All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,769
- 1,241
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 9,577–9,600 of 29,769 skills
- Mapping ArchitectureUse when needing component relationships, layer boundaries, module structure, or understanding how parts of a codebase fit together before modification or refactoringVotes: 0GitHub stars: 2
- Inventorying Api SurfaceUse when documenting public interfaces, planning API changes, evaluating backward compatibility, or understanding what a module exposes to consumersVotes: 0GitHub stars: 2
- Extract Tool GraphUse when investigating conditional tool availability, finding tools that exist but are hidden behind gates, or mapping the full capability surface of a systemVotes: 0GitHub stars: 2
- Detecting Dead CodeUse when reducing codebase size, cleaning up before refactoring, investigating slow builds, or auditing for unused code and orphaned filesVotes: 0GitHub stars: 2
- Detect Hidden ContractsUse when investigating implicit assumptions in code — ordering dependencies, unvalidated environment variables, assumed object shapes, or temporal state requirements that aren't enforced by types or testsVotes: 0GitHub stars: 2
- Security BaselineInstall secure-development basics for non-toy repos. Use when a repo needs secret scanning, dependency vulnerability checks, auth/session conventions, input validation guidance, safe environment variable handling, .gitignore protection, or a security review checklist.Votes: 0GitHub stars: 3
- Dependency GovernanceControl dependency sprawl in agent-edited repos. Use when dependencies are added, removed, audited, approved, unused, risky, vulnerable, or need docs/quality/dependencies.md and scripts/check-dependencies.Votes: 0GitHub stars: 3
- VaultRead secrets and policies from HashiCorp VaultVotes: 0GitHub stars: 22
- SonarqubeQuery SonarQube code quality metrics and issuesVotes: 0GitHub stars: 22
- Secrets ScannerScan for sensitive information in code like API keys, tokens, passwordsVotes: 0GitHub stars: 22
- Password Strength CheckerCheck password strength and complexityVotes: 0GitHub stars: 22
- Log Security AnalyzerAnalyze logs for security events and threatsVotes: 0GitHub stars: 22
- Jira ConnectorQuery Jira issues, projects, and boardsVotes: 0GitHub stars: 22
- Crypto ToolEncrypt/decrypt strings with various algorithmsVotes: 0GitHub stars: 22
- Api Security CheckerCheck API for common security vulnerabilitiesVotes: 0GitHub stars: 22
- Security Auditor 1.0.0在检查代码是否存在安全漏洞、实施身份验证流程、审计 OWASP Top 10、配置 CORS/CSP 标头、处理机密信息、进行输入验证、SQL 注入防护、XSS 防护或进行任何与安全相关的代码审查时使用。Votes: 0GitHub stars: 8
- Gsd Secure PhaseRetroactively verify threat mitigations for a completed phaseVotes: 0GitHub stars: 8
- Golang SecuritySecurity best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookies, secrets management, memory safety, and logging. Apply when writing, reviewing, or auditing Go code for security, or when working on any risky code involving crypto, I/O, secrets management, user input handling, or authentication. Includes configuration of security tools.Votes: 0GitHub stars: 8
- Clawdefender 1用于 AI 代理的安全扫描器和输入清理器。检测提示词注入、命令注入、SSRF、凭据泄露和路径遍历攻击。在以下情况下使用：(1) 从 ClawHub 安装新技能，(2) 处理外部输入如电子邮件、日历事件、Trello 卡片或 API 响应，(3) 在获取之前验证 URL，(4) 在工作区上运行安全审计。保护代理免受不受信任的数据源中的恶意内容的影响。Votes: 0GitHub stars: 8
- Aliyun Clawscan 1.0.0分析用户 OpenClaw 环境和已安装技能的安全态势。在用户准备安装新技能并希望验证其安全性、对现有技能的行为有疑虑、或需要对整个 OpenClaw 配置进行全面安全检查时使用。适用于执行安全审计、调查可疑技能、或在安装前评估配置风险和潜在漏洞的用户。Votes: 0GitHub stars: 8
- Orpc EncryptionFunctions to encrypt and decrypt sensitive data using AES-GCM.Votes: 0GitHub stars: 8
- Orpc CookieFunctions for managing HTTP cookies in web applications.Votes: 0GitHub stars: 8
- Orpc ContextType-safe dependency injection pattern in oRPC.Votes: 0GitHub stars: 8
- Orpc Better AuthUse Better Auth inside your oRPC projects without any extra overhead.Votes: 0GitHub stars: 8