All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,769
- 1,241
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 9,961–9,984 of 29,769 skills
- Security DashboardGitHub security alerts command center -- triage Dependabot, code scanning, and secret scanning alerts entirely from the editor. Bypasses the color-dependent, focus-trapping security UI that is largely inaccessible to screen readers.Votes: 0GitHub stars: 4
- Security Compliance ReviewPerforms advanced SAST (Static Application Security Testing) and compliance analysis on Pull Request diffs. Identifies real security vulnerabilities, secrets, and regulatory compliance violations (GDPR, HIPAA, SOC2, PCI-DSS) by analyzing only changed code. Multi-language with exploitability assessment and CWE mapping.Votes: 0GitHub stars: 4
- Security Compliance CheckerVérification de conformité sécurité incluant ISO 27001, SOC 2, HIPAA, NIST et audit trail. Se déclenche avec "ISO 27001", "SOC 2", "HIPAA", "NIST", "conformité sécurité", "audit sécurité", "compliance"Votes: 0GitHub stars: 4
- Security ChecklistOWASP-based security checklist any agent can reference when reviewing or writing codeVotes: 0GitHub stars: 4
- Security CheckComprehensive AI-powered security scanning suite with 48 skills covering OWASP Top 10, 7 language-specific deep scanners (Go, TypeScript, Python, PHP, Rust, Java, C#), supply chain analysis, infrastructure-as-code scanning, and 3000+ checklist items. Use when you need to run a security audit, find vulnerabilities, scan a PR for security issues, or perform a penetration test on a codebase.Votes: 0GitHub stars: 4
- Security Bounty Hunter中文优先：用于安全bountyhunter相关任务，帮助识别、设计、实现或验证对应工作流。English keywords: Hunt for exploitable, bounty-worthy security issues in repositories. Focuses on remotely reachable vulnerabilities that qualify for real reports instead of noisy local-only findings.Votes: 0GitHub stars: 4
- Security BaselineEstablish a security baseline for a website or web app. Use this skill when configuring HTTPS and TLS, setting security headers, planning secrets management, evaluating CSP policies, doing a basic security audit, or hardening a site before launch. Triggers on security headers, HTTPS, TLS, CSP, content security policy, HSTS, secrets management, vulnerability scan, security audit, harden, OWASP, security baseline. Also triggers when a security review is required for compliance or before going l...Votes: 0GitHub stars: 4
- Security Baseline DevБазовая безопасность в реализации — валидация входных данных (Zod), secrets management, безопасные ошибки, auth/authz patterns, XSS/injection prevention, dependency audit, secure headers. DO/DON'T примеры. Активируй при написании любого кода, работающего с пользовательским вводом, auth, секретами, или при вопросах «как сделать безопасно».Votes: 0GitHub stars: 4
- Security AuthSpecialista na autentizaci a autorizaci. MUSÍ být použit při analýze bezpečnosti kódu — hledá slabé hashování hesel (MD5/SHA1) a chybějící autorizační kontroly.Votes: 0GitHub stars: 4
- Security Audit StandardSecurity audit methodology and checklist for codebases. Use when performing security reviews, auditing a project for vulnerabilities, or hardening an application before deployment. Covers secret scanning, input validation, authentication/authorization, cryptographic practices, dependency auditing, CSP configuration, rate limiting, OWASP Top 10 checks, and audit report format. Derived from production audit work.Votes: 0GitHub stars: 4
- Security Assistant引导安全审查和漏洞评估，遵循 OWASP 标准。 使用时机：安全审计、漏洞检查、安全编码审查、威胁建模。 关键字：security, OWASP, vulnerability, authentication, authorization, 安全, 漏洞, 认证。Votes: 0GitHub stars: 4
- Security AssessmentExecute STRIDE threat modeling, vulnerability scanning, and security control validation with risk scoringVotes: 0GitHub stars: 4
- Security ArchitectSecurity Architect: Security by Design fuer den gesamten Entwicklungsprozess. 4 Modi: DESIGN (Threat Modeling bei Ideation/Planung), REVIEW (Security-Check bei Code-Aenderungen), AUDIT (vollstaendiger Security-Scan auf Abruf), SKILL-SCAN (Prompt-Injection-Check fuer heruntergeladene Skills/SKILL.md-Dateien vor der Installation). Kombiniert STRIDE/DREAD Threat Modeling, OWASP Top 10:2025, ASVS 5.0, Agentic AI Security und konkrete Secure-Code-Patterns. Verwenden wenn der Nutzer "security", "si...Votes: 0GitHub stars: 4
- Security Api Security HardenerDurcissement de la sécurité des APIs — rate limiting, validation d'entrée, headers de sécurité, CORS, protection contre les attaques courantes. À utiliser quand l'utilisateur sécurise une API, configure des headers de sécurité ou implémente du rate limiting. Se déclenche aussi avec "sécurité API", "rate limiting", "headers sécurité", "CORS", "API hardening", "protection API", "OWASP API".Votes: 0GitHub stars: 4
- Security And Trust BoundariesUse when writing or reviewing code that parses user input, builds SQL/shell commands, handles secrets/credentials, hashes passwords, changes auth checks, deserializes untrusted data, or constructs paths/URLs from inputVotes: 0GitHub stars: 4
- Security And ComplianceEvaluate security posture and regulatory compliance for a system architecture. Produces .forge/security.md with auth model, data isolation, PII inventory, regulatory requirements, encryption audit, vendor assessment, certification roadmap, and STRIDE threat model. Use when user mentions "security review", "compliance", "SOC 2", "GDPR", "PII", "threat model", or the system handles sensitive data.Votes: 0GitHub stars: 4
- Security Alert MonitorScans email threads for security alert signals — phishing reports, suspicious login notifications, data breach mentions, policy violation flags, vulnerability disclosures, and any language suggesting a security incident may be developing. Use when an IT security team wants an early warning scan across their email communications. Triggers on "security alerts", "security incidents from email", "phishing reports", "suspicious activity", "security signal scan", "what security issues are brewing".Votes: 0GitHub stars: 4
- Securing S3 BucketsCreate and secure S3 buckets following AWS best practices for access control, encryption, monitoring, and remediation of misconfigurations. Use when the user wants to secure a new bucket, audit an existing bucket, fix a security finding, configure encryption, or enable logging and monitoring. Do NOT use for general S3 data operations, S3 Tables setup, or discovering existing data assets.Votes: 0GitHub stars: 4
- Securing CodeUse when writing or reviewing code that handles external input, manages access, touches data or crypto, or changes dependencies. Triggers: endpoints, auth/authz, DB/ORM, file handling, secrets, "is this secure?", "security review". NOT for formatting, pure UI, or explaining code.Votes: 0GitHub stars: 4
- Secure PhaseRetroactively verify threat mitigations for a completed phaseVotes: 0GitHub stars: 4
- Secure CodingUse when performing deep security review of auth, crypto, secrets, or PII code requiring confidence-rated severity findings and OWASP checksVotes: 0GitHub stars: 4
- Secure Code GuardianUse when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities — including custom security implementations such as hashing passwords with bcrypt/argon2, sanitizing SQL queries with parameterized statements, configuring CORS/CSP headers, validating input with Zod, and setting up JWT tokens. Invoke for authentication, authorization, input validation, encryption, OWASP Top 10 prevention, secure session management, and security hardening. For p...Votes: 0GitHub stars: 4
- Secure AuthSecure authentication implementation patterns. Use when implementing user login, registration, password reset, session management, JWT authentication, or OAuth integration. Provides production-ready patterns that avoid common tutorial pitfalls like insecure token storage, weak password hashing, and session fixation.Votes: 0GitHub stars: 4
- Secrets Logging Privacy AuditUse this skill to audit secrets, PII, logs, traces, metrics, debug endpoints, and error responses. Do not use it for general performance review.Votes: 0GitHub stars: 4