Security: skills, plugins, subagents, slash commands and mcp servers

mantis-threat-model official google skill Turns the Mantis knowledge base into a project threat model: trust boundaries, entry points, attacker profiles. Useful once the architecture is written down but the threat model is not. Claude Code CX Codex Cursor +1 1,800installs wordpress-penetration-testing zebbern skill This skill audits WordPress installations for common vulnerabilities and REST API permission issues in plugins. Designed for authorized security assessments. Claude Code CX Codex Cursor +1 1,100installs sign-in-with-google-web official google skill Guides Google Identity Services setup across web projects. It implements secure token handling and IETF authentication patterns. Claude Code Gemini CLI CX Codex 743installs google-cloud-scc-remediation official google skill This skill handles Google Cloud Security Command Center findings, from IAM fixes to resource misconfigurations. Use it when an agent must address a specific finding. Claude Code Gemini CLI CX Codex 742installs salesforce-apex-quality official github skill Checks Apex for governor-limit risks, security gaps, and missing tests. Use it when GitHub Copilot reviews or generates Salesforce classes, triggers, and test code. GitHub Copilot 884installs diagramming-code trailofbits skill Generates Mermaid diagrams from code graphs using Trailmark. Useful for visualizing call paths, module dependencies, and data flows. Claude Code CX Codex Cursor +1 4,200installs gmgn-token GMGNAI skill Researches a token by address through the GMGN API, covering price, liquidity, holders and contract risk. Use it before assessing a token purchase. Claude Code CX Codex Cursor +1 17,700installs pii-detect ruvnet skill Scans text, source code, and configs for personal data, tokens, and credentials before commits or logging. Flags exposed lines and suggests redaction. Claude Code CX Codex Cursor +1 762installs database-admin Seth Hobson subagent This subagent helps plan, migrate, monitor, and operate cloud databases. Use it for architecture work, reliability tasks, and database operations. Claude Code CX Codex Cursor 2,185installs code-reviewer sickn33 skill Configures your agent to perform deep code reviews focused on OWASP security flaws, resource leaks, and architecture patterns before merging changes. Claude Code CX Codex Cursor +1 1,000installs shopify-apps sickn33 skill Patterns for Shopify app development with Remix and React Router. Guides App Bridge setups, Polaris UI components, billing flows, and webhooks. Claude Code CX Codex Cursor +1 1,000installs backend-security-coder sickn33 skill Hardens backend application code with allowlist validation, safe database queries, secure cookie handling, and API authentication logic. Claude Code CX Codex Cursor +1 1,000installs twilio-communications sickn33 skill Helps build Twilio communication features: SMS, voice calls, WhatsApp messaging, and two-factor verification. Useful when wiring IVR systems or securing account logins. Claude Code CX Codex Cursor +1 994installs security-scan ruvnet skill Scans a repo at three depths: dependency audit, hard-coded secrets, risky code patterns. Useful before a release or while reviewing a PR. Claude Code CX Codex Cursor +1 748installs dependency-check ruvnet skill Scans project dependencies for known vulnerabilities and CVEs. Run before releases, after lockfile changes, or when investigating security advisories. Claude Code CX Codex Cursor +1 748installs mantis-plan official google skill Generates a targeted security review plan based on your threat model and historical findings. Run at the start of a review campaign to map code boundaries and prioritize what to check. Claude Code CX Codex Cursor +1 1,600installs mantis-summarize official google skill Builds a security-focused codebase map with mantis-summary.md files in each directory. Reduces token overhead during planning and research. Claude Code CX Codex Cursor +1 1,600installs trailmark trailofbits skill Builds and inspects multi-language code graphs to trace taint propagation, map attack surfaces, and prioritize security audits. Claude Code CX Codex Cursor +1 4,000installs anti-detect-browser antibrow skill Launch Chromium with a genuine device fingerprint through Playwright API. Each profile gets one coherent identity that persists across runs for testing, scraping, and multi-account work. Claude Code CX Codex Cursor +1 136,100installs safety-scan ruvnet skill Scans inputs for prompt injection, jailbreak attempts, and unsafe content before processing. Use it when handling untrusted data from users, APIs, or webhooks. Claude Code CX Codex Cursor +1 743installs wasm-agent ruvnet skill Creates and manages isolated WebAssembly agents for running untrusted code safely without host filesystem access. Claude Code CX Codex Cursor +1 739installs bash-pro sickn33 skill Teaches the agent to write defensive Bash scripts for CI/CD and ops, complete with Bats tests and ShellCheck linting. Claude Code CX Codex Cursor +1 963installs federation-audit ruvnet skill Reviews signed coordination evidence and active work claims across RuFlo Federation. Identifies stale state and duplicates without altering shared data. Claude Code CX Codex Cursor +1 729installs browser-login ruvnet skill Authenticates against a site once, sanitizes cookies through AIDefence, vaults the session handle, and lets other skills reuse it without re-logging in. Claude Code CX Codex Cursor +1 729installs iot-witness-verify ruvnet skill Verifies witness chain integrity for Cognitum Seed devices and detects provenance gaps. Useful for uncovering broken hash chains and missing epochs. Claude Code CX Codex Cursor +1 728installs computer-use-agents sickn33 skill Guides the architecture of AI agents that control screens, cursors, and keystrokes using Anthropic Computer Use or OpenAI Operator. Useful for sandboxed desktop and GUI automation. Claude Code CX Codex Cursor +1 959installs mermaid-to-proverif trailofbits skill Turns a Mermaid sequence diagram of a crypto protocol into a ProVerif model — a .pv file you can check for secrecy, authentication and forward secrecy. Claude Code CX Codex Cursor +1 3,900installs graph-evolution trailofbits skill Compares Trailmark code graphs across two code snapshots to spot structural security changes. It catches attack path expansion and privilege shifts that text diffs overlook. Claude Code CX Codex Cursor +1 3,900installs trailmark-structural trailofbits skill Builds a Trailmark graph for a target directory and reports complexity, taint, blast radius, privilege boundaries, and attack surface data. Claude Code CX Codex Cursor +1 3,900installs audit-augmentation trailofbits skill Projects SARIF static analysis reports, weAudit notes, and binary graphs onto Trailmark code graphs. Useful when mapping vulnerabilities to call graphs and data taint paths. Claude Code CX Codex Cursor +1 3,900installs plaid-fintech sickn33 skill Provides integration patterns for the Plaid API, covering Link tokens, ACH Auth, transaction sync, balance checks, and webhook handling. Claude Code CX Codex Cursor +1 956installs browser-form-fill ruvnet skill Fills web forms using a structured JSON field map and saved selector templates. It automates data entry and form submission directly in browser sessions. Claude Code CX Codex Cursor +1 717installs salesforce-component-standards official github skill Guides Salesforce UI development across LWC, Aura, and Visualforce. Enforces SLDS 2 compliance, accessibility, and platform security. GitHub Copilot 770installs mantis-meta-agent official google skill A campaign supervisor for Mantis security review: it keeps the loop running pass after pass and holds state and snapshots. Built for reviews that run long unattended. Claude Code CX Codex Cursor +1 1,500installs mantis-pipeline-adapter official google skill A consulting skill that walks you through building your own deterministic harness for running Mantis skills. Claude Code CX Codex Cursor +1 1,500installs mantis-patch official google skill Generates minimal security fixes in isolated environments, applies patches, and verifies them against reproduced vulnerability findings. Claude Code CX Codex Cursor +1 1,500installs mantis-calibrate official google skill Turns confirmed findings into a final risk score from 1 to 10, weighing reproduction evidence against architectural impact. Runs at the end of the pipeline, before the report. Claude Code CX Codex Cursor +1 1,500installs mantis-reproduce official google skill Generates and executes crash reproducers in isolated sandboxes to verify security flaws. It helps confirm findings before patching. Claude Code CX Codex Cursor +1 1,500installs mantis-dedupe official google skill Consolidates duplicate security findings before review. Use it after raw findings exist and several reports may describe the same flaw. Claude Code CX Codex Cursor +1 1,500installs mantis-report official google skill Transforms verified security findings and exploit chains into a professional markdown report. Use at the end of your review cycle to generate stakeholder-facing documentation. Claude Code CX Codex Cursor +1 1,500installs