Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,231
pages available: 1,218

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 3,073–3,096 of 29,231 skills

Twilio Iam Auth SetupASet up and manage Twilio authentication credentials: Auth Tokens, API keys (Standard, Main, Restricted), Access Tokens for client-side SDKs, and credential rotation. Use this skill as a prerequisite foundation before making any Twilio API calls.securitypythongoVotes: 0GitHub stars: 9
Twilio Email SendAUse when the caller has Twilio credentials (Account SID + Auth Token or API Key SID + Secret) and needs to send email via comms.twilio.com/v1/Emails. This is Twilio-native email — NOT SendGrid. Do NOT use if the caller has a SendGrid API key (SG.-prefix) — use twilio-sendgrid-email-send instead. Covers single sends, batch sends up to 10,000 recipients, Liquid personalization, operation tracking, and error handling.securitybashapiVotes: 0GitHub stars: 9
Twilio Conversation OrchestratorAConfigure automatic conversation capture and routing with Twilio Conversation Orchestrator. Covers Configuration creation, channel capture rules, grouping types, status timeouts, Memory Store linkage, Intelligence linkage, and conversation lifecycle. Use this skill to automatically capture SMS, voice, WhatsApp, RCS, and web chat traffic into unified conversations without manually creating conversations or participants.securityjavascriptpythonVotes: 0GitHub stars: 9
Twilio Account SetupACreate and configure a Twilio account from scratch. Covers free trial signup, trial limitations, getting credentials (Account SID and Auth Token), buying a phone number, verifying recipient numbers for trial use, SDK installation, first API call, subaccount management (creation, inheritance, credential isolation, limits), and enabling specific products (AI Assistants, Conversations, Verify, ConversationRelay, WhatsApp). Use this skill before any other Twilio skill if you do not yet have a Twi...securityjavascriptpythonVotes: 0GitHub stars: 9
Sign In With VercelASign in with Vercel guidance — OAuth 2.0/OIDC identity provider for user authentication via Vercel accounts. Use when implementing user login with Vercel as the identity provider.securitybashapiVotes: 0GitHub stars: 9
Secure Workflow GuideAGuides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generates visual security diagrams, helps document security properties for fuzzing/verification, and reviews manual security areas. Use when securing a smart contract end to end rather than hunting one bug, checking a project on every check-in or before deployment, triaging a Slither report, or asking where to start on smart contract...securitygotestingVotes: 0GitHub stars: 9
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Netlify DeployADeploy projects to Netlify with the Netlify CLI. Use when the user wants to link a repo, validate deploy settings, run a deploy, or choose between preview and production flows.securitybashreactVotes: 0GitHub stars: 9
Conversation IntelligenceATwilio Conversation Intelligence development guide. Use when building real-time or post-call conversation analysis, language operator pipelines, sentiment analysis, agent assist, cross-channel analytics, or querying aggregated conversation insights (sentiment trends, escalation rates, dashboards).securityjavascriptrustVotes: 0GitHub stars: 9
007ASecurity audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.securitypythonrustVotes: 0GitHub stars: 143
Ashrafiucse Design Threat ReviewAThreat-models a design BEFORE implementation — spec/PRD/data-model/route sketch in, THREAT-MODEL.md out with actor×asset inventory, data flows across trust boundaries, STRIDE sweep mapped to the repo's detection skills, per-persona abuse cases, and an audit contract (the actor×surface matrix + acceptance criteria) the future security-audit must disposition. Use when the user shares a design doc, spec, PRD, or architecture, or asks to threat-model a system before or during early build — before...securityrustawsVotes: 0GitHub stars: 78
Dl Matching DecompAReconstruct source-equivalent code from an authorized compiled binary through matching decompilation, reproducible builds, disassembly/decompiler analysis, function/section diffing, and final hash verification. Use when asked to reproduce an executable/ROM/library byte-for-byte, diagnose why a rebuilt binary does not match, infer compiler/ABI/codegen settings, or organize a decompilation project. Do not use to bypass DRM/access controls, defeat license checks, extract credentials/secrets, or ...securitygoexpressVotes: 0GitHub stars: 3
Agent GuardrailsCLayered agent safety — prompt-injection defense, data exfiltration prevention, tool-misuse blocking via NeMo Guardrails + Lakera / LLM Guard / Llama Guard. Use before any agent reads untrusted input or executes tools with real-world side effects.securitypythonrustVotes: 0GitHub stars: 47
Fedramp ComplianceAImplement FedRAMP requirements for federal cloud services. Configure NIST 800-53 controls and continuous monitoring. Use when providing cloud services to US federal agencies.securitygoawsVotes: 0GitHub stars: 6
Dependency ScanningAScan package dependencies for known vulnerabilities using Snyk, Dependabot, and OWASP Dependency-Check.securityjavascriptpythonVotes: 0GitHub stars: 6
Dast ScanningAPerform dynamic application security testing with OWASP ZAP, Burp Suite, and Nikto.securitypythongoVotes: 0GitHub stars: 6
Client Secret Exposure AuditBAudit a deployed web app for secrets exposed to the browser: hardcoded API keys/tokens in JS, secrets in HTML meta/attributes/comments, publicly reachable source/config/deploy files, and header/CORS msecurityjavascriptgoVotes: 0GitHub stars: 6
Cis BenchmarksAAudit and remediate CIS benchmark violations.securitygorubyVotes: 0GitHub stars: 6
Change ManagementAImplement change management processes. Configure CAB reviews, change windows, and rollback procedures. Use when managing production changes.securitygotestingVotes: 0GitHub stars: 6
Azure KeyvaultAManage secrets and certificates in Azure Key Vault. Configure access policies, integrate with Azure services, and implement secure secret management. Use when managing secrets in Azure environments.securitypythongoVotes: 0GitHub stars: 6
Aws Secrets ManagerAStore and rotate secrets in AWS Secrets Manager.securitypythongoVotes: 0GitHub stars: 6
Ai Security HardeningAHarden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks.securityjavascriptpythonVotes: 0GitHub stars: 6
Ai Agent SecurityBSecure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls.securitypythonrustVotes: 0GitHub stars: 6
Generate VideoACreate videos with RunComfy AI video models including Seedance, Wan, LTX and Kling. Use for text-to-video, image-to-video, reference-to-video and video edits. Check model-specific duration, aspect ratio, audio, inputs and price before submitting one job.securitygoapiVotes: 0GitHub stars: 12
Security Pen TestingCUse when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security assessments. Covers static analysis, dependency scanning, secret detection, API security testing, and pen test report generation.securitypythongoVotes: 0GitHub stars: 7