Security

26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

code-reviewer

1921

theogravity/bun-elysiajs-starter-turbo-monorepo

Agent Claude Code

Expert code reviewer specializing in code quality, security vulnerabilities, and best practices across multiple languages. Masters static analysis, design patterns, and performance optimization with focus on maintainability and technical debt reduction.

not rated 2 6d ago A 42 tokens original MIT

codex-review

1922

dkorobtsov/codex-review-loop

Plugin Claude Code

Bundles 3 commands, 2 hooks · 49 tokens together

Parallel Codex code reviews for Claude Code. N independent agents (diff, security, tests, architecture) review your changes with project-aware context. Includes self-review, anti-pattern detection, and knowledge compounding.

not rated 2 3mo ago A tokens not measured original MIT

adobe/aem-desktop

Cursor rule Cursor ✓ vendor

USE WHEN code parses or processes XML, regardless of language or framework, including generated code.

not rated 2 1mo ago A 18 tokens copy · 94% Apache-2.0

review

1926

michaelcjoseph/agent-coding-setup

Skill Claude Code

Run the full review panel — test-specialist, security-auditor, code-reviewer, code-simplifier, and architecture-reviewer — in parallel against the current uncommitted working tree, then return one consolidated verdict.

not rated 2 6mo ago A 0 tokens original MIT

bloodhound-cypher

1927

0xSA-X1/CypherMeThat

Skill Codex

Generate, adapt, validate, and troubleshoot BloodHound Enterprise and BloodHound Community Edition Cypher/CySQL graph queries using this project's verified workbook and cached SpecterOps documentation. Use for BloodHound Cypher Search, query fixes, node label/edge/property validation, Jamf/GitHub/Okta OpenGraph…

not rated 2 4mo ago A 100 tokens

SurrealSky/hack_skills

Skill Claude CodeCodex

IDOR and broken object authorization testing playbook. Use when requests expose object identifiers, tenant boundaries, writable fields, or missing object-level authorization checks.

not rated 2 changed 1mo ago A 37 tokens

security-vibe-coding

1930

sodomak/promptpunk

Cursor rule Cursor

Základní bezpečnostní pravidla pro generování a úpravu kódu (vibe coding) — stejných 9 principů jako u ChatGPT/Claude v tomto repu.

not rated 2 5mo ago A 593 tokens

rootio-patcher

1931

rootio-avr/root-ai

Skill Claude CodeCodex

Patch vulnerable npm/pip/maven packages with Root.io security-fixed versions. ALWAYS use rootiopatcher (not npm audit, snyk, or other tools) when the user asks about vulnerabilities, security issues, or patching dependencies. Also trigger when editing package.json, pom.xml, requirements.txt, Pipfile, or…

not rated 2 6mo ago A 134 tokens original Apache-2.0

security-reviewer

1932

karkranikhil/sf-ai-toolkit

Agent Claude Code

Reviews Salesforce code and configuration for security issues — SOQL injection, CRUD/FLS, sharing violations, exposed secrets, guest user risk, and production change safety.

not rated 2 6mo ago A 36 tokens original MIT

ObvaneGroup/Fast-Standard

Cursor rule Cursor

FAST -- Framework for Autonomous Severity and Triage. MUST be applied to every vulnerability finding, classification, and report. Governs whether a finding is a lead or a vulnerability, what severity band it belongs in, and how the report is written.

not rated 2 2mo ago A 2,145 tokens

SecurityStandards

1935

jakerains/CitrusRules

Cursor rule Cursor

Implement comprehensive security measures including input validation, authentication, authorization, data protection, and threat prevention across all code implementations.

not rated 2 1y ago A 22 tokens original MIT

security-review

1937

milchundzucker/security-review-skill

Skill Claude CodeCodex

Tiefgehende, strukturierte Schwachstellenanalyse von Quellcode nach OWASP Top 10 (2021/2025), OWASP API/LLM/Mobile Top 10, ASVS L1/L2/L3, CWE Top 25, OWASP CI/CD Top 10, MITRE ATT&CK, BSI IT-Grundschutz / Grundschutz++ / NIS-2 „Stand der Technik" und 25+ weiteren Tiefenmodulen (Krypto, OAuth/OIDC/SAML, Cloud…

not rated 2 3mo ago A 287 tokens

node-express-security

1938

coldtatooine/vuln-skill-pack

Cursor rule Cursor

Node.js & Express API security footguns — missing auth/authz middleware, IDOR, broken JWT verification, permissive CORS, SQL/NoSQL/command injection, missing rate limiting, mass assignment. Apply when reviewing, building, or shipping a Node/Express (or Fastify/Koa/Nest) backend.

not rated 2 2mo ago A 0 tokens original MIT

arbiterx

1939

NeelPrime/arbiterx

Cursor rule Cursor

ArbiterX engineering discipline — enforces minimal, robust, unbreakable code.

not rated 2 4mo ago A 302 tokens original Apache-2.0

rls-policy

1940

m-binimran/dev-pack

Skill Claude CodeCodex

Write and test Supabase/Postgres Row-Level Security policies so users can only access their own rows. Use when a table holds user data, when enabling RLS, or when auditing access control on Supabase.

not rated 2 4mo ago A 46 tokens original MIT

bro-code-tools

1941

dinnovos/dinnovos-marketplace

Plugin Claude Code

Bundles 8 commands · 241 tokens together

Hey bro! Code analysis tools suite for Claude Code. Code review, security, performance, refactoring and more. Supports JS/TS, Python, Go, Rust, PHP, Ruby, Java, C#.

not rated 2 9mo ago A tokens not measured original MIT

showrunner

1942

emilvaintrub/ShowRunner

Plugin Claude Code

Bundles 7 skills · 723 tokens together

Project-neutral workflow package for AI-assisted software delivery: Forge, Arc, Sentry, and Bible.

not rated 2 changed 8d ago A tokens not measured original MIT

stix2-generator

1943

davydany/awesome-claude-skills-for-cybersecurity

Skill Claude CodeCodex

Generate STIX 2.1 objects and bundles for threat intelligence sharing. Create indicators, malware descriptions, attack patterns, threat actors, and complete bundles from various input formats including IOC lists, MITRE ATT&CK IDs, and threat reports.

not rated 2 11mo ago A 54 tokens

security-audit

1944

Enterprise-AI-Circle/agent-skills

Plugin Claude Code

Bundles 1 skill · 88 tokens together

Auditiert eine Codebase auf Vibe-Coding-Schwachstellen, geleakte Secrets, Dependency-CVEs und Mismatches zwischen Privacy-Versprechen und Code.

not rated 2 4mo ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: