Security: skills, plugins, subagents, slash commands and mcp servers

git-guardrails-claude-code Matt Pocock skill This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. Claude Code 499,069installs ponytail-review DietrichGebert skill ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. Claude Code CX Codex Cursor +1 56,300installs ponytail-audit DietrichGebert skill It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. Claude Code CX Codex Cursor +1 44,800installs security-audit cloudflare skill Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. Claude Code CX Codex Cursor +1 52,200installs security-and-hardening addyosmani skill Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. Claude Code CX Codex Cursor +1 69,400installs supabase official supabase skill Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs doubt-driven-development addyosmani skill This skill sends non-trivial decisions to a fresh-context reviewer looking for flaws. Use it before changes that are hard to undo or costly to debug later. Claude Code CX Codex Cursor +1 56,100installs gws-shared official googleworkspace skill This skill gives agents shared rules for gws CLI authentication, flags, and output formats. Use it when working with gws commands. Claude Code CX Codex Cursor +1 66,000installs code-reviewer official Anthropic subagent This subagent checks code changes for bugs, security issues, and project-rule violations. Use it when a review should focus on findings that matter. Claude Code 31,050installs persona-it-admin official googleworkspace skill A persona skill for IT admins: watches for suspicious logins, sets Drive sharing policies, and works through requests with gws. Claude Code CX Codex Cursor +1 30,000installs gws-modelarmor official googleworkspace skill Filters user prompts and model responses for safety using Google Model Armor templates. Useful for automated content sanitization via the gws CLI. Claude Code CX Codex Cursor +1 29,900installs gws-modelarmor-create-template official googleworkspace skill Creates Google Model Armor templates in GCP to filter user-generated content. Useful when configuring jailbreak defenses via the gws CLI. Claude Code CX Codex Cursor +1 29,800installs gws-modelarmor-sanitize-prompt official googleworkspace skill This skill sends a user prompt through a Google Model Armor template. Use it when an incoming prompt needs to pass through a configured Model Armor filter. Claude Code CX Codex Cursor +1 29,600installs gws-modelarmor-sanitize-response official googleworkspace skill This skill sends a model response to Google Model Armor for filtering with a template. Use it to check output before showing it to a user. Claude Code CX Codex Cursor +1 29,500installs fix-security-vulnerabilities-with-strix usestrix skill This skill triages validated Strix findings, fixes their root causes, and runs Strix again to verify the result. Use it after a CLI or cloud scan. Claude Code CX Codex Cursor +1 15,500installs improve shadcn skill Surveys any codebase in read-only mode and writes self-contained implementation plans for other models to execute. Helps audit bugs, tech debt, and security without touching code. Claude Code CX Codex Cursor +1 37,500installs owasp-top-10-testing usestrix skill Runs Strix AI agents to execute exploits across OWASP Top 10:2025 categories. Useful for verifying attack paths with concrete proofs-of-concept before audits. Claude Code CX Codex Cursor +1 12,600installs application-security-testing usestrix skill This skill selects tests for source code, a live web app, APIs, and CI, then turns confirmed findings into a ranked remediation plan. Use it for an AppSec review. Claude Code CX Codex Cursor +1 12,300installs 1password openclaw skill Configures 1Password CLI, handles authentication modes, and safely injects secrets into commands without leaking credentials into chat. Claude Code CX Codex Cursor +1 6,300installs security-best-practices github.com/openai/skills skill A skill that reviews code against security best practices for Python, JavaScript/TypeScript and Go, then suggests fixes. Claude Code CX Codex Cursor +1 357installs healthcheck openclaw skill Audits OpenClaw host security, listening ports, SSH, and firewalls. Spots exposures and applies staged hardening without locking you out. Claude Code CX Codex Cursor +1 5,500installs security-auditor official Anthropic subagent This subagent searches code for security flaws and gives engineers concrete fixes. Use it to review a project before hardening or modernization work. Claude Code 10,718installs test-engineer official Anthropic subagent This subagent captures legacy behavior in tests and compares it with a rewritten implementation. Use it before changing existing modules. Claude Code 9,715installs docker-expert sickn33 skill A skill that turns your AI agent into a Docker reviewer for Dockerfiles, multi-stage builds and container security. Useful when images and Compose files need a second look. Claude Code CX Codex Cursor +1 27,200installs java-springboot official github skill Gives GitHub Copilot Spring Boot development practices, from project layout to tests and security. Use it when writing or reviewing Java application code. GitHub Copilot 21,272installs docker-patterns affaan-m skill A skill with Dockerfile and Docker Compose patterns: local dev stacks, networking, volumes, container hardening. Claude Code CX Codex Cursor +1 6,300installs google-cloud-recipe-auth official Google LLC skill This skill explains Google Cloud authentication and permissions. Use it when setting up IAM, ADC, or service accounts for local code and production workloads. Claude Code Gemini CLI CX Codex 15,450installs cloud-sql-basics official google skill This skill helps create and explain Cloud SQL resources for MySQL, PostgreSQL, and SQL Server. Use it when setting up a database in Google Cloud. Claude Code Gemini CLI CX Codex 14,679installs google-cloud-waf-security official google skill This skill reviews Google Cloud workloads against the security pillar of the Well-Architected Framework and suggests actions for IAM, networks, data, and operations. Claude Code Gemini CLI CX Codex 14,620installs laravel-security affaan-m skill This skill reviews Laravel authentication, Eloquent safety, CSRF, XSS, APIs, and production settings. Use it for security reviews or deployment checks. Claude Code CX Codex Cursor +1 5,400installs hook-development official Anthropic skill Guides the development of Claude Code plugin hooks to intercept tool calls, validate output, and enforce task completion checks. Claude Code 7,028installs forget rohitg00 skill Deletes selected durable memories from agentmemory after explicit confirmation. Useful when scrubbing secrets or obsolete notes. Claude Code CX Codex Cursor +1 13,800installs mcp-integration official Anthropic skill This skill shows how to connect MCP servers to Claude Code plugins and expose their tools. Use it when a plugin needs access to an API, database, or file system. Claude Code 6,994installs writing-hookify-rules official Anthropic skill This skill guides you through writing hookify rules for Claude Code, from choosing an event to defining match conditions and the message shown when a rule triggers. Claude Code 6,941installs cloudflare-one cloudflare skill Walks your agent through designing, configuring and troubleshooting Cloudflare One Zero Trust and SASE deployments. Useful when you need Access, Gateway or tunnel work done without digging through docs yourself. Claude Code CX Codex Cursor +1 92,200installs turnstile-spin cloudflare skill Sets up Cloudflare Turnstile bot verification across existing frontend and backend code, including widget embedding and server-side siteverify. Claude Code CX Codex Cursor +1 92,200installs springboot-security affaan-m skill Reviews security in Java Spring Boot services, covering authentication, authorization, input validation, CSRF, secrets, headers, and dependencies. Claude Code CX Codex Cursor +1 4,900installs django-security affaan-m skill A skill that feeds your agent Django security rules: production settings, auth, permissions, SQL injection and XSS prevention. Useful for reviews and deploys. Claude Code CX Codex Cursor +1 4,900installs verification-loop affaan-m skill Runs a session's work through six phases — build, types, lint, tests with coverage, secret grep, diff review — and prints a PASS/FAIL report. Claude Code CX Codex Cursor +1 4,900installs nodejs-keccak256 affaan-m skill Catches NIST SHA3 used where Ethereum expects Keccak-256. Useful when a selector, signature or storage slot comes out wrong. Claude Code CX Codex Cursor +1 4,800installs