This repository is a curated collection of skills, plugins, and automation pipelines designed for Claude Code — Anthropic's CLI for AI-assisted software engineering. It was built by the engineering and security engineering teams at Phoenix Security and released as open source so that security professionals, DevSecOps engineers, AppSec teams
☆81Nov 2, 2026Updated this week
Alternatives and similar repositories for security-skills-claude-code
Users that are interested in security-skills-claude-code are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- LANCE started as a tool to fill a gap that kept appearing: teams deploying LLMs into production with no structured adversarial evaluation…☆12Mar 17, 2026Updated 7 months ago
- A Burp Suite extension that detects, catalogs, and exports developer comments, secrets, and keywords embedded in both HTTP response bodie…☆19Sep 18, 2025Updated last year
- Maturity Model Collaborative project☆15Feb 27, 2023Updated 3 years ago
- Quick Set of vulnerability tool for Qxi-npm-compromise-checker☆17Nov 18, 2025Updated 11 months ago
- ☆13Oct 22, 2026Updated 2 weeks ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆13Nov 22, 2025Updated 11 months ago
- WebDirScan is a tool for brute-forcing URIs (directories and files) on web servers by taking input directory to scan for files & director…☆11Mar 31, 2023Updated 3 years ago
- ☆14Nov 27, 2025Updated 11 months ago
- Script to verify if Mini-Shai Hulud - Team PCP - Shai Hulud and Sha1-Hulud NPM package alike are affecting your NPM Build - check https:…☆11Oct 30, 2026Updated last week
- An AI agent skill that can be used to create queries in the CrowdStrike Query Language.☆16Apr 14, 2026Updated 6 months ago
- Threat-informed defense and cyber threat intelligence (CTI) analysis platform that correlates APT groups, MITRE ATT&CK tactics and techni…☆17Nov 4, 2025Updated last year
- Malkom is an extensible and simple similarity graph generator for malware analysis aimed at helping analysts visualize and cluster sets o…☆17Apr 6, 2023Updated 3 years ago
- Security testing toolkit for AI Agent: curated SecLists wordlists, injection payloads, and expert agents for authorized pentesting, CTFs,…☆395Jun 8, 2026Updated 5 months ago
- Intentionally vulnerable LLM☆34Aug 24, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A awesome curated list of security resources, hardening tools, threat research, and governance frameworks specifically for Claude Code☆40Mar 12, 2026Updated 7 months ago
- Dataset used in WAF-A-MoLE paper☆10Jun 3, 2020Updated 6 years ago
- Exploits for the house of IO class of vulnerabilities☆14Oct 10, 2021Updated 5 years ago
- an audiobook downloader for iOS written in swift☆14Sep 12, 2025Updated last year
- Man-in-the-middle red teaming for AI agents, inspired by AgentDojo☆16Updated this week
- A VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDE☆122Oct 5, 2026Updated last month
- Automatically analyze Cyber Threat Intelligence (CTI) reports using machine learning (ML) to identify MITRE ATT&CK techniques (T-Codes)☆20Nov 4, 2025Updated last year
- Companion repo to 'Opus-4.7 + Claude Routines & Managed Agents = PM Magic'. Production-ready prompts, sample outputs, engineer handoff br…☆16Apr 21, 2026Updated 6 months ago
- This repo hosts links to blogs, documentation and assets referenced by the Security Guide Blog.☆11Aug 26, 2026Updated 2 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- FULL reverse engineering of a 64-bit keylogger☆15Sep 5, 2025Updated last year
- A security system to protect your vibecoded apps☆286Mar 27, 2026Updated 7 months ago
- A prompt-based pipeline for finding, validating, and proving vulnerabilities using LLM sub-agents.☆96Jul 15, 2026Updated 3 months ago
- An MCP server providing tools for validating and rendering Mermaid diagrams.☆16Apr 1, 2025Updated last year
- a Java Base58 codec☆11Feb 26, 2018Updated 8 years ago
- fully autonomous credential intelligence platform that discovers, │ │ extracts, correlates, verifies, and reports exposed secrets acro…☆18May 10, 2026Updated 5 months ago
- A curated list of tools, platforms, frameworks, practices, and learning resources for Continuous Integration and Continuous Delivery/Depl…☆26Sep 6, 2026Updated 2 months ago
- Local desktop coding assistant you can run with any local model. No API key required. It can read your project, edit files, run commands,…☆18Updated this week
- Deploy a multi-cloud website running on AWS, Azure and Google Cloud, with Terraform and Cloudflare for free☆15Dec 3, 2019Updated 6 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Purpose management for this organization☆11Jan 13, 2026Updated 9 months ago
- Tools to interact with the Camunda 7 Community Edition Engine using the Model Context Protocol (MCP). Whether you're automating workflows…☆14Jul 24, 2025Updated last year
- Balanced Scorecard for Cyber Resilience☆13Nov 17, 2025Updated 11 months ago
- A tool to identify and remediate common misconfigurations in Active Directory Certificate Services☆19Jan 13, 2024Updated 2 years ago
- Passive macOS AirDrop monitor TUI — collects live telemetry from unified logs, AWDL, Bonjour, and sharingd☆14Mar 29, 2026Updated 7 months ago
- A Firefox browser extension for extracting secrets, endpoints, and custom regex matches from JavaScript sources on any web page.☆12Mar 30, 2026Updated 7 months ago
- Untangle is a multi-layer web server fingerprinting tool☆14May 14, 2024Updated 2 years ago