209 of these skill files have been read, by 223 distinct authors, and what they tell an agent counted. What Vulnerability scanning authors agree on, and what they forbid

• 1

  Secscan skill

  atgreen/secscan-skill · Skill

  51★

  Mirror of https://cave.moxielogic.com/atgreen/secscan-skill

• 2

  Mythos agent

  mythos-agent/mythos-agent/io.github.mythos-agent/mythos-agent · MCP server

  39★ repo

  Open-source AI security agent: SAST, DAST, and policy-as-code over MCP.

• 3

  Aegis

  myclaude-sh/myclaude-creator-engine/.claude/skills/aegis · Skill

  24★ repo

  The creation pipeline for Claude Code products — research, create, validate, publish. 13 types, 20 quality patterns, zero coding required.

• 4

  B3sty skill

  b3sty191/b3sty-skill · Skill

  no license8★

  b3sty RedM/FiveM Lua Codex skill

• 5

  Snyk API & Web MCP Server

  snyk/saw-mcp/io.github.snyk/saw-mcp · MCP server

  7★ repo

  MCP server for Snyk API & Web — DAST scanning, findings management, and vulnerability triage

• 6

  Vantage

  tinoimammp/vantage-security-agent/skills/vantage · Skill

  4★ repo

  AI-powered vulnerability scanner plugin for Claude Code with 28 agents statically scan web & mobile repos for OWASP Top 10 / Mobile Top 10 vulnerabilities, validate findings, and optionally auto-fix them. No live requests, ever.

• 7

  Cybersorted

  cyber-sorted/skills-pro/cybersorted · Skill

  no license3★ repo

  Professional security and enterprise architecture advisory skills for Claude Code

• 8

  Penkit51 ai

  xAmirHamza77/PenKit51/assistant-skills/chatgpt/penkit51-ai · Skill

  no license2★ repo

  PenKit51 — Open-source AI penetration testing platform with 63 deep exploitation skills, multi-agent orchestration, PoC-validated findings, and native assistant skills for Claude, ChatGPT, and Grok. Authorized testing only.

• 9

  SAST MCP Server

  Skyrxin/sast-mcp-server/io.github.Skyrxin/sast-mcp-server · MCP server

  2★ repo

  11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations

• 10

  Anthropic sdk security scan

  Dolphinllc/claude-security-skills/skills/defensive/genai/anthropic-sdk-security-scan · Skill

  1★ repo

  Defensive security skills for Claude Code and the Claude Agent SDK — web applications and generative AI systems.

• 11

  Aos audit

  riz007/architect-os/skills/aos-audit · Skill

  1★ repo

  AI-native software engineering operating system for modern application architecture, scaffolding, and AI-assisted development.

• 12

  Sast analysis

  reasonless-throne486/sast-skills/sast-files/.agents/skills/sast-analysis · Skill

  0★ repo

  Scan codebases for security flaws with LLM agent skills that turn Claude Code, Cursor, and other assistants into SAST scanners

• 13

  Security audit

  ayman-benmada/owasp-security-audit/skills/security-audit · Skill

  no license0★ repo

  OWASP Top 10 (2025) security audit plugin for Claude Code and Cursor. Stack-aware scanning that produces a complete vulnerability report.

• 14

  Fanout cve iteration loop

  omonuj/claude-horizon-skills/skills/fanout-cve-rollout/fanout-cve-iteration-loop · Skill

  no license0★ repo

  Claude Code Agent Skills for building, red-teaming and tuning agentic RL evaluation environments — a four-skill pattern (guardian, validation-debugger, score-tuner, iteration-loop) plus a 24-point adversarial reviewer.

• 15

  Bandit

  kpatryk/skills/skills/bandit · Skill

  0★ repo

  AI skills

• 16

  Trivy security scan

  sokratisg/trivy-security-scan/skills/trivy-security-scan · Skill

  0★ repo

  Agent-neutral Trivy security scanning skill for local vulnerability, misconfiguration, secret, and license scans.

• 17

  Hermes skill local web security scan

  web3blind/hermes-skill-local-web-security-scan · Skill

  no license0★

  Local Web Security Scan

• 18

  Codebase security audit

  sjsylee/skills-hub/skills/codebase-security-audit · Skill

  0★ repo

  바이브 코딩에 규율을 입히는 에이전트 스킬 모음 · Agent skills that bring discipline to vibe coding. Install: npx skills add sjsylee/skills-hub

• 19

  cve-cache

  weiseer/cve-cache-mcp/io.github.weiseer/cve-cache · MCP server

  no license0★ repo

  Recent CVE + GHSA cache for AI agents auditing dependencies (npm/PyPI/Cargo/Maven/Go).

• 20

  Xss html injection

  tody-agent/codymaster/.agent/skills/xss-html-injection · Skill

  no license49★ repo

  Vibe Coding Framework - Full SaaS Development Team from A-Z with Brain, Self Improvement, Auto Development

• 21

  Penkit51 ai

  xAmirHamza77/PenKit51/assistant-skills/claude/penkit51-ai · Skill

  no license2★ repo

  PenKit51 — Open-source AI penetration testing platform with 63 deep exploitation skills, multi-agent orchestration, PoC-validated findings, and native assistant skills for Claude, ChatGPT, and Grok. Authorized testing only.

• 22

  Pwnote cve research

  Pwnote/skills/skills/pwnote-cve-research · Skill

  2★ repo

  AI agent skills for Pwnote Pentest Notebook

• 23

  Langchain security scan

  Dolphinllc/claude-security-skills/skills/defensive/genai/langchain-security-scan · Skill

  1★ repo

  Defensive security skills for Claude Code and the Claude Agent SDK — web applications and generative AI systems.

• 24

  Sast businesslogic

  reasonless-throne486/sast-skills/sast-files/.agents/skills/sast-businesslogic · Skill

  0★ repo

  Scan codebases for security flaws with LLM agent skills that turn Claude Code, Cursor, and other assistants into SAST scanners

• 25

  Fanout cve score tuner

  omonuj/claude-horizon-skills/skills/fanout-cve-rollout/fanout-cve-score-tuner · Skill

  no license0★ repo

  Claude Code Agent Skills for building, red-teaming and tuning agentic RL evaluation environments — a four-skill pattern (guardian, validation-debugger, score-tuner, iteration-loop) plus a 24-point adversarial reviewer.

• 26

  Sast scan

  jpoindexter/security-skills/sast-scan · Skill

  0★ repo

  Agent skills for running security scans — secret scanning (gitleaks), dependency CVE audit (npm/cargo/osv), SAST (semgrep), and a composed pre-release gate. Grounded SKILL.md runbooks for Vanta / Claude Code / any skill-aware agent. MIT.

• 27

  Frontend mobile security xss scan

  sickn33/agentic-awesome-skills/plugins/agentic-awesome-skills-claude/skills/frontend-mobile-security-xss-scan · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 28

  Sast configuration

  sickn33/agentic-awesome-skills/plugins/agentic-awesome-skills-claude/skills/sast-configuration · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 29

  Security scanning security sast

  sickn33/agentic-awesome-skills/plugins/agentic-awesome-skills-claude/skills/security-scanning-security-sast · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 30

  Semgrep rule creator

  sickn33/agentic-awesome-skills/plugins/agentic-awesome-skills-claude/skills/semgrep-rule-creator · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 31

  Semgrep rule variant creator

  sickn33/agentic-awesome-skills/plugins/agentic-awesome-skills-claude/skills/semgrep-rule-variant-creator · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 32

  Sql injection testing

  sickn33/agentic-awesome-skills/plugins/agentic-awesome-skills-claude/skills/sql-injection-testing · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 33

  Xss html injection

  sickn33/agentic-awesome-skills/plugins/agentic-awesome-skills-claude/skills/xss-html-injection · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 34

  Frontend mobile security xss scan

  sickn33/agentic-awesome-skills/plugins/agentic-awesome-skills/skills/frontend-mobile-security-xss-scan · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 35

  Sast configuration

  sickn33/agentic-awesome-skills/plugins/agentic-awesome-skills/skills/sast-configuration · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 36

  Security scanning security sast

  sickn33/agentic-awesome-skills/plugins/agentic-awesome-skills/skills/security-scanning-security-sast · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 37

  Semgrep rule creator

  sickn33/agentic-awesome-skills/plugins/agentic-awesome-skills/skills/semgrep-rule-creator · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 38

  Semgrep rule variant creator

  sickn33/agentic-awesome-skills/plugins/agentic-awesome-skills/skills/semgrep-rule-variant-creator · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 39

  Sql injection testing

  sickn33/agentic-awesome-skills/plugins/agentic-awesome-skills/skills/sql-injection-testing · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 40

  Xss html injection

  sickn33/agentic-awesome-skills/plugins/agentic-awesome-skills/skills/xss-html-injection · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 41

  Sast configuration

  sickn33/agentic-awesome-skills/plugins/agentic-bundle-aas-secure-app-builder/skills/sast-configuration · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 42

  Sast configuration

  sickn33/agentic-awesome-skills/plugins/agentic-bundle-aas-security-engineer/skills/sast-configuration · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 43

  Frontend mobile security xss scan

  sickn33/agentic-awesome-skills/skills/frontend-mobile-security-xss-scan · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 44

  Sast configuration

  sickn33/agentic-awesome-skills/skills/sast-configuration · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 45

  Security scanning security sast

  sickn33/agentic-awesome-skills/skills/security-scanning-security-sast · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 46

  Semgrep rule creator

  sickn33/agentic-awesome-skills/skills/semgrep-rule-creator · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 47

  Semgrep rule variant creator

  sickn33/agentic-awesome-skills/skills/semgrep-rule-variant-creator · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 48

  Sql injection testing

  sickn33/agentic-awesome-skills/skills/sql-injection-testing · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 49

  Xss html injection

  sickn33/agentic-awesome-skills/skills/xss-html-injection · Skill

  44,658★ repo

  AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 1,987+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.

• 50

  Sast configuration

  wshobson/agents/plugins/security-scanning/skills/sast-configuration · Skill

  38,701★ repo

  Multi-harness agentic plugin marketplace for Claude Code, Codex CLI, Cursor, OpenCode, GitHub Copilot, and Gemini CLI

• 51

  Security review

  github/awesome-copilot/skills/security-review · Skill

  37,897★ repo

  Community-contributed instructions, agents, skills, and configurations to help you make the most of GitHub Copilot.

• 52

  Senior secops

  alirezarezvani/claude-skills/engineering-team/skills/senior-secops · Skill

  24,478★ repo

  345 Claude Code skills & agent skills & plugins (30+ Agents, 70+ custom commands, 330+ skills, customizable references, scripts)for Claude Code, Codex, Gemini CLI, Cursor, and 8 more coding agents — engineering, marketing, product, compliance, C-level advisory, research, business operations, commercial & finance, and your daily productivity skills.

• 53

  Security guidance

  alirezarezvani/claude-skills/engineering/security-guidance/skills/security-guidance · Skill

  24,478★ repo

  345 Claude Code skills & agent skills & plugins (30+ Agents, 70+ custom commands, 330+ skills, customizable references, scripts)for Claude Code, Codex, Gemini CLI, Cursor, and 8 more coding agents — engineering, marketing, product, compliance, C-level advisory, research, business operations, commercial & finance, and your daily productivity skills.

• 54

  Skill security auditor

  eigent-ai/eigent/resources/example-skills/skill-security-auditor · Skill

  15,013★ repo

  Eigent: The Open Source Cowork Desktop - Local and Free Alternative to Claude Cowork and Codex

• 55

  Code reviewer

  Jeffallan/claude-skills/skills/code-reviewer · Skill

  10,966★ repo

  66 Specialized Skills for Full-Stack Developers. Transform Claude Code into your expert pair programmer.

• 56

  Semgrep rule creator

  trailofbits/skills/plugins/semgrep-rule-creator/skills/semgrep-rule-creator · Skill

  6,559★ repo

  Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

• 57

  Semgrep rule variant creator

  trailofbits/skills/plugins/semgrep-rule-variant-creator/skills/semgrep-rule-variant-creator · Skill

  6,559★ repo

  Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

• 58

  Semgrep

  trailofbits/skills/plugins/static-analysis/skills/semgrep · Skill

  6,559★ repo

  Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

• 59

  Code vuln audit

  zebbern/claude-code-guide/skills/code-vuln-audit · Skill

  4,568★ repo

  Claude Code Guide - Setup, Commands, workflows, agents, skills & tips-n-tricks go from beginner to power user!

• 60

  Secure code review

  zebbern/claude-code-guide/skills/secure-code-review · Skill

  4,568★ repo

  Claude Code Guide - Setup, Commands, workflows, agents, skills & tips-n-tricks go from beginner to power user!