Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,769
pages available: 1,241

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 9,889–9,912 of 29,769 skills

Swift CspAExpert SWIFT Customer Security Programme (CSP) advisor covering the Customer Security Controls Framework (CSCF v2025). Use this skill whenever a user asks about SWIFT CSP, CSCF controls, SWIFT security attestation, KYC-SA portal, SWIFT architecture types (A1/A2/A3/A4/B), mandatory vs advisory controls, independent assessment, SWIFT secure zone, secure flow zone, MFA for operators, SWIFT messaging security, payment fraud prevention on SWIFT, gap analysis for CSCF, or compliance with SWIFT's 31...securityswifttestingVotes: 0GitHub stars: 4
Sweep Github For Leaked Secrets And Exposed Credentials With GitASearch public GitHub broadly for leaked secrets and triage exposures when the workflow is recon and remediation, not generic secret scanning.securitygogitVotes: 0GitHub stars: 4
Supply Chain AdvisoryASupply chain security: bad-version detection, incident response, lockfile audit, artifact scan.securitypythongoVotes: 0GitHub stars: 4
Supabase SecurityBAudit de sécurité complet pour les projets Supabase. Lance un pentest automatisé qui vérifie RLS, buckets, auth, keys exposées, et génère un rapport avec remediation. Utiliser quand l'utilisateur dit "audit supabase", "sécurité supabase", "vérifier mon supabase", ou veut s'assurer que son backend Supabase est sécurisé.securitygobashVotes: 0GitHub stars: 4
Stripe Webhook SecurityAThis skill should be used when implementing security for Stripe webhook endpoints, handling "webhook rate limiting", "Stripe secret management", "webhook abuse prevention", "log redaction for billing", "STRIPE_WEBHOOK_SECRET storage", "webhook endpoint protection", "Stripe API key security", "billing security review", "sensitive data in logs", "production webhook hardening", "DDoS protection for webhooks", or when the user asks about securing Stripe webhook endpoints and billing infrastructur...securitytypescriptnodeVotes: 0GitHub stars: 4
StrideARun a STRIDE threat-modelling pass against an access-surface map a software engineer has already produced for a feature they're about to ship. Use when the engineer has a surface map in hand and wants threats walked across the six STRIDE categories before picking one to harden against. Read-only analysis, not a patch.securityrustgoVotes: 0GitHub stars: 4
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Start Governed Claude Code Sessions With Short Lived Service CreAInject short-lived, scoped service credentials into Claude Code sessions so agents can reach approved systems without exposing raw secrets.securitygogitVotes: 0GitHub stars: 4
Stackblitz Security BasicsASecure WebContainer deployments: CSP headers, sandbox isolation, input validation. Use when working with WebContainers or StackBlitz SDK. Trigger: "stackblitz security".securitytypescriptsecurityVotes: 0GitHub stars: 4
SsllabsAComprehensive TLS/SSL analysis via Qualys SSL Labs — grades cipher suites, certificate chains, protocol versions, and known vulnerabilitiessecurityrustgoVotes: 0GitHub stars: 4
Springboot SecurityA中文优先：用于Spring Boot安全相关任务，帮助识别、设计、实现或验证对应工作流。English keywords: Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.securitygojavaVotes: 0GitHub stars: 4
Spring Security Auth ReviewAUse when reviewing or hardening authentication and authorization in a Spring Boot service that uses Spring Security, JWT, OAuth2, sessions, refresh tokens, or service-to-service auth. Produces an actionable auth review, findings by severity, trust-boundary analysis, secure Spring Security configuration guidance, and remediation priorities. Do not use for general application security review, non-Spring services, or domain authorization policy design outside the framework layer. Pairs with spri...securityrustgoVotes: 0GitHub stars: 4
Spectra AuditAAudit changed code for security sharp edges — dangerous defaults, type confusion, and silent failuressecuritygorubyVotes: 0GitHub stars: 4
Specialist Seguranca InformacaoAEspecialista em segurança OWASP, LGPD e threat modeling para sistemas modernos.securitypythongoVotes: 0GitHub stars: 4
Speak Security BasicsBSecurity best practices for Speak API keys, audio data privacy, student data protection, and COPPA/FERPA compliance. Use when implementing security basics features, or troubleshooting Speak language learning integration issues. Trigger with phrases like "speak security basics", "speak security basics".securitytypescriptbashVotes: 0GitHub stars: 4
Speak Prod ChecklistAProduction readiness checklist for Speak language learning integrations: auth, audio pipeline, monitoring, and compliance. Use when implementing prod checklist features, or troubleshooting Speak language learning integration issues. Trigger with phrases like "speak prod checklist", "speak prod checklist".securitybashapiVotes: 0GitHub stars: 4
Speak Data HandlingAHandle student audio data, assessment records, and learning progress with GDPR/COPPA compliance. Use when implementing data handling, or managing Speak language learning platform operations. Trigger with phrases like "speak data handling", "speak data handling".securitytypescriptbashVotes: 0GitHub stars: 4
Speak Common ErrorsBDiagnose and fix common Speak API errors: authentication failures, audio format issues, rate limits, and session management problems. Use when implementing common errors features, or troubleshooting Speak language learning integration issues. Trigger with phrases like "speak common errors", "speak common errors".securitytypescriptpythonVotes: 0GitHub stars: 4
Sops Secret File Encryption RotationASOPS manages encrypted YAML, JSON, ENV, INI, and binary files with KMS, age, and PGP. It is a tight fit for secrets handling, rotation, and encrypted configuration workflows.securitygoawsVotes: 0GitHub stars: 4
Solidity AuditASolidity development standards and security auditing. TRIGGER when: working with .sol files, foundry.toml, hardhat.config.*, smart contract auditing, security review, or vulnerability analysis. Covers Foundry-first development patterns, vulnerability taxonomies, and audit methodology. DO NOT TRIGGER when: general Ethereum tooling/ecosystem questions (use ethskills skill), or Noir/ZK circuits (use noir skill).securitygotestingVotes: 0GitHub stars: 4
Soc Analyst GuideAGuide pour analyste SOC — triage d'alertes, investigation, SIEM, indicateurs de compromission et playbooks de réponse. Se déclenche avec "SOC", "analyste SOC", "SIEM", "IoC", "incident de sécurité", "triage sécurité".securitygitVotes: 0GitHub stars: 4
Snyk Vulnerability Scanner AgentAUses Snyk REST API v1 to scan project dependencies for known CVEs and license compliance issues. Integrates with Snyk Test endpoint for real-time SBOM analysis and generates CVSS-scored vulnerability reports with remediation paths.securitygogitVotes: 0GitHub stars: 4
Snyk License Compliance CheckerAUses the Snyk CLI and REST API to audit open-source dependencies for license compliance across npm, PyPI, Maven, and Go modules. Generates SPDX license reports and flags copyleft violations.securitygogitVotes: 0GitHub stars: 4
Snyk Dependency Vulnerability AuditorAAudits npm, pip, and Go module dependencies using the Snyk CLI and REST API. Generates SBOM reports and auto-patches known CVEs with version-pinned upgrade recommendations.securitygogitVotes: 0GitHub stars: 4
Snyk Container Vulnerability AgentAScans Docker images for OS and application vulnerabilities using the Snyk Container API. Generates fix PRs with upgraded base images and patched dependency versions.securitygodockerVotes: 0GitHub stars: 4