Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,769
pages available: 1,241

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 9,865–9,888 of 29,769 skills

Typosquat CheckATyposquat and malicious-package detection across installed dependencies (or a single prospective addition) — cross-checks AI-malware family intelligence, package-name similarity to known popular packages, low maintainer-health signals. Use when auditing a freshly-onboarded repo, vetting a single suspicious package, gating CI on supply-chain risk, or investigating an incident.securitytypescriptgoVotes: 0GitHub stars: 4
Trufflehog Credential Leak ScannerAFind, verify, and analyze leaked credentials across Git repositories, Slack, Jira, Docker images, and more using TruffleHog. Classifies 800+ secret types and validates whether discovered credentials are live.securitygodockerVotes: 0GitHub stars: 4
Trivy Container Security ScannerAIntegrates Aqua Security Trivy CLI for comprehensive container image vulnerability scanning. Detects OS package CVEs, language-specific dependency vulnerabilities, and IaC misconfigurations with SARIF output format for CI/CD pipeline integration.securitygogitVotes: 0GitHub stars: 4
Tool SecurityAMCPツールとAPI統合のセキュリティ設計を体系化するスキル。脅威整理、制御設計、設定検証を通じて安全なツール運用を支援する。 Anchors: • Web Application Security / 適用: 脅威モデリング / 目的: 攻撃面の整理 • OWASP ASVS / 適用: セキュリティ要件 / 目的: 制御の網羅性 Trigger: Use when designing tool security controls, validating security configs, or reviewing secrets handling. tool security, threat modeling, config validationsecuritybashapiVotes: 0GitHub stars: 4
Tool GuardBAllowlist/denylist for AI agent tool calls with approval gates for destructive operations. Define which tools the agent can use freely, which require confirmation, and which are blocked entirely. Combines LOCO-Agent's resource authorization with Flare's anomaly-aware security heuristics. Trigger phrases: "restrict tools", "tool permissions", "block bash", "approval gate", "limit what you can do", "tool whitelist", "tool blacklist".securityrustshellVotes: 0GitHub stars: 4
Tom Und Zertifizierungen PruefenAPruefe technische und organisatorische Massnahmen des KI-Anbieters und seine Zertifizierungen. Maßstab Art. 32 DS-GVO ISO 27001 BSI C5 (Cloud Computing Compliance Criteria Catalogue) SOC zwei Typ zwei TISAX. Zentral fuer Berufsrecht no training Zero-Retention EU-Hosting Verschluesselung Loeschkonzept Audit-Recht. DAV-Stellungnahme Seite dreizehn vierzehn.securityrustgoVotes: 0GitHub stars: 4
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Together Security BasicsATogether AI security basics for inference, fine-tuning, and model deployment. Use when working with Together AI's OpenAI-compatible API. Trigger: "together security basics".securitytypescriptbashVotes: 0GitHub stars: 4
Threat ModelingAProduces structured threat models for software systems using STRIDE on data flow diagrams. Generates DFDs with trust boundaries, identifies threats per element, scores risks, and defines concrete mitigations. Outputs a complete threat model Markdown document through phased, interactive delivery. Use when threat modeling a system, analyzing security threats, identifying attack surfaces, performing STRIDE analysis, assessing security risks in architecture, creating a threat model document, or w...securityrustgoVotes: 0GitHub stars: 4
Threat ModelAGenerate a threat model from spec.md using STRIDE methodology. Use when you need to identify security threats, attack surfaces, and mitigations for a feature before implementation. Triggers on "threat model", "security analysis", "attack surface", "STRIDE analysis".securityrustgoVotes: 0GitHub stars: 4
Threat FeedADaily threat-intel digest — AI-discovered vulnerabilities, AI-in-the-wild exploitation observations, AI-authored malware families, exploit-trends rollup, vendor-trends month-over-month deltas. Use when producing a weekly security newsletter, scanning for novel threats, monitoring vendors with rising CVE counts, or tracking AI-discovered vulns from the researcher leaderboard.securitygobashVotes: 0GitHub stars: 4
Threat AdvisoryAGenerate a personalized threat advisory based on your tech stack — what CVEs, breaches, and supply chain attacks matter to YOU.securitypythonbashVotes: 0GitHub stars: 4
ThirditAScans and analyses third-party dependencies and IaC configurations for security vulnerabilities. - User asks to scan dependencies, libraries, or third-party components - User mentions "thirdit", "SCA", "dependencies", "vulnerable libraries", "CVE" - User wants to check IaC files (Dockerfiles, Kubernetes manifests, cloud configs) - User asks "what third-party vulnerabilities do I have?"securitygodockerVotes: 0GitHub stars: 4
Thinking Red TeamADeliberately attack your own plans, systems, and assumptions to find weaknesses before adversaries or reality does. Use for security review, architecture validation, plan stress-testing, and pre-launch preparation.securityrustgoVotes: 0GitHub stars: 4
Theharvester Osint Email Subdomain IntelligenceAtheHarvester is an open-source OSINT tool for gathering emails, subdomains, hosts, employee names, open ports, and banners from public sources. Used during reconnaissance in penetration testing and red team assessments, it queries search engines, PGP key servers, the Shodan API, and other data sources to map an organization's external threat surface.securitygotestingVotes: 0GitHub stars: 4
Thai Government FormAUse this skill for any task involving Thai government letters, official correspondence, formal petitions, authorization letters, leave requests, or ราชการ forms. Trigger whenever the user asks to: write หนังสือราชการ, draft a คำร้อง, write an authorization (หนังสือมอบอำนาจ), submit a leave form (ใบลา), petition a government agency, or write a formal letter to a Thai official. Also trigger for requests like "เขียนหนังสือราชการ", "ยื่นเรื่อง", "คำร้อง", "หนังสือถึงราชการ", "ทำหนังสือถึง", "ใบลา...securitygogitVotes: 0GitHub stars: 4
Testing ComplianceACompliance control testing and evidence collection.securitypythonrustVotes: 0GitHub stars: 4
Test SecurityA[Tier 2 — Non-Functional: Security · ISO 25010] Security test workflow — OWASP Top 10, dependency CVEs, secrets scanning, and auth testing. Run after Tier 1 functional tests pass.securitypythongoVotes: 0GitHub stars: 4
Terraform State And Secret ManagementAUse when designing, reviewing, or hardening Terraform remote state and secret handling after the repo/module scaffold exists and security and infrastructure-platform have decided the state-isolation and secret posture. Produces remote state backend selection (S3+DynamoDB / GCS / Azure Storage / Terraform Cloud), state encryption at rest, state locking, workspace-vs-directory state isolation strategy, sensitive-output discipline, secret references to a secret manager instead of plaintext, and ...securityawsgcpVotes: 0GitHub stars: 4
Terraform Plan Gate And Policy As CodeAUse when designing, reviewing, or hardening the pre-merge Terraform gate and policy-as-code after the repo scaffold and state backend exist and operations and security have decided gate strictness per blast-radius tier. Produces pre-merge checks (fmt, validate, plan diff posted to the PR), policy-as-code (OPA/Conftest, Checkov, tfsec, or Sentinel) with tier-scaled strictness, scheduled drift detection, required-reviewer rules per environment, and prohibited-resource/provider policy per enviro...securityrailsterraformVotes: 0GitHub stars: 4
Telnyx 10dlc CurlA10DLC brand and campaign registration for US A2P messaging compliance. Assign phone numbers to campaigns.securitygobashVotes: 0GitHub stars: 4
Telegram Bot Security AnalysisAReverse engineer and security-test Telegram bots — API analysis, callback interception, exploit discovery, and vulnerability documentationsecuritypythongoVotes: 0GitHub stars: 4
Tachi Risk ScoringADomain knowledge for quantitative risk scoring — four-dimensional scoring model (CVSS 3.1, exploitability, scalability, reachability), CVSS base vector mappings, composite score formulas, severity band thresholds, and governance field derivation rules. Consumed by the risk-scorer agent during scoring pipeline execution.securityrustgoVotes: 0GitHub stars: 4
Swift SecurityAUse when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face ID, Touch ID), CryptoKit (AES-GCM, ChaChaPoly, ECDSA, ECDH, HPKE, ML-KEM), Secure Enclave, secure credential storage (OAuth tokens, API keys), certificate pinning (SecTrust, SPKI), keychain sharing across apps/extensions, migrating secrets from UserDefaults or plists, or OWASP MASVS/MASTG mobile compliance on Apple platforms.securityrustgoVotes: 0GitHub stars: 4
Swift RulesASwift coding rules from ai-toolkit: coding-style, frameworks, patterns, security, testing. Triggers: .swift, Package.swift, .xcodeproj, SwiftUI, Combine, async/await, XCTest. Load when writing, reviewing, or editing Swift code.securitygoswiftVotes: 0GitHub stars: 4