All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,230
- 1,218
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 2,785–2,808 of 29,230 skills
- Agent ExecutionAgent execution patterns including LLM calls and token handling. Use when implementing agent execution or multipart forms. Triggers: agent.Agent, VisionForm, ParseVisionForm, Token injection, constructAgent, ChatStream, VisionStream, multipart/form-data, base64, Provider.Options["token"], go-agents, ExecuteRequest, SetSecret, GetSecret. File patterns: internal/agents/*.goVotes: 0GitHub stars: 2
- Adversarial ReasoningRed-team thinking for robustness testing and edge case discovery. Use when you need to stress-test solutions, find vulnerabilities, anticipate failures, or challenge assumptions. Ideal for security review, system design validation, decision stress-testing, and pre-mortem analysis. Example: "We've designed an auth system" → Attack it from 10 angles before shipping.Votes: 0GitHub stars: 2
- Latest B3ef4354e823Read and send email via IMAP/SMTP. Check for new/unread messages, fetch content, search mailboxes, mark as read/unread, and send emails with attachments. Supports multiple accounts. Works with any IMAP/SMTP server including Gmail, Outlook, 163.com, vip.163.com, 126.com, vip.126.com, 188.com, and vip.188.com.Votes: 0GitHub stars: 5
- Latest De77fc339d08tuya-smart-control is an official AI Agent skill for the OpenClaw platform, built on Tuya's 2C end-user APIs. It brings developers the industry's broadest AI + device interaction capabilities — 3,000+ smart hardware categories, covering 200+ countries and regions, enabling AI Agents to control everything out of the box. Get started with one click at tuya.ai — no complex authentication required. Once installed, use natural language to query devices, control smart hardware, send notifications, ...Votes: 0GitHub stars: 5
- Vault CredentialsStore and retrieve encrypted credentials using Supabase Vault. Use when implementing features that need secure credential storage such as API keys, OAuth tokens, or sensitive configuration. Triggers when adding credential storage to a feature, implementing OAuth flows, or storing user-provided secrets.Votes: 0GitHub stars: 2
- Security PassDefensive security self-assessment of the operator's OWN codebase. Local and read-only by default — it reads the repo, runs static scanners, and writes a briefing; no live system is touched. Active probes are opt-in, run only against a TEST instance the human owns and supplies, and require explicit per-run human approval; production and third-party targets are out of scope. Use when the user wants to security-review their own app, harden it, check for BOLA/IDOR/JWT/SSRF/mass-assignment issues...Votes: 0GitHub stars: 2
- Internal CommsDraft internal company or team communications such as 3P updates, newsletters, FAQs, status updates, or incident reports. Use when drafting one of these internal communications, and read the matching example; ordinary conversation updates do not trigger this skill.Votes: 0GitHub stars: 2
- Verification LatticeUsar cuando se necesita verificación multi-capa más allá del code review estándar.Votes: 0GitHub stars: 50
- Security AuditUse when auditing code for security vulnerabilities, reviewing auth, permissions or Firestore/Storage rules, before a release or store submission, after a pentest or bug report, when handling secrets, tokens or PII, or when asked "is this secure", "find security holes", "check for vulnerabilities", or "review my rules". Deepest on Flutter + Firebase (Firestore, Storage, Cloud Functions, App Check); the method works on any stack.Votes: 0GitHub stars: 2
- SecuritySecurity engineering for web applications, APIs, and the AI agents and tools around them: audit code or architecture, trace whether a flaw is exploitable, threat-model a feature, review sign-in, sessions, OAuth, access control and tenant isolation, injection, XSS, SSRF, CSRF, file uploads, cryptography and secrets, dependency and CI/CD supply chain, WordPress and WooCommerce, and prompt injection in LLM agents. Use for any request about vulnerabilities, "is this secure", security review, hard...Votes: 0GitHub stars: 7
- Passport DevelopmentDevelops OAuth2 API authentication with Laravel Passport. Activates when installing or configuring Passport; setting up OAuth2 grants (authorization code, client credentials, personal access tokens, device authorization); managing OAuth clients; protecting API routes with token authentication; defining or checking token scopes; configuring SPA cookie authentication; handling token lifetimes and refresh tokens; or when the user mentions Passport, OAuth2, API tokens, bearer tokens, or API authe...Votes: 0GitHub stars: 7,117
- Security ReviewerCross-layer security review covering frontend (XSS, CSRF, CSP), backend (SQL/NoSQL/command injection, path traversal, auth/authz, session management), AI (prompt injection, data exfiltration, output filtering), and infrastructure (exposed secrets, weak crypto, missing headers). Maps attack surface, threat-models entry points, and gives concrete remediation. Use when reviewing auth or input-handling code, before a production deploy, or after a vulnerability is discovered. Not for internal util...Votes: 0GitHub stars: 6
- Mcp Security AuthorizationImplements MCP security best practices including OAuth 2.1 PKCE, resource indicators, token management, tool poisoning prevention, secret management, attestation, audit logging, and defense-in-depth strategies against OWASP MCP Top 10 risks (token mismanagement, tool rug pulls, unverified inputs, supply chain attacks).Votes: 0GitHub stars: 6
- ZepWork with Zep's temporal memory: create users and threads, append messages, read distilled facts and history. Trigger phrases: zep, knowledge graph memory, conversation memory.Votes: 0GitHub stars: 18
- YoutubeWork with YouTube: read channels, videos, search, playlist items; upload videos and post comments (with confirmation). Trigger phrases: youtube, videos, upload video, youtube comment.Votes: 0GitHub stars: 18
- XaiQuery Grok chat completions and list available Grok models through the xAI API. Trigger phrases: xai, grok, chat with grok, grok model.Votes: 0GitHub stars: 18
- VeedRemove video backgrounds with VEED's direct developer API: standard, fast and green-screen endpoints. Trigger phrases: veed, remove video background, background removal, transparent video.Votes: 0GitHub stars: 18
- UnsplashSearch Unsplash for free stock photos, browse by photographer or topic, and download images with proper attribution credit. Trigger phrases: unsplash, stock photo, find an image, download unsplash image.Votes: 0GitHub stars: 18
- Uber DirectQuote and dispatch same-day Uber Direct courier deliveries, and check their status. Trigger phrases: uber direct, same-day delivery, dispatch courier, delivery quote.Votes: 0GitHub stars: 18
- TwitchRead and write Twitch via the Helix API: channel profile, follower stats, live stream status, past videos, channel title and game updates, clip creation. Trigger phrases: twitch, stream stats, stream followers, channel update.Votes: 0GitHub stars: 18
- TuyaRead and control Tuya / Smart Life devices: plugs, lights, thermostats, curtains, smart locks. Trigger phrases: tuya, smart life, tuya device, smart life plug.Votes: 0GitHub stars: 18
- TriggerdevRead and write trigger.dev: list runs, check run status, trigger tasks, cancel runs, list schedules. Trigger phrases: trigger.dev, background jobs.Votes: 0GitHub stars: 18
- TiktokRead TikTok via API v2: your profile and video list. Posting is approval-gated and not shipped. Trigger phrases: tiktok, my tiktok, tiktok profile, tiktok videos.Votes: 0GitHub stars: 18
- TicktickRead and write TickTick: list projects and tasks, create tasks, complete and delete tasks. Trigger phrases: ticktick, task list, my tasks.Votes: 0GitHub stars: 18