MCP CheckClaude skills for security scanning
The 50 strongest of 437 security scanning skills on GitHub. Skills built for security scanning come first; no repository gets more than 3 spots. Each links to its folder; copy it into ~/.claude/skills/ to use it.
security scan
对进入系统的文件或 URL 执行安全与合规扫描，输出 pass/reject 判定与扫描报告，作为所有文档处理的强制前置关卡。
anbeime/skill★ 8.9kNo licence statedFolder:
security-scanantinet security scan
信息安全分析师与软件开发工程师在搭建文档处理流水线时，当需要拦截违规文件或外部URL，请挂载此技能作为强制前置安检，自动输出 pass/reject 判定与详细合规扫描报告，一键守住零信任安全底线。
anbeime/skill★ 8.9kNo licence statedFolder:
antinet-security-scanalgorand vulnerability scanner
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues. Use when auditing Algorand projects (TEAL/PyTeal).
trailofbits/skills★ 7.9kCC-BY-SA-4.0Folder:
algorand-vulnerability-scannercosmos vulnerability scanner
Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence. 25 core + 16 IBC + 10 EVM + 3 CosmWasm patterns. Use when auditing custom x/ modules, reviewing IBC integrations,…
trailofbits/skills★ 7.9kCC-BY-SA-4.0Folder:
cosmos-vulnerability-scannercairo vulnerability scanner
Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay. Use when auditing StarkNet projects.
trailofbits/skills★ 7.9kCC-BY-SA-4.0Folder:
cairo-vulnerability-scannerpentest checklist
This skill should be used when the user asks to "plan a penetration test", "create a security assessment checklist", "prepare for penetration testing", "define pentest scope", "follow security testing best practices", or needs a structured methodology for…
zebbern/claude-code-guide★ 4.7kMITFolder:
pentest-checklistpentest commands
This skill should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john", "scan web vulnerabilities with nikto", "enumerate networks", or needs essential penetration testing…
zebbern/claude-code-guide★ 4.7kMITFolder:
pentest-commandssqlmap database pentesting
This skill should be used when the user asks to "automate SQL injection testing," "enumerate database structure," "extract database credentials using sqlmap," "dump tables and columns from a vulnerable database," or "perform automated database penetration…
zebbern/claude-code-guide★ 4.7kMITFolder:
sqlmap-database-pentestingsecurity scanning
AgentShield security audit with 5 scanning categories, 102 static analysis rules, and optional red-team simulation.
a5c-ai/babysitter★ 1.9kMITFolder:
security-scanningagentlas security scan
Use when an agent folder must pass the Agentlas Cloud 2-stage security scan (static rules + BYOK LLM judgment) before private sync or public publish, or when asked to run/interpret `hephaestus security scan`.
agentlas-ai/Agentlas-OS★ 1.6kApache-2.0Folder:
agentlas-security-scancra vulnerability obligations
Use when a user asks what the EU Cyber Resilience Act (CRA) means for their product, whether and when they must report a vulnerability or incident, or what a specific CVE triggers legally. Maps a product with digital elements to CRA scope, product…
lawve-ai/awesome-legal-skills★ 911Licence: see repoFolder:
cra-vulnerability-obligations-jeffrey-von-rotzconfig security scan
Scan .claude/ directory for security misconfigurations, exposed secrets, unsafe permissions
vibeeval/vibecosystem★ 541MITFolder:
config-security-scan02 vulnerability scanner
Dependency auditing, CVE detection, configuration security review, CVSS
Masriyan/Claude-Code-CyberSecurity-Skill★ 529Licence: see repoFolder:
02-vulnerability-scannermanaging vulnerabilities
Implementing multi-layer security scanning (container, SAST, DAST, SCA, secrets), SBOM generation, and risk-based vulnerability prioritization in CI/CD pipelines. Use when building DevSecOps workflows, ensuring compliance, or establishing security gates…
ancoleman/ai-design-components★ 525MITFolder:
managing-vulnerabilitiescve source check
Audit CVE/vulnerability source coverage for a technology stack. Maps each component (container, library, base image, runtime) to authoritative CVE feeds, flags gaps, and produces audit-ready reports. Generic: works for any service or stack.
notque/vexjoy-agent★ 443MITFolder:
cve-source-checkmobile pentest
Use when pentesting an Android/iOS app — Frida 17 instrumentation, SSL-pinning & root/jailbreak bypass, Android 14/15 CA injection, exported-component/content-provider abuse, deep-link/WebView chains, biometric bypass, Flutter/React-Native RE
hypnguyen1209/offensive-claude★ 403MITFolder:
mobile-pentestvulnerability analysis
Use when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety, deserialization/prototype-pollution, secrets/crypto/authz/race, and supply-chain risks
hypnguyen1209/offensive-claude★ 403MITFolder:
vulnerability-analysisweb pentest
Use when pentesting a web application or API — injection, XSS/CSP, SSRF/cloud-metadata, HTTP desync & cache poisoning, SSTI/prototype-pollution/deserialization, JWT/OAuth/GraphQL/IDOR, business logic & single-packet race
hypnguyen1209/offensive-claude★ 403MITFolder:
web-pentestcve reachability analyzer
Analyze CVE reachability in software repositories by examining how vulnerable dependencies are imported and used. Determines whether vulnerable components, classes, or functions are reachable from project code through call chain analysis, reflection…
ArabelaTso/Skills-4-SE★ 260Apache-2.0Folder:
cve-reachability-analyzercve watchlist action recommendation generator
Generate prioritized CVE watchlists and actionable security recommendations for repositories. Use when analyzing CVE scan results, creating security reports, prioritizing vulnerability remediation, or generating security gate reports for CI/CD. Takes CVE…
ArabelaTso/Skills-4-SE★ 260Apache-2.0Folder:
cve-watchlist-action-recommendation-generatorDependency Vulnerability Scanner
Automated scanning of project dependencies for known vulnerabilities using tools like npm audit, Snyk, and Dependabot patterns.
PramodDutta/qaskills★ 244MITFolder:
dependency-vulnerability-scannercve allocate
Walk a governance-authorised member through allocating a CVE for a tracker: allocate it through the `<cve-tool>` API when the tool supports it, else print the allocation link and title and take the allocated ID, then update the tracker (field, label,…
apache/magpie★ 130Apache-2.0Folder:
cve-allocategenerate cve json
Generate a CVE 5.x JSON document from an <tracker> tracking issue, ready to paste into the Vulnogram `#source` tab of the ASF CVE tool at https://cveprocess.apache.org/cve5/<CVE-ID>#source. The conversion is deterministic: same issue in, same JSON bytes…
apache/magpie★ 130Apache-2.0Folder:
generate-cve-jsonanalyzing sbom for supply chain vulnerabilities
'Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON
adriannoes/awesome-agentic-ai★ 89MITFolder:
analyzing-sbom-for-supply-chain-vulnerabilitiesclaude pentest skills
Structured web application penetration testing with OWASP methodology, curated payload references, 6-gate validation, and professional report generation
frendysanusi/claude-pentest-skills★ 64No licence statedFolder:
claude-pentest-skillschain vulnerability scanner
Use when an Algorand, Cairo, Cosmos SDK, Solana, Substrate, or TON codebase needs vulnerability scanning with reachability-backed findings. Not for non-chain review: use security-review.
OutlineDriven/outline-driven-development★ 55Apache-2.0Folder:
chain-vulnerability-scannerBlackpoint Vulnerability Management
Blackpoint Cyber (CompassOne) exposure data across four lenses: host vulnerability findings and the filters that matter (CVE, severity, patch and exploit availability), scan history, dark-web credential and data leaks, and internet-facing external…
WYRE-AI/msp-claude-plugins★ 52Apache-2.0Folder:
vulnerability-managementpentest helper
Assist authorized penetration testing — recon methodology, vulnerability identification, and report writing.
inbharatai/claude-skills★ 41MITFolder:
pentest-helperbandit security scanner
Routine utility auditing environment info.
qualixar/skillfortify★ 40Licence: see repoFolder:
bandit-security-scannercve research
Use when checking a specific dependency or package version for known CVEs and security advisories.
Fusengine/claude-plugins★ 34MITFolder:
cve-researchvulnerability research
Research vulnerabilities in authorized targets through code analysis, reverse engineering, patch diffing, and fuzzing.
iuliandita/skills★ 10MITFolder:
vulnerability-researchsecurity and hardening
Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or external integrations, or when checking a login flow is safe against the OWASP Top Ten. Use when…
addyosmani/agent-skills★ 112kMITFolder:
security-and-hardeningdeal with security advisory
Handle confidential GitHub Security Advisory response for Paperclip. Use when coordinating advisory triage, private-fork fixes, CVE/publication steps, and immediate security releases.
paperclipai/paperclip★ 109kMITFolder:
deal-with-security-advisorysecurity research
Team Mode security research skill. Orchestrates 3 vulnerability hunters and 2 PoC engineers to audit a codebase in parallel, prove exploitability, classify root causes, and calibrate severity by actual exploitability. Use for security review, vulnerability…
code-yeongyu/oh-my-openagent★ 70kLicence: see repoFolder:
security-researchagentic actions auditor
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD…
sickn33/agentic-awesome-skills★ 49kMITFolder:
agentic-actions-auditorsolidity security
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.
wshobson/agents★ 42kMITFolder:
solidity-securityai prompt engineering safety review
Comprehensive AI prompt engineering safety review and improvement prompt. Analyzes prompts for safety, bias, security vulnerabilities, and effectiveness while providing detailed improvement recommendations with extensive frameworks, testing methodologies,…
github/awesome-copilot★ 41kMITFolder:
ai-prompt-engineering-safety-reviewskill security auditor
Security auditing for code, configs, and infrastructure. Use when the user wants to audit or improve security: scan for vulnerabilities (SQL injection, XSS, command injection, path traversal), detect hardcoded secrets and credentials, review auth and…
eigent-ai/eigent★ 16kApache-2.0Folder:
skill-security-auditorcode reviewer
Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then produces a structured review report with prioritized,…
Jeffallan/claude-skills★ 12kMITFolder:
code-reviewersecure code guardian
Use when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities — including custom security implementations such as hashing passwords with bcrypt/argon2, sanitizing SQL queries with parameterized…
Jeffallan/claude-skills★ 12kMITFolder:
secure-code-guardiansecurity reviewer
Identifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance. Use when conducting security audits, reviewing code for vulnerabilities, or analyzing infrastructure security.…
Jeffallan/claude-skills★ 12kMITFolder:
security-revieweroffensive container escape
Container escape and breakout techniques targeting Docker, containerd, and Podman runtimes. Covers privileged container breakout via host filesystem mount and nsenter, Docker socket abuse through /var/run/docker.sock, Linux capability exploitation…
SnailSploit/Claude-Red★ 9.8kMITFolder:
offensive-container-escapeoffensive tls attacks
Comprehensive methodology for auditing and exploiting TLS/SSL implementations and misconfigurations across network services and mobile applications. Covers protocol downgrade attacks including POODLE (CVE-2014-3566) against SSLv3 CBC padding, DROWN…
SnailSploit/Claude-Red★ 9.8kMITFolder:
offensive-tls-attacksoffensive linux privesc
Comprehensive Linux privilege escalation methodology for offensive security engagements. Covers the full attack surface from a low-privilege shell to root: SUID/SGID binary abuse via GTFOBins, Linux capabilities exploitation (cap_setuid, cap_dac_override,…
SnailSploit/Claude-Red★ 9.8kMITFolder:
offensive-linux-privescamazon competitor analyzer
Scrapes Amazon product data from ASINs using browseract.com automation API and performs surgical competitive analysis. Compares specifications, pricing, review quality, and visual strategies to identify competitor moats and vulnerabilities.
browser-act/skills★ 6.3kMITFolder:
amazon-competitor-analyzerenterprise vpn attack
External SSL VPN / remote-access appliance attack matrix — Cisco ASA/AnyConnect, Fortinet FortiGate/FortiOS, Citrix NetScaler/ADC, Palo Alto GlobalProtect, Pulse Secure / Ivanti Connect Secure, SonicWall, F5 Big-IP. Covers version fingerprinting, CVE…
elementalsouls/Claude-BugHunter★ 5.3kMITFolder:
enterprise-vpn-attackbug bounty
Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF,…
elementalsouls/Claude-BugHunter★ 5.3kMITFolder:
bug-bountyhunt auth bypass
Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterprise CVE-2025-25291/25292), SAML signature stripping (Uber, Rocket.Chat, samlify CVE-2025-47949), SAML domain…
elementalsouls/Claude-BugHunter★ 5.3kMITFolder:
hunt-auth-bypasssecurity
Security audit workflow - vulnerability scan → verification
parcadei/Continuous-Claude-v3★ 3.9kMITFolder:
securitygolang continuous integration
GitHub Actions CI/CD pipeline configuration for Golang projects — workflow files for test, lint, SAST, coverage and vulnerability-scan jobs, Dependabot and Renovate config files, GoReleaser release pipelines, Docker build/push, repository security…
samber/cc-skills-golang★ 3.7kMITFolder:
golang-continuous-integration
Claude skills for security scanning: before you install one
Is there a Claude skill for security scanning?
There are 437 of them, spread over 181 repositories on GitHub. Named for it and most starred: security scan (anbeime/skill, ★ 8.9k), antinet security scan (anbeime/skill, ★ 8.9k) and algorand vulnerability scanner (trailofbits/skills, ★ 7.9k). Stars rate the repository a skill sits in, not the skill.
How do I install a Claude skill for security scanning?
For security scanning, take the security-scan folder from anbeime/skill (the folder that holds SKILL.md) into ~/.claude/skills/ to use it in every Claude Code project, or into .claude/skills/ for one project. In the Claude apps, zip that folder and upload it as a custom skill in settings.
Are all these security scanning skills in English?
No: 2 of those listed, such as security scan and antinet security scan, are written mainly in Chinese, Japanese, Korean or Russian rather than English, though the security scanning task is the same. Claude can follow them either way, but read them before you install.
Should I use a skill or an MCP server for security scanning?
A skill teaches Claude a way of working; an MCP server gives it new tools, like access to security scanning itself. We list 151 MCP servers for security scanning if you need the connection.
Are these security scanning skills official?
No. None of the 437 security scanning skills comes from Anthropic's own skills repository, so all of them are community-made across 181 repositories.
Can I use these security scanning skills at work?
Of the 50 security scanning skills listed here, 40 sit in repositories under an open licence such as MIT or Apache 2.0, and 3, such as security scan and antinet security scan, state no licence at all, which legally means you may not reuse them. Check the licence file before you copy one into company work.
More topics: every “Claude skills for…” page.