Dark-web OSINT (Tor)
codexDark-web OSINT: fan-out onion search + Tor page scraping exposed over stdio MCP. Engine lifted from robin (MIT). Authorized threat-intel use only. Requires a local Tor daemon on 127.0.0.1:9050.
1 MCP server
0
codex
Web App Testing
Web application security testing methodology: WSTG-aligned test taxonomy, verification discipline, OpSec noise tagging, and reporting handoff (pure knowledge, no runtime deps).
Plugin web-app-testing in ModelsLab/infosec-plugins. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (1)
web-app-testingSystematic web application security testing methodology aligned to OWASP WSTG — how to scope, which vulnerability classes to test, how to verify a finding before reporting it, and how to write it up. Use when testing a web app or API in an authorized engagement.
More from ModelsLab/infosec-plugins
All 6 plugins →Pentest Recon
codexReconnaissance methodology skill pack (pure knowledge, no runtime deps).
1 skill
0
Reporting methodology skill pack: turn raw findings into a clear, client-ready penetration-test report (pure knowledge, no runtime deps).
1 skill
0
Scope Guard
codexAuthorized-use enforcement: scope confirmation, rules-of-engagement, and hard-refusal boundaries for security work (pure knowledge, no runtime deps).
1 skill
0
Nuclei (web)
codexMCP wrapper around the `nuclei` scanner (shells out to a locally-installed binary via Docker; nothing weaponized is redistributed).
1 MCP server
0
Similar plugins
example-skills
claudeCollection of example skills demonstrating various capabilities including skill creation, MCP building, visual design, algorithmic art, internal communications, web testing, artifact building, Slack GIFs, and theme styling
19 skills
anthropics/skills 193,780
privacy
claudeRefuses a shell, file, web fetch or MCP call that holds the signed-in account's email address beside a word that declares who is calling, so the address does not go out as a client's identity.
anthropics/claude-code 155,476
ruflo-protector
claudeProject Anatole: an optional, learning watchdog for unattended agents (OWASP-mapped rules, a per-project baseline, learn / notify / enforce modes). Default off.
ruvnet/ruflo 81,589
pake
claudecodexPackage any website or local web build into a lightweight desktop app with Pake CLI.
1 skill
tw93/Pake 63,463
agent-browser
claudeAutomates browser interactions for web testing, form filling, screenshots, and data extraction
12 skills
vercel-labs/agent-browser 50,373
AAS Web App Builder
codexInstall the "AAS Web App Builder" workflow plugin from Agentic Awesome Skills.
19 skills
sickn33/agentic-awesome-skills 49,620
Maintain Web App Testing?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins6 plugins