26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
jared-henry/claude-marketplace
Plugin Claude Code
Bundles 1 skill, 2 hooks · 44 tokens together
Security skills for secrets scanning, OPSEC review, threat modeling, YubiKey setup, supply chain audit, repo hygiene, dotfiles doctor, and zero-trust skill encryption.
Skill Claude CodeCodex
Configure CORS correctly and safely — allowlist real origins, handle preflight, scope credentials and headers narrowly, and never reflect arbitrary origins.
yaniv-naor/salesforce-claude-skills
Skill Claude CodeCodex
Configure Salesforce sharing rules (Ownership-based and Criteria-based) with proper structure and validation. Use when creating sharing rules, configuring object access, granting role/group permissions. Trigger on "create sharing rule", "ownership rule", "criteria sharing", "grant access", "share records". Works…
Skill Claude CodeCodex
Audit professionnel complet d'un projet logiciel couvrant architecture, code mort, dette technique, dépendances, API, authentification, autorisation, sécurité applicative, CI/CD, performance, production et validation finale.
PHclaw/openclaw-skill-pr-reviewer
Skill Claude CodeCodex
An automated pull-request reviewer for GitHub and GitLab. A pull request is a proposed code change that others check before it is merged.
Skill Claude CodeCodex
Learn how to use the teleprompt CLI tool to run shell commands on remote servers and routers securely without exposing passwords or private keys.
Skill Claude CodeCodex
Use ctfpc9n-cli for restricted competition participation or authorized AI evaluations with separate sessions.
Skill Claude CodeCodex
A converter for CNNVD XML files, where CNNVD is China’s national database of information-security vulnerabilities. It changes newer XML files into the older format by renaming tags and normalising their structure.
Skill Codex
Use when designing, implementing, reviewing, refactoring, or maintaining software in any programming language where security is a requirement. Apply secure-by-design principles, identify vulnerabilities, and recommend industry best practices throughout the software development lifecycle.
Skill Claude CodeCodex
Deterministic simulation testing for containerized services. Write Lua scripts to inject chaos (pause, kill, resource deprivation) into Docker containers with reproducible, seeded fault injection. Use when writing chaos experiments, testing service resilience, or debugging distributed systems.
Skill Claude CodeCodex
Use when you want to reverse-engineer an active Auth0 tenant into a structured, multi-environment Terraform project for replicating that tenant into new empty tenants. Runs auth0 tf generate, then restructures the flat output into a flat modules/ directory (one foreach block per resource type with typed map…
Skill Claude CodeCodex
Perform a "red team" security and risk assessment of the codebase. Use when user says "/redteam", "red team this code", or asks for a security/vulnerability audit.
sanjaysaini1952/BugBounty-Arsenal
Skill Claude CodeCodex
Skill "reporting" from sanjaysaini1952/BugBounty-Arsenal, covering reporting & triage skill, report structure (all platforms), title format, report sections and cvss scoring guide.
Plugin Claude Code
Bundles 7 skills, 4 hooks · 149 tokens together
AI governance framework for Claude Code — self-protecting hooks, drift tracking, and workflow enforcement.
ivan-sincek/threat-modeling-agent-skills
Skill Claude CodeCodex
Systematically identify and classify technical and business risks using the risk-centric PASTA threat modeling framework. Use when the user says "run PASTA", "do PASTA threat modeling", or "identify risks".
arjunkshah12345-hash/gauntlet-loop-skill
Skill Claude CodeCodex
Apply Matt Shumer's Gauntlet Loop to ambitious software, game, product-design, writing, research, and creative tasks. Establish a concrete inspectable quality bar, let a lead agent decompose the work, use separate builder and critic agents, inspect the real artifact, and iterate until the work meets the bar or the…
Skill Codex
Perform a strict, fail-closed production-readiness review of the exact staged change before initial PR/MR submission or an explicit direct-to-default fast track. Use when asked to prepare changes for submission, inspect every staged file and hunk, discover and run mandatory build, test, security, and performance…
bigdata2211it-web/ai-vault-skills
Cursor rule Cursor
Encrypted credentials vault with cryfs (FUSE). Cross-platform setup, migration, daily open/close, auto-lock, agent discipline, backup, troubleshooting. Triggers on "encrypt my credentials", "cryfs vault", "mybd", "protect passwords folder", "fuse encryption setup", "secrets encrypted-at-rest".
hugobatista/unicode-skill-injection-poc
Skill Claude CodeCodex
Use when reviewing pull requests for security vulnerabilities and code quality issues.
Skill Claude CodeCodex
Sigil Protocol - AI agent identity, integrity attestation, and cryptographic verification. Use when generating agent identity, signing documents, attesting soul files, verifying agent integrity, or issuing interaction receipts.
Cursor rule Cursor needs its repo
Zama FHEVM Solidity development, review, and audit. Applies to .sol files that import @fhevm/solidity (or @openzeppelin/confidential-contracts); declare encrypted types (euint, ebool, eaddress, externalEuint); call FHE. operations or ACL helpers; or inherit ZamaEthereumConfig. Triggers on FHEVM audit / security review…
Skill Claude CodeCodex
Run runtz DevSecOps security scans (SCA, SAST, host packages, container images, Kubernetes) and read runtz documentation. Use when the user wants to find vulnerable dependencies or packages, scan source code for secrets/weak crypto, audit a container image or Linux host for CVEs, check Kubernetes posture, or asks how…
vbalaraman0406/agile-sdlc-template
Cursor rule Cursor
Cursor rule "security" from vbalaraman0406/agile-sdlc-template, covering security rules, forbidden patterns and mandatory patterns.
Cursor rule Cursor
AgentGuard — security review & secure-by-design for agentic AI (OWASP Agentic 2026 + LLM 2025 + CWE). Use when auditing or designing code that uses LLMs, tool-calling, memory/RAG, MCP or multi-agent.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: