All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,231
- 1,218
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 3,049–3,072 of 29,231 skills
- Opensea WalletSet up and configure wallet signing providers for OpenSea transactions. Supports Privy, Turnkey, Fireblocks, Bankr, and local private keys. Required for executing trades (opensea-marketplace) and token swaps (opensea-swaps).Votes: 0GitHub stars: 51
- Security AuditPerform security audits on codebases for projects. Use when checking for vulnerabilities, security review, or when user mentions "security audit", "security review", "check security", "vulnerability scan", or "security assessment".Votes: 0GitHub stars: 2
- Parallel ReviewRun code-review, security-audit, and documentation review in parallel using agents. Use when reviewing completed work, pre-merge checks, or when user mentions 'parallel review', 'full review', 'review everything', or 'comprehensive review'.Votes: 0GitHub stars: 2
- Code ReviewPerform standardized code reviews for projects. Use when reviewing code, checking implementation quality, or when user mentions "code review", "review changes", "check the code", or "review implementation".Votes: 0GitHub stars: 2
- Code ReviewPerform standardized code reviews for projects. Use when reviewing code, checking implementation quality, or when user mentions "code review", "review changes", "check the code", or "review implementation".Votes: 0GitHub stars: 2
- hidden-text-detectorDetects hidden text and manipulation attempts in PDF and DOCX documents - white-on-white text, sub-legible fonts, text positioned off-page, invisible render mode, Word's hidden attribute, and invisible Unicode characters. Use when the user asks "does this document contain hidden text", "check this contract for hidden clauses", "is someone trying to manipulate me", "scan this PDF for prompt injection", "is this a scam", or BEFORE analysing any contract, quote, invoice, or document received fro...Votes: 0GitHub stars: 2
- Security AuditVulnerability and security-hardening audit protocol for Rust projects. Maps the attack surface, then activates expert knowledge across dependency advisories, unsafe code, secret exposure, injection and input validation, cryptography misuse, authentication and authorization, panic and resource-exhaustion denial of service, network and filesystem hardening, supply-chain trust, and verification gates. Called by rust-security-analyst at startup via Skill(...); invoked directly as /security-audit ...Votes: 0GitHub stars: 11
- Nist SsdfKnowledge base from NIST Secure Software Development Framework (SSDF) v1.1 (SP 800-218). Use for secure software development practices, SDLC security integration, software supply chain security, vulnerability disclosure, SBOM, threat modelling, secure coding, build hardening, EO 14028 compliance. Covers the four SSDF practice groups (PO, PS, PW, RV) only; does not cover NIST CSF, SP 800-53 controls, or cloud-specific security frameworks in depth.Votes: 0GitHub stars: 6
- Cisa CpgKnowledge base from CISA Cross-Sector Cybersecurity Performance Goals 2.0. Use for prioritized IT/OT baseline cyber goals aligned to NIST CSF 2.0 (including GOVERN), critical-infrastructure hygiene, MSP/supply-chain expectations, and board-friendly outcome language. Covers CPG 2.0 goals only; does not replace full CSF programs, sector-specific goals (SSGs), or CSET tooling detail.Votes: 0GitHub stars: 6
- Threat ModelingSecurity threat modeling using STRIDE methodology adapted for cloud services. Covers data classification, IAM boundaries, encryption requirements, blast radius analysis, and systematic identification of attack vectors before code is written.Votes: 0GitHub stars: 15
- Operational Readiness ReviewThe ORR process — a self-assessment checklist covering monitoring, alarming, runbooks, on-call, scaling, security, deployment safety, cost, and dependencies. Must pass before launch.Votes: 0GitHub stars: 15
- Protect Spa And ApiProtect a React/Next.js SPA with route guards and middleware, and protect an API with token-verification middleware (signature + iss + aud + exp). Covers CORS configuration and CSRF defense. Applies to both the web-app and the API/backend targets.Votes: 0GitHub stars: 7
- Getnote Auth连接和诊断得到大脑 MCP 授权，并查看开放平台调用额度。用户说“连接/登录得到大脑”“为什么不能用”“查看额度或限额”时使用。Votes: 0GitHub stars: 45
- easymofang-skill易智魔方技能 - 商品文案/图片商标侵权检测，以及电商套图生成与重绘（白底图、场景图、功能图、对比图、尺寸图、普通A+、普通A+裁剪版、高级A+；平台 Amazon/亚马逊、AliExpress/速卖通、OZON、Walmart/沃尔玛、TEMU、Allegro、TikTok、Mercado Libre、Shopee/虾皮、eBay、Wayfair）Votes: 0GitHub stars: 45
- Datahub Data AppsDiscover, inspect, run, monitor, cancel, and retrieve results from DataHub Data Apps while preserving billing and retry safety.Votes: 0GitHub stars: 45
- Lux3dUse the existing Lux3D MCP server to check balance, quote and create 3D or image tasks, and retrieve results.Votes: 0GitHub stars: 45
- 51shebao-hr-tools51社保政策查询技能，用于查询中国城市社保与公积金的缴费基数、比例、办理截止日、最低工资、社平工资与产假天数，检索社保政策原文，并读取政策分析报告Votes: 0GitHub stars: 45
- Zoom OauthUse when implementing OAuth.Votes: 0GitHub stars: 9
- Twilio Webhook ArchitectureDesign, secure, and operate Twilio webhook endpoints. Covers inbound event handling, status callbacks, signature validation, connection overrides for retry and timeout tuning, local development tunneling, and production hardening. Use this skill whenever an agent needs to receive HTTP callbacks from Twilio for any product -- messaging, voice, verify, or event streams.Votes: 0GitHub stars: 9
- Twilio Security HardeningSecure Twilio applications against common attacks. Covers credential management (API keys vs auth tokens), request validation (webhook signature verification), PCI DSS compliance, HIPAA account requirements, SMS pumping prevention, geo-permissions, and account isolation patterns. Use this skill when developers are building or deploying Twilio apps.Votes: 0GitHub stars: 9
- Twilio Security Compliance HipaaConfigure Twilio accounts for HIPAA compliance. Covers BAA requirements, HIPAA Project designation (self-service and support), eligible services list, per-product requirements (Voice, SMS, ConversationRelay, Conversation Intelligence, Flex, Verify), message redaction, and what is NOT eligible. Use this skill when developers are building healthcare workflows on Twilio.Votes: 0GitHub stars: 9
- Twilio Security Api AuthChoose the right Twilio authentication method and implement it correctly. Covers Auth Token (testing only), API Keys (production standard), OAuth2 client_credentials (time-limited bearer tokens), Access Tokens (client-side SDKs), and test credentials. Use this skill before making any Twilio API calls in production.Votes: 0GitHub stars: 9
- Twilio Organizations SetupSet up and manage Twilio Organizations for centralized account and user governance. Covers the Organization > Account > Subaccount hierarchy, roles (Owner/Admin/Standard), managed vs independent accounts, domain registration, SSO enforcement, SCIM provisioning, and Organization merging. Use this skill when managing multiple Twilio accounts or users across teams.Votes: 0GitHub stars: 9
- Twilio Identity Verification AdvisorPlanning skill for identity verification and fraud prevention. Qualifies the developer's needs across authentication method, channel selection, fraud risk level, and user experience to recommend the right Twilio Verify + Lookup architecture. Handles login, signup, password reset, and risk-adaptive verification.Votes: 0GitHub stars: 9