The 9 Best Claude Code Skills for Security

Ranked by quality, maintenance and a safety scan of every file · Updated September 2026

Skills for security review, vulnerability hunting, audits and secure coding. We compared 9 Claude Code Skills for Security that pass our quality bar, 100% of which came up clean on our safety scan; these are the top 9, no more than three from any one repository.

1
audit-skills
by sickn33
Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads across Windows, macOS, Linux/Unix, and Mobile (Android/iOS).
Quality 97/100Safety scan clean★ 46,875Updated today
Why it is here: highest quality score in this list; updated in the last day; clean safety scan.
```
npx skills add sickn33/agentic-awesome-skills --skill audit-skills
```
2
audit-context-building
by sickn33
Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.
Quality 91/100Safety scan clean★ 46,875Updated today
Why it is here: updated in the last day; clean safety scan; 46,875 GitHub stars.
```
npx skills add sickn33/agentic-awesome-skills --skill audit-context-building
```
3
cyber-neo
by Hainrixz
Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabilities across all OWASP 2025 Top 10 and CWE Top 25 categories. 11 security domains, 60+ secret patterns, parallel subagent analysis, professional report generation. Built by tododeia.com
Quality 90/100Safety scan clean★ 270Updated 2026-07-18
Why it is here: clean safety scan.
```
npx skills add Hainrixz/cyber-neo
```
4
cti-expert
by 7onez
CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.
Quality 83/100Safety scan clean★ 598Updated 3 days ago
Why it is here: updated 3 days ago; clean safety scan.
```
npx skills add 7onez/cti-expert
```
5
kali-pentest
by x-glacier
Kali Linux penetration testing skill for AI agents (Claude Code, OpenClaw, Hermes Agent). 200+ CLI tools, 15 scenario playbooks. Autonomously plans attack paths, selects tools, and integrates results across phases to adapt the penetration strategy — with human approval gates for high-risk actions.
Quality 84/100Safety scan clean★ 121Updated 2026-06-25
Why it is here: clean safety scan.
```
npx skills add x-glacier/kali-pentest
```
6
claude-cybersecurity
by AgriciDaniel
AI-powered cybersecurity code review skill for Claude Code. 8 specialist agents, OWASP 2025, CWE Top 25, MITRE ATT&CK, 11 languages, zero configuration.
Quality 81/100Safety scan clean★ 224Updated 2026-04-15
Why it is here: clean safety scan.
```
npx skills add AgriciDaniel/claude-cybersecurity
```
7
workflow-audit
by Terryc21
Claude Code skill for Xcode SwiftUI workflow auditing
Quality 79/100Safety scan clean★ 58Updated 2 days ago
Why it is here: updated 2 days ago; clean safety scan.
```
npx skills add Terryc21/workflow-audit
```
8
cc-tree
by skymanbp
Claude Code plugin: universal radial-tree exploration engine. One tree skill + swappable presets (brainstorm / attack / design / code-audit) for divergent ideation, adversarial critique, and design-space exploration. 12 framings × hard-ban-on-incomplete-leaves × stable convergence.
Quality 80/100Safety scan clean★ 100Updated today
Why it is here: updated in the last day; clean safety scan.
```
npx skills add skymanbp/cc-tree
```
9
claude-skill-b2-cloud-storage
by backblaze-labs
Claude Skill for Backblaze B2 Cloud Storage management from the terminal. Manage buckets, list and search files, audit storage usage, detect stale or large objects, review security posture, and safely clean up data using natural language.
Quality 87/100Safety scan clean★ 41Updated 37 days ago
Why it is here: clean safety scan.
```
npx skills add backblaze-labs/claude-skill-b2-cloud-storage
```

Side by side

#	Name	Quality	Safety	Stars	Updated
1	audit-skills	97	Clean	46,875	today
2	audit-context-building	91	Clean	46,875	today
3	cyber-neo	90	Clean	270	2026-07-18
4	cti-expert	83	Clean	598	3 days ago
5	kali-pentest	84	Clean	121	2026-06-25
6	claude-cybersecurity	81	Clean	224	2026-04-15
7	workflow-audit	79	Clean	58	2 days ago
8	cc-tree	80	Clean	100	today
9	claude-skill-b2-cloud-storage	87	Clean	41	37 days ago

How we rank

Only skills we have read make the list: the file itself was fetched, it has a real description, it scores at least 55 of 100 on quality, its source still exists, its repository has at least 20 GitHub stars, and our safety scan found nothing high-risk. The order then follows adoption (GitHub stars, on a log scale), how squarely it fits this topic, and its quality score (how substantial and well structured the file is and how recently it changed), moved up for a clean safety scan and for real installs through the SkillAgent MCP server, and down for safety notes. At most three come from any one repository, and tools sold on evading bot detection are never listed. We do not rank by install counts reported by a command-line tool: they are easy to inflate, and our research found repositories with no stars claiming hundreds of thousands of installs. The list is recomputed on every visit.

Questions

What is the best Claude Code Skill for Security?

audit-skills by sickn33 ranks first: highest quality score in this list, updated in the last day, clean safety scan. The full ranking above lists 9 alternatives with their trade-offs.

How do I install one?

Each entry shows a one-line command. `npx skills add` installs a skill for Claude Code, Cursor, Codex, Gemini CLI and other agents that read skill files.

Are these safe to install?

Every file is scanned for instructions that work against you: hidden text, data sent to outside servers, disabled approval prompts, leaked keys. Skills with a warning are never listed here, and 100% of the 9 we compared for this guide came up clean. Read a skill before installing it all the same: it runs with your permissions.