All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,679
- 1,237
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 3,529–3,552 of 29,679 skills
- Cisa CpgKnowledge base from CISA Cross-Sector Cybersecurity Performance Goals 2.0. Use for prioritized IT/OT baseline cyber goals aligned to NIST CSF 2.0 (including GOVERN), critical-infrastructure hygiene, MSP/supply-chain expectations, and board-friendly outcome language. Covers CPG 2.0 goals only; does not replace full CSF programs, sector-specific goals (SSGs), or CSET tooling detail.Votes: 0GitHub stars: 6
- Threat ModelingSecurity threat modeling using STRIDE methodology adapted for cloud services. Covers data classification, IAM boundaries, encryption requirements, blast radius analysis, and systematic identification of attack vectors before code is written.Votes: 0GitHub stars: 15
- Operational Readiness ReviewThe ORR process — a self-assessment checklist covering monitoring, alarming, runbooks, on-call, scaling, security, deployment safety, cost, and dependencies. Must pass before launch.Votes: 0GitHub stars: 15
- Protect Spa And ApiProtect a React/Next.js SPA with route guards and middleware, and protect an API with token-verification middleware (signature + iss + aud + exp). Covers CORS configuration and CSRF defense. Applies to both the web-app and the API/backend targets.Votes: 0GitHub stars: 7
- Getnote Auth连接和诊断得到大脑 MCP 授权，并查看开放平台调用额度。用户说“连接/登录得到大脑”“为什么不能用”“查看额度或限额”时使用。Votes: 0GitHub stars: 45
- easymofang-skill易智魔方技能 - 商品文案/图片商标侵权检测，以及电商套图生成与重绘（白底图、场景图、功能图、对比图、尺寸图、普通A+、普通A+裁剪版、高级A+；平台 Amazon/亚马逊、AliExpress/速卖通、OZON、Walmart/沃尔玛、TEMU、Allegro、TikTok、Mercado Libre、Shopee/虾皮、eBay、Wayfair）Votes: 0GitHub stars: 45
- Datahub Data AppsDiscover, inspect, run, monitor, cancel, and retrieve results from DataHub Data Apps while preserving billing and retry safety.Votes: 0GitHub stars: 45
- Lux3dUse the existing Lux3D MCP server to check balance, quote and create 3D or image tasks, and retrieve results.Votes: 0GitHub stars: 45
- 51shebao-hr-tools51社保政策查询技能，用于查询中国城市社保与公积金的缴费基数、比例、办理截止日、最低工资、社平工资与产假天数，检索社保政策原文，并读取政策分析报告Votes: 0GitHub stars: 45
- Zoom OauthUse when implementing OAuth.Votes: 0GitHub stars: 9
- Twilio Webhook ArchitectureDesign, secure, and operate Twilio webhook endpoints. Covers inbound event handling, status callbacks, signature validation, connection overrides for retry and timeout tuning, local development tunneling, and production hardening. Use this skill whenever an agent needs to receive HTTP callbacks from Twilio for any product -- messaging, voice, verify, or event streams.Votes: 0GitHub stars: 9
- Twilio Security HardeningSecure Twilio applications against common attacks. Covers credential management (API keys vs auth tokens), request validation (webhook signature verification), PCI DSS compliance, HIPAA account requirements, SMS pumping prevention, geo-permissions, and account isolation patterns. Use this skill when developers are building or deploying Twilio apps.Votes: 0GitHub stars: 9
- Twilio Security Compliance HipaaConfigure Twilio accounts for HIPAA compliance. Covers BAA requirements, HIPAA Project designation (self-service and support), eligible services list, per-product requirements (Voice, SMS, ConversationRelay, Conversation Intelligence, Flex, Verify), message redaction, and what is NOT eligible. Use this skill when developers are building healthcare workflows on Twilio.Votes: 0GitHub stars: 9
- Twilio Security Api AuthChoose the right Twilio authentication method and implement it correctly. Covers Auth Token (testing only), API Keys (production standard), OAuth2 client_credentials (time-limited bearer tokens), Access Tokens (client-side SDKs), and test credentials. Use this skill before making any Twilio API calls in production.Votes: 0GitHub stars: 9
- Twilio Organizations SetupSet up and manage Twilio Organizations for centralized account and user governance. Covers the Organization > Account > Subaccount hierarchy, roles (Owner/Admin/Standard), managed vs independent accounts, domain registration, SSO enforcement, SCIM provisioning, and Organization merging. Use this skill when managing multiple Twilio accounts or users across teams.Votes: 0GitHub stars: 9
- Twilio Identity Verification AdvisorPlanning skill for identity verification and fraud prevention. Qualifies the developer's needs across authentication method, channel selection, fraud risk level, and user experience to recommend the right Twilio Verify + Lookup architecture. Handles login, signup, password reset, and risk-adaptive verification.Votes: 0GitHub stars: 9
- Twilio Iam Auth SetupSet up and manage Twilio authentication credentials: Auth Tokens, API keys (Standard, Main, Restricted), Access Tokens for client-side SDKs, and credential rotation. Use this skill as a prerequisite foundation before making any Twilio API calls.Votes: 0GitHub stars: 9
- Twilio Email SendUse when the caller has Twilio credentials (Account SID + Auth Token or API Key SID + Secret) and needs to send email via comms.twilio.com/v1/Emails. This is Twilio-native email — NOT SendGrid. Do NOT use if the caller has a SendGrid API key (SG.-prefix) — use twilio-sendgrid-email-send instead. Covers single sends, batch sends up to 10,000 recipients, Liquid personalization, operation tracking, and error handling.Votes: 0GitHub stars: 9
- Twilio Conversation OrchestratorConfigure automatic conversation capture and routing with Twilio Conversation Orchestrator. Covers Configuration creation, channel capture rules, grouping types, status timeouts, Memory Store linkage, Intelligence linkage, and conversation lifecycle. Use this skill to automatically capture SMS, voice, WhatsApp, RCS, and web chat traffic into unified conversations without manually creating conversations or participants.Votes: 0GitHub stars: 9
- Twilio Account SetupCreate and configure a Twilio account from scratch. Covers free trial signup, trial limitations, getting credentials (Account SID and Auth Token), buying a phone number, verifying recipient numbers for trial use, SDK installation, first API call, subaccount management (creation, inheritance, credential isolation, limits), and enabling specific products (AI Assistants, Conversations, Verify, ConversationRelay, WhatsApp). Use this skill before any other Twilio skill if you do not yet have a Twi...Votes: 0GitHub stars: 9
- Sign In With VercelSign in with Vercel guidance — OAuth 2.0/OIDC identity provider for user authentication via Vercel accounts. Use when implementing user login with Vercel as the identity provider.Votes: 0GitHub stars: 9
- Secure Workflow GuideGuides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generates visual security diagrams, helps document security properties for fuzzing/verification, and reviews manual security areas. Use when securing a smart contract end to end rather than hunting one bug, checking a project on every check-in or before deployment, triaging a Slither report, or asking where to start on smart contract...Votes: 0GitHub stars: 9
- Netlify DeployDeploy projects to Netlify with the Netlify CLI. Use when the user wants to link a repo, validate deploy settings, run a deploy, or choose between preview and production flows.Votes: 0GitHub stars: 9
- Conversation IntelligenceTwilio Conversation Intelligence development guide. Use when building real-time or post-call conversation analysis, language operator pipelines, sentiment analysis, agent assist, cross-channel analytics, or querying aggregated conversation insights (sentiment trends, escalation rates, dashboards).Votes: 0GitHub stars: 9