27,008 mods in this category, of every kind an
agent can take. Each one carries what it costs per session, what the
scan found, and whether it is the original.
Interactive wizard to configure Claude Code permission rules. Sets up granular allow/ask permissions so you can work without --dangerously-skip-permissions while keeping safety nets for destructive commands. Use when user says "configure permissions", "set up permissions", "permission settings", or "stop asking me for…
★not rated 1 8mo agoA✓ AI review65 tokens
originalMIT
Operator skills for Forseti, the web UI and admin console for the Ory Kratos + Hydra identity stack: guided setup (with or without Docker), goal-driven reconfiguration (login providers, Linux/POSIX login, downstream OAuth clients), and a best-practice security audit of an existing deployment.
★not rated 1 1mo agoA
tokens not measured
originalMIT
Verifies in compiled machine code that secret zeroization survived dead-store elimination and that constant-time logic did not regain secret-dependent branches. Ships a Ghidra headless inventory script. Use when auditing a binary, shared object, or firmware image against a source-level guarantee.
★not rated 1 2mo agoA
tokens not measured
originalMIT
End-to-end agentic engineering for iPhone apps, from idea to a secure App Store release through 8 gated phases. Use when someone wants to build, plan, or ship an iPhone/iOS app — especially a non-programmer ("vibe coder") asking to create an app, pick a tech stack (SwiftUI, React Native, Flutter), choose a backend…
A Chinese-language guide for explaining the hidden roles and trust relationships in technical systems. It clarifies who owns tokens, keys, certificates, and endpoints, who checks them, and what each party proves.
Act as a senior GitHub platform architect, open-source maintainer, DevSecOps engineer, and repository governance specialist. Produce repository systems that are understandable, maintainable, secure by default, automation-friendly, and practical for real teams.
Skill "security-claude" from rahozosman/security-claude, covering security architecture & threat modeling intelligence, how this skill is organized (progressive disclosure), 1. pick a mode, 2. core method (applies to every mode) and 3. doing a focused review.
Hook-enforced ground-truth verification for Claude Code. Catches fabricated package names, unpublished versions, unresolvable imports, and nonexistent git SHAs before they land in your codebase — and feeds the correction back to Claude so it fixes itself in-loop.
★not rated 1 3mo agoA
tokens not measured
originalMIT
Full health checkup for any repository: Health Score 0-100, findings across 5 dimensions (security, code quality, testing, production readiness, docs), a prioritized fix plan, and one-command fixes with /audit fix N.
★not rated 1 3mo agoA
tokens not measured
originalMIT
Three hooks, no agents. A stated test result must reproduce, a fabricated import never reaches disk, and every command's real output is recorded. Active in every project the moment it is installed.
★not rated 1 2mo agoA
tokens not measured
originalMIT
A skill that collects recent news from RSS feeds about hackers, artificial intelligence, security, and technology, then categorises and summarises it in Traditional Chinese. RSS is a format websites use to publish updates.
AI agent security for Claude Code — read the code, break the running agent, prove it (exploit-validated). Commands: /static-scan, /red-team. Subagent: agent-red-teamer. Skills: RT-1..RT-9.
★not rated 1 3mo agoA
tokens not measured
originalMIT
Deep white-box OSWE-style web app security audit via /oswe:audit (PHP, Node.js, Python, Java, .NET), guided by a deterministic application graph (vendored tree-sitter) — Markdown + visual HTML reports. By Laucked Security.
★not rated 1
changed todayA
tokens not measured
originalMIT
Automatic tool-call review for Claude Code. A local encoder scores every proposed tool call before it runs, approving safe work and blocking dangerous calls with an explanation the agent can act on.
★not rated 1 3mo agoA
tokens not measured
originalApache-2.0
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: