ai-security-arsenal: A collection of skills, agents, commands, and workflows for security researchers

by hardw00t · Claude Skill · ★ 90

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

Security audit verdict: SAFE · quality 66/100

None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

Quick Facts

Stars90
Forks14
LanguagePython
CategoryClaude Skill
Quality Score66/100
Last Updated2026-04-19
Created2026-01-12
Platformsclaude-code, python
Est. Tokens~59k

About ai-security-arsenal

AI Security Arsenal A collection of skills for automated security testing, penetration testing, and security assessment workflows with coding agents like Claude Code, Codex, OpenCode, and others. Each skill is structured as a thin router (, 150-250 lines) with lazy-loaded sibling content (, , , , , ).

Compatible Skills

These tools work well together with ai-security-arsenal for enhanced workflows:

  • opencode — semantic(0.20)+complementary+same_lang+similar_pop+shared_platform (57%)
  • Claude-Code-Skills-for-Academics — semantic(0.33)+complementary+same_lang+similar_pop+shared_platform (57%)
  • memstack — semantic(0.18)+complementary+same_lang+similar_pop+shared_platform (56%)

More Claude Skill Tools

Explore other popular claude skill tools:

View all Claude Skill tools →

Popular Python Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse Claude Skill tools