Agent Skills Index

Directory / Category / Security

Security: agent skills and plugins

37 entries: 21 from Claude Code, 1 from Codex, 15 from Awesome Copilot. Categories are our keyword-based grouping (see methodology); each entry also keeps its catalog's own category where one exists.

Software developmentDeployment, cloud & DevOpsData & databasesDesign & mediaDocuments & office filesProductivity & businessScience, research & learningOther

37 of 37 shown. Click a column header to sort.

crowdstrike-falcon-fusion
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema …
Claude CodepluginSecurity262026-08-06CrowdStrikeMIT
claude-security
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged befo…
Claude CodepluginSecurity43,0462026-07-22AnthropicSEE LICENSE IN
crowdsec
Operational skill for installing, configuring, operating, and debugging CrowdSec (cscli, LAPI/CAPI, hub, bouncers, WAF/AppSec) across bare-metal, Dock…
Claude CodepluginSecurity262026-07-21CrowdSecMIT
stackhawk-api
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data ret…
Claude CodepluginSecurity162026-07-21StackHawkMIT
stackhawk-hawkscan
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms …
Claude CodepluginSecurity162026-07-21StackHawkMIT
vanta
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific reme…
Claude CodepluginSecurity52026-06-03VantaMIT
duende-skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/au…
Claude CodepluginSecurity92026-05-19Duende Software–
workos
WorkOS integration skills for AuthKit, SSO, Directory Sync, RBAC, Vault, Audit Logs, migrations, and API references.
Claude CodepluginSecurity452026-05-19WorkOSMIT
Codex Security
Codex Security workflows for security scans, analysis, and investigation.
CodexpluginSecurity7,5022026-04-30OpenAIProprietary
crowdstrike-falcon-foundry
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, fu…
Claude CodepluginSecurity352026-04-29CrowdStrikeMIT
42crunch-api-security-testing
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Securit…
Claude CodepluginSecurity12026-04-2742Crunch–
jfrog
Use the JFrog Platform from Claude Code: Artifactory repos and artifacts, security findings and exposures, Catalog package safety and downloads, workf…
Claude CodepluginSecurity62026-04-27JFrog Ltd.Apache-2.0
auth0
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
Claude CodepluginSecurity532026-04-23Auth0Apache-2.0
vanta-mcp-plugin
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific reme…
Claude CodepluginSecurity52026-04-23VantaMIT
zscaler
Manage Zscaler cloud security platform including ZPA (private access), ZIA (internet access), ZDX (digital experience), ZCC (client connector), EASM (…
Claude CodepluginSecurity502026-04-23ZscalerMIT
sonarqube
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gat…
Claude CodepluginSecurity1122026-04-14SonarSource–
ai-plugins
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
Claude CodepluginSecurity102026-03-20–MIT
aikido
Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.
Claude CodepluginSecurity142026-03-20––
nightvision
Skills for working with NightVision, a DAST and API Discovery platform that finds exploitable vulnerabilities in web applications and REST APIs
Claude CodepluginSecurity32026-03-20–Apache-2.0
semgrep
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
Claude CodepluginSecurity172026-02-19––
sonatype-guide
Sonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get secure version…
Claude CodepluginSecurity42026-02-06––
agent-owasp-compliance
Check any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks. Use this skill when: - Evaluating an agent system's secu…
Awesome CopilotskillSecurity40,178––MIT
agent-skill-stack
Find, evaluate, and assemble the smallest compatible set of AI Agent Skills for an end-to-end natural-language goal. Use when a user wants Skills for …
Awesome CopilotskillSecurity40,178––MIT
ai-prompt-engineering-safety-review
Comprehensive AI prompt engineering safety review and improvement prompt. Analyzes prompts for safety, bias, security vulnerabilities, and effectivene…
Awesome CopilotskillSecurity40,178––MIT
audit-integrity
Enforce output quality, evidence verification, and quality gates across security audits. Use this skill when you perform SAST, SCA, threat modeling, o…
Awesome CopilotskillSecurity40,178––MIT
dependabot
Comprehensive guide for configuring and managing GitHub Dependabot. Use this skill when users ask about creating or optimizing dependabot.yml files, m…
Awesome CopilotskillSecurity40,178––MIT
flowstudio-power-automate-governance
Govern Power Automate flows and Power Apps at scale using the FlowStudio MCP cached store. Classify flows by business impact, detect orphaned resource…
Awesome CopilotskillSecurity40,178––MIT
geofeed-tuner
Use this skill whenever the user mentions IP geolocation feeds, RFC 8805, geofeeds, or wants help creating, tuning, validating, or publishing a self-p…
Awesome CopilotskillSecurity40,178–Sid Mathur <support@getfastah.com>Apache-2.0
mcp-implementation-security-review
Review the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline — authentication…
Awesome CopilotskillSecurity40,178––MIT
mcp-security-audit
Audit MCP (Model Context Protocol) server configurations for security issues. Use this skill when: - Reviewing .mcp.json files for security risks - Ch…
Awesome CopilotskillSecurity40,178––MIT
quarkus-application-development
Write Quarkus application code: REST with Quarkus REST, validation, exception mappers, OpenAPI, configuration, CDI (ArC), Hibernate ORM with Panache, …
Awesome CopilotskillSecurity40,178––MIT
salesforce-component-standards
Quality standards for Salesforce Lightning Web Components (LWC), Aura components, and Visualforce pages. Covers SLDS 2 compliance, accessibility (WCAG…
Awesome CopilotskillSecurity40,178––MIT
secret-scanning
Guide for configuring and managing GitHub secret scanning, push protection, custom patterns, and secret alert remediation. For pre-commit secret scann…
Awesome CopilotskillSecurity40,178––MIT
security-guidance
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catch…
Claude CodepluginSecurity43,046–Anthropicsee LICENSE file
security-review
AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, an…
Awesome CopilotskillSecurity40,178––MIT
threat-model-analyst
Full STRIDE-A threat model analysis and incremental update skill for repositories and systems. Supports two modes: (1) Single analysis — full STRIDE-A…
Awesome CopilotskillSecurity40,178––MIT
tm7-threat-model
Creates valid Microsoft Threat Modeling Tool (.tm7) files compatible with the Microsoft Threat Modeling Tool v7.3+. Use this skill whenever asked to c…
Awesome CopilotskillSecurity40,178––MIT

Get the new agent skills and plugins

A short email when new skills and plugins land in the Claude Code, Codex and community catalogs we track. No spam. Every email has a one-click unsubscribe link.