Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 26,878
pages available: 1,120

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 553–576 of 26,878 skills

CensysAExpert agent for Censys ASM and Censys Search. Covers internet-wide scanning, certificate transparency, Censys ASM platform, risk scoring, exposure discovery, and the Censys Search API for threat hunting and security research. WHEN: \"Censys\", \"Censys ASM\", \"Censys Search\", \"internet scanning\", \"certificate transparency\", \"Censys API\", \"internet-wide scan\".securitypythonrustVotes: 0GitHub stars: 4
Black DuckDExpert agent for Black Duck (Synopsys) SCA. Covers binary analysis, SOUP lists for medical device compliance, export control, BDBA (binary analysis), Detect CLI, SBOM generation, and enterprise license compliance. WHEN: \"Black Duck\", \"Synopsys Black Duck\", \"BDBA\", \"Black Duck binary analysis\", \"SOUP list\", \"Black Duck Detect\", \"Black Duck Hub\", \"Synopsys SCA\".securityjavashellVotes: 0GitHub stars: 4
Backup SecurityAExpert routing agent for backup security. Covers ransomware protection, 3-2-1-1-0 rule, immutable backups, air-gapped vaults, and backup verification. Routes to Veeam, Rubrik, Cohesity, and Commvault agents. WHEN: \"backup security\", \"ransomware recovery\", \"immutable backup\", \"air-gapped backup\", \"3-2-1-1-0\", \"backup encryption\", \"cyber vault\", \"backup testing\", \"RTO RPO\", \"clean restore point\". Do NOT use for vendor-specific questions -- use the `veeam`, `rubrik`, `cohesit...securitygoawsVotes: 0GitHub stars: 4
Azure Key VaultBExpert agent for Azure Key Vault and Azure Managed HSM. Covers keys (RSA, EC, oct-HSM), secrets, certificates, RBAC vs. access policies, soft-delete, purge protection, managed identity integration, and Key Vault references. WHEN: \"Azure Key Vault\", \"AKV\", \"Azure Managed HSM\", \"Key Vault secret\", \"Key Vault certificate\", \"key vault reference\", \"soft-delete\", \"purge protection\", \"Azure HSM\".securitygobashVotes: 0GitHub stars: 4
Aws Security HubAExpert agent for AWS Security Hub. Covers finding aggregation from GuardDuty, Inspector, Macie, Config, IAM Access Analyzer, security standards (CIS, PCI DSS, NIST), ASFF format, cross-account/cross-region aggregation, and EventBridge automated response. WHEN: \"AWS Security Hub\", \"Security Hub\", \"ASFF\", \"Security Hub findings\", \"Security Hub standards\", \"Security Hub aggregation\", \"Security Hub EventBridge\", \"AWS security findings\", \"CIS AWS Foundations Security Hub\".securitygobashVotes: 0GitHub stars: 4
Auth0AExpert agent for Auth0 customer identity platform. Provides deep expertise in Universal Login, Actions, Organizations, Connections, RBAC, Attack Protection, and machine-to-machine authentication for CIAM scenarios. WHEN: \"Auth0\", \"Universal Login\", \"Auth0 Actions\", \"Auth0 Organizations\", \"CIAM\", \"Auth0 connections\", \"Auth0 rules\", \"Auth0 hooks\", \"Auth0 tenant\", \"Auth0 attack protection\", \"Auth0 FGA\".securityjavascriptgoVotes: 0GitHub stars: 4
AquaBExpert agent for Aqua Security platform. Covers full container lifecycle security — image scanning, KSPM, runtime protection with Aqua Enforcer, Dynamic Threat Analysis (DTA), vShield virtual patching, Trivy OSS integration, and Kubernetes-native deployment. WHEN: \"Aqua Security\", \"Aqua platform\", \"Aqua Enforcer\", \"Aqua image scanning\", \"vShield\", \"DTA\", \"Dynamic Threat Analysis\", \"Aqua KSPM\", \"Aqua runtime\", \"Aqua supply chain\", \"kube-bench Aqua\", \"Trivy Aqua\".securitypythonrustVotes: 0GitHub stars: 4
AppsecAExpert routing agent for Application Security (AppSec). Covers OWASP Top 10, secure SDLC, DevSecOps pipelines, threat modeling, and ASVS. Routes to SAST, DAST, SCA, and WAF technology agents. WHEN: \"application security\", \"AppSec\", \"OWASP\", \"secure SDLC\", \"DevSecOps\", \"shift-left\", \"threat modeling\", \"ASVS\", \"vulnerability scanning\", \"security pipeline\". Do NOT use for tool-specific questions -- use the `sast`, `dast`, `sca`, or `waf` skill.securitygosqlVotes: 0GitHub stars: 4
Ad FsAExpert agent for Active Directory Federation Services. Provides deep expertise in claims-based authentication, SAML/OIDC federation, WAP, claims rules, relying party trusts, and migration to Entra ID. WHEN: \"AD FS\", \"ADFS\", \"federation services\", \"claims rules\", \"relying party trust\", \"WAP\", \"Web Application Proxy\", \"SAML federation AD\", \"AD FS migration\", \"token signing certificate\".securityrustgoVotes: 0GitHub stars: 4
Ad CsAExpert agent for Active Directory Certificate Services. Provides deep expertise in enterprise PKI, certificate templates, enrollment, CRL/OCSP, and ESC1-ESC16 vulnerability detection and remediation. WHEN: \"AD CS\", \"ADCS\", \"PKI\", \"certificate template\", \"auto-enrollment\", \"CRL\", \"OCSP\", \"ESC1\", \"ESC8\", \"Certify\", \"Certipy\", \"certificate authority\", \"enterprise CA\", \"certificate vulnerability\".securitypythonrustVotes: 0GitHub stars: 4
AbnormalAExpert agent for Abnormal Security. Covers API-based behavioral AI email protection, BEC detection, vendor email compromise, account takeover, and native M365/Google Workspace integration without MX changes. WHEN: \"Abnormal Security\", \"Abnormal AI\", \"behavioral email security\", \"BEC detection\", \"vendor email compromise\", \"VEC\", \"API email security\", \"account takeover email\", \"Abnormal SIEM\".securityrustgoVotes: 0GitHub stars: 4
Windows ClientAWindows desktop operating systems (Windows 10 and Windows 11): desktop app model (Win32/UWP/MSIX/winget), editions and licensing, Intune/MDM management, Windows Update for Business, BitLocker, Windows Hello, desktop security (Defender, SmartScreen, ASR), desktop diagnostics (SFC, DISM, Reliability Monitor), and migration planning. Use when: \"Windows 10\", \"Windows 11\", \"Win10\", \"Win11\", \"Windows desktop\", \"Windows client\", \"BitLocker\", \"Intune\", \"Windows Update\", \"winget\", ...securityrustgoVotes: 0GitHub stars: 4
Macos Platform SsoAmacOS Platform SSO (PSSO): enterprise IdP integration (Okta, Microsoft Entra ID, Jamf Connect), authentication policies, ADE simplified setup, NFC Tap-to-Login, and token management. Covers macOS 13 Ventura through macOS 26 Tahoe. Use when: \"Platform SSO\", \"PSSO\", \"Okta macOS\", \"Entra ID macOS\", \"macOS SSO\", \"login window SSO\", \"FileVaultPolicy\", \"LoginPolicy\", \"UnlockPolicy\", \"Tap to Login\", \"NFC login\", \"IdP macOS\". Do NOT use for Entra ID/Okta tenant-side IdP config...securityrustbashVotes: 0GitHub stars: 4
VpnACross-platform comparison and architecture guidance for all VPN technologies: IPsec/IKEv2, WireGuard, SSL VPN, remote access VPN, site-to-site VPN, crypto algorithm selection, and VPN architecture design. Use for \"VPN comparison\", \"VPN architecture\", \"site-to-site VPN\", \"remote access VPN\", \"IPsec vs SSL\", \"VPN selection\", \"crypto algorithms\", \"VPN tunnel\", \"VPN troubleshooting\". Do NOT use for ipsec-, wireguard-, or cisco-secure-client-specific configuration -- use that tec...securitygogitVotes: 0GitHub stars: 4
Sophos FirewallAExpert coverage of Sophos Firewall (XGS/XGV) across all versions: Xstream architecture, three-lane processing, Synchronized Security heartbeat, TLS inspection, Sophos Central management, ZTNA gateway, SD-WAN, CIS health checks, and v22 containerized services. Use for \"Sophos Firewall\", \"XGS\", \"Xstream\", \"Synchronized Security\", \"Security Heartbeat\", \"Sophos Central\", \"Sophos ZTNA\", \"Sophos WAF\", \"Sophos SD-WAN\". Do NOT use for cross-vendor comparison, platform selection, or ...securityrustgoVotes: 0GitHub stars: 4
IpsecAExpert coverage of IPsec/IKEv2 VPN across all platforms: IKEv2 negotiation, ESP, crypto suite selection, CNSA 1.0/2.0 compliance, vendor-specific configuration (Cisco, PAN-OS, FortiOS, StrongSwan), DMVPN, ADVPN, VTI, troubleshooting, and interoperability. Use for \"IPsec\", \"IKEv2\", \"site-to-site VPN\", \"crypto map\", \"VTI\", \"DMVPN\", \"ADVPN\", \"IKE proposal\", \"ESP\", \"DH group\", \"PFS\", \"NAT-T\", \"DPD\". Do NOT use for cross-vendor comparison, platform selection, or category-...securityrustgoVotes: 0GitHub stars: 4
Cloudflare DnsAExpert coverage of Cloudflare DNS: anycast authoritative DNS, proxy vs DNS-only mode, DNSSEC, Foundation DNS, 1.1.1.1 public resolver, DNS Firewall, secondary DNS, CNAME flattening, and API/Terraform management. Use for \"Cloudflare DNS\", \"proxy mode\", \"orange cloud\", \"Foundation DNS\", \"1.1.1.1\", \"Cloudflare DNSSEC\", \"secondary DNS Cloudflare\", \"Cloudflare API\". Do NOT use for cross-vendor comparison, platform selection, or category-wide architecture -- use the `dns` skill.securitygobashVotes: 0GitHub stars: 4
Cisco Secure ClientAExpert coverage of Cisco Secure Client (formerly AnyConnect): VPN protocols (SSL/DTLS/IKEv2), modular architecture, SAML authentication, DAP, split tunneling, Always-On VPN, TND, ISE Posture, Secure Firewall Posture, deployment methods, and troubleshooting with DART. Use for \"Cisco Secure Client\", \"AnyConnect\", \"DTLS\", \"DAP\", \"dynamic access policy\", \"TND\", \"trusted network detection\", \"Always-On VPN\", \"split tunneling\", \"Cisco VPN client\", \"DART\". Do NOT use for cross-v...securityrustgoVotes: 0GitHub stars: 4
Cisco AsaAExpert coverage of Cisco ASA (Adaptive Security Appliance): security levels, ACLs, MPF, multiple context mode, failover HA, clustering, VPN (site-to-site and AnyConnect/Secure Client), NAT, and ASDM. Use for \"Cisco ASA\", \"ASA firewall\", \"security level\", \"ASDM\", \"ASA context\", \"ASA failover\", \"ASA VPN\", \"MPF\", \"ASA NAT\", \"crypto map\", \"tunnel-group\", \"WebVPN\". Do NOT use for cross-vendor comparison, platform selection, or category-wide architecture -- use the `firewall...securityrustgoVotes: 0GitHub stars: 4
Aws VpcAExpert coverage of AWS VPC networking: VPC design, subnets, Security Groups, NACLs, Transit Gateway, VPC peering, PrivateLink, Direct Connect, NAT Gateway, VPN, Flow Logs, and Network Firewall. Use for \"AWS VPC\", \"Security Group\", \"NACL\", \"Transit Gateway\", \"TGW\", \"Direct Connect\", \"PrivateLink\", \"NAT Gateway\", \"VPC peering\", \"AWS networking\". Do NOT use for cross-vendor comparison, platform selection, or category-wide architecture -- use the `cloud-networking` skill. Do N...securitygobashVotes: 0GitHub stars: 4
M365AExpert skill for Microsoft 365 tenant administration — mail, collaboration, and compliance surfaces. Covers licensing, Conditional Access policy assignment, Microsoft Purview compliance, DLP, sensitivity labels, eDiscovery, admin centers, Microsoft Graph, Intune, and Teams/SharePoint governance. WHEN: \"Microsoft 365\", \"M365\", \"Office 365\", \"O365\", \"Conditional Access\", \"Purview\", \"sensitivity labels\", \"DLP\", \"eDiscovery\", \"M365 licensing\", \"E3\", \"E5\", \"Business Premiu...securitygoshellVotes: 0GitHub stars: 4
MysqlAMySQL technology expert covering ALL versions. Deep expertise in InnoDB storage engine, replication, InnoDB Cluster, query optimization, Performance Schema, and operational tuning. WHEN: \"MySQL\", \"InnoDB\", \"Group Replication\", \"InnoDB Cluster\", \"InnoDB ClusterSet\", \"MySQL Shell\", \"MySQL Router\", \"Performance Schema\", \"slow query log\", \"binlog\", \"binary log\", \"mysqld\", \"mysqldump\", \"mysqlbinlog\", \"innodb_buffer_pool\", \"GTID\", \"semi-sync\", \"XtraBackup\".securityjavascriptjavaVotes: 0GitHub stars: 4
ElasticsearchAElasticsearch as a general-purpose search/database engine covering ALL versions: full-text search, index management, cluster operations, Query DSL, aggregations, mappings, and operational tuning for application data. Use for \"Elasticsearch\", \"elastic\", \"index management\", \"Query DSL\", \"mapping\", \"analyzer\", \"shard\", \"replica\", \"cluster health\", \"_cat API\", \"bulk API\", \"ingest pipeline\", \"ILM\", \"snapshot\", \"cross-cluster\". Do NOT use for Elasticsearch/ELK as an ob...securitygonodeVotes: 0GitHub stars: 4
LinkerdCExpert coverage of Linkerd service mesh across all supported versions: linkerd2-proxy (Rust), zero-config mTLS, ServiceProfile, multi-cluster gateway mirroring, post-quantum cryptography, and minimal operational overhead. Use for \"Linkerd\", \"linkerd2-proxy\", \"Linkerd viz\", \"ServiceProfile\", \"Linkerd multi-cluster\", \"Linkerd mTLS\", \"post-quantum mesh\", \"Linkerd install\", \"TrafficSplit\".securityrustgoVotes: 0GitHub stars: 4