Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,769
pages available: 1,241

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 9,817–9,840 of 29,769 skills

Zero DayB· Hunt novel vulnerabilities: reversing, patch diffing, fuzzing, attack surface, PoCs. Triggers: 'zero-day', '0-day', 'vulnerability research', 'variant analysis', 'fuzz', 'exploit dev', 'CVE'. Not for SAST (use security-audit).securitypythonrustVotes: 0GitHub stars: 4
Zapier Webhook Integration BuilderACreates and manages Zapier integrations using the Zapier Platform CLI and REST Hooks API. Builds custom triggers, actions, and searches with OAuth2 authentication flows.securitygogitVotes: 0GitHub stars: 4
Zap Automated Security Scan OrchestratorAOrchestrates OWASP ZAP security scans via the ZAP API with automated spider, active scanner, and authentication sequence configuration. Generates compliance reports mapped to OWASP Top 10 and exports findings in SARIF and JUnit XML formats.securitygojavaVotes: 0GitHub stars: 4
Xss Testing BurpsuiteAIdentifying and validating cross-site scripting vulnerabilities using Burp Suite's scanner, intruder, and repeater tools during authorized security assessments.securityjavascriptrustVotes: 0GitHub stars: 4
X ApiAX/Twitter API integration for posting tweets, threads, reading timelines, search, and analytics. Covers OAuth auth patterns, rate limits, and platform-native content posting. Use when the user wants to interact with X programmatically.securitypythonbashVotes: 0GitHub stars: 4
Wpscan Wordpress Security Vulnerability ScannerAWPScan is an open-source WordPress security scanner that detects vulnerabilities in plugins, themes, and core installations. It checks for known CVEs, weak passwords, exposed config files, and security misconfigurations using the WPScan Vulnerability Database API.securitygogitVotes: 0GitHub stars: 4
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Workspace AuditAAudit all git repos under ~/dev for dirty state, unpushed commits, exposed .env files, and tracked context files (CLAUDE.md, AGENTS.md, GEMINI.md). Use when the user wants to know if their workspace is clean, before a deploy, or when something feels off. Triggers on "audit workspace", "check repos", "anything unpushed", "is my workspace clean", "check for dirty repos", "any exposed secrets".securitygobashVotes: 0GitHub stars: 4
Workhuman Install AuthAWorkhuman install auth for employee recognition and rewards API. Use when integrating Workhuman Social Recognition, or building recognition workflows with HRIS systems. Trigger: "workhuman install auth".securitytypescriptpythonVotes: 0GitHub stars: 4
Wish Ssh Code ReviewBReviews Wish SSH server code for proper middleware, session handling, and security patterns. Use when reviewing SSH server code using charmbracelet/wish.securitygocode-reviewVotes: 0GitHub stars: 4
Windsurf Security BasicsAApply Windsurf security best practices for workspace isolation, data privacy, and secret protection. Use when securing sensitive code from AI indexing, configuring telemetry, or auditing Windsurf security posture. Trigger with phrases like "windsurf security", "windsurf secrets", "windsurf privacy", "windsurf data protection", "codeiumignore".securitybashsqlVotes: 0GitHub stars: 4
Windsurf Dependency ManagementAAnalyze and update dependencies with vulnerability scanning. Activate when users mention "update dependencies", "security audit", "npm audit", "vulnerability scan", or "dependency updates". Handles dependency analysis and updates. Use when working with windsurf dependency management functionality. Trigger with phrases like "windsurf dependency management", "windsurf management", "windsurf".securitybashtestingVotes: 0GitHub stars: 4
WebsocketsAReference skill for Zoom WebSockets. Use after routing to a low-latency event workflow when persistent connections, faster event delivery, or security constraints make WebSockets preferable to webhooks.securityjavascriptgoVotes: 0GitHub stars: 4
Website AuditorALaunch a comprehensive website audit. Specify a URL or audit the current codebase. Optionally specify categories: seo, accessibility, performance, security, mobile, content, compliance — or run all. Triggers: 'audit my site', 'check this URL', 'how is my SEO', 'is my site accessible', 'security scan', 'WCAG check', 'core web vitals', 'GDPR compliance'.securitygosecurityVotes: 0GitHub stars: 4
Webflow Security BasicsAApply Webflow API security best practices — token management, scope least privilege, OAuth 2.0 secret rotation, webhook signature verification, and audit logging. Use when securing API tokens, implementing least privilege access, or auditing Webflow security configuration. Trigger with phrases like "webflow security", "webflow secrets", "secure webflow", "webflow API key security", "webflow token rotation".securitytypescriptbashVotes: 0GitHub stars: 4
Webapp Exploit HunterAAutomated web application vulnerability scanner and exploit generator starting from domains or URLs. Tests for SQLi, XSS, SSRF, IDOR, SSTI, authentication bypass, file upload bypass, and race conditions. Generates working PoC for each finding. Use when user asks to "find vulnerabilities", "scan web app", "test for XSS/SQLi/SSRF", "hunt bugs", "bug bounty scan", or provides a domain for web security testing. For authorized testing only.securityjavascriptpythonVotes: 0GitHub stars: 4
Web VulnerabilitiesAOWASP Top 10 for Web Applications (2025) vulnerability knowledge base for identifying, assessing, and remediating security risks in web application environments.securitygogitVotes: 0GitHub stars: 4
Web Security AuditCExpert guidance on identifying and mitigating common web vulnerabilities from a bug hunter's perspective. Covers access control, XSS, CSRF, SSRF, insecure file uploads, and JWT security with detailed protection strategies, implementation patterns, and verification checklists.securityjavascriptpythonVotes: 0GitHub stars: 4
Vulnerability AnalyzerAAnalyse et évalue les vulnérabilités d'un système ou d'une application. À utiliser pour comprendre et prioriser les vulnérabilités. Se déclenche avec "vulnérabilité", "CVE", "faille", "vulnerability", "risque sécurité", "score CVSS", "patch critique".securitygoawsVotes: 0GitHub stars: 4
VulnALook up a vulnerability by ID or list all vulnerabilities for a packagesecurityrustgoVotes: 0GitHub stars: 4
Vuln ScannerB脆弱性スキャンスキル。CVE/依存関係脆弱性を検出し、npm audit/pip-audit/trivy等の結果を解析。セキュリティリスクの優先順位付けと修正提案を提供。securitypythonbashVotes: 0GitHub stars: 4
Vuln ScanAAnalyze dependency or ecosystem risk and produce remediation and advisory packets.securitysecurityVotes: 0GitHub stars: 4
Vuln Chain ComposerAComposes multi-step exploit chains by correlating vulnerabilities across domains, calculates real impact of chained findings, generates end-to-end PoC scripts, and produces bug bounty ready reports. Use when user asks to "chain vulnerabilities", "compose exploit chain", "correlate findings", "calculate real impact", "write bug bounty report", "combine findings", or has multiple vulnerability findings across domains that need strategic analysis. For authorized pentesting and bug bounty only.securitypythonrustVotes: 0GitHub stars: 4
Vps Security ScannerFRealiza auditoria de segurança completa em VPS Linux: análise de portas expostas, configuração SSH, vulnerabilidades em containers Docker, usuários do sistema, permissões, logs de acesso e pacotes instalados. Use quando o usuário pedir para verificar segurança do servidor, auditar VPS, escanear vulnerabilidades, ou gerar relatório de segurança do sistema. Suporta scan com trivy (containers) e grype (packages). Gera relatório estruturado por severidade (Critical/High/Medium/Low).securitypythongoVotes: 0GitHub stars: 4
Vps Security HardeningFAudit and harden VPS security — fail2ban, SSH hardening, firewall setupsecuritygobashVotes: 0GitHub stars: 4