Security: skills, plugins, subagents, slash commands and mcp servers

threat-model official anthropics skill Builds a threat model for a codebase in three modes and writes it to THREAT_MODEL.md. Use it before vulnerability discovery or a security review. Claude Code CX Codex Cursor +1 1,200installs block-no-verify-hook cskwork skill This skill adds a PreToolUse hook that blocks git bypass flags such as --no-verify. Use it when pre-commit checks must run before an agent can execute a command. Claude Code CX Codex Cursor 6,500installs ctf-reverse ljagiello skill A reverse engineering reference for CTF challenges: guides coding agents through binary inspection, anti-debug bypass, and virtual machine analysis. Claude Code CX Codex Cursor +1 10,100installs gke-workload-identity official google skill Diagnoses Pod authentication failures in Google Cloud through Workload Identity Federation for GKE. Use it to check KSA, IAM bindings, and the GKE metadata server. Claude Code Gemini CLI CX Codex 2,000installs signed-audit-trails-recipe Tom Farley skill A step-by-step guide to signed records for Claude Code tool calls. Use it to evaluate policy gates and offline verification before installing protect-mcp runtime hooks. Claude Code CX Codex Cursor 6,200installs ctf-web ljagiello skill Routes and guides agents through web CTF challenges, covering everything from SQL injection and SSTI to auth bypasses and SSRF. Claude Code CX Codex Cursor +1 9,700installs cookie-debugging ChromeDevTools skill Skill for inspecting cookies, sessions, and authentication errors via Chrome DevTools MCP. Diagnoses 401/403, auth redirects, Set-Cookie issues, and verifies cookie consent compliance. Claude Code CX Codex Cursor +1 856installs secops-triage official Google LLC skill This skill triages Google SecOps alerts, assesses entity risk, and helps decide whether a case should be closed or escalated. Claude Code Gemini CLI CX Codex 1,900installs secops-investigate official Google LLC skill This skill supports deep incident and entity investigations in Google SecOps. Use it for UDM searches, asset and user timelines, and lateral movement analysis. Claude Code Gemini CLI CX Codex 1,900installs secops-hunt official Google LLC skill secops-hunt supports proactive threat hunting in Google SecOps, from IoC lookups to UDM-based anomaly searches. Use it when testing a hunt hypothesis. Claude Code Gemini CLI CX Codex 1,900installs secops-detection-engineering official Google LLC skill This skill authors, validates, tests, and deploys YARA-L 2.0 rules in Google SecOps. Use it to examine detection coverage gaps. Claude Code Gemini CLI CX Codex 1,900installs secops-cases official Google LLC skill Manage Google Security Operations SOAR cases, from queue review and alert grouping to investigation notes, status changes, and closure. Claude Code Gemini CLI CX Codex 1,900installs protect-mcp-setup Tom Farley skill This skill configures Cedar checks for tool calls and Ed25519-signed receipts. Use it when you need policy-gated actions and an audit trail that can be verified offline. Claude Code CX Codex Cursor 6,000installs quickstart official anthropics skill Guides a first pass through the code-security repository, from threat modeling to a canary scan. It also answers repo-specific questions with cited sources. Claude Code CX Codex Cursor +1 1,100installs customize official anthropics skill A skill to adapt the C/C++ vulnerability-finding pipeline to other languages, domains, and target shapes. Turns an opinionated demo into a template: swap the detector, prompts, and sandbox — and the pipeline hunts what you need. Claude Code CX Codex Cursor +1 1,100installs patch official anthropics skill Generates candidate diffs for verified security findings and writes inert patches for manual review. Claude Code CX Codex Cursor +1 1,100installs triage official anthropics skill This skill checks scanner findings, removes duplicates, and ranks vulnerabilities by derived exploitability. Use it for a file or directory of raw results. Claude Code CX Codex Cursor +1 1,100installs vuln-scan official anthropics skill Static vulnerability scanner for source code. Reads a directory, spawns parallel review subagents per focus area, and writes findings to JSON and markdown for triage. Claude Code CX Codex Cursor +1 1,100installs ctf-pwn ljagiello skill Binary exploitation guide for CTF challenges. Helps turn memory corruption bugs into code execution and shell access. Claude Code CX Codex Cursor +1 9,400installs ctf-crypto ljagiello skill A skill for solving crypto CTF challenges, covering RSA, AES, hashes, signatures, PRNG, ZKP, and mathematical attacks. Claude Code CX Codex Cursor +1 9,200installs ctf-osint ljagiello skill A field guide to public-source research for CTF challenges, from username and DNS checks to image searches and geolocation. Useful when clues point beyond the challenge files. Claude Code CX Codex Cursor +1 9,100installs github-actions-hardening official github skill Reviews .github/workflows/*.yml against the Actions threat model linters miss: attacker-controlled text pasted into run:, privileged triggers running fork code, unpinned actions. GitHub Copilot 2,200installs requesting-code-review Hermes Agent (adapted from obra/superpowers + MorAlekss) skill Pre-commit code verification pipeline that scans for security flaws, checks test regressions against a baseline, and runs an auto-fixing reviewer subagent. Claude Code CX Codex Cursor +1 467installs ctf-forensics ljagiello skill Digital forensics and signal analysis techniques for CTF challenges: disk images, memory dumps, PCAP files, steganography, Windows artifacts, and side-channel attacks. Claude Code CX Codex Cursor +1 9,000installs privacy-policy phuryn skill Skill drafts a detailed privacy policy accounting for GDPR, CCPA, and other regulations. Use it when building a new product, updating data protection docs, or preparing for compliance audits. Claude Code CX Codex Cursor +1 3,500installs solve-challenge ljagiello skill Runs first-pass CTF triage, identifies the likely challenge category, and routes work to a specialized ctf-* skill. Use it when you have files, a remote service, or only a short prompt. Claude Code CX Codex Cursor +1 8,900installs websocket-engineer https://github.com/Jeffallan skill This skill guides WebSocket and Socket.IO work with bidirectional messages, rooms, presence tracking, and Redis-based scaling. Claude Code CX Codex Cursor +1 6,800installs ctf-misc ljagiello skill Provides reference techniques and payloads for miscellaneous CTF challenges like sandbox escapes, exotic encodings, and signal analysis. Claude Code CX Codex Cursor +1 8,800installs ctf-malware ljagiello skill A skill for analysing malware samples and network traffic in CTF challenges. It covers obfuscated scripts, PE and .NET files, PCAP captures, and C2 protocols. Claude Code CX Codex Cursor +1 8,700installs code-reviewer https://github.com/Jeffallan skill Analyzes code diffs and files to spot bugs, security vulnerabilities (SQL injection, XSS), code smells, N+1 queries, and returns a prioritized review report. Use for pull request reviews and code audits. Claude Code CX Codex Cursor +1 6,500installs codeql official github skill Walks you through CodeQL code scanning: Actions workflows, CLI commands, SARIF output, and fixing failed analyses. GitHub Copilot 2,000installs omni-auth cheaper-inference skill Manage API keys and sessions in OmniRoute. Authenticates requests via Bearer tokens, handles dashboard login with password or OIDC, and controls session access. Claude Code CX Codex Cursor +1 1,100installs review-agent-setup Tom Farley skill This skill gates AI review actions behind manual human approval before pull requests or CI pipelines change. Every attempt generates an Ed25519-signed receipt for offline auditing. Claude Code CX Codex Cursor 5,200installs semgrep trailofbits skill Runs a Semgrep static security audit on your codebase. It presents a plan for user confirmation and merges all findings into SARIF. Claude Code CX Codex Cursor +1 9,500installs audit-website squirrelscan skill Runs squirrel CLI audits against a website, pinpoints SEO, performance, and security issues, and applies fixes directly to source code. Claude Code CX Codex Cursor +1 73,900installs google-cloud-filestore-log-troubleshooting official google skill Diagnoses Google Cloud Filestore mount failures, access errors, and network timeouts. Use it when an NFS share stops mounting from a VM, GKE pod, or another supported workload. Claude Code Gemini CLI CX Codex 1,600installs security-reviewer https://github.com/Jeffallan skill Finds code and infrastructure vulnerabilities, assigns severity ratings, and suggests fixes. Use it for audits, secret scanning, and dependency checks. Claude Code CX Codex Cursor +1 6,000installs ctf-writeup ljagiello skill Generates a standardized markdown report for a solved CTF challenge, ready for organizer review and team handoff. Structures solution steps, tools, and the exploit code into a single submission-ready file. Claude Code CX Codex Cursor +1 7,800installs setup-api-key calesthio skill A skill that checks whether an ElevenLabs API key is configured and working, then walks the user through obtaining and saving a new key if needed. Claude Code CX Codex Cursor +1 1,000installs cso garrytan skill Audits code and infrastructure for security findings, with reproduction and repair candidates in comprehensive mode. Use it when reviewing a project. Claude Code CX Codex Cursor +1 405installs