29,964 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
secure-agentic-framework/saf-mcp
Skill Claude CodeCodex
Research, author, rewrite, validate, and prepare exactly one SAF-MCP technique and its evidence packet. Use for new or existing SAF technique work that requires source-or-omit traceability, an exclusion ledger, current breach and vulnerability research, tested detection, framework reconciliation, publication-rights…
Plugin Claude Code
Bundles 8 skills · 1,025 tokens together
Security vulnerability assessment (EN/KO). CII infrastructure (560+), AI Security, Robot Security (IEC 62443), Space Security (satellite/GSaaS/supply chain, CMMC/NIS2), Secure Coding (JS/Python/Pseudo Code, 46 CWE). Use /kesekit-start, /kesekit-start-ko, /kesekit-check, /kesekit-fix, /kesekit-guide etc.
Instructions file CodexOpenCode
AGENTS.md instructions for AndrewDryga/emisar, covering emisar — how we work (canonical agent manual), ⟢ boot — read this when you start, or lose context, the creed — how we build (every project), the repository command surface and the .agent/ working state (per project).
hypnguyen1209/offensive-claude
Instructions file
Instructions for hypnguyen1209/offensive-claude, covering security research & offensive operations config, behavior, skills available, agents available and engagement workflow — cyber kill chain.
DragonJAR/Android-Pentesting-Skill
Skill Claude CodeCodex
Comprehensive Android APK security audit with static analysis, dynamic instrumentation, source-to-sink tracing, IPC/component abuse analysis, and CVSS 4.0 reporting. Covers decompilation, manifest analysis, deep links and intent injection, secrets detection, crypto analysis, Frida/Objection integration, and APK…
Skill Claude CodeCodex
Read ghtkn's documentation with ghtkn docs list and ghtkn docs show before answering. ghtkn is a CLI that creates short-lived (8h) GitHub user access tokens from GitHub Apps. Use for any question about ghtkn, GHTKN environment variables, ghtkn get / exec / auth / agent / revoke, the ghtkn git credential helper, or…
YoshiiRyo1/document-templates-for-aws
Skill Claude CodeCodex
This skill should be used when the user asks to "review architecture", "Well-Architected review", "check bestpractices", "security assessment",or "cost optimization analysis".
Skill Claude CodeCodex
Use when reviewing code for security vulnerabilities, implementing authentication/authorization, handling user input, or discussing web application security. Covers OWASP Top 10:2025, ASVS 5.0, LLM Top 10 (2025), and Agentic AI security (2026).
Skill Claude CodeCodex
Security hardening toolkit for OpenClaw. Run audits, apply fixes, scan skills, monitor costs and memory integrity.
Instructions file CodexOpenCode
Instructions for zksecurity/zkbugs, covering repository guidelines, project structure & module organization, build, test, and development commands, coding style & naming conventions and testing guidelines.
Skill Claude CodeCodex
Threat model, security audit, find vulnerabilities, check security of my app, risk assessment, penetration test prep, analyze attack surface, what could an attacker exploit. Use this skill whenever a user wants holistic security analysis of a codebase, application, or project. MUST be invoked instead of analyzing…
Instructions file
Instructions for m4xx101/cryptex-oss, covering contributor + ai-assistant guide, what this repo is, commands, primary (sveltekit app) and python cli (cryptex-cli).
Skill Claude CodeCodex
Identify security vulnerabilities and suggest secure coding practices.
oracle/netsuite-suitecloud-sdk
Skill Claude CodeCodex ✓ vendor
Comprehensive NetSuite SDF best practices based on the SAFE Guide (12 principles + appendices). Generates Object XML for all 14 script types, enforces governance limits, security patterns, and defensive coding. Includes N/cache, N/query, concurrency limits, OAuth 2.0 guidance, legacy TBA guardrails, CustomTool runtime…
Skill Claude CodeCodex
A security checklist for code that handles login permissions, user input, uploaded files, passwords, API keys, payments, or other sensitive data.
Instructions file
Claude Code instructions for PrismorSec/prismor, covering prismor security — claude.md, prismor runtime protection, cloaking (secret prevention) and working in this repo.
Instructions file
Claude Code instructions for smart-mcp-proxy/mcpproxy-go, covering claude.md, autonomous operation constraints, must-do (defaults & assumptions), must-nots and escalation triggers (stop conditions).
Instructions file CodexOpenCode
AGENTS.md instructions for adshao/flounder, covering agents.md, project defaults, thin-layer agentic mode, map → dig deep coverage and operating the deep audit.
Plugin Claude Code
Bundles 4 skills · 207 tokens together
Security code review skill based on Project CodeGuard's comprehensive security rules. Helps AI coding agents write secure code and prevent common vulnerabilities.
Plugin Claude Code
Bundles 1 skill · 251 tokens together
Agent skill for the KSafe Kotlin Multiplatform encrypted persistence library — setup, usage patterns, anti-patterns, and debugging.
Skill Claude CodeCodex
Reverse engineering assistant powered by Ghidra. Use for binary analysis, decompilation, vulnerability research, auditing compiled code, renaming symbols, annotating disassembly, cross-references, or any RE task - even without explicit mention of Ghidra.
Instructions file
Instructions for yee-yore/DorkAgent, covering claude.md, project overview, commands, running the tool and interactive mode (menu-driven interface).
Instructions file
Claude Code instructions for badchars/darknet-mcp-server, covering darknet-mcp — dark web intelligence mcp server, architecture, key rules, providers (16) and commands.
Skill Claude CodeCodex
Prevent Terraform/OpenTofu hallucinations by diagnosing and fixing failure modes: identity churn, secret exposure, blast-radius mistakes, CI drift, and compliance gate gaps. Use when generating, reviewing, refactoring, or migrating IaC and when building delivery/testing pipelines.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: