26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Codex
Generate and interpret security-research diffs between Windows versions or patch levels using this repo's WinDiff CLI and databases. Use when comparing Windows builds or binaries such as ntoskrnl.exe, ntdll.dll, win32k.sys, ci.dll, or cng.sys to find changed syscalls, symbols, types, mitigation flags, callbacks…
Skill Claude CodeCodex
Reverse engineering assistant powered by Ghidra. Use for binary analysis, decompilation, vulnerability research, auditing compiled code, renaming symbols, annotating disassembly, cross-references, or any RE task - even without explicit mention of Ghidra.
Eyadkelleh/awesome-skills-security
Skill Claude CodeCodex
Comprehensive LLM security testing prompts for bias detection, data leakage, alignment testing, and adversarial prompt resistance.
Skill Claude CodeCodex
This is an independent systems-security research project that documents a literature and architecture feasibility study for a vendor-agnostic Linux compatibility layer capable of hosting kernel anti-c.
Skill Claude Code
A Chinese-language business-security knowledge base covering risks, defenses, attack tools, threat actors, terms, business areas, and documented cases.
design-sparx/mantine-analytics-dashboard
Skill Claude Code
Security review checklist for commits and PRs. Use before merging security-sensitive changes.
matank001/cursor-security-rules
Cursor rule Cursor needs its repo
Path traversal attacks occur when user-controlled input is used to construct file paths, allowing attackers to access files outside the intended directory. This can lead to unauthorized file access, data leakage, or system compromise.
Skill Claude CodeCodex
Expert-level parsing and remediation of 'humble' HTTP security header reports. Use this skill whenever the user provides a report generated by 'humble' (https://github.com/rfc-st/humble), mentions analyzing HTTP response headers, security header grades (A-E), or asks for remediation of findings such as missing…
Skill Claude CodeCodex
Install and run DepsGuard, a zero-dependency CLI that scans and fixes package manager configs (npm, pnpm, yarn, bun, uv) for supply chain security best practices.
Skill Claude CodeCodex
Analyzes authentication and authorization events for failed-login clustering, privilege-escalation chains, credential-stuffing patterns, and MFA-bypass indicators.
Plugin Claude Code
Bundles 8 skills · 1,025 tokens together
Security vulnerability assessment (EN/KO). CII infrastructure (560+), AI Security, Robot Security (IEC 62443), Space Security (satellite/GSaaS/supply chain, CMMC/NIS2), Secure Coding (JS/Python/Pseudo Code, 46 CWE). Use /kesekit-start, /kesekit-start-ko, /kesekit-check, /kesekit-fix, /kesekit-guide etc.
Skill Claude CodeCodex
A skill for managing ScopeSentry through MCP, including security projects, scanning tasks, scan templates, assets, and scanning nodes. ScopeSentry is a platform for organising and running security scans.
Skill Claude CodeCodex
An AI skill for black-box penetration testing of web applications, meaning security testing without relying on the application's source code. It uses multiple agents across steps such as identifying the application, scanning entry points and APIs, crawling it, testing for vulnerabilities, and reviewing evidence.
Skill Claude CodeCodex
Search the Tor dark web, fetch .onion hidden service pages, rotate Tor identity, and run structured OSINT investigations. Use when user asks to search dark web, investigate .onion sites, find if data appeared on dark web, conduct Tor-based OSINT, look up dark web leaks, fetch any .onion URL, check for leaked…
oracle/netsuite-suitecloud-sdk
Skill Claude CodeCodex ✓ vendor
Platform-agnostic OWASP secure coding practices with JavaScript/Node.js patterns and NetSuite SuiteScript examples. Covers Open Worldwide Application Security Project (OWASP) Top 10 (2021), output encoding, injection prevention, CSP headers, file security, API hardening, AI agent security, DRY security patterns, and…
Cursor rule Cursor
Auth architecture, middleware chain, and auth-specific coding standards.
Plugin Claude Code
Bundles 3 skills, 1 hook · 189 tokens together
Produce triager-grade YesWeHack reports instead of AI slop: always-on drafting discipline plus three on-demand skills (write, triage, gotchas).
MCP server Claude CodeCodexCursor +2
MCP server "chainlink-safe-fetch" as configured in dollspace-gay/chainlink. Runs .claude/mcp/safe-fetch-server.py with python.
Plugin Claude Code
Bundles 4 skills · 207 tokens together
Security code review skill based on Project CodeGuard's comprehensive security rules. Helps AI coding agents write secure code and prevent common vulnerabilities.
superagents-lab/xcode27-skills
Skill Claude CodeCodex
Audit and enable security-oriented Xcode build settings. Progressively enables compiler warnings, static analyzer checkers, and Enhanced Security features. Use when: user wants to secure their Xcode project, audit security settings, enable hardening, review security posture of build configuration, set up…
Skill Claude CodeCodex needs its repo
Multi-dimensional LLM council review of an open PR (default) or a local feature branch (§ 8 branch mode, invoked via /gflow:branch-review). Five baseline dimensions (correctness, quality, security, tests, memory-hygiene) plus adaptive dimensions per surface (transports / data / CLI / docs / auth / BDD / scripts /…
Skill Claude CodeCodex
Cross-site scripting (XSS) vulnerability detection and exploitation. Supports reflected XSS, stored XSS, DOM-based XSS, and blind XSS testing. Use this skill when user mentions XSS, cross-site scripting, script injection, or needs to test JavaScript injection in parameters, forms, headers, or DOM sources.
Skill Claude CodeCodex
Threat model, security audit, find vulnerabilities, check security of my app, risk assessment, penetration test prep, analyze attack surface, what could an attacker exploit. Use this skill whenever a user wants holistic security analysis of a codebase, application, or project. MUST be invoked instead of analyzing…
Skill Claude CodeCodex
Security hardening toolkit for OpenClaw. Run audits, apply fixes, scan skills, monitor costs and memory integrity.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: