Security

Security scanner for code, addresses, and transactions. An agent skill from alsk1992/CloddsBot.

alsk1992/CloddsBot

One-shot Base-token investigation - runs any subset of six onchain-security checks (rug-scan, contract-audit, deployer-trace, holder-concentration, honeypot, lp-lock) into one verdict.

aeonfun/aeon

A skill your agent uses when analyzing a Rust binary without source code, reverse engineering Rust executables or libraries, demangling Rust symbols, recovering likely crate namespaces, tracing…

hashgraph-online/awesome-codex-plugins

Run a fast AWS Security Agent diff scan on only the changed code since a git ref.

aws/agent-toolkit-for-aws

Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation.

aws/agent-toolkit-for-aws

Run an AWS Security Agent scan on the workspace — uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked, verified findings with code locations and…

aws/agent-toolkit-for-aws

Run an AWS Security Agent threat model review on spec/design documents.

aws/agent-toolkit-for-aws

Diagnoses and resolves Amazon EFS issues including mount failures, NFS timeouts, permission errors, throughput problems, and burst credit exhaustion.

aws/agent-toolkit-for-aws

Find decision-makers at a specific company using Apollo, Crustdata, Fiber, and PDL people search via Gooseworks MCP.

gooseworks-ai/goose-skills

Find emails, phone numbers, and enrich profiles using ContactOut.

gooseworks-ai/goose-skills

Analyze a website's SEO visibility, keyword rankings, traffic estimates, and competitive positioning.

gooseworks-ai/goose-skills

Compose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations.

microsoft/GitHub-Copilot-for-Azure

Detect and break the cloud post-compromise attack chain (AWS / Azure / GCP) — per-stage CloudTrail / Activity-Log / Audit-Log detection signals and the preventive controls that close each step.

transilienceai/communitytools

Generates optimized, syntax-validated scripts on demand. An agent skill from transilienceai/communitytools.

transilienceai/communitytools

Threat Intelligence Report Design System — ReportLab-based PDF generation for A4 reports with Transilience branding, typography, and layout standards.

transilienceai/communitytools

Audit Stella code, paths, or Git diffs for security defects affecting privileged legal data, tenant isolation, authentication, files, AI, and auditability.

stella/stella

Catalogue of prompt framings that determine whether an agent refuses or performs specification search, and the harness for probing them.

brycewang-stanford/Auto-Empirical-Research-Skills

Run trufflehog via the mantistrufflehog MCP server and handle secret findings without ever exposing the raw secret

deonmenezes/mantishack

Configure Salesforce Shield Platform Encryption — generate deployable encryption settings and encrypted-field metadata, and answer key-model and lifecycle questions.

forcedotcom/sf-skills

Behavioral trust grades (A–F) for MCP servers. An agent skill from BankrBot/skills.

BankrBot/skills

Review trust boundaries, auth, input handling, secrets, and dependency risk before release.

PacificStudio/openase

Enterprise-review-grade threat model from harness threat-model {path}.

ruvnet/ruflo

Find LinkedIn profiles of decision makers at target companies using Extruct's companypeoplefinder.

extruct-ai/gtm-skills

Comprehensive security auditing for Clawdbot deployments. An agent skill from aAAaqwq/AGI-Super-Team.

aAAaqwq/AGI-Super-Team

Suede-owned marketing video planning and production discipline.

JasonColapietro/suede-creator-skills

AI Agent 安全开发与防护最佳实践，包含prompt注入防护、代码执行安全、敏感信息保护、合规审计全流程规范. An agent skill from ProgrammerAnthony/Expert-Coding-Harness.

ProgrammerAnthony/Expert-Coding-Harness

Inline orchestration workflow for security vulnerability detection and remediation with Beads integration.

maslennikov-ig/claude-code-orchestrator-kit

安全威胁建模专家 Owner — 当任务涉及权限、认证、授权、输入输出信任边界、密钥策略、审计、攻击面、Webhook/OAuth、敏感操作或用户要求安全专家视角时使用；要求识别滥用路径并绑定缓解验证。

devcodex-labs/devcodex

Runs a guided, end-to-end security review of a Power Pages site and consolidates every finding into one HTML report covering source code and dependencies, the live site, browser headers, firewall…

microsoft/power-platform-skills

Explore GTI relationships for an IOC to discover related entities.

dandye/ai-runbooks

Respond to a malware incident following PICERL methodology. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Respond to a ransomware incident following PICERL methodology.

dandye/ai-runbooks

Triage a security alert or case. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Triage suspicious login alerts like impossible travel, untrusted location, or multiple failures.

dandye/ai-runbooks

Full execution protocol for MODE: LOOP — the compound-engineering loop: brainstorm → plan → build → review → improve, iterating under defense-in-depth stop conditions with generator/critic…

ZaxbyHub/opencode-swarm

当开始新目标、攻击面不清晰、需要资产测绘/信息收集/前端JS分析/接口与敏感信息提取时调用。负责webpack拆解、source map还原、API端点与密钥提取、历史资产发现、高价值入口定位。命中场景：找不到接口、需要找密钥/隐藏功能/旧版本接口、JS加密与签名逻辑需要还原。

zhaji2333/CkSKILLS

Guides forensic analysis of disk images — integrity verification, partition layout, file-system survey, deleted-file recovery and timeline reconstruction.

criptogus/agent-evolve-network

Run security audit — dependency vulnerabilities, secret scanning, OWASP pattern detection, HTTP headers.

Houseofmvps/ultraship

Drive responsible disclosure of a proven finding to a CVE. An agent skill from Encod3d-Sec/TORCH.

Encod3d-Sec/TORCH

Evidence hygiene before any FIND moves to Completed or enters a report.

Encod3d-Sec/TORCH

API attack hunting (REST / GraphQL / gRPC) - BOLA/IDOR, BFLA, mass assignment, excessive data exposure, auth/JWT, introspection + batching, rate-limit abuse.

Encod3d-Sec/TORCH

Business-logic flaw hunting - workflow/state bypass, price/quantity tampering, negative/overflow values, coupon/refund abuse, mass assignment, and logic races.

Encod3d-Sec/TORCH

Drive Burp Suite over its MCP server as an AI triage + attack layer - review proxy history for signals, replay via Repeater/send, OOB-gate blind bugs with Collaborator, fuzz via Intruder (RoE-safe)…

Encod3d-Sec/TORCH

Web cache poisoning + cache deception hunting - unkeyed input poisoning, cache-key analysis, path-confusion deception, header/parameter cloaking.

Encod3d-Sec/TORCH

Insecure deserialization hunting across Java / .NET / PHP / Python / Ruby / Node.

Encod3d-Sec/TORCH

OAuth and SAML attack hunting - redirecturi bypass, state CSRF, SAML XSW (XSW1-XSW8), signature stripping, comment injection.

Encod3d-Sec/TORCH

GraphQL IDOR/auth-bypass, XXE file-read/SSRF (SVG/DOCX/SAML), SSTI detection and RCE.

Encod3d-Sec/TORCH

LLM / AI application attack hunting - prompt injection (direct + indirect), excessive agency, insecure output handling, system-prompt + data leakage.

Encod3d-Sec/TORCH