Reduce your security risks by design.
33 skills that add layers of protection to your Claude setup: scanning inbound links and attachments, detecting prompt injection attempts, auditing MCP configs, tracing redirect chains, keeping API keys in an encrypted vault, and detecting MCP server changes. Tamper-evident audit logs, hardened settings, M365 posture checks, and backup verification. Defense-in-depth designed for non-engineers.
Start here
email-safety-scan
Tiered safety scanner for URLs AND email attachments.
mcp-config-auditor
Audits `.mcp.json` and Claude Code MCP config files across a workspace for plaintext secrets, hardcoded API keys (instead of `${VAR}` interpolation), suspicious…
prompt-injection-detector
Scans web page content, document text, OCR output, or any untrusted text for prompt-injection patterns (hidden instructions, role-override attempts, "ignore pre…
skill-supply-chain-scanner
Static supply-chain risk scan of a Claude Code skill BEFORE you install it. A marketplace skill is just code that runs with your permissions; this reads its fil…
All 33 security skills
email-safety-scan
Tiered safety scanner for URLs AND email attachments.
mcp-config-auditor
Audits `.mcp.json` and Claude Code MCP config files across a workspace for plaintext secrets, hardcoded API keys (instea…
prompt-injection-detector
Scans web page content, document text, OCR output, or any untrusted text for prompt-injection patterns (hidden instructi…
skill-supply-chain-scanner
Static supply-chain risk scan of a Claude Code skill BEFORE you install it. A marketplace skill is just code that runs w…
agent-audit-log
Tamper-evident audit log of every tool call an AI agent makes.
auth-flow-guardian
Flags look-alike sign-in pages before you type a password.
backup-restore-verify
Prove that backups actually restore, and keep the evidence.
browser-permission-auditor
Reviews installed Chrome, Edge, and Firefox extensions for risky permissions.
claude-hardening-kit
Generate a hardened Claude Code managed-settings.json for a client machine from a profile (baseline, strict, msp-client)…
clipboard-leak-warning
Scans the system clipboard for secrets, PII, or credentials BEFORE you paste anything sensitive into an AI chat (Claude,…
dark-web-monitor
Weekly dark web breach monitoring plus on-demand prospect reports for MSPs. Replaces $130/mo PIIGuard360 / PIISecured / …
dependency-vulnerability-scan
Scans `package.json`/`package-lock.json`, `requirements.txt`/`Pipfile.lock`, `go.mod`/`go.sum`, `Gemfile.lock`, `Cargo.l…
dns-email-auth-auditor
Audits a sending domain's email-authentication DNS records, SPF, DKIM (probes common selectors), DMARC, MTA-STS, BIMI, a…
email-attachment-scan
Scans file attachments for malware.
email-link-safety-scan
Tiered URL safety scanner.
form-autofill-guard
Inspects HTML forms for fields hidden via type=hidden, display:none, visibility:hidden, off-screen positioning, zero-siz…
hallucination-detector
Scans LLM-generated output (code, suggestions, docs) for references to files, functions, classes, or packages that do NO…
link-safety-scan
Tiered URL safety scanner for ANY source, emails, web research, pasted links, social DMs, chat messages, search results.
m365-posture-check
Read-only Microsoft 365 security posture report for a small business tenant, written for the owner in plain language wit…
mass-send-guard
Detects bulk/mass-send patterns before any outbound message.
mcp-rugpull-guard
Detects MCP "rug pulls", where a server you already approved quietly changes a tool description or schema, adds or remov…
oauth-scope-auditor
Audits OAuth consent screens for over-broad scope requests.
outgoing-message-sanitizer
Single-call safety check before any outbound message, email, Slack, LinkedIn DM, SMS, Teams, public post.
outlook-header-analyzer
Diagnoses what happened to an email by parsing its raw message headers.
password-breach-checker
Checks if a password (or list of passwords) appears in known data breaches via the Have I Been Pwned (HIBP) Pwned Passwo…
pii-redactor
Redacts personally identifiable information (PII) from text, emails, phone numbers, US SSNs, credit cards (Luhn-validate…
referrer-leak-warning
Warns when clicking or rendering a link will leak the current URL via the HTTP Referer header.
secret-leak-scanner
Scans files, folders, git diffs, clipboard text, or any string for leaked credentials, API keys, OAuth tokens, AWS keys,…
social-engineering-detector
Analyzes a message (email body, SMS, Slack DM, voicemail transcript, LinkedIn message) for social-engineering and manipu…
traiga-readiness
Texas Responsible Artificial Intelligence Governance Act (HB 149, effective 2026-01-01) readiness checklist for small bu…
url-redirect-tracer
Follows HTTP redirects from a shortened URL (bit.ly, tinyurl, t.co, etc.) up to N hops without executing JavaScript, sho…
vendor-risk-scorecard
Computes a due-diligence risk score for a new vendor from a checklist of inputs - W-9 on file, COI/cyber insurance amoun…
windows-intrusion-detector
Tripwire-style intrusion detection for Windows endpoints. Scans the last 7-30 days of Windows Security event log via Pow…