Claude Code and Codex plugins their authors filed under "security". All categories.
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
22 skills · 2 agents
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
22 skills · 2 agents
AI Security Harness for OpenAI Codex. Gadriel scans the code Codex writes as it writes it and feeds findings back so they are fixed before the turn moves on, and gives Codex a security MCP server and skills. SAST, secrets, dependencies, containers and config, including AI-specific risks (OWASP LLM Top 10).
22 skills · 1 MCP server
Audits AI-generated (vibecoded) apps for security, quality, performance, and compliance gaps — before they reach production. Covers Next.js, Supabase, Stripe, React Native, Node.js, and TypeScript. Works with Claude Code, Codex, and Gemini CLI.
11 skills · 6 commands · 4 agents
CyberRiskGuardian with Threat Live-feed — scenario-driven cybersecurity risk assessment with dated, exposure-gated threat-intelligence calibration.
6 skills · 9 commands · 3 agents · 2 MCP servers · hooks
External pentest methodology for Claude Code: scope -> recon -> enumerate -> attack plan -> exploit -> report, over a small in-scope target list. Passive OSINT, ProjectDiscovery recon workflow, OWASP WSTG web testing, service & cloud/takeover checks, controlled exploitation with human approval, and CVSS reporting.
10 skills · 5 commands · 4 agents
Evidence-first application-security Agent Skill. Maps attack surfaces, selects applicable security hypotheses, independently verifies material findings, refutes false positives, fixes root causes, requires regression proof, and produces explicit release decisions.
2 skills · 17 agents
Evidence-first application-security Agent Skill. Maps attack surfaces, selects applicable security hypotheses, independently verifies material findings, refutes false positives, fixes root causes, requires regression proof, and produces explicit release decisions.
2 skills · 17 agents
Scan code you write or modify against ZeroPath's AI appsec engine (SAST, secrets, SCA, IaC), and triage findings from your ZeroPath organization directly from chat.
10 skills · 6 agents · 1 MCP server · hooks
新しい SaaS や AI エージェントツールを組織に導入する際のセキュリティ審査（Tier 判定→要件整理→脅威分析→対策立案→承認・継続評価）を、NIST SP 800-30 / OWASP GenAI 準拠のワークフローとして実行したいときに使うプラグイン
10 skills · 7 commands · 1 agent
Codex Security workflows for security scans, analysis, and investigation.
15 skills · 1 MCP server · app connector
Secrets, compliance, hardening, code auditing, and authorized penetration testing skills
17 skills
Triage, detection engineering, threat hunting, phishing/malware analysis, forensics, threat intel, vulnerability triage, cloud and identity investigations, incident reporting.
16 skills
Standalone LimaCharlie MCP suite with Vault-first auth, focused profiles, bounded review tools, and incident workflow skills for detect, contain, evict, and recover workflows.
7 skills · 9 MCP servers
Ory authentication, authorization, and audit for every Codex tool call.
12 skills · 3 commands · 1 MCP server
Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)
15 skills
Builds source and binary code graphs for security analysis, context slicing, mutation testing, cryptographic protocol modeling, finding triage, and variant analysis.
14 skills · 1 agent
Comprehensive security assessment suite — code review, threat modeling, compliance, SBOM, and more.
13 skills · hooks
Operator workflows over the SubImage MCP server: triage findings, investigate CVEs, trace package origin, audit IAM privilege, investigate containers and clusters, resolve IP/domain ownership, explain public exposure causes, review attack paths, audit SubImage coverage, build Cypher queries against the graph, author tenant-local custom rules, and identify Infrastructure-as-Code repositories.
14 skills
Ask Clover about your application's security posture from inside your coding agent. Run security reviews, surface threats and required controls, and design securely, answered in natural language.
12 skills · 1 MCP server · hooks
The pre-release security gate for any repository. Catches PII, secrets/credentials, and supply-chain risk before they ship. Runs parallel, multi-agent audits across data files, git history, source, and frontend, and consolidates them into a single severity-ranked report with a PASS / REVIEW / BLOCK verdict. Stands alone, or serves as deliver's SECURE gate when both are installed.
6 skills · 6 commands · 1 agent · hooks
One orchestrator runs SonarQube, Trivy, Opengrep, secrets, Bearer, MegaLinter, dependency-cruiser, build-verify, Kubescape, OWASP ZAP+Nuclei and ScanCode in one pass and drives findings to zero — incl. whether the code actually compiles/builds.
12 skills · 1 command
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows.
12 skills · hooks
REA MCP server + reverse-engineering skills. Engines (JDK 21, Ghidra 12.1.4, jadx, optional apktool/radare2) auto-install on first use on Windows, macOS and Linux; reverse-engineering prompts are routed to REA automatically; Windows can also run REA inside WSL.
3 skills · 8 commands · 1 MCP server · hooks
Detects missing or compiler-optimized zeroization of sensitive data with assembly and control-flow analysis
1 skill · 11 agents · 1 MCP server
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows.
11 skills · hooks
面向代码库安全扫描、分析和调查的 Codex Security 工作流。
10 skills · 1 MCP server · app connector
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows.
10 skills · hooks
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows.
10 skills · hooks
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, that you apply when you choose.
1 skill · 9 agents · hooks