Security plugins

Review PR changes to declared coding-agent permissions, MCP bindings, hooks and workflow permissions with the agents-shipgate diff CLI command (not routed by the plugin's skill, which covers check, verify and audit --host). This static host comparison needs no manifest, policy, saved baseline or skill; it names coverage limits and implies no verdict. Tool-Use Readiness release verification is a separate workflow for repositories with a declared tool surface. Requires the agents-shipgate CLI (pipx install agents-shipgate); no hook is enabled by this metadata.

1 skill · 1 command

AppSec review suite: multi-language security-reviewer (8-point check, 7 language packs, OWASP/ASVS + endpoint checklists), whole-repo security-assessment, diff-scoped 0day-scanner, STRIDE/DREAD threat-modeling, and two threat-model-driven tiers (tm-quick-security-assessment, tm-security-review). Ships 4 slash commands, a security-reviewer subagent, and 3 opt-in hooks.

6 skills · 4 commands · 1 agent

Generate opengrep/semgrep SAST rules for 30+ languages, including pattern and taint-mode rules. The research variant first researches a CVE or CWE with web search, then writes targeted detection rules from the findings.

2 skills

Cyber threat intelligence search across 595 curated security domains in 4 authority tiers, for CVEs, threat actors, malware families, exploits and breach reports. Ships a skill that needs no API key, a Node CLI, an MCP server, and a /cti-search command. Optional push to NotebookLM.

1 skill · 1 command

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

1 skill · 3 commands · 1 agent

XSS prevention, CSRF protection, content security policies, mobile app security, and secure storage patterns

1 command · 3 agents

SOC2, HIPAA, and GDPR compliance validation, secrets scanning, compliance checklists, and regulatory documentation

1 command · 1 agent

Security engineer — IAM, secrets, compliance, threat modeling

6 skills · 1 agent

Scans for common credentials across cloud, source control, payment, and collaboration providers

hooks

The full Abnormal Security REST API as an agent-native CLI — with a local threat store, ranked SOC triage, and one-shot reporting no SOAR pack offers.

1 skill

Every Avanan email security API call, plus an offline mirror for cross-tenant questions.

1 skill

Every Blumira finding, detection, and agent across your direct org and every MSP sub-account — in one offline-searchable store with cross-account triage and over-time trends no single API call can answer.

1 skill

818 cybersecurity skills covering web security, pentesting, DFIR, threat intelligence, cloud security, malware analysis, and more. Mapped to 6 frameworks.

200 skills

Expansion-aware policy checks before every Bash, Edit, Write, and MCP tool call. Shadow mode by default.

4 commands · hooks

Snyk security scanning, remediation, dependency health, and findings export for Codex, powered by the local Snyk CLI MCP server.

3 skills · 1 MCP server

AI application security — generate an AI Bill of Materials (AI-SBOM), run static analysis, behavioral validation, and adversarial red-team testing for AI agents and LLM-powered applications.

2 skills

Set up a secure npm package release process — Trusted Publishing with staged publishes from GitHub Actions — and walk the user through the required npmjs.com and GitHub settings

6 skills

Praxen — agent behavior verifier. Compares an agent's declared policy against the available evidence (source, deployment state, or behavioral artifacts); reports where observed behavior diverges from declared intent.

1 skill

Execute commands in isolated Docker/Podman containers for security. Auto-detects runtime for Python, Node, Rust, Go, Ruby, and more.

1 skill

Produce threat models for open-source projects: the security contract between a project and its users, structured for downstream integrators and vulnerability triagers.

8 skills

Orca Security skills collection for cloud security workflows

21 skills

Every skill in the grcskills library, plus the optional ISMS Copilot MCP server for framework lookups (OAuth at first use, never required).

66 skills

734+ 网络安全技能，涵盖 Web 安全、渗透测试、DFIR、威胁情报、云安全、恶意软件分析等领域。中文版本。

200 skills

Security guidance skills for AI coding assistants. Covers cryptography, web security, supply chain, MCP servers, Kubernetes, API gateways, fuzzing, static analysis, audit workflows, and more.

145 skills

GE Core — 12 curated security skills for developers writing code daily: injection defense, web application security, secrets detection, container hardening, OpenShift/Kubernetes access control, dependency auditing, authentication, secure-by-design, audit logging, and AI security.

12 skills

Create, validate, import, execute, and export CrowdStrike Falcon Fusion SOAR workflows, and manage Falcon Next-Gen SIEM lookup files using natural language.

2 skills

Manage the Zscaler cloud security platform including ZPA (private access), ZIA (internet access), ZDX (digital experience), ZCC (client connector), EASM (attack surface management), and Z-Insights (security analytics). Create and manage policies, troubleshoot connectivity, audit security configurations, and investigate incidents.

42 skills · 20 commands · 1 MCP server

CIPP (CyberDrain Improved Partner Portal) - Microsoft 365 multi-tenant management for MSPs: tenants, users, mailboxes, conditional access, standards, BPA, licensing, GDAP, and alerts

10 skills · 4 commands · 2 agents

SentinelOne XDR - threat detection, incident response, and endpoint agent management via the Purple AI MCP server

8 skills · 6 commands · 2 agents

Huntress - managed threat detection, incident response, endpoint agent management, escalations, and billing reports

7 skills · 6 commands · 2 agents