Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,769
pages available: 1,241

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 9,841–9,864 of 29,769 skills

Vorlage Vendor Onboarding 3dAWuerfelvorlage fuer Vendor- und Lieferanten-Onboarding — 17 Spalten (Vendor-Stammdaten Branche AVV-Pflicht AVV-vorhanden SLA-Reaktionszeit SLA-Verfuegbarkeit Exit-Klausel Datenherausgabe Verschluesselung Subunternehmer-Liste Drittlandtransfer SCC-Vorhanden Sanktionsliste GwG-Pruefung Lieferketten-Risiko LkSG Versicherung Haftungsbegrenzung) x N Vendoren x 5 Arbeitsblaetter (Vertrag / Datenschutz / IT-Sicherheit / Compliance-GwG-LkSG / Wirtschaft). Verankert in DSGVO BGB GwG LkSG ISO-Normen. G...securityVotes: 0GitHub stars: 4
Vorlage Arbeitsvertrag PortfolioAWuerfelvorlage fuer Massenpruefung von Arbeitsvertraegen — 15 Spalten (Vertragsdatum Probezeit Befristung-mit-oder-ohne-Sachgrund Wochenarbeitszeit Kuendigungsfrist Tarifbindung Bruttogehalt Sonderzahlung Verschwiegenheit Wettbewerbsverbot Karenzentschaedigung Urlaub Vorbehaltsklauseln Ueberstundenklausel Verfallklauseln) x N Vertraege x 3 Arbeitsblaetter (Arbeitsrecht / DSGVO-Beschaeftigtendatenschutz / Sozialversicherung). Verankert in BGB (Paragraph 305 ff. / Paragraph 622) TzBfG NachwG Ar...securityVotes: 0GitHub stars: 4
Vite TunnelA在 Vite dev server 前掛 Cloudflare Named Tunnel，給固定 HTTPS hostname。Use when 跨裝置（手機 / 平板 / 另一台筆電）測 OAuth flow、跨裝置測 webhook callback、行動裝置 debug 需要穩定 HTTPS URL、Vite 加 Cloudflare tunnel、設定 dev HTTPS hostname、改 OAuth callback 不想每次回 provider 後台。對 Workers/Pages 用官方 @cloudflare/vite-plugin 內建 tunnel；對一般 Vite 走第三方 vite-plugin-cloudflare-tunnel。不適用於 prod tunnel（這 skill 只管 dev）、其他 provider（ngrok / localtunnel）、單機開發夠用的情境（用 vendor/snippets/dev-auth/ cookbook 繞 OAuth 更快）、需要 quick tunnel 隨機 hostname 的場景（直接跑 cl...securitygobashVotes: 0GitHub stars: 4
VigilADetection Engineering agent. Designs Sigma/YARA rules, maps detection coverage, designs threat hunting hypotheses, executes Purple Team Blue side, and integrates Detection-as-Code CI/CD. Use when defensive security verification is needed.securityrustgoVotes: 0GitHub stars: 4
Vex PublishAGenerate OpenVEX / CycloneDX VEX attestations from `.vulnetix/memory.yaml` triage decisions, optionally sign with cosign, optionally upload to Vulnetix and post to a GitHub PR. Use when documenting triage decisions for supply-chain consumers, attaching VEX to a CycloneDX SBOM, or satisfying customer attestation requests.securitygobashVotes: 0GitHub stars: 4
Vertex Engine InspectorAInspect and validate Vertex AI Agent Engine deployments including Code Execution Sandbox, Memory Bank, A2A protocol compliance, and security posture. Generates production readiness scores. Use when asked to inspect, validate, or audit an Agent Engine deployment. Trigger with "inspect agent engine", "validate agent engine deployment", "check agent engine config", "audit agent engine security", "agent engine readiness check", "vertex engine health", or "reasoning engine status".securitypythongoVotes: 0GitHub stars: 4
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Verify FixAPost-fix verification — re-scan the repo, gate on `--exploits weaponized --severity high`, recheck the specific CVE against the new installed version, write the verdict to `.vulnetix/memory.yaml`. Use when confirming a fix landed, validating a version bump did not introduce regressions, or producing a clean-scan attestation for compliance.securitygoshellVotes: 0GitHub stars: 4
Vercel Security BasicsBApply Vercel security best practices for secrets, headers, and access control. Use when securing API keys, configuring security headers, or auditing Vercel security configuration. Trigger with phrases like "vercel security", "vercel secrets", "secure vercel", "vercel headers", "vercel CSP".securityjavascripttypescriptVotes: 0GitHub stars: 4
Vellum Oauth IntegrationsAAct on behalf of your user in any third-party software that supports OAuth 2.0securitygobashVotes: 0GitHub stars: 4
Vault Transit Secrets Envelope VerifierAVerifies encryption workflows with HashiCorp Vault Transit endpoints like `/encrypt`, `/decrypt`, and `/rewrap`, plus key metadata inspection. Useful for agents reviewing whether application secrets handling is actually using envelope encryption correctly instead of assuming the library setup is safe.securitygogitVotes: 0GitHub stars: 4
Vault Secrets RotatorAManages secret lifecycle through the HashiCorp Vault HTTP API v1. Rotates database credentials via Vault dynamic secrets engine and syncs to Kubernetes via External Secrets Operator CRDs.securitygokubernetesVotes: 0GitHub stars: 4
Vault Secrets Rotation OrchestratorAAutomates HashiCorp Vault secret rotation using the Vault HTTP API and dynamic secrets engines. Manages database credential leases, PKI certificate renewal, and AWS STS token rotation with zero-downtime rollover.securitygoawsVotes: 0GitHub stars: 4
Vastai Security BasicsDApply Vast.ai security best practices for API keys and instance access. Use when securing API keys, hardening SSH access to GPU instances, or auditing Vast.ai security configuration. Trigger with phrases like "vastai security", "vastai secrets", "secure vastai", "vastai API key security", "vastai ssh security".securitypythongoVotes: 0GitHub stars: 4
Vastai Data HandlingAManage training data and model artifacts securely on Vast.ai GPU instances. Use when transferring data to instances, managing checkpoints, or implementing secure data lifecycle on rented hardware. Trigger with phrases like "vastai data", "vastai upload data", "vastai checkpoints", "vastai data security", "vastai artifacts".securitypythonbashVotes: 0GitHub stars: 4
Vant Skill Test PenAPenetration testing - find security vulnerabilities. Test for SQL injection, XSS, auth bypass, etc. Use when security auditing or before deployments.securitysqltestingVotes: 0GitHub stars: 4
Validating Pci Dss ComplianceAValidate PCI-DSS compliance for payment card data security. Use when auditing payment systems. Trigger with 'validate PCI-DSS', 'check payment security', or 'audit card data'.securitygobashVotes: 0GitHub stars: 4
Validating Cors PoliciesAValidate CORS policies for security issues and misconfigurations. Use when reviewing cross-origin resource sharing. Trigger with 'validate CORS', 'check CORS policy', or 'review cross-origin'.securitygoexpressVotes: 0GitHub stars: 4
Validating Authentication ImplementationsAValidate authentication mechanisms for security weaknesses and compliance. Use when reviewing login systems or auth flows. Trigger with 'validate authentication', 'check auth security', or 'review login'.securitygophpVotes: 0GitHub stars: 4
Use Case External Password AuthA外部パスワード認証委譲ユースケースの設定ガイド。外部認証サービスURL、マッピングルール、ブルートフォース防止、セッション・トークン有効期限のヒアリングと環境変数マッピングを提供。securitybashdockerVotes: 0GitHub stars: 4
Use Case CibaACIBA（Client-Initiated Backchannel Authentication）ユースケースの設定ガイド。FIDO-UAFデバイス登録、device_secret_jwt認証、CIBA配信モード、ポーリング設定のヒアリングと設定JSONを提供。securitygojavaVotes: 0GitHub stars: 4
UrlscanASubmit URLs for automated malware and phishing analysis, then retrieve safety verdicts and screenshots via urlscan.iosecuritygoshellVotes: 0GitHub stars: 4
UpdaterAAudit toolkit health, freshness, security, standards. Keywords: updater, audit, outdated, stale, security, OWASP, refresh, check links, standards, compliancesecuritytypescriptpythonVotes: 0GitHub stars: 4
Umweltrecht Compliance SchulungAErstellt Schulungs-, Audit- und Fortbildungspläne für Anlagenbetreiber, Immissionsschutzbeauftragte und Abfallverantwortliche.securitygoVotes: 0GitHub stars: 4
Uk GdprAAssess UK GDPR compliance — post-Brexit requirements, ICO guidance, international transferssecuritygogitVotes: 0GitHub stars: 4