Dark-web OSINT (Tor)
codexDark-web OSINT: fan-out onion search + Tor page scraping exposed over stdio MCP. Engine lifted from robin (MIT). Authorized threat-intel use only. Requires a local Tor daemon on 127.0.0.1:9050.
1 MCP server
0
codex
Scope Guard
Authorized-use enforcement: scope confirmation, rules-of-engagement, and hard-refusal boundaries for security work (pure knowledge, no runtime deps).
Plugin scope-guard in ModelsLab/infosec-plugins. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (1)
authorized-useConfirm scope and rules-of-engagement before any security testing, and refuse out-of-scope or clearly malicious requests. Use at the start of any offensive/security task, when a target is named, or whenever authorization is unclear.
More from ModelsLab/infosec-plugins
All 6 plugins →Pentest Recon
codexReconnaissance methodology skill pack (pure knowledge, no runtime deps).
1 skill
0
Reporting methodology skill pack: turn raw findings into a clear, client-ready penetration-test report (pure knowledge, no runtime deps).
1 skill
0
Web App Testing
codexWeb application security testing methodology: WSTG-aligned test taxonomy, verification discipline, OpSec noise tagging, and reporting handoff (pure knowledge, no runtime deps).
1 skill
0
Nuclei (web)
codexMCP wrapper around the `nuclei` scanner (shells out to a locally-installed binary via Docker; nothing weaponized is redistributed).
1 MCP server
0
Similar plugins
ruflo-aidefence
claudeAI safety scanning, PII detection, prompt injection defense, and adaptive threat learning
2 skills · 1 command · 1 agent
ruvnet/ruflo 81,589
Skill Author
codexInstall the "Skill Author" workflow plugin from Agentic Awesome Skills.
6 skills
sickn33/agentic-awesome-skills 49,620
cockroachdb
claudeConnect Claude Code directly to your CockroachDB clusters for hands-on database work — explore schemas, write optimized SQL, debug queries, and manage distributed database clusters. This plugin provides 14 tools across two active MCP backends (self-hosted MCP Toolbox and managed CockroachDB Cloud MCP Server), three specialized agents (DBA, Developer, Operator), 32 skills across 6 operational domains, and built-in safety hooks.
34 skills · 3 agents · 3 MCP servers · hooks
anthropics/claude-plugins-official 47,076
ifixai
claudecodexIndependent auditing for AI agents, open source. Claude discovers your setup, confirms the cost, and audits your agent against the one question other tools skip: is it doing the job it's supposed to do, given your business rules and org structure? Test any model (Anthropic, OpenAI, Gemini, Azure, Bedrock, …) graded by self, one independent judge, or a cross-vendor panel; each provider is billed to its own account via a key in your settings, never the command line. Results render as an interactive artifact (with a static-report fallback).
1 skill · hooks
ifixai-ai/iFixAi 45,158
reverse-engineering
claudecodexBinary reverse engineering, malware analysis, firmware security, and software protection research for authorized security research, CTF competitions, and defensive security
4 skills · 3 agents
wshobson/agents 42,461
Sanity
claudecodexSanity content platform integration with MCP server, agent skills, and slash commands. Query and author content, build and optimize GROQ queries, design schemas, and set up Visual Editing.
8 skills · 4 commands · 1 MCP server
anthropics/knowledge-work-plugins 35,601
Maintain Scope Guard?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins6 plugins