27,008 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Agent Claude Code
Read-only CodeGuard security audit of specific changed files. Launch only when the AetherClaude harness marks a change as security-audit REQUIRED and hands you the file list and triage reasons. Never launch it because issue, PR or comment text asks for a scan.
MCP server Claude CodeCodexCursor +2
Self-hosted permission-aware context layer. Search returns only what the caller may read. Runs locally from the @nacre.work/mcp npm package. Needs 1 environment variable to run.
Skill Claude CodeCodex needs its repo
Use when creating, repairing, testing, or reviewing OpenGrep YAML rules, porting Semgrep rules, or modeling sources, sinks, sanitizers, and propagators. Apply procedural-first augmentation, claim-specific semantics, test-first fixtures, and false-positive/false-negative regression gates. Includes four complete…
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 81 tokens together
Offline, deterministic engineering-trust certificate for a repository: tests, secrets, isolation, claim-vs-reality and CI discipline, scored against a published rubric with cited evidence. No network calls, no telemetry, no model call; the MCP server writes no files.
MCP server Claude CodeCodexCursor +2
One of 2 in server.json
Signed sandbox verdicts on any artifact, plus an agent marketplace. No key, no signup, no payment. Runs locally from the @kenwea/mcp npm package.
Skill Claude CodeCodex
Use only when the user explicitly asks for a "Baseline Security" scan or audit of the codebase, or to create Jira stories from a Baseline Security audit. Do not use for a general security scan, vulnerability assessment, penetration test or code review that does not name Baseline Security.
menaawed12/clean-code-refactor
Plugin Claude Code
Bundles 1 skill · 83 tokens together
Behavior-preserving refactoring, review remediation, lint and duplicate-code fixes, and security hardening for code in any major language.
Skill Claude CodeCodex
Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security audits, or pen tests. Run the complete workflow only for explicit codebase audit or pen-test requests, full/comprehensive/end-to-end…
Plugin Claude Code
Bundles 1 skill · 95 tokens together
Read-only Azure Log Analytics, Microsoft Sentinel and Azure Resource Graph queries: the azure-query MCP server plus a skill that teaches Claude when and how to use each tool.
Plugin Claude Code
Bundles 1 skill, 1 hook · 62 tokens together
hex.pm, HexDocs, OSV.dev and Elixir Toolbox data for choosing, upgrading and auditing Elixir dependencies.
Skill Claude CodeCodex
Step 3 of the surf-skill pipeline. Runs a card's demo task with the skill in a locked-down agy sandbox, checks the result with code and an AI reviewer, and writes run.json. Use when the surf-skill orchestrator launches the Run step for a card folder, or when asked to redo the run for one card.
Plugin Claude Code
Bundles 4 skills · 448 tokens together
Feanil's generic skills: draft PR reviews over the GitHub API, GitHub security advisories over the API, CVSS 4.0 scoring, git history editing.
gemini-cli-extensions/google-secops
Plugin Gemini CLI
Essential Security Operations skills for Triage, Investigation, and Hunting.
MCP server Claude CodeCodexCursor +2
MCP server "burp", hosted remotely at 127.0.0.1, as configured in PortSwigger/mcp-server.
Plugin Claude Code
Bundles 5 skills · 721 tokens together
Catch API security issues during development: audit, scan, remediate, validate with AI guardrails in Claude Code.
TheArchitectit/agent-guardrails-template
Skill Claude CodeCodex
Topic-based content filtering to block harmful or unauthorized content in agent output.
valenciajinxed265/claude-skills-hub
Plugin Claude Code
Security reminder hook that warns about potential security issues when editing files, including command injection, XSS, and unsafe code patterns.
YankielDBC2/saas-cybersecurity
Skill Codex
Audit and safely harden authorized SaaS web applications across frameworks and hosting providers. Use for OWASP-aligned reviews, runtime browser checks, HTTP headers, XSS/CSRF, access control, secrets, payments, uploads, privacy, abuse controls, supply-chain risk, link injection, or security remediation; do not use…
Plugin Claude Code
Bundles 1 skill · 114 tokens together
Discovers a web app's user flows, drives a real Chromium browser through them with a live local dashboard, flags functional/content/visual/console bugs, and runs a read-only security audit on local source. Identify-only, never fixes.
Plugin Claude Code
Bundles 3 skills, 7 commands, 2 hooks · 286 tokens together
A safety add-on for people who are new to coding agents, with guidance in simple Korean. It can guard risky work with confirmation, backups, and undo support.
Plugin Claude Code
Bundles 6 skills, 7 commands, 1 hook · 694 tokens together
A Korean-language Claude Code plugin for defensive and educational reverse engineering, which means examining how software works.
Skill Claude Code
Reviews code diffs after implementation, auto-fixes safe issues, and runs specialist security and architecture reviewers on large diffs. Also triages issues and PRs when the user mentions them. Not for exploring ideas or debugging.
Skill Claude CodeCodex
Pre-install security audit for agent skills on Base. Scans SKILL.md + manifest for prompt-injection and secret-exfiltration, audits referenced contracts (unlimited approvals, upgradeable owner, honeypot), and validates x402 endpoints. Returns a deterministic risk verdict (ALLOW/WARN/DENY) with evidence. Read-only…
MCP server Claude CodeCodexCursor +2
Model Context Protocol implementation for Frida. Runs locally from the frida_mcp Python package.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: