Skip to content
Agentmart
Submit a tool

Agent skills for security audits in Claude Code

1,039 agent skills for security audits in the catalog list Claude Code as a supported host. These are the 15 that rank highest, ordered by adoption, freshness and documentation. security-advisory, ai-red-teaming and aig-scanner lead the list. Claude Code reads them from .claude/skills/<name>/SKILL.md in the project, or ~/.claude/skills/<name>/ for every project. A skill is a folder with a SKILL.md file; Claude Code loads it when a task matches its description. Every listing links to its source and shows a freshness grade.

Updated Oct 26, 2026 · Built from catalog data; how we rank and grade

How to install in Claude Code

npx skills add <owner>/<repo> --skill <name> -a claude-code

Where it goes: .claude/skills/<name>/SKILL.md in the project, or ~/.claude/skills/<name>/ for every project.

The host's docs describe copying a folder with a SKILL.md into a skills directory; the npx skills command is a third-party shortcut for the same thing.

Each listing page has the exact command for that listing.

Top 15 of 1,039

  1. 1
    security-advisory

    modelcontextprotocolOfficial

    Take a privately reported vulnerability through this repo's security advisory flow: board it as a draft card, check whether the code is this repo's server or…

    • Published by the vendor
    • Repository has 91.5K stars
    • Active in the last 30 days

    ★ 91.5KLast active Oct 19, 2026Claude Code, Claude apps, Codex, Cursor +6

  2. 2
    ai-red-teaming

    devops-skills

    Run structured AI red team exercises for jailbreak resistance, data exfiltration risk, harmful output controls, and agent tool abuse resilience.

    • Repository has 48.4K stars
    • Active in the last 30 days
    • Open source (MIT)

    ★ 48.4KLast active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6

  3. 3
    aig-scanner

    TencentOfficial

    A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard.

    • Published by the vendor
    • Repository has 7.1K stars
    • Active in the last 30 days

    ★ 7.1KLast active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6

  4. 4
    component-vuln-intel

    AIPentest

    联网情报收集:识别组件后必做CVE/搜索引擎/中文社区/GitHub PoC/资产引擎/即时情报/依赖扩展+受阻换路。Use when a framework/component/version is identified and must search before exploit.

    • Repository has 8K stars
    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 8KLast active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6

  5. 5
    pentest-blackboard

    AIPentest

    CyberStrikeAI 项目黑板：跨会话 Fact 图（SQLite）+ upsert_project_fact/record_vulnerability 边渗透边记录节奏、关系边 links、confidence、与多代理协调落库。Use when managing project facts…

    • Repository has 8K stars
    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 8KLast active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6

  6. 6
    owasp-asi

    TencentOfficial

    OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework.

    • Published by the vendor
    • Repository has 7.1K stars
    • Active in the last 30 days

    ★ 7.1KLast active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6

  7. 7
    cso

    garrytan

    Security audit: supported static findings; qualified profiles add reproduction and repair candidates.

    • Largest repository here (137,493 stars)
    • Active in the last 30 days
    • Open source (MIT)

    ★ 137.5KLast active Oct 19, 2026Claude Code, Claude apps, Codex, Cursor +6

  8. 8
    security-audit

    cloudflareOfficial

    Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons.

    • Published by the vendor
    • Repository has 43.8K stars
    • Open source (MIT)

    ★ 43.8KLast active Sep 14, 2026Claude Code, Claude apps, Codex, Cursor +6

  9. 9
    security-review

    getsentryOfficial

    Security code review for vulnerabilities.

    • Published by the vendor
    • Repository has 1.1K stars
    • Active in the last 30 days

    ★ 1.1KLast active Oct 19, 2026Claude Code

  10. 10
    security-model

    getsentryOfficial

    Define, review, or update SECURITY_MODEL.md files that tell security review tools a repository's threat model, trust boundaries, invariants, reportable…

    • Published by the vendor
    • Repository has 1.1K stars
    • Active in the last 30 days

    ★ 1.1KLast active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6

  11. 11
    impl

    markuplint

    Implementation orchestrator — takes an agreed plan through implementation, carry-over approval, code review, security review, QA, docs consistency, lint/test…

    • Active in the last 30 days
    • Open source (MIT)
    • Ships helper scripts

    ★ 629Last active Oct 21, 2026Claude Code, Claude apps, Codex, Cursor +6

  12. 12
    regulatory-threat-model

    Ansvar Systems AB

    Use when an application or system — including one built quickly with AI coding agents — needs a security review with regulatory grounding: a STRIDE threat…

    • Active in the last 30 days
    • Open source (CC-BY-4.0)

    ★ 895Last active Oct 19, 2026Claude Code, Claude apps, Codex, Cursor +6

  13. 13
    incident-reporting-navigator

    Ansvar Systems AB

    Use when a security incident, data breach, or actively exploited vulnerability raises the question "who must we notify, where, and by when?" Screens one…

    • Active in the last 30 days
    • Open source (CC-BY-4.0)

    ★ 895Last active Oct 19, 2026Claude Code, Claude apps, Codex, Cursor +6

  14. 14
    vuln-assess-phase

    s0ld13rr

    Vulnerability analysis — triage scanner output, verify manually, score with CVSS, mark false positives.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 883Last active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6

  15. 15
    svc-mobile-android

    s0ld13rr

    Android APK static analysis — OWASP Mobile Top 10, Retrofit API audit, transport security, smali reading, component export, auth flow analysis.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 883Last active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6

Related