All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,679
- 1,237
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 3,553–3,576 of 29,679 skills
- 007Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.Votes: 0GitHub stars: 143
- Ashrafiucse Design Threat ReviewThreat-models a design BEFORE implementation — spec/PRD/data-model/route sketch in, THREAT-MODEL.md out with actor×asset inventory, data flows across trust boundaries, STRIDE sweep mapped to the repo's detection skills, per-persona abuse cases, and an audit contract (the actor×surface matrix + acceptance criteria) the future security-audit must disposition. Use when the user shares a design doc, spec, PRD, or architecture, or asks to threat-model a system before or during early build — before...Votes: 0GitHub stars: 78
- Dl Matching DecompReconstruct source-equivalent code from an authorized compiled binary through matching decompilation, reproducible builds, disassembly/decompiler analysis, function/section diffing, and final hash verification. Use when asked to reproduce an executable/ROM/library byte-for-byte, diagnose why a rebuilt binary does not match, infer compiler/ABI/codegen settings, or organize a decompilation project. Do not use to bypass DRM/access controls, defeat license checks, extract credentials/secrets, or ...Votes: 0GitHub stars: 3
- Agent GuardrailsLayered agent safety — prompt-injection defense, data exfiltration prevention, tool-misuse blocking via NeMo Guardrails + Lakera / LLM Guard / Llama Guard. Use before any agent reads untrusted input or executes tools with real-world side effects.Votes: 0GitHub stars: 47
- Fedramp ComplianceImplement FedRAMP requirements for federal cloud services. Configure NIST 800-53 controls and continuous monitoring. Use when providing cloud services to US federal agencies.Votes: 0GitHub stars: 6
- Dependency ScanningScan package dependencies for known vulnerabilities using Snyk, Dependabot, and OWASP Dependency-Check.Votes: 0GitHub stars: 6
- Dast ScanningPerform dynamic application security testing with OWASP ZAP, Burp Suite, and Nikto.Votes: 0GitHub stars: 6
- Client Secret Exposure AuditAudit a deployed web app for secrets exposed to the browser: hardcoded API keys/tokens in JS, secrets in HTML meta/attributes/comments, publicly reachable source/config/deploy files, and header/CORS mVotes: 0GitHub stars: 6
- Cis BenchmarksAudit and remediate CIS benchmark violations.Votes: 0GitHub stars: 6
- Change ManagementImplement change management processes. Configure CAB reviews, change windows, and rollback procedures. Use when managing production changes.Votes: 0GitHub stars: 6
- Azure KeyvaultManage secrets and certificates in Azure Key Vault. Configure access policies, integrate with Azure services, and implement secure secret management. Use when managing secrets in Azure environments.Votes: 0GitHub stars: 6
- Aws Secrets ManagerStore and rotate secrets in AWS Secrets Manager.Votes: 0GitHub stars: 6
- Ai Security HardeningHarden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks.Votes: 0GitHub stars: 6
- Ai Agent SecuritySecure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls.Votes: 0GitHub stars: 6
- Generate VideoCreate videos with RunComfy AI video models including Seedance, Wan, LTX and Kling. Use for text-to-video, image-to-video, reference-to-video and video edits. Check model-specific duration, aspect ratio, audio, inputs and price before submitting one job.Votes: 0GitHub stars: 12
- Security Pen TestingUse when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security assessments. Covers static analysis, dependency scanning, secret detection, API security testing, and pen test report generation.Votes: 0GitHub stars: 7
- Security ChecklistReference document for monopoly security-checklist.Votes: 0GitHub stars: 7
- Windows Internals TriageUse when triaging Windows binaries. REDB plus Debugger.Votes: 0GitHub stars: 86
- Rop Jop Chain ConstructionUse when building ROP/JOP. Debugger and REDB gadgets.Votes: 0GitHub stars: 86
- SbomDrive PWN::Plugins::SBOM from pwn_eval.Votes: 0GitHub stars: 86
- VaultDrive PWN::Plugins::REPL::Vault from pwn_eval.Votes: 0GitHub stars: 86
- MeshDrive PWN::Plugins::REPL::Mesh from pwn_eval.Votes: 0GitHub stars: 86
- AsmDrive PWN::Plugins::REPL::ASM from pwn_eval.Votes: 0GitHub stars: 86
- AiDrive PWN::Plugins::REPL::AI from pwn_eval.Votes: 0GitHub stars: 86