All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,769
- 1,241
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 9,769–9,792 of 29,769 skills
- Majiayu000 Claude Skill Registry Skills Data Remediation AuthSecurity fix patterns for authentication and authorization vulnerabilities (credentials, JWT, deserialization, access control). Provides language-specific secure implementations.Votes: 0GitHub stars: 4
- Majiayu000 Claude Skill Registry Skills Data Neo Llm SecurityAI security co-pilot for identifying, testing, and fixing vulnerabilities in LLM-powered applications. Use when: (1) Securing LLM applications or agents, (2) Generating security test suites with promptfoo, (3) Testing for prompt injection, jailbreaking, data exfiltration, (4) Hardening system prompts, (5) Compliance mapping for OWASP LLM Top 10, NIST AI RMF, CJIS, SOC2, (6) Threat modeling AI systems, (7) Analyzing security eval results, (8) Research on LLM attack/defense techniques. Triggers...Votes: 0GitHub stars: 4
- Majiayu000 Claude Skill Registry Skills Data Narrative Dimensions AnalysisPhysics-inspired story analysis system that treats narrative as trajectories through dimensional space. Tracks dimensions like intimacy, trust, power, and stakes to calculate tension, validate pacing, and diagnose story problems. Genre-aware with formulas for romance, thriller, mystery, and fantasy. Use when analyzing story structure, engineering tension, validating character arcs, diagnosing pacing issues, or generating dimensional targets for scenes.Votes: 0GitHub stars: 4
- Majiayu000 Claude Skill Registry Skills Data ModesDomain-specific development mode guidelines for UI, API, database, integration, migration, and specialized workflows. Each mode provides tailored principles, checklists, and patterns for different types of development work.Votes: 0GitHub stars: 4
- Mahmutka Cybersecurity Claude Skills Web HackingOWASP Top 10 focused web vulnerability analysis, payload crafting, and bypass techniques for penetration testers.Votes: 0GitHub stars: 4
- Mahmutka Cybersecurity Claude Skills Secure Code ReviewLanguage-aware security code review covering CWE/OWASP patterns, SAST integration, and remediation guidance for Python, JS, Go, and Java.Votes: 0GitHub stars: 4
- Mahmutka Cybersecurity Claude Skills Pentest ReconStructured penetration test reconnaissance covering OSINT, network enumeration, attack surface mapping, and CVE prioritization.Votes: 0GitHub stars: 4
- Laneser Linuxkernel2026 .Claude Skills Cve CweLook up and search CWE (Common Weakness Enumeration) and CVE (Common Vulnerabilities and Exposures) entries. Use when the user asks about a specific CWE or CVE by ID, searches for vulnerabilities by keyword, needs CWE↔CVE associations, or references security weaknesses/vulnerabilities in reports. Triggers on: CWE-*, CVE-*, "look up vulnerability", "find CVE", "search CWE", "what is CWE-416", "CVEs for use-after-free", security vulnerability lookup.Votes: 0GitHub stars: 4
- Kimyx0207 Skillsemgrep .Runs Semgrep security scans on the current project to detect vulnerabilities, secrets leakage, and OWASP Top 10 issues. Use when the user asks for security scanning, vulnerability detection, code auditing, secrets checking, or says things like 安全扫描, 代码扫描, 扫漏洞, 安全检查, 漏洞检测, 扫一下安全.Votes: 0GitHub stars: 4
- Kalshamsi Claude Security Skills Skills Bandit SastUse when scanning Python code for security vulnerabilities, running Bandit, performing Python SAST, auditing Python security bugs, or reviewing Python source for injection, weak crypto, or insecure deserialization.Votes: 0GitHub stars: 4
- Joylarkin Openclaw Security News .[![Oathe Security](https://img.shields.io/endpoint?url=https%3A%2F%2Faudit-engine.oathe.ai%2Fapi%2Fbadge%2Fjoylarkin%2Fopenclaw-security-news&style=for-the-badge&logo=data:image/svg%2Bxml;base64,PHN2ZyB4bWxucz0naHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmcnIHZpZXdCb3g9JzAgMCAyNCAyNCcgZmlsbD0nd2hpdGUnPjxwYXRoIGQ9J00xMiAyQzkuMjQgMiA3IDQuMjQgNyA3djNINmMtMS4xIDAtMiAuOS0yIDJ2OGMwIDEuMS45IDIgMiAyaDEyYzEuMSAwIDItLjkgMi0ydi04YzAtMS4xLS45LTItMi0yaC0xVjdjMC0yLjc2LTIuMjQtNS01LTV6bTMgMTBIOVY3YzAtMS42NiAxLjM0LTMgMy...Votes: 0GitHub stars: 4
- James4ever0 Openmule .客服AI智能体拥有更高的权限，可以管理订单、处理争议、审核提现等。Votes: 0GitHub stars: 4
- Inf1n1tydes0ul Oneinfinity DocsDefines what this system does well, what it does not, and where accuracy limits apply. ---Votes: 0GitHub stars: 4
- Hirokazu Kobayashi Koba Hiro Idp Server .Claude Skills Spec Securityセキュリティ・脆弱性対策の開発・テストを行う際に使用。OAuth/OIDC攻撃対策、認証識別子切り替え攻撃、Session Fixation、マルチテナント分離、セキュリティテスト実装時に役立つ。Votes: 0GitHub stars: 4
- Hikaruegashira Parsentry .Use this skill when the user wants a repository-wide or directory-wide security analysis that produces a structured report. It orchestrates parsentry CLI to enumerate attack surfaces, dispatch parallel analysis agents, and generate a PDF report with SARIF findings. Triggers: security scan, security audit, vulnerability scan, threat model, attack surface enumeration, pentest preparation, "parsentry", セキュリティスキャン, 脆弱性分析.Votes: 0GitHub stars: 4
- Haribu Personalwebsite SkillsExpert Secure Developer, Optimizer, & Cyber Analyst. Use this skill when the user wants to build a static website, assess web application vulnerabilities (OWASP Top 10), or optimize code for performance and readability. Trigger whenever terms like "build website," "static site," "OWASP," "security audit," "refactor," or "optimize" are mentioned.Votes: 0GitHub stars: 4
- Gsarmaonline Nvim Claude Skills SecurifyScan a repository for security vulnerabilities across dependencies, code, secrets, and API surfaceVotes: 0GitHub stars: 4
- Giveen Late Sast Internal Assets SastGeneral-purpose Static Application Security Testing (SAST) skill for code vulnerability analysis. Trigger when the user asks to: "analyze code for vulnerabilities", "review code security", "find security bugs", "do a SAST scan", "check for [vulnerability type] in code", "audit source code", or requests a security code review of any language or framework. Covers 34 vulnerability classes across web, API, auth, mobile, and logic layers.Votes: 0GitHub stars: 4
- Freemonit Rise Fall Sharepoint SkillsSecurity is not a scan step—it is a property of the system.Votes: 0GitHub stars: 4
- Expanso Io Skills.Expanso.Io PluginThis skill provides access to the Expanso Skills Marketplace - 172+ pre-built data processing pipelines.Votes: 0GitHub stars: 4
- Erikstmartin Dotfiles Skills Catalog Infra CybersecurityUse for security audits, vulnerability remediation, hardening configs, and secure coding patterns. Not for compliance frameworks or policy writing.Votes: 0GitHub stars: 4
- Endorlabs Skills Ideas Skills Endor SastStatic application security testing for code-level vulnerabilities. Use when the user says "SAST scan", "find SQL injection", "check for XSS", "static analysis", "endor sast", "code security scan", or wants to find injection flaws, hardcoded credentials, and insecure patterns in source code. Do NOT use for dependency vulnerabilities (/endor-sca), secrets scanning (/endor-secrets), or viewing pre-computed AI SAST findings (/endor-ai-sast).Votes: 0GitHub stars: 4
- Endorlabs Skills Ideas Skills Endor Ai SastFetch and display AI-powered SAST findings from the Endor Labs platform. Default path is summary-only (aggregated counts + clusters); full masked listing runs only when the user asks to drill down (speed and token use). Use when the user says "AI SAST results", "AI SAST findings", "AI static analysis", "endor ai sast", "show AI SAST", or wants pre-computed AI-driven code security findings. Do NOT use for running a new SAST scan (/endor-sast), viewing general findings (/endor-findings), or exp...Votes: 0GitHub stars: 4
- Elmorshedy Del Virona Shawq Dashboard .- Before writing or editing code in each thread, run this checklist and keep it active through completion: - Deduplicate near-identical logic early (request parsing, fetch wrappers, mapping, formatter helpers). - Extract non-obvious numeric literals into named constants/config (especially limits, weights, thresholds, pace factors). - Use stable list keys (prefer IDs; otherwise deterministic prefix + index fallback) and avoid brittle concatenations. - Avoid raw one-off design tokens in componentsVotes: 0GitHub stars: 4