Security

24,943 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

zitadel-api

1945

Aidas-dev/k8s-agent-skills

Skill Claude CodeCodex

ZITADEL identity management platform (v4 GA, v2 API). Covers resource-based API for managing organizations, projects, applications (OIDC/SAML/API), roles, users, and OIDC settings via Connect RPC (HTTP/1.1 JSON) and REST endpoints. PAT or JWT assertion auth.

not rated 2 1mo ago A 66 tokens original MIT

BiRRe-risk_manager

1946

boecht/birre

MCP server Claude CodeCodexCursor +2

One of 2 in mcp.json

Model Context Protocol server for BitSight security ratings. Runs locally from the birre Python package.

not rated 2 3d ago A Socket: warn tokens not measured original Unlicense

cordon-install

1947

ilyautov/cordon

Skill Claude Code

Install Cordon, a deterministic layer between untrusted content and agent actions, and verify that the harness actually calls it. Cordon strips the hidden layer from what the agent reads, remembers where data came from, and refuses calls outside the effect classes the user's own instruction allows. No model call on…

not rated 2 +1 yesterday A 156 tokens original MIT

agentaegis-security

1949

astafford8488/agentaegis-mcp

Skill Claude Code

Run real security scans through the AgentAegis MCP server — vet an endpoint or third-party agent code before trusting it, look up CVEs and IP/domain reputation, scan a repo for vulnerabilities, secrets and vulnerable dependencies, audit DNS/TLS/email posture, or assess compliance readiness. Use when the user asks…

not rated 1 1mo ago A 108 tokens original MIT

phylax-skill-audit

1952

usephylax/phylax-skill-audit

Skill Claude CodeCodex

Pre-install security audit for agent skills on Base. Scans SKILL.md + manifest for prompt-injection and secret-exfiltration, audits referenced contracts (unlimited approvals, upgradeable owner, honeypot), and validates x402 endpoints. Returns a deterministic risk verdict (ALLOW/WARN/DENY) with evidence. Read-only…

not rated 1 +1 2mo ago A 82 tokens original MIT

areclaw

1953

TheQmaks/areclaw-plugin

Plugin Claude Code

Bundles 1 skill, 6 commands · 177 tokens together

Android reverse engineering and security analysis — decompile APKs, intercept traffic, run Frida scripts, scan for secrets, extract APIs, and generate OWASP-aligned security reports.

not rated 1 6mo ago A tokens not measured original MIT

frida_mcp

1955

276793422/frida_mcp

MCP server Claude CodeCodexCursor +2

Model Context Protocol implementation for Frida. Runs locally from the frida_mcp Python package.

not rated 1 1mo ago A tokens not measured

hshen-ai/zscaler-airt-manager-mcp

MCP server Claude CodeCodexCursor +2

MCP server "zscaler-airt-manager-mcp" as configured in hshen-ai/zscaler-airt-manager-mcp. Runs locally from the zscaler-airt-manager-mcp Python package.

not rated 1 1mo ago A tokens not measured

oci-secrets-mcp

1958

kevinwengh/oci-secrets-mcp

MCP server Claude CodeCodexCursor +2

MCP server "oci-secrets-mcp" as configured in kevinwengh/oci-secrets-mcp. Runs locally from the oci-secrets-mcp Python package.

not rated 1 1mo ago A tokens not measured original MIT

ddivins/hpe-security-director-cloud-mcp

MCP server Claude CodeCodexCursor +2

MCP server "hpe-security-director-cloud-mcp" as configured in ddivins/hpe-security-director-cloud-mcp. Runs locally from the hpe-security-director-cloud-mcp npm package.

not rated 1 1mo ago A tokens not measured original MIT

palisadescan/palisade

Skill Claude CodeCodex

Onchain security scanner on Robinhood Chain — scan token approvals, detect honeypots, analyze contracts for rugpull indicators, check liquidity locks, and score contract safety. Use when a user asks an agent to evaluate, scan, or check a token or wallet before trading, swapping, signing an approval, or investing. 18…

not rated 1 1mo ago A 97 tokens original MIT

tribunal

1961

udit-rawat/tribunal

MCP server Claude CodeCodexCursor +2

Quality gates for AI-generated code -- TDD enforcement, secret scanning, and audit trails for coding agents. Runs locally from the tribunal Python package.

not rated 1 1mo ago A tokens not measured

agentdrop-mcp-server

1962

qFlav/agentdrop-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server for AgentDrop - encrypted file transfer between AI agents across any host or network. Runs locally from the agentdrop-mcp-server npm package.

not rated 1 4mo ago A tokens not measured original MIT

fossa-protect

1963

darthzen/fossa-mcp

Skill Claude CodeCodex

Turn a project's FOSSA findings into NeuVector runtime controls and push them to the cluster. Two tracks — vulnerability findings become WAF sensors (regex-matched request inspection); license-conflict findings become a workload quarantine (network isolation / deploy hold). Use when asked to mitigate, compensate for…

not rated 1 1mo ago A 151 tokens original Apache-2.0

resemble-mcp

1964

resemble-ai/resemble-mcp

MCP server Claude CodeCodexCursor +2

Resemble AI: deepfake detection, media intelligence, and watermarking actions, plus docs tools. Remote server at mcp.resemble.ai.

not rated 1 6d ago A tokens not measured original MIT

guardian-check

1965

rudimentall1/agentic-wallet-guardian-v3

Skill Claude CodeCodex

Use before executing any MetaMask Agent Wallet (mm CLI) command that moves funds or changes on-chain state — mm send, mm swap, mm bridge, mm perps open/modify/close, mm predict trade, mm earn supply/withdraw, mm aave borrow/repay, mm pay. Sends the proposed action to a self-hosted Agentic Wallet Guardian instance for…

not rated 1 14d ago A 121 tokens original MIT

mcp-server

1966

agenttrust/mcp-server

MCP server Claude CodeCodexCursor +2

Identity, trust, and A2A orchestration for autonomous AI agents. Official A2A partner. Runs locally from the @agenttrust/mcp-server npm package. Needs 1 environment variable to run.

not rated 1 5mo ago A tokens not measured original MIT

qae-safety-mcp

1967

tb8412/qae-claude-mcp-example

MCP server Claude CodeCodexCursor +2

Deterministic safety certification kernel for AI agents, finance, and beyond. Runs locally from the qae-safety Python package.

not rated 1 5mo ago A tokens not measured original Apache-2.0

bt-ops-mcp-server

1968

tangchangzhe/bt-ops-mcp-server

MCP server Claude CodeCodexCursor +2

Secure MCP server for BT Panel operations with scoped permissions and audited writes. Runs locally from the bt-ops-mcp-server npm package.

not rated 1 8d ago A tokens not measured original Apache-2.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: