ghostsecurity/skills plugin for Grok Build

Community Claude Code plugin, installs in GrokPluginSecurity

Ghost Security's collection of AppSec skills for AI coding agents

How to install ghostsecurity/skills in Grok Build

1. Add this repo as a plugin marketplace in Grok Build (once per computer):

grok plugin marketplace add ghostsecurity/skills

2. Install the plugin:

grok plugin install ghost@ghostsecurity/skills --trust
✓ Install-checked in Grok Buildchecked Oct 18, 2026

Review before you trust it. --trust lets this plugin's hooks, MCP servers and scripts run code on your computer. It's a community repo that neither xAI nor GrokStacks has reviewed, so read its code first.

This repo's marketplace has 2 plugins; we checked exo, ghost. Install another the same way: grok plugin install <name>@ghostsecurity/skills --trust (names under 'What it contains'). Then start a new Grok session, or press r in /plugins, to load it.

Inside Grok Build: type /plugins, open the Marketplace tab, press a and add ghostsecurity/skills, then select ghost and press i.

Command format: Grok Build's plugin guide

What we checked: on Oct 18, 2026 it installed with grok 1.0.62 and Grok found 8 skills. That's an install check only: we haven't run it in a live Grok session.

What it contains

Skills (8)

  • ghost-proxy — Starts and controls the reaper MITM proxy to capture, inspect, search, and replay HTTP/HTTPS traffic between clients and servers. Capabilities include starting/stopping the proxy scoped to specific domains, viewing captured request/response
  • ghost-repo-context — Scans directory structure, detects projects, maps dependencies, and documents code organization into a repo.md file. Use when the user needs a codebase overview, project structure map, or repository context before security analysis.
  • ghost-report — Ghost Security — combined security report. Aggregates findings from all scan skills (scan-deps, scan-secrets, scan-code) into a single prioritized report focused on the highest risk, highest confidence issues. Use when the user requests a s
  • ghost-scan-code — Ghost Security - SAST code scanner. Finds security vulnerabilities in source code by planning and executing targeted scans for issues like SQL injection, XSS, BOLA, BFLA, SSRF, and other OWASP categories. Supports applications (backend, fro
  • ghost-scan-deps — Ghost Security - Software Composition Analysis (SCA) scanner. Scans dependency lockfiles for known vulnerabilities, identifies CVEs, and generates findings with severity levels and remediation guidance. Use when the user asks about dependen
  • ghost-scan-secrets — Ghost Security - Secrets and credentials scanner. Scans codebase for leaked API keys, tokens, passwords, and sensitive data. Detects hardcoded secrets and generates findings with severity and remediation guidance. Use when the user asks to
  • ghost-validate — This skill should be used when the user asks to "validate a finding", "check if a vulnerability is real", "triage a security finding", "confirm a vulnerability", "determine if a finding is a true positive or false positive", or provides a s
  • ghost-exo — The single interface for building, improving, and debugging exo workflows. Routes to one of three intents. BUILD takes a rough idea, or an agent template slug from the ghostsecurity.ai catalog, through interrogation, assessment, resource cr

Plugins in this marketplace (2)

  • ghost
  • exo

About this listing

ghostsecurity/skills is a community plugin on GitHub by ghostsecurity, written as a Claude Code plugin that Grok Build installs. We install-checked it in Grok; we haven't run it in a live session or reviewed its code. When we installed it, Grok found 8 skills, 2 plugins in this marketplaces. Its license is Apache-2.0. We checked commit 25fdf0687607. It's one of 79 listings in the Security category on GrokStacks.

Stacks Weekly: every new Grok Build and Codex plugin, every Tuesday.

One short email for GrokStacks and CodexStacks readers, with each new plugin's install line and what it ships. Subscribe and get the free starter list: 20 Grok Build plugins worth installing first.

You'll get a confirmation email first. Unsubscribe anytime.

ghostsecurity/skills FAQ

How do I install ghostsecurity/skills in Grok Build?

Add the repo as a marketplace with grok plugin marketplace add ghostsecurity/skills, then run grok plugin install ghost@ghostsecurity/skills --trust. This repo's marketplace has 2 plugins; we checked exo, ghost. Install another the same way: grok plugin install <name>@ghostsecurity/skills --trust (names under 'What it contains'). Then start a new Grok session, or press r in /plugins, to load it.

Is ghostsecurity/skills an official Grok Build plugin?

No. ghostsecurity/skills is a community plugin on GitHub by ghostsecurity, not in xAI's official Grok Build marketplace. We checked that it installs and what Grok loads from it, but haven't run it in a live Grok session or reviewed its code.

What does ghostsecurity/skills include?

According to what Grok loaded in our install check, ghostsecurity/skills includes 8 skills, 2 plugins in this marketplaces: ghost-proxy, ghost-repo-context, ghost-report, ghost-scan-code, ghost-scan-deps, ghost-scan-secrets….

Details

Type
Plugin
Category
Security
Source
Community Claude Code plugin, installs in Grok
License
Apache-2.0
Author
ghostsecurity
Keywords
agent-skills, agents, ai, security
Source repo
https://github.com/ghostsecurity/skills
Checked commit
25fdf0687607
Homepage
https://ghostsecurity.ai
Checked by GrokStacks
Install-checked in Grok Build on Oct 18, 2026; not run in a live session

Something wrong or missing? Submit or improve this listing. Marketplace listings also refresh automatically every night.

For maintainers: badge and embeds

Maintain ghostsecurity/skills? Add the badge; it links to this page.

Listed on GrokStacks

Markdown

[![Listed on GrokStacks](https://grokstacks.com/badge.svg)](https://grokstacks.com/p/ghostsecurity-skills/)

HTML

<a href="https://grokstacks.com/p/ghostsecurity-skills/"><img src="https://grokstacks.com/badge.svg" alt="Listed on GrokStacks" width="164" height="28"></a>

Embed card (static HTML and inline CSS, no JavaScript). Preview:

ghostsecurity/skillsCommunity plugin for Grok Build · 8 skills, 2 plugins in this marketplacesGhost Security's collection of AppSec skills for AI coding agentsView on GrokStacks →
<a href="https://grokstacks.com/p/ghostsecurity-skills/" style="display:block;max-width:380px;box-sizing:border-box;padding:14px 16px;border:1px solid #2a2e3c;border-radius:12px;background:#0a0b0f;color:#e8eaf0;font:14px/1.45 -apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;text-decoration:none"><span style="display:block;font-size:16px;font-weight:700;color:#e8eaf0">ghostsecurity/skills</span><span style="display:block;margin:2px 0 8px;font-size:12px;color:#9aa0b1">Community plugin for Grok Build · 8 skills, 2 plugins in this marketplaces</span><span style="display:block;margin:0 0 10px;color:#c9cdd8">Ghost Security&#x27;s collection of AppSec skills for AI coding agents</span><span style="font-size:12px;font-weight:600;color:#7c9cff">View on GrokStacks →</span></a>

Markdown summary

**[ghostsecurity/skills on GrokStacks](https://grokstacks.com/p/ghostsecurity-skills/)**: Community plugin for Grok Build with 8 skills, 2 plugins in this marketplaces. Install: `grok plugin install ghost@ghostsecurity/skills --trust` (after `grok plugin marketplace add ghostsecurity/skills`)

More on badges, embeds and keeping your listing up to date: GrokStacks for plugin authors.

Also in Security

Aaron Marketing Skills

120 marketing skills as an AI marketing staff — plugin, portable skills, or an 8-bot team across 7 disciplines (narrative, SEO/GEO, social, email, paid, influencer, launch) on one contract, with 8 auditor gates: TALE · CORE-EEAT · CITE · ECHO · SEND · ROAS · STAR · RAMP.

Community Claude Code plugin, installs in GrokPluginSecurity

Adrian

Open-source runtime AI agent security tool - monitors and controls AI agents, catching malicious tool use, prompt injection, and policy drift in real time, before the agent acts.

Community Claude Code plugin, installs in GrokPluginSecurity

Agent Beacon

The cross-harness, self-improving memory layer for AI agents. Join our community: https://discord.com/invite/zdNChS2fBu

Community Claude Code plugin, installs in GrokPluginSecurity

Agent Governance Toolkit

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

Community Claude Code plugin, installs in GrokPluginSecurity

Agentguard

Security guard for AI agents — blocks malicious skills, prevents data leaks, protects secrets. 24 detection rules, runtime action evaluation, trust registry.

Community Claude Code plugin, installs in GrokPluginSecurity

Android Reverse Engineering Skill

Claude Code skill to support Android app's reverse engineering

Community Claude Code plugin, installs in GrokPluginSecuritySecurity tool

All 79 security listings →