Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,704
pages available: 1,238

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 3,841–3,864 of 29,704 skills

Ssti AnalysisAAnalyze server-side template injection risks — use when user input reaches template engines (Jinja, Twig, Freemarker, Pug, Liquid) or dynamic template compile/render APIs (CWE-1336 / A03:2021).securityrustgoVotes: 0GitHub stars: 15
Ssrf AnalysisAAnalyze and validate server-side request forgery in application code — use when reviewing outbound HTTP/fetch sinks, user-controlled URLs, webhook callbacks, previewers, or cloud metadata exposure (CWE-918 / A10:2021).securityrustgoVotes: 0GitHub stars: 15
Sql InjectionAAnalyze SQL and ORM injection risks in application code — use for string-built queries, raw SQL helpers, and database sinks (CWE-89 / A03:2021).securityrustgoVotes: 0GitHub stars: 15
Session SecurityAAnalyze session management security — use when reviewing cookie flags, session fixation, timeout, logout, concurrent sessions, or server-side session stores (A07:2021 / CWE-287 / CWE-352 adjacency).securitygoapiVotes: 0GitHub stars: 15
Security TriageADomain reasoning for triaging AXguard findings — keep/drop gates, confidence, and severity promotion before remediation.securitygosqlVotes: 0GitHub stars: 15
Security RemediationBApply minimal defensive patches for confirmed findings and verify with re-audit — post-triage only.securitygoshellVotes: 0GitHub stars: 15
Skills DirectorySkills Directory Pro Download any skill as a ZIP for Claude.ai, Claude Desktop, or .claude/skills.See Pro
Security Architecture ReviewAReview security architecture and trust boundaries — use for design-level control gaps across authZ, secrets, egress, multi-tenant isolation, and insecure-by-design features (A04:2021) before or with /axguard-audit.securityrustgoVotes: 0GitHub stars: 15
Secrets DetectionAFind and triage hard-coded secrets, tokens, and credentials in source and build artifacts before ship (CWE-798 / A07:2021 adjacent).securitygogitVotes: 0GitHub stars: 15
Prototype PollutionAAnalyze JavaScript prototype pollution risks — use when reviewing deep merges, recursive object assigns, query-to-object parsers, or untrusted JSON key merges (CWE-1321 / A03:2021).securityjavascripttypescriptVotes: 0GitHub stars: 15
Prompt InjectionAAssess direct and indirect prompt-injection risks in LLM/AI features — use for chatbots, RAG, agents, and tool-calling apps.securityrustgoVotes: 0GitHub stars: 15
Path TraversalBAnalyze path traversal and unsafe file access — use when user input influences file paths, downloads, includes, zip extraction, or static file send APIs (CWE-22 / A01:2021).securityrustgoVotes: 0GitHub stars: 15
Oauth SecurityAAnalyze OAuth/OIDC integration security — use when reviewing redirect URIs, state/nonce, token handling, PKCE, or confused-deputy risks in authorization code flows (CWE-601 / A07:2021 / API2:2023).securitygoapiVotes: 0GitHub stars: 15
Mcp SecurityBReview Model Context Protocol servers/clients and tool bridges for trust, supply-chain, and over-privileged tool exposure before ship.securityrustgoVotes: 0GitHub stars: 15
Jwt SecurityAAnalyze JWT implementation flaws — use when reviewing alg confusion, none algorithm, missing verify, weak secrets, or claim validation gaps (A07:2021 / API2:2023 / auth.jwt rules).securityrustgoVotes: 0GitHub stars: 15
Graphql SecurityAAnalyze GraphQL API security — use when reviewing schemas, resolvers, introspection, batching, authorization per field, or CSRF on cookie-authenticated GraphQL endpoints (API1/API5/API8:2023).securitygosqlVotes: 0GitHub stars: 15
File Upload SecurityAAnalyze unsafe file upload handling — use when reviewing multipart uploads, extension/MIME checks, stored filenames, image processors, or user-supplied archives (CWE-434 / A04:2021).securitygoshellVotes: 0GitHub stars: 15
Deserialization SecurityAAnalyze unsafe deserialization and object-decode sinks — use when reviewing pickle, YAML load, Java ObjectInputStream, PHP unserialize, or untrusted serialized blobs (CWE-502 / A08:2021).securityjavascriptrustVotes: 0GitHub stars: 15
Configuration SecurityAFind security misconfiguration before ship — debug flags, verbose errors, exposed actuators/admin, weak defaults (CWE-489 / CWE-209 / A05:2021).securityrustgoVotes: 0GitHub stars: 15
Command InjectionAAnalyze OS command and shell injection in application code — use when reviewing subprocess, exec, system, shell=True, or user-influenced shell strings (CWE-78 / CWE-77 / A03:2021).securitypythonrustVotes: 0GitHub stars: 15
Cloud SecurityAReview cloud and CORS misconfiguration in app code and IaC-adjacent configs — metadata URLs, public buckets, wildcard origins (CWE-918 / CWE-942 / A05:2021 / A10:2021).securityrustgoVotes: 0GitHub stars: 15
Axguard TriageBTriage AXguard scanner output — false-positive filter, severity promotion, and keep/drop gates per vuln class. Use after an audit when the user wants signal, not volume, or runs /axguard-triage.securityrustshellVotes: 0GitHub stars: 15
Axguard SecurityAAnalyze code for security vulnerabilities, investigate findings, verify fixes, and assess security risk before deployment. Use when reviewing security-sensitive changes, before ship/deploy, or when an agent should call AXGuard MCP instead of inventing its own scanner.securitygosecurityVotes: 0GitHub stars: 15
Axguard ReportAProduce or polish AXguard Markdown and HTML audit reports from verified evidence. Use with /axguard-report. Prefer regenerating via axguard audit; tighten narrative only with confirmed findings.securitybashsqlVotes: 0GitHub stars: 15
Axguard RemediateBApply concrete defensive fixes for confirmed AXguard findings and re-audit. Use with /axguard-fix after triage. Prefer minimal patches, critical first, then verify with axguard audit/scan.securityrustgoVotes: 0GitHub stars: 15