Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 26,873
pages available: 1,120

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 409–432 of 26,873 skills

Internal CommsADraft internal company or team communications such as 3P updates, newsletters, FAQs, status updates, or incident reports. Use when drafting one of these internal communications, and read the matching example; ordinary conversation updates do not trigger this skill.securityVotes: 0GitHub stars: 2
Verification LatticeAUsar cuando se necesita verificación multi-capa más allá del code review estándar.securitygosqlVotes: 0GitHub stars: 50
Security AuditAUse when auditing code for security vulnerabilities, reviewing auth, permissions or Firestore/Storage rules, before a release or store submission, after a pentest or bug report, when handling secrets, tokens or PII, or when asked "is this secure", "find security holes", "check for vulnerabilities", or "review my rules". Deepest on Flutter + Firebase (Firestore, Storage, Cloud Functions, App Check); the method works on any stack.securityrustgoVotes: 0GitHub stars: 2
SecurityASecurity engineering for web applications, APIs, and the AI agents and tools around them: audit code or architecture, trace whether a flaw is exploitable, threat-model a feature, review sign-in, sessions, OAuth, access control and tenant isolation, injection, XSS, SSRF, CSRF, file uploads, cryptography and secrets, dependency and CI/CD supply chain, WordPress and WooCommerce, and prompt injection in LLM agents. Use for any request about vulnerabilities, "is this secure", security review, hard...securityrustgoVotes: 0GitHub stars: 7
Passport DevelopmentADevelops OAuth2 API authentication with Laravel Passport. Activates when installing or configuring Passport; setting up OAuth2 grants (authorization code, client credentials, personal access tokens, device authorization); managing OAuth clients; protecting API routes with token authentication; defining or checking token scopes; configuring SPA cookie authentication; handling token lifetimes and refresh tokens; or when the user mentions Passport, OAuth2, API tokens, bearer tokens, or API authe...securityphpbashVotes: 0GitHub stars: 7,117
Security ReviewerACross-layer security review covering frontend (XSS, CSRF, CSP), backend (SQL/NoSQL/command injection, path traversal, auth/authz, session management), AI (prompt injection, data exfiltration, output filtering), and infrastructure (exposed secrets, weak crypto, missing headers). Maps attack surface, threat-models entry points, and gives concrete remediation. Use when reviewing auth or input-handling code, before a production deploy, or after a vulnerability is discovered. Not for internal util...securitypythonbashVotes: 0GitHub stars: 6
Mcp Security AuthorizationAImplements MCP security best practices including OAuth 2.1 PKCE, resource indicators, token management, tool poisoning prevention, secret management, attestation, audit logging, and defense-in-depth strategies against OWASP MCP Top 10 risks (token mismanagement, tool rug pulls, unverified inputs, supply chain attacks).securitypythonrustVotes: 0GitHub stars: 6
ZepAWork with Zep's temporal memory: create users and threads, append messages, read distilled facts and history. Trigger phrases: zep, knowledge graph memory, conversation memory.securitygobashVotes: 0GitHub stars: 18
YoutubeAWork with YouTube: read channels, videos, search, playlist items; upload videos and post comments (with confirmation). Trigger phrases: youtube, videos, upload video, youtube comment.securitygobashVotes: 0GitHub stars: 18
XaiAQuery Grok chat completions and list available Grok models through the xAI API. Trigger phrases: xai, grok, chat with grok, grok model.securitypythongoVotes: 0GitHub stars: 18
VeedARemove video backgrounds with VEED's direct developer API: standard, fast and green-screen endpoints. Trigger phrases: veed, remove video background, background removal, transparent video.securitygobashVotes: 0GitHub stars: 18
UnsplashASearch Unsplash for free stock photos, browse by photographer or topic, and download images with proper attribution credit. Trigger phrases: unsplash, stock photo, find an image, download unsplash image.securitygobashVotes: 0GitHub stars: 18
Uber DirectAQuote and dispatch same-day Uber Direct courier deliveries, and check their status. Trigger phrases: uber direct, same-day delivery, dispatch courier, delivery quote.securitygobashVotes: 0GitHub stars: 18
TwitchARead and write Twitch via the Helix API: channel profile, follower stats, live stream status, past videos, channel title and game updates, clip creation. Trigger phrases: twitch, stream stats, stream followers, channel update.securitygobashVotes: 0GitHub stars: 18
TuyaARead and control Tuya / Smart Life devices: plugs, lights, thermostats, curtains, smart locks. Trigger phrases: tuya, smart life, tuya device, smart life plug.securityrustgoVotes: 0GitHub stars: 18
TriggerdevARead and write trigger.dev: list runs, check run status, trigger tasks, cancel runs, list schedules. Trigger phrases: trigger.dev, background jobs.securitygobashVotes: 0GitHub stars: 18
TiktokARead TikTok via API v2: your profile and video list. Posting is approval-gated and not shipped. Trigger phrases: tiktok, my tiktok, tiktok profile, tiktok videos.securitygobashVotes: 0GitHub stars: 18
TicktickARead and write TickTick: list projects and tasks, create tasks, complete and delete tasks. Trigger phrases: ticktick, task list, my tasks.securitygobashVotes: 0GitHub stars: 18
Tesla PowerwallAMonitor and control Tesla Powerwall and energy sites through the Tesla Fleet API: live power status, backup reserve, operation mode, storm watch. Trigger phrases: tesla powerwall, powerwall, tesla energy, backup reserve, storm watch.securitygobashVotes: 0GitHub stars: 18
SwitchbotARead and control SwitchBot devices: Bots, Locks, curtains, plugs, lights, AC, IR remotes, scenes. Trigger phrases: switchbot, switchbot lock, switchbot bot, switchbot curtain.securityrustgoVotes: 0GitHub stars: 18
SupermemoryAStore and recall with Supermemory: add memories and documents, hybrid search, upload files, tune settings. Trigger phrases: supermemory, memory engine, remember this.securitygobashVotes: 0GitHub stars: 18
SupabaseARead and write a Supabase Postgres database over PostgREST: list tables, query, insert, update, and delete rows. Trigger phrases: supabase, supabase table, query supabase.securitygobashVotes: 0GitHub stars: 18
SquareAWork with Square: list locations and payments, create orders, push Terminal checkouts, charge payment sources, and refund payments. Trigger phrases: square, square terminal, process payment, refund payment, point of sale.securitygobashVotes: 0GitHub stars: 18
SpotifyAWork with Spotify: read your profile, playlists, top tracks and artists, search the catalog, and (with confirmation) create playlists, add tracks, and save tracks to your library. Trigger phrases: spotify, my playlists, my top tracks, top artists, save track, search spotify.securitygobashVotes: 0GitHub stars: 18