Skills and MCP tagged “security-audit”

semgrep trailofbits skill Runs a Semgrep static security audit on your codebase. It presents a plan for user confirmation and merges all findings into SARIF. Claude Code CX Codex Cursor +1 9,500installs cso garrytan skill Audits code and infrastructure for security findings, with reproduction and repair candidates in comprehensive mode. Use it when reviewing a project. Claude Code CX Codex Cursor +1 405installs guidelines-advisor trailofbits skill Audits smart contract codebases against Trail of Bits guidelines. It spots upgradeability pitfalls, flawed inheritance, and testing gaps. Claude Code CX Codex Cursor +1 5,400installs vulnerability-scanner sickn33 skill Guides AI agents through vulnerability assessments using OWASP 2025 standards and attack surface mapping. Useful during pre-release security reviews. Claude Code CX Codex Cursor +1 1,300installs wordpress-penetration-testing zebbern skill This skill audits WordPress installations for common vulnerabilities and REST API permission issues in plugins. Designed for authorized security assessments. Claude Code CX Codex Cursor +1 1,100installs mantis-researcher official google skill Audits production source code against workspace/plan.json. It inspects target files for boundary checks, missing sanitization, and interface violations without modifying the codebase. Claude Code CX Codex Cursor +1 1,500installs browser-auth-flow ruvnet skill Drives your login flow once, then probes it for redirect leaks, missing CSRF tokens, weak session cookies and OAuth mistakes. Writes a findings.md with a verdict. Claude Code CX Codex Cursor +1 689installs isms-audit-expert Alireza Rezvani skill Skill for ISO 27001 compliance verification, security control assessment, and certification support. Documents audit findings, classifies nonconformities, and manages corrective actions. Claude Code 791installs ship-gate Rajaraman Arumugam skill Scans your codebase across 8 pre-production categories and blocks deployment when critical security or code flaws are found. Claude Code 475installs sast-sca-security-analyzer official github subagent Runs SAST and SCA scans directly on your codebase. Finds source code vulnerabilities, audits dependency manifests, maps findings to CWE IDs, and drafts fixes. GitHub Copilot ★ 40,369repo stars