All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,704
- 1,238
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 3,889–3,912 of 29,704 skills
- High Security Corporate Meeting PlanningDevelops comprehensive security plans for high-risk corporate meetings or board events, focusing on venue hardening, access control, surveillance of blind spots, ballistic protection, and mitigation of advanced threats like 3D-printed weapons.Votes: 0GitHub stars: 17
- Tanstack StartTanStack Start best practices for full-stack React applications. Server functions, middleware, SSR, authentication, and deployment patterns. Activate when building full-stack apps with TanStack Start.Votes: 0GitHub stars: 17
- Technical DebtTechnical debt inventory, prioritization, and audit for PHP/Laravel (MySQL) and Node/TypeScript/React projects. Use when assessing code health, identifying refactoring candidates, planning debt paydown, or auditing a codebase for accumulated debt. Triggers on "audit technical debt", "find tech debt", "debt inventory", "what should we refactor first", or tasks involving code health, security debt, performance debt, data debt, observability debt, debt prioritization, or remediation planning.Votes: 0GitHub stars: 17
- Laravel Owasp SecurityOWASP Top 10 security audit and secure coding guidelines for Laravel + React/Inertia.js applications. Use when auditing for vulnerabilities ("run OWASP audit", "security review", "check my app security") or writing secure Laravel code involving auth, payments, file uploads, or API design. Triggers on security-related tasks, payment handling, authentication, or any request to audit a Laravel codebase.Votes: 0GitHub stars: 17
- Using Model EndpointCall a configured Feynman model endpoint and interpret its response. Use when a task needs inference from a registered endpoint, remote model API, local model service, or custom connector-backed predictor.Votes: 0GitHub stars: 211
- Compute Env SetupSet up a reproducible Feynman compute environment for research jobs. Use when a task needs Python/R packages, GPU libraries, containers, Modal, SSH, caches, or managed model runtime setup.Votes: 0GitHub stars: 211
- Security PassRuns a context-aware security review of a software project — first understands what the system does and who could attack it, then adapts the analysis instead of running a static checklist. Produces a ranked, evidence-backed findings report and triages each finding by what kind of action it needs (code fix, spec change, design/ADR change, product decision, or accepted risk). Never edits the project — analysis only. Use when the user asks for a security review, security pass, security audit, or...Votes: 0GitHub stars: 211
- Appstore ReviewApp Store review readiness audit for iOS apps. Scans the codebase, entitlements, Info.plist, privacy manifests, paywall/subscription UI, and metadata for anything that could trigger a warning or rejection during App Store review. Invoke explicitly when preparing a submission. Do NOT trigger automatically.Votes: 0GitHub stars: 211
- Using AxiomQueries Axiom logs and metrics, investigates anomalies, and manages monitors and notifiers. Use for observability, incident investigation, service health, APL or MPL analysis, and Axiom monitor work.Votes: 0GitHub stars: 64
- Code ReviewReview Proto Fleet pull requests for concrete security, correctness, and reliability defects. Use for every GitHub Copilot code review.Votes: 0GitHub stars: 56
- Whitebox PentestWhitebox pentest of your own code before it ships: run every scanner installed, rank findings by reachability, prove each with a working exploit, fix, re-run. Fires on pentest, exploit, hardening.Votes: 0GitHub stars: 5
- Paperclip EvalsChoose, inspect, validate, and report Paperclip Runner or Product E2E evaluations while preserving evidence, provenance, cost, and failure classification.Votes: 0GitHub stars: 95,319
- Using Fjo For ForgejoUse when working with the fjo CLI or Forgejo/Gitea instances: repositories, issues, pull requests, releases, branches, comments, Actions, or authentication. Provides safe host-aware read/write workflows. Not for GitHub — use `using-gh-for-github` there.Votes: 0GitHub stars: 2
- Orchestrate:SecurityAdd security governance to a target repo - CODEOWNERS, SECURITY.md, CONTRIBUTING.md, LICENSE, .gitignore auditVotes: 0GitHub stars: 299
- AuthAuthentication and authorization patterns for Rossoctl servicesVotes: 0GitHub stars: 299
- Here NowPublishes static folders or files to instant shareable here.now URLs. Use when the user wants publish, host, deploy, share a link, or put HTML or assets on the web.Votes: 0GitHub stars: 22
- AuthorizeManage persistent allowlist for pre_tool_use hook bypassVotes: 0GitHub stars: 22
- Cook Vs ChefDistinguish between reasoning by analogy (following recipes) and reasoning from first principles (creating recipes) to identify innovation opportunitiesVotes: 0GitHub stars: 22
- Blessing In Disguise Triz PrincipleWhen harmful or undesired effects can be converted into benefitsVotes: 0GitHub stars: 22
- Skill DecompileDecompile any SKILL.md into deterministic YAML for structural security analysis. Extracts permissions, surfaces, risk signals, and produces a scored verdict.Votes: 0GitHub stars: 22
- Security Threat ModelRepository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.Votes: 0GitHub stars: 22
- Security ReviewThis skill ensures all code follows security best practices and identifies potential vulnerabilities.Votes: 0GitHub stars: 22
- Security Hub[WHAT] Unified security skill router — routes to the right security sub-skill based on intent [HOW] Decision tree routes to: security-review (code audit), security-best-practices (language-specific), security-threat-model (threat modeling), security-ownership-map (ownership topology) [WHEN] Use when user mentions security, audit, vulnerability, threat model, OWASP, pentest, code review security, ownership analysis [WHY] Prevents loading 4 separate security skills; routes to the right one base...Votes: 0GitHub stars: 22
- Defendr[WHAT] 4-layer security scanner for untrusted code: static analysis, malware/CVE scanning, Docker sandbox, agentic review. [HOW] Orchestrates rg patterns, ClamAV, pip-audit, osv-scanner, semgrep, Docker strace, and LLM code review. [WHEN] Before running cloned repos, installing pip/npm packages, intake of external code, pre-commit on untrusted PRs, workshop evaluation. [WHY] Agents clone and execute code from the internet. One malicious setup.py and your machine is owned. Triggers: "security...Votes: 0GitHub stars: 22