Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,761
pages available: 1,241

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 9,025–9,048 of 29,761 skills

Backdoor Persistence ReviewerAReview changes for hidden privileged paths, triggers, covert egress, persistence, security-control tampering, and unexplained behavior.securityrustgoVotes: 0GitHub stars: 2
Azure Cloud ReviewerAReview Azure tenants, subscriptions, identities, networks, compute, data services, Policy, monitoring, cost, and resilience.securityrustgoVotes: 0GitHub stars: 2
Aws Cloud ReviewerAReview AWS accounts, IAM, networking, compute, storage, databases, observability, security, cost, and resilience.securityrustgoVotes: 0GitHub stars: 2
Ansible ReviewerAReview Ansible inventories, roles, playbooks, idempotency, secrets, privilege escalation, testing, and rollout safety.securityrustgoVotes: 0GitHub stars: 2
Agent Behavior Eval EngineerADesign trajectory-level agent security evals for Goal compliance, contract boundaries, goal hacking, unsafe tools, and long-horizon behavior.securityrustgoVotes: 0GitHub stars: 2
Sui ScannerAUse when the user wants to audit Sui Move smart contracts, scan Sui-specific patterns including object ownership, shared objects, or dynamic fields, review Sui DeFi protocols for object model security issues, or analyze Sui-specific transaction and consensus patterns.securityrustgoVotes: 0GitHub stars: 61
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Static AnalysisAIntegrate automated static analysis tools (Slither, Mythril, Aderyn, Semgrep) into the audit workflow to catch known vulnerability patterns before manual review. Use when starting an audit to establish a coverage baseline, or when configuring static analysis tooling for a project.securitypythonrustVotes: 0GitHub stars: 61
Starknet ScannerAUse when the user wants to audit Starknet contracts for security vulnerabilities, scan Cairo contracts for Starknet-specific patterns including account abstraction, class replacement, or L1-L2 messaging, review Starknet DeFi protocols for component architecture flaws, or analyze cross-layer bridge security.securitygoawsVotes: 0GitHub stars: 61
Spec ComplianceAVerify smart contract implementations comply with EIP/ERC standards and protocol specifications. Use when checking ERC-20, ERC-721, ERC-1155, ERC-4626, or EIP-712 compliance, or when identifying non-standard token behavior that causes integration failures.securityrustgoVotes: 0GitHub stars: 61
Move ScannerAUse when the user wants to audit Move smart contracts for security vulnerabilities, scan Aptos or Sui contracts for resource safety, capability leaks, or module upgrade issues, review Move-based DeFi protocols for object model and linear type violations, or analyze cross-module trust boundaries.securityrustgoVotes: 0GitHub stars: 61
Cyfrin FindingsAQuery the Cyfrin/Solodit findings database (50,530+ findings from 30+ audit firms) for vulnerability research, pattern extraction, and audit enhancement. Use when searching for historical findings by vulnerability type, protocol category, or severity, or when looking for similar bugs found in comparable protocols.securitygonodeVotes: 0GitHub stars: 61
Cosmos ScannerAUse when the user wants to audit Cosmos SDK modules or CosmWasm smart contracts, scan IBC protocol interactions for relay, channel, or packet vulnerabilities, review Cosmos Go modules for state machine exploits, or analyze cross-chain message handling in the Cosmos ecosystem.securityrustgoVotes: 0GitHub stars: 61
CommandsAStructured command patterns for invoking audit capabilities through slash commands. Use when triggering /audit, /scan, /checklist, /report, /severity, /patterns, or other slash commands that map to underlying skills and load the correct context for each workflow.securitygogitVotes: 0GitHub stars: 61
Cairo ScannerAUse when the user wants to audit Cairo smart contracts for security vulnerabilities, scan Starknet contracts for felt overflow, storage collision, or account abstraction issues, review Cairo 2.x contracts for component architecture flaws, or analyze STARK-based protocols for cryptographic and computational errors.securityrustgoVotes: 0GitHub stars: 61
Aztec ScannerAUse when the user wants to audit Aztec Network smart contracts written in Noir, scan for privacy-specific vulnerabilities including state leakage, note handling, or nullifier collisions, review private DeFi protocols for information disclosure, or analyze encrypted computation and zero-knowledge proof circuits.securityrustgoVotes: 0GitHub stars: 61
Aptos ScannerAUse when the user wants to audit Aptos Move smart contracts, scan Aptos-specific patterns including global storage model, resource accounts, or coin modules, review Aptos DeFi protocols for framework module interaction vulnerabilities, or analyze Aptos-specific upgrade and governance patterns.securityrustgoVotes: 0GitHub stars: 61
OauthAOAuth2-proxy authentication setup, configuration, and troubleshooting for the K3s cluster.securityrustgoVotes: 0GitHub stars: 32
Security ReviewAUse this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.securitytypescriptbashVotes: 0GitHub stars: 78
Safe EncryptionFEncrypt, decrypt, and manage keys with the SAFE CLI — a modern GPG alternative with post-quantum support.securitypythonrustVotes: 0GitHub stars: 78
Eval HarnessAFormal evaluation framework for Claude Code sessions implementing eval-driven development (EDD) principlessecuritygobashVotes: 0GitHub stars: 78
Ios Testflight ReleaseAPrepare and ship an iOS build to TestFlight — runs the submission pre-flight checks, fixes the config that blocks uploads/processing, then walks internal→external beta review. Use when releasing an iOS build to testers.securitypythongoVotes: 0GitHub stars: 41
Security AuditorAExpert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.securityrustgoVotes: 0GitHub stars: 3
WebsocketsAZoom WebSockets for real-time event notifications via persistent connection. Alternative to webhooks with lower latency, bidirectional communication, and enhanced security. Use when you need real-time event updates, are in security-sensitive industries, or want faster event delivery than webhooks.securityjavascriptgoVotes: 0GitHub stars: 82
ElectronAZoom Meeting SDK for Electron desktop applications. Use when embedding Zoom meetings in an Electron app with the Node addon wrapper, JWT auth, join/start flows, settings controllers, and raw data integration.securitynodedebuggingVotes: 0GitHub stars: 82