🔓Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
// uncategorizedusestrix/⟨Python⟩★ 66,516◷ Apache-2.0[ claude ]
Projects tagged #ai-security
// ai-security (26)
🔓
🔓The most comprehensive Claude Code guide: agentic workflows, hooks, skills, MCP servers, quizzes, and production-ready templates. 430K+ lines.
// devtoolsFlorianBruniaux/⟨Python⟩★ 6,103◷ CC-BY-SA-4.0[ claude ]
🔓AI-powered bug bounty hunting toolkit that works with or without subscription.
// securityAwarexone/⟨Python⟩★ 5,237◷ MIT[ claude ]
🔓AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.
// securityshuvonsec/⟨Python⟩★ 5,192◷ MIT[ claude ]
🔓A Claude Code skill bundle for bug hunting and external red-team work — 71 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vu…
// skillselementalsouls/⟨Python⟩★ 4,704◷ NOASSERTION[ claude ]
🔓Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built…
// uncategorizedCyberStrikeus/⟨TypeScript⟩★ 2,924◷ AGPL-3.0[ claude ]
🔓Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon…
// automation0xSteph/⟨Shell⟩★ 2,311◷ MIT[ claude ]
🔓A security scanner for your LLM agentic workflows
// mcp-serverssplx-ai/⟨Python⟩★ 1,057◷ Apache-2.0[ claude ]
🔓Local security audit for AI API relays and LLM proxies: detects prompt injection, model substitution, tool-call rewriting, SSE anomalies, error leakage, and…
// automationtoby-bridges/⟨Python⟩★ 865◷ AGPL-3.0[ claude ]
🔓Enterprise AI bastion host for secure AI API and MCP access, with unified proxying, RBAC, audit logs, rate limiting, and cost tracking across OpenAI, Anthrop…
// mcp-serversThinkWatchProject/⟨Rust⟩★ 814◷ NOASSERTION[ claude ]
🔓PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous operations.
// automations0ld13rr/⟨TypeScript⟩★ 721◷ MIT[ claude ]
🔓Open-source adversary emulation for AI agents and MCP servers.
// mcp-serversKeyValueSoftwareSystems/⟨TypeScript⟩★ 582◷ NOASSERTION[ claude ]
🔓Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connectors, scheduled task…
// mcp-serversHarmonicSecurity/⟨PowerShell⟩★ 298◷ Apache-2.0[ claude ]
🔓Generate Claude Code bug bounty skills from public HackerOne reports and GitHub writeups — 18 vuln classes, no private reports needed
// securityAwarexone/⟨Python⟩★ 243[ claude ]
🔓Generate Claude Code bug bounty skills from public HackerOne reports and GitHub writeups — 18 vuln classes, no private reports needed
// securityshuvonsec/⟨Python⟩★ 243[ claude ]
🔓Runtime safety for AI coding agents with real-time enforcement, system-event monitoring, and long-horizon provenance. Supports Claude Code and Codex on nativ…
// automationGenseeAI/⟨Rust⟩★ 126◷ Apache-2.0[ claude ]
🔓SAIL V2 (Secure AI Lifecycle) as an agent skill — the full 91-risk catalog for AI/agent gap assessments, security roadmaps, and compliance checklists. Instal…
// securitypillar-labs/★ 113◷ NOASSERTION[ claude ]
🔒argo✓
👁️ LLM-native static vulnerability detection. An LLM reads your source like a human auditor, point it at any local folder or repo and get a reviewable vuln…
// securitygigioneggiando/⟨Python⟩★ 62◷ Apache-2.0[ claude ]
🔓Claude skill that catches hidden prompt-injection text in documents before acting on them
// skillstomiBraunn/★ 19◷ MIT[ claude ]
🔓Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.
// mcp-serversSynvoya/⟨TypeScript⟩★ 47◷ MIT[ claude ]
🔓Claude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced from CVE…
// skillsFarenhytee/★ 48◷ MIT[ claude ]
🔓AI agent firewall that intercepts tool calls (file, shell, network) and enforces deterministic policies at sub-microsecond latency using CEL, IFC, secret sca…
// automationmayankjain0141/⟨Go⟩★ 39◷ MIT[ claude ]
🔓A Claude Code skill that security-audits vibe-coded SaaS apps. 50 common ways AI-generated apps get pwned, turned into a repeatable checklist, severity scori…
// securitylachydotmcg/★ 24◷ MIT[ claude ]
🔓A Claude / AI security review prompt for shipping safe apps. TRAP (True Readiness Audit Prompt) turns Claude Code, Cursor, or Copilot into an adversarial, ev…
// securitybikr/★ 20◷ MIT[ claude ]
🔓Eight security skills for Claude Code: secret scanning, Python SAST, prompt-injection testing, and HTTP, JWT, Dockerfile, CORS and dependency auditing. Stand…
// pluginsNovaCode37/⟨Python⟩★ 12◷ MIT[ claude ]
🔓The clean slate a fresh Claude Code should start from — clean context, locked credentials, guarded egress. Isolated profile, pick-and-choose.
// automationakasecurity/⟨Shell⟩★ 10◷ MIT[ claude ]