All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,246
- 1,219
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 3,289–3,312 of 29,246 skills
- Nestjs ExpertCreates and configures NestJS modules, controllers, services, DTOs, guards, and interceptors for enterprise-grade TypeScript backend applications. Use when building NestJS REST APIs or GraphQL services, implementing dependency injection, scaffolding modular architecture, adding JWT/Passport authentication, integrating TypeORM or Prisma, or working with .module.ts, .controller.ts, and .service.ts files. Invoke for guards, interceptors, pipes, validation, Swagger documentation, and unit/E2E tes...Votes: 0GitHub stars: 36
- Mcp DeveloperUse when building, debugging, or extending MCP servers or clients that connect AI systems with external tools and data sources. Invoke to implement tool handlers, configure resource providers, set up stdio/HTTP/SSE transport layers, validate schemas with Zod or Pydantic, debug protocol compliance issues, or scaffold complete MCP server/client projects using TypeScript or Python SDKs.Votes: 0GitHub stars: 36
- Gke MultitenancyPlans and configures multi-tenancy on GKE. Covers namespace isolation, RBAC planning for teams, resource quotas, LimitRanges, network isolation, and cost allocation. Use when designing GKE multi-tenancy, configuring GKE namespaces, setting up resource quotas, or isolating GKE teams. Don't use for single-tenant cluster configuration or general deployment instructions (use gke-basics or gke-app-onboarding instead).Votes: 0GitHub stars: 36
- Agent Platform Skill RegistryInteract with the Gemini Enterprise Agent Platform Skill Registry to create and search for available skills. Use this skill to enable agents to register functionality or discover new capabilities.Votes: 0GitHub stars: 36
- CsoChief Security Officer mode. (gstack)Votes: 0GitHub stars: 36
- Firebase Security Rules AuditorA skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.Votes: 0GitHub stars: 36
- Security GuidancePreToolUse security-anti-pattern hook for Claude Code. Catches 12 common security risks (command injection, XSS, SQL injection, unsafe deserialization, GitHub Actions workflow injection, eval/new Function code injection) BEFORE the Edit/Write/MultiEdit operation completes. Session-state caching prevents duplicate warnings on the same file+rule combo. Stdlib only — no dependencies. Use when you want a safety net during Claude Code sessions that touch security-sensitive code (auth, payments, us...Votes: 0GitHub stars: 36
- Dependency AuditorAudit and manage dependencies across multi-language projects. Identifies vulnerabilities, license conflicts, transitive dependency risks, and safe-upgrade paths. Use when auditing third-party packages before release, investigating a CVE, planning a major version bump, or running a license-compliance review. Examples: 'audit our npm dependencies', 'do we have GPL contamination', 'plan the upgrade to React 19'.Votes: 0GitHub stars: 36
- Senior SecurityUse when the user asks for STRIDE threat modeling, DREAD risk scoring, data-flow-diagram threat analysis, or a quick secret scan — or when a security request needs routing to the right specialist skill (pen-testing, incident response, cloud posture, red team, AI security, threat hunting, secure code review). This skill owns threat modeling; everything else routes to a sibling.Votes: 0GitHub stars: 36
- Senior SecopsSenior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices. Runs SAST/DAST scans, generates CVE remediation plans, checks dependency vulnerabilities, creates security policies, enforces secure coding patterns, and automates compliance checks against SOC2, PCI-DSS, HIPAA, and GDPR. Use when conducting a security review or audit, responding to a CVE or security incident, hardening infrastructure, implementing authen...Votes: 0GitHub stars: 36
- Ciso Review/cs:ciso-review <plan> — Risk-paranoid interrogation of any plan that touches data, compliance, or production access. Use when launching features that handle customer data, before a SOC 2 / ISO audit, or after any incident or near-miss.Votes: 0GitHub stars: 36
- Archetype Review BaseShared review framework that every domain reviewer (pci, oracle, gov, edtech, healthcare, mlops, etc.) MUST follow. Defines the output artifact (TM-{slug}.md), mandatory sections, severity scale, verdict format, the workflow scaffold (when-invoked, Step-0 read-inputs, HANDOFF), and the "domain heuristic vs generic check" boundary. Eliminates duplication across the ~30 reviewer prompts.Votes: 0GitHub stars: 36
- Alterlab Research EthicsInternational research ethics and compliance assistant supporting IRB/ethics board applications, informed consent drafting, data management plans, Belmont Report principles, Declaration of Helsinki (2024), GDPR compliance for research, HIPAA considerations, vulnerable populations protocols, deception research, confidentiality and anonymity, research integrity (fabrication/falsification/plagiarism), conflict of interest disclosure, and dual-use research oversight. Use when preparing an IRB or ...Votes: 0GitHub stars: 36
- TestRun Go testsVotes: 0GitHub stars: 16
- Security ReviewPerform TLS / network / Go-specific security reviewsVotes: 0GitHub stars: 16
- Review GateGate skill for managing the PR review → Fix → re-review cycle. Run Code Review + Security Review in parallel, and auto-fix if issues are foundVotes: 0GitHub stars: 16
- ProjectDevelopment planning tool for tracking project progress, organizing Issues, and syncing the roadmapVotes: 0GitHub stars: 16
- PrCreate a PR. Verify build and test pass, then run gh pr createVotes: 0GitHub stars: 16
- Pentest ProxyPentest temporary-use workflow using yorishiro-proxy as an MITM proxy via CLIVotes: 0GitHub stars: 16
- OrchestrateOrchestrator for parallel Linear Issue implementation. Analyze milestones and dependencies, then delegate implementation to sub-agents in optimal order and concurrencyVotes: 0GitHub stars: 16
- License CheckCheck licenses of all dependencies and detect prohibited licensesVotes: 0GitHub stars: 16
- ImplementLoad a Linear Issue and execute the full workflow from branch creation to implementation, testing, commit, and PR creationVotes: 0GitHub stars: 16
- Implement PluginScaffold, implement, and test Starlark plugins. From protocol/event/phase selection to running sample testsVotes: 0GitHub stars: 16
- Code ReviewReview code quality of a PR. Inspect Go conventions, architecture compliance, and test qualityVotes: 0GitHub stars: 16