27,008 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Plugin Claude Code
Bundles 14 skills, 2 commands, 1 agent, 2 hooks, 2 MCP servers · 2,659 tokens together
Agent-building practices from Anthropic's engineering blog, packaged as installable Claude Code skills, MCP servers, and safety hooks for tool-gating and prompt-injection screening. Covers the gaps no existing skill pack fills.
codepros100-dev/claude-windows-health-check
Skill Claude Code
Comprehensive Windows system health check, diagnostics, and remediation.
evgenii-studitskikh/Claude-Code-SaaS-Studio
Skill Claude Code
Produce a STRIDE-lite threat model for the SaaS app: enumerate assets, trust boundaries, and entry points, then name the top threat and mitigation for each STRIDE category, focused on multi-tenant SaaS.
Skill Claude CodeCodex
Production-grade red-team security audit skill for AI coding assistants. Audits codebases for OWASP Top 10 vulnerabilities, auth flaws, IDOR, XSS, SSRF, JWT misuse, Supabase policies, and provides drop-in secure code replacements with zero exfiltration risk.
Skill Codex
Use this skill whenever the user needs SonarCloud or SonarQube issue and hotspot triage, measures, gates, profiles, settings, tags, or safe mutations with environment-variable tokens.
Skill Codex
Integrate AuthOS into browser, React, Vue, or plain TypeScript applications using @drmhse/sso-sdk and the AuthOS React/Vue adapters. Use when adding OAuth redirects, password login, magic links, passkeys, MFA callback handling, token refresh, or frontend session state.
Space-C0wboy/Reliaquest-Greymatter-MCP-Server
MCP server Claude CodeCodexCursor +2
MCP server for the ReliaQuest GreyMatter GraphQL API. Runs locally from the greymatter-mcp Python package.
Space-C0wboy/vicarius-vrx-mcp-server
MCP server Claude CodeCodexCursor +2
Unofficial MCP server for the Vicarius vRx External Data API. Runs locally from the vrx-mcp Python package.
Plugin Claude Code
Bundles 1 skill, 1 command, 1 MCP server · 109 tokens together
Turn Claude Code into an EU AI Act governance assistant: a deterministic, cited risk classifier (Digital Omnibus timeline, NIST AI RMF / ISO 42001 / ALTAI crosswalks) with 21 report generators — risk assessment, DPIA, FRIA, Annex IV, conformity tracker, AI security, data governance, forensic readiness, governance…
Skill Claude CodeCodex
AI agent security gateway — policy enforcement, taint tracking, tool poisoning detection, DLP chain analysis, and SARIF output for CI/CD.
MCP server Claude CodeCodexCursor +2
MCP server "mcp-freeipa" as configured in fredriksknese/mcp-freeipa. Runs locally from the mcp-freeipa npm package.
Skill Claude Code
Server intelligence layer for RunCloud-managed Linux servers. Use when the user mentions Perch, /perch, RunCloud, nginx-rc, server intelligence, server diagnosis, WordPress site auditing, plugin vulnerability scanning, or any time they want to investigate, monitor, or heal a server they own.
hand-by-hand/dynamic-db-mcp-server
MCP server Claude CodeCodexCursor +2
Turn any relational database into a secure MCP server by configuration: API Key auth, table ACL, SQL AST validation, audit log and a web admin console. Runs locally from the dynamic-db-mcp-server npm package.
MCP server Claude CodeCodexCursor +2
MCP server "vulnerability-mcp-server" as configured in CedricG-dev/nvd-mcp. Runs locally from the vulnerability-mcp-server Python package.
Skill Claude CodeCodex
Use when the user wants a security/exposure check on a domain or website they own or are authorized to test — "audit my site", "what's my attack surface look like", "did anything change on my domain", etc. Drives the nirikshak MCP tools (fullsurfacescan, and the individual checks) and turns raw output into a…
J8k3/aws-payment-cryptography-mcp
MCP server Claude CodeCodexCursor +2
MCP server "aws-payment-cryptography-mcp" as configured in J8k3/aws-payment-cryptography-mcp. Launched with https://github.com/J8k3/aws-payment-cryptography-mcp/releases/download/v1.2.0/aw. Needs 1 environment variable to run.
Skill Claude CodeCodex
Secure zero-knowledge document vault for AI agents. Persistence for your secrets.
cyanheads/osv-advisory-mcp-server
Plugin Claude Code
Bundles 35 skills, 1 MCP server · 2,632 tokens together
Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.
MCP server Claude CodeCodexCursor +2
A security-focused MCP server for self-hosted n8n Community Edition. Runs locally from the n8n-mcp-community npm package. Needs 4 environment variables to run.
Plugin Claude Code
Bundles 35 skills, 1 MCP server · 2,634 tokens together
Search and audit CVEs by keyword, severity, CWE, CISA KEV status, and CPE via the NIST National Vulnerability Database. STDIO or Streamable HTTP.
cyanheads/attack-surface-mcp-server
Plugin Claude Code
Bundles 35 skills, 1 MCP server · 2,631 tokens together
Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan via MCP. STDIO or Streamable HTTP.
MCP server Claude CodeCodexCursor +2
One of 2 in claude_desktop_config.json
MCP server "tenable" as configured in tarhou/tenable-mcp-server. Runs locally from the /path/to/tenable-mcp-server Python package. Needs 2 environment variables to run.
MCP server Claude CodeCodexCursor +2
Locally pseudonymizes sensitive text before cloud LLM work and restores the tokens afterward. Runs locally from the pseudonym-mcp npm package.
Skill Claude CodeCodex
MCP server exposing pwntools functionality for binary exploitation.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: