-periodic. Read this when rawdata shows a repeating connection and you must separate a beacon from NTP, an update check, a monitoring agent, or telemetry.
sssmmmwww/wxmini-security-audit
Skill Claude CodeCodex
A complete static security-audit workflow for WeChat Mini Programs, using several specialised agents and preliminary scripts.
Skill Claude CodeCodex
A multi-file workflow for auditing PHP web applications for security issues. The description does not specify enough detail about its exact checks beyond coordinating other PHP audit tools.
DragonJAR/Android-Pentesting-Skill
Skill Claude Code
Comprehensive Android APK security audit with static analysis, dynamic instrumentation, source-to-sink tracing, IPC/component abuse analysis, and CVSS 4.0 reporting. Covers decompilation, manifest analysis, deep links and intent injection, secrets detection, crypto analysis, Frida/Objection integration, and APK…
hypnguyen1209/offensive-claude
Plugin Claude Code
Bundles 38 skills, 18 commands, 8 agents, 2 hooks · 2,629 tokens together
Spec-driven offensive-security framework for Claude Code: 32 kill-chain skills, executable safety controls (scope/finding/OPSEC discipline), pattern-learning memory, and a bounded engagement engine — with a SessionStart dispatcher that enforces skill-invocation discipline.
Skill Claude CodeCodex
Diagnose and resolve Elasticsearch security errors: 401/403 failures, TLS problems, expired API keys, role mapping mismatches, and Kibana login issues. Use when the user reports a security error.
Agent Claude CodeOpenCode
Security-focused reviewer — audits code for vulnerabilities (OWASP Top 10, secret leaks, auth/authz issues) and reports findings without modifying files.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: