Bounty Security Pattern Master Library — 399 Vulnerability Patterns
$75
A premium library of 399 vulnerability patterns and DeFi attack vectors for AI-driven bug hunting and security audits.
8
195.0(1)
Claude Skills for Security
Skills for security audits, static analysis, vulnerability triage, threat modeling, and secrets hygiene. Ship safer software with fewer surprises.
1,509 live security skills for Claude Code.
New in Security
security audit
by Roy Yuen
$10
Professional security audit skill for web apps and APIs with structured severity-based findings and remediation plans.
5
0
truth first enterprise
by Roy Yuen
$5
Transform AI claims into verified, risk-assessed technical reports for production, DevOps, and enterprise governance.
3
1
security first
by Roy Yuen
Free
Prevent vulnerabilities before they happen by forcing early security framing and secure-by-default design patterns.
2
1074.5(2)
skill security vendor pack
by Roy Yuen
Free
Audit AI agent skills for security risks, packaging errors, and marketplace readiness with professional reports.
3
365.0(1)
cybersecurity bridge for all agentic
by Roy Yuen
Free
A high-performance wrapper to route security tasks directly to the Anthropic-Cybersecurity-Skills library.
3
41
AI Cleanroom Solutions Tool Cleanroom Design
Free
Expert AI guidance for ISO-compliant cleanroom design, HVAC filtration setup, and controlled environment installation.
2
15
skill install safety gate
by Roy Yuen
Free
Automated security and compatibility firewall for installing AI agent skills and Codex/OpenClaw packages.
2
27
dependency auditor
by Samuel Rose
$5
Audit dependencies for security, licenses, and health while generating a phased, low-risk upgrade and migration plan.
1
1
Skill Safety Scanner
$29
Scan AI agent skill definitions for malicious instructions, prompt injections, and security risks—locally.
2
0
Dependency Upgrade Planner
by Edric Vale
$5
Safe dependency upgrade plans: changelog-aware risk scoring, test hints, and rollback paths.
12
91
Claude Code Security Hooks
by Shogun Labs
$15
Pre-commit security hooks: secret detection, destructive command prevention
2
0
business ai governance mesh
by Roy Yuen
$7
A modular governance framework for AI policy, agent risk assessment, human-in-the-loop approvals, and audit trails.
2
0
campaign attribution evidence analysis
by LocoLoboZ
$12
Professional CTI analysis skill for structured attribution using ACH, Diamond Model, and confidence scoring.
2
0
agent permission boundary audit
by Roy Yuen
$5
Automated governance and risk audit for AI agent tool permissions and authentication boundaries.
2
0
Bug Bounty Triage
$15
Accelerate your bounty hunting with smart program prioritization and vulnerability report triaging for DeFi protocols.
2
0
Accessibility Auditor (WCAG 2.2)
by rayyer
$10
Find accessibility barriers and WCAG 2.2 AA failures in web and mobile UI code — with file:line, the exact criterion, and a fix
2
15.0(1)
ai security auditor
by Timoranjes
Free
Your AI agent has access to 12 tools, reads from a vector database, and executes shell commands.
2
21
Claude Code Agent Harness Setup
by Shogun Labs
$15
Project-specific Claude Code agent harness setup
2
0
industrial security zones designer
by LocoLoboZ
$15
Design and validate IEC 62443-compliant security zones and conduits for industrial (OT) networks.
2
0
🛡️ Skill Injection Scanner
$15
Review Markdown and YAML skill files for suspicious instruction patterns, with source excerpts withheld and incomplete inputs clearly flagged. Requires Python 3.12+.
1
0
MCP Server Safety Checklist
$15
Automated security auditing and risk assessment for Model Context Protocol (MCP) servers.
1
0
x402 attack surface gate
by Tate Lyman
$19
Automated launch-readiness auditor for x402 and agent-payment API surfaces.
2
0
Claude security skills for audits and vulnerabilities
A Claude security skill gives Claude Code a fixed checklist for reviewing code and dependencies, so every release gets the same checks. Pick by task.
Audit a web app or API. security audit (USD 10) reviews web apps, backend services and APIs across authentication, sessions, input validation and configuration. Tip: point it at one service and its entry points, not the whole monorepo.
Map findings to the OWASP Top 10 and scan for secrets. A second listing, also named security audit (USD 25), runs semgrep, gitleaks and dependency checkers, maps findings to the OWASP Top 10:2025 and scans git history for leaked credentials. Tip: rotate a leaked secret first, then clean the history.
Set up static analysis. sast configuration (USD 10) sets up and tunes Semgrep, SonarQube and CodeQL. Tip: tune out noisy rules before the scan is allowed to block merges.
Check dependencies and triage reports. dependency auditor (USD 5) checks security, licenses and health and proposes an upgrade plan. Bug Bounty Triage (USD 15) and Bounty Security Pattern Master Library (USD 75), built around DeFi attack patterns, help with vulnerability reports. Tip: use offensive skills only on systems you own or have written permission to test.
Skills that secure your agent, skills and MCP servers
Skill Safety Scanner (USD 29) scans skill definitions locally for malicious instructions and prompt injection, and skill install safety gate is free and checks a package before you add it. agent permission boundary audit (USD 5) reviews tool rights, MCP Server Safety Checklist (USD 15) covers MCP servers and Claude Code Security Hooks (USD 15) blocks destructive commands. Tip: run the scanner on any skill you did not write before you give it shell access.
How to choose a Claude Code security skill
Pick the web app audit for a release review, the OWASP version when you also need secrets scanning, and the agent-side skills when your risk is the agent itself. Validate any security skill yourself: open the SKILL.md preview and check allowed-tools and disallowed-tools, any hooks, the files it reads, its users, updates and the scan result; here is how the Agensi security scan works. Connect your agent to Agensi once and Claude loads the latest approved version when the task fits or when you ask for it by name, with nothing saved to ~/.claude/skills. A skill never replaces a human review.
AppSec engineers, developers, DevSecOps teams and authorized bug bounty hunters use these skills. Compare more in our guide to the best security auditing skills, read our guide to agent skills security and whether skills are safe to install, and see DevOps and cloud skills, code review skills or the Claude skills marketplace.
Frequently asked questions
Connect an MCP-compatible agent to Agensi and ask it to use the skill on your task. Approve any required purchase. The latest approved instructions load on each use; never save skill files to disk.
Some are free, but most are paid. Paid skills show the price upfront, are a one-time purchase, and include future updates from the creator.
Yes. Every listing is checked by an 8-point automated security scan before it can go live, and the result is shown on each skill page alongside the file list.
Get in touch
Questions, partnership ideas, or feedback on the platform? Tell us what's working and what isn't, we love to hear from you!
SR
Samuel Rose
Founder & CEO of Agensi
Email UsBook a Callinfo@agensi.io
We typically respond within a few hours during business hours.