Skip to content
Agentmart
Submit a tool

Best agent skills for security audits

We found 1,039 agent skills for security audits in the catalog; these are the 15 that rank highest. The order comes from our rank, which weighs adoption, freshness, documentation and publisher identity. Nobody can pay for a place on this list. security-advisory, ai-red-teaming and aig-scanner lead it. security-advisory, aig-scanner and owasp-asi are published by the company that makes them. cso comes from the largest repository here (137,493 stars). 14 of the 15 had activity in the last 30 days. Each entry lists why it made the list and links to its install page.

Updated Oct 26, 2026 · Built from catalog data; how we rank and grade

Top 15 of 1,039

  1. 1
    security-advisory

    modelcontextprotocolOfficial

    Take a privately reported vulnerability through this repo's security advisory flow: board it as a draft card, check whether the code is this repo's server or…

    • Published by the vendor
    • Repository has 91.5K stars
    • Active in the last 30 days

    ★ 91.5KLast active Oct 19, 2026Claude Code, Claude apps, Codex, Cursor +6

  2. 2
    ai-red-teaming

    devops-skills

    Run structured AI red team exercises for jailbreak resistance, data exfiltration risk, harmful output controls, and agent tool abuse resilience.

    • Repository has 48.4K stars
    • Active in the last 30 days
    • Open source (MIT)

    ★ 48.4KLast active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6

  3. 3
    aig-scanner

    TencentOfficial

    A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard.

    • Published by the vendor
    • Repository has 7.1K stars
    • Active in the last 30 days

    ★ 7.1KLast active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6

  4. 4
    component-vuln-intel

    AIPentest

    联网情报收集:识别组件后必做CVE/搜索引擎/中文社区/GitHub PoC/资产引擎/即时情报/依赖扩展+受阻换路。Use when a framework/component/version is identified and must search before exploit.

    • Repository has 8K stars
    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 8KLast active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6

  5. 5
    pentest-blackboard

    AIPentest

    CyberStrikeAI 项目黑板：跨会话 Fact 图（SQLite）+ upsert_project_fact/record_vulnerability 边渗透边记录节奏、关系边 links、confidence、与多代理协调落库。Use when managing project facts…

    • Repository has 8K stars
    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 8KLast active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6

  6. 6
    owasp-asi

    TencentOfficial

    OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework.

    • Published by the vendor
    • Repository has 7.1K stars
    • Active in the last 30 days

    ★ 7.1KLast active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6

  7. 7
    cso

    garrytan

    Security audit: supported static findings; qualified profiles add reproduction and repair candidates.

    • Largest repository here (137,493 stars)
    • Active in the last 30 days
    • Open source (MIT)

    ★ 137.5KLast active Oct 19, 2026Claude Code, Claude apps, Codex, Cursor +6

  8. 8
    security-audit

    cloudflareOfficial

    Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons.

    • Published by the vendor
    • Repository has 43.8K stars
    • Open source (MIT)

    ★ 43.8KLast active Sep 14, 2026Claude Code, Claude apps, Codex, Cursor +6

  9. 9
    security-review

    getsentryOfficial

    Security code review for vulnerabilities.

    • Published by the vendor
    • Repository has 1.1K stars
    • Active in the last 30 days

    ★ 1.1KLast active Oct 19, 2026Claude Code

  10. 10
    security-model

    getsentryOfficial

    Define, review, or update SECURITY_MODEL.md files that tell security review tools a repository's threat model, trust boundaries, invariants, reportable…

    • Published by the vendor
    • Repository has 1.1K stars
    • Active in the last 30 days

    ★ 1.1KLast active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6

  11. 11
    impl

    markuplint

    Implementation orchestrator — takes an agreed plan through implementation, carry-over approval, code review, security review, QA, docs consistency, lint/test…

    • Active in the last 30 days
    • Open source (MIT)
    • Ships helper scripts

    ★ 629Last active Oct 21, 2026Claude Code, Claude apps, Codex, Cursor +6

  12. 12
    regulatory-threat-model

    Ansvar Systems AB

    Use when an application or system — including one built quickly with AI coding agents — needs a security review with regulatory grounding: a STRIDE threat…

    • Active in the last 30 days
    • Open source (CC-BY-4.0)

    ★ 895Last active Oct 19, 2026Claude Code, Claude apps, Codex, Cursor +6

  13. 13
    incident-reporting-navigator

    Ansvar Systems AB

    Use when a security incident, data breach, or actively exploited vulnerability raises the question "who must we notify, where, and by when?" Screens one…

    • Active in the last 30 days
    • Open source (CC-BY-4.0)

    ★ 895Last active Oct 19, 2026Claude Code, Claude apps, Codex, Cursor +6

  14. 14
    vuln-assess-phase

    s0ld13rr

    Vulnerability analysis — triage scanner output, verify manually, score with CVSS, mark false positives.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 883Last active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6

  15. 15
    svc-mobile-android

    s0ld13rr

    Android APK static analysis — OWASP Mobile Top 10, Retrofit API audit, transport security, smali reading, component export, auth flow analysis.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 883Last active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6

Related