Claude Code skill for OWASP security best practices (2025-2026). Includes Top 10:2025, ASVS 5.0, Agentic AI security, and 20+ language-specific security quirks.

Mantis Hack

secure multiplexed execution paths for agents - zero trust, zero setup, zero latency.

Static Code Analysis for security teams with Inter file taint analysis. Built for finding vulnerabilities, advanced structural search, derive insights and supports MCP

Open-source AI security scanner for Codex, Claude Code, and ACP-compatible coding agents—kept current with OpenAI Codex Security.

CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.

Security Scanner for Agent Skills

Ghost Security's collection of AppSec skills for AI coding agents

Write detections, investigate alerts, and query logs from your favorite AI agents

IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a command-line utility and MCP server for use within AI coding assistants for quickly building IAM policies.

Security scanner for AI agents, MCP servers and agent skills.

A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.

Collection of agent skills to find vulnerabilities inside your web/mobile apps.

MCP Server for Dockhand Docker Management - exposes 130+ API endpoints as MCP tools

Vetix — Automated scanning, identification, and assessment of SKILL security risks.

AI API identity gateway — reverse proxy that normalizes device fingerprints and telemetry for privacy-preserving API proxying

Offensive security toolkit for Claude Code covering red team, exploit dev, AD attacks, EDR bypass, mobile pentest

Agent Skill for PHP security audits - OWASP patterns, vulnerability detection | Claude Code compatible

Threat modeling and AI-reasoning vulnerability detection harness for Claude Code — STRIDE + AI + MAESTRO

Agent skill for producing threat models for open-source projects

Skills and plugins to accelerate security workflows with the Orca Cloud Platform

Security layer for AI coding agents. Works with Claude Code, Cursor, Windsurf, Gemini CLI, OpenCode, Pi Agent and more.

Local, read-only audit for stale AGENTS.md, CLAUDE.md, and generic SKILL.md instructions.