All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,246
- 1,219
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 3,409–3,432 of 29,246 skills
- Whitebox PentestWhitebox pentest of your own code before it ships: run every scanner installed, rank findings by reachability, prove each with a working exploit, fix, re-run. Fires on pentest, exploit, hardening.Votes: 0GitHub stars: 5
- Paperclip EvalsChoose, inspect, validate, and report Paperclip Runner or Product E2E evaluations while preserving evidence, provenance, cost, and failure classification.Votes: 0GitHub stars: 95,319
- Using Fjo For ForgejoUse when working with the fjo CLI or Forgejo/Gitea instances: repositories, issues, pull requests, releases, branches, comments, Actions, or authentication. Provides safe host-aware read/write workflows. Not for GitHub — use `using-gh-for-github` there.Votes: 0GitHub stars: 2
- Orchestrate:SecurityAdd security governance to a target repo - CODEOWNERS, SECURITY.md, CONTRIBUTING.md, LICENSE, .gitignore auditVotes: 0GitHub stars: 299
- AuthAuthentication and authorization patterns for Rossoctl servicesVotes: 0GitHub stars: 299
- Here NowPublishes static folders or files to instant shareable here.now URLs. Use when the user wants publish, host, deploy, share a link, or put HTML or assets on the web.Votes: 0GitHub stars: 22
- AuthorizeManage persistent allowlist for pre_tool_use hook bypassVotes: 0GitHub stars: 22
- Cook Vs ChefDistinguish between reasoning by analogy (following recipes) and reasoning from first principles (creating recipes) to identify innovation opportunitiesVotes: 0GitHub stars: 22
- Blessing In Disguise Triz PrincipleWhen harmful or undesired effects can be converted into benefitsVotes: 0GitHub stars: 22
- Skill DecompileDecompile any SKILL.md into deterministic YAML for structural security analysis. Extracts permissions, surfaces, risk signals, and produces a scored verdict.Votes: 0GitHub stars: 22
- Security Threat ModelRepository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.Votes: 0GitHub stars: 22
- Security ReviewThis skill ensures all code follows security best practices and identifies potential vulnerabilities.Votes: 0GitHub stars: 22
- Security Hub[WHAT] Unified security skill router — routes to the right security sub-skill based on intent [HOW] Decision tree routes to: security-review (code audit), security-best-practices (language-specific), security-threat-model (threat modeling), security-ownership-map (ownership topology) [WHEN] Use when user mentions security, audit, vulnerability, threat model, OWASP, pentest, code review security, ownership analysis [WHY] Prevents loading 4 separate security skills; routes to the right one base...Votes: 0GitHub stars: 22
- Defendr[WHAT] 4-layer security scanner for untrusted code: static analysis, malware/CVE scanning, Docker sandbox, agentic review. [HOW] Orchestrates rg patterns, ClamAV, pip-audit, osv-scanner, semgrep, Docker strace, and LLM code review. [WHEN] Before running cloned repos, installing pip/npm packages, intake of external code, pre-commit on untrusted PRs, workshop evaluation. [WHY] Agents clone and execute code from the internet. One malicious setup.py and your machine is owned. Triggers: "security...Votes: 0GitHub stars: 22
- Api Security Best PracticesGuide developers in building secure APIs by implementing authentication, authorization, input validation, rate limiting, and protection against common vulnerabilities. This skill covers security patterns for REST, GraphQL, and WebSocket APIs.Votes: 0GitHub stars: 22
- Written ConsentDrafts Written Consents in Lieu of Meeting for corporate boards or shareholders. Ensures compliance with state corporate law (e.g., DGCL §§141(f), 228), bylaws, and governing documents. Use when drafting board consent, shareholder consent, unanimous written consent, action by written consent, or consent in lieu of meeting.Votes: 0GitHub stars: 22
- Written Consent In Lieu Of MeetingDrafts U.S. corporate written-consent instruments (board, shareholder, member) as substitutes for formal meetings. Triggers when counsel requests board consent, shareholder written consent, unanimous consent, consent-in-lieu approvals, or "action without meeting" for contracts, financing, equity issuance, officer delegation, or governing-document amendments. Produces jurisdiction-aware approval records with threshold validation and execution mechanics.Votes: 0GitHub stars: 22
- Writing Admission OrdersGenerates structured admission order sets with diagnosis-specific protocols and safety checks. Use when admitting patients, creating admission orders, or setting up inpatient care plans.Votes: 0GitHub stars: 22
- Witness SummaryGenerates structured summaries of witness statements for litigation, extracting chronological narratives, key facts, credibility indicators, and evidentiary value. Use when summarizing depositions, declarations, affidavits, or witness testimony during discovery, pre-trial, or trial preparation.Votes: 0GitHub stars: 22
- Witness Prep SessionRuns ethics-compliant deposition witness-prep workflows for US civil litigation. Use when preparing party, fact, expert, or 30(b)(6) witnesses for deposition, including mock cross-examination, exhibit review, vulnerability mapping, day-of logistics, and post-deposition debrief. Covers intake through deposition day under FRCP 30.Votes: 0GitHub stars: 22
- WispDrafts a Written Information Security Program compliant with Massachusetts 201 CMR 17.00 and supplementary frameworks (GDPR, CCPA, HIPAA, GLBA, PCI-DSS). Produces a board-ready regulatory document covering coordinator designation, risk assessment, safeguards, training, incident response with breach notification, and vendor oversight. Use when an organization handles personal information of MA residents and needs a standalone WISP for regulatory examination or executive approval.Votes: 0GitHub stars: 22
- Underwriting AgreementDrafts a firm-commitment underwriting agreement for SEC-registered U.S. public offerings, covering purchase terms, greenshoe, reps and warranties, covenants, closing conditions, indemnification, and market-out rights. Use when drafting or reviewing underwriting agreements, firm commitment deals, over-allotment options, or listing approvals; trigger on "underwriting agreement", "firm commitment", "public offering", "greenshoe", "over-allotment", "registration statement", "prospectus".Votes: 0GitHub stars: 22
- Ucc Lien ReleaseDrafts Evidence of UCC Lien Release documents proving termination of security interests perfected under the Uniform Commercial Code. Extracts UCC-1 filing numbers, party information, and collateral descriptions from uploaded documents for compliant drafting. Use for UCC lien releases, UCC-3 termination evidence, security interest discharge certificates, or asset purchase closings requiring proof of clear title.Votes: 0GitHub stars: 22
- Ucc Lien Release EvidenceDrafts an Evidence of UCC Lien Release documenting termination of a UCC-1 financing statement for U.S. transactional closings. Trigger when the user needs a UCC-3 termination certificate, secured-party release letter, payoff evidence, or clear-title closing deliverable. Keywords: "UCC-1", "UCC-3 termination", "lien release", "secured party release", "clear title", "payoff letter".Votes: 0GitHub stars: 22