All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,769
- 1,241
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 9,985–10,008 of 29,769 skills
- Secret ScanHardcoded-secret detection — AWS keys, GitHub PATs, Slack tokens, Stripe keys, generic high-entropy strings. Pre-commit (`--staged-only`), explicit paths, or full repo. Use when guarding `git commit`, auditing a repo for leaked credentials, validating no secrets entered the diff before push, or producing a rotation list for an exposed-secret incident.Votes: 0GitHub stars: 4
- Secret IntakeSecure credential intake via local web form. Spin up a one-page server on Tailscale, paste keys, upload PEM/JSON files, hit submit — secrets land in .hex/secrets/ with 600 perms and auto-sync to launchctl + cc-connect.Votes: 0GitHub stars: 4
- Secret Handling RuntimeDecision-aid skill for runtime secret hygiene — fd passing, scratch surface verification, error-path safety, identifier hygiene, and avoiding the SECRETS_ENV aggregation anti-patternVotes: 0GitHub stars: 4
- Secret GuardUse BEFORE writing API keys/tokens/passwords into code, BEFORE git commit/push, BEFORE creating PR. Blocks accidental leaks of secrets to GitHub. Triggers коммит, push, ключ, токен, secret, api key, .env, credentials, push to github, открой PR, открыть PR, git commit, git push.Votes: 0GitHub stars: 4
- Secret BoundaryAI実行環境のシークレット境界設定。settings.json permissions.denyルールを生成し、シークレットへの事故的アクセスを防止する。Votes: 0GitHub stars: 4
- Secret AdaptersSecret management integration (密鑰管理整合). Use when working with HashiCorp Vault, credential management, or secure configuration. Covers secret storage (密鑰儲存), key management (金鑰管理), NestJS integration, online/offline modes, and automatic token renewal. Keywords: 密鑰, 機密, 金鑰, 秘密管理, secret, vault, credential, key management, HashiCorp, token, 環境變數, configurationVotes: 0GitHub stars: 4
- Sdd Uc System DesignProduit les documents de conception technique SDD (ARCHITECTURE.md, DEPLOYMENT.md, SECURITY.md, COMPLIANCE_MATRIX.md) à partir d'un SPEC-racine-*.md (+ extensions). En CLI écrit dans docs/, sur claude.ai livre des artefacts Markdown. S'active pour concevoir l'architecture technique d'un projet SDD.Votes: 0GitHub stars: 4
- Scanning Input Validation PracticesScan for input validation vulnerabilities and injection risks. Use when reviewing user input handling. Trigger with 'scan input validation', 'check injection vulnerabilities', or 'validate sanitization'.Votes: 0GitHub stars: 4
- Scanning For Vulnerabilities'Execute this skill enables comprehensive vulnerability scanning usingVotes: 0GitHub stars: 4
- Scanning For SecretsDetect exposed secrets, API keys, and credentials in code. Use when auditing for secret leaks. Trigger with 'scan for secrets', 'find exposed keys', or 'check credentials'.Votes: 0GitHub stars: 4
- Scanning For Gdpr ComplianceScan for GDPR compliance issues in data handling and privacy practices. Use when ensuring EU data protection compliance. Trigger with 'scan GDPR compliance', 'check data privacy', or 'validate GDPR'.Votes: 0GitHub stars: 4
- Scanning Database Security'Process use when you need to work with security and compliance.Votes: 0GitHub stars: 4
- Scanning Container Security'Execute use when you need to work with security and compliance.Votes: 0GitHub stars: 4
- Scanning Api SecurityDetect API security vulnerabilities including injection, broken auth, and data exposure. Use when scanning APIs for security vulnerabilities. Trigger with phrases like "scan API security", "check for vulnerabilities", or "audit API security".Votes: 0GitHub stars: 4
- Scaffold Prompt\"Create defensive prompt scaffolding with guardrails and safety measures. 創建帶護欄與安全措施之防禦提示架構。 Use when: building user-facing prompts, adding injection protection, implementing harm prevention layers.\"Votes: 0GitHub stars: 4
- Sc XxeXML External Entity injection detection across all XML parsers and document formatsVotes: 0GitHub stars: 4
- Sc WebsocketWebSocket security flaw detection — missing origin validation, authentication bypass, and message injectionVotes: 0GitHub stars: 4
- Sc SstiServer-Side Template Injection detection across all major template enginesVotes: 0GitHub stars: 4
- Sc SecretsHardcoded secrets, API keys, tokens, credentials, and private key detection in source codeVotes: 0GitHub stars: 4
- Sc ReportFinal consolidated security assessment report generator with CVSS severity and remediation roadmapVotes: 0GitHub stars: 4
- Sc Path TraversalPath traversal and directory traversal detection — LFI, RFI, zip slip, and symlink attacksVotes: 0GitHub stars: 4
- Sc OrchestratorMaster orchestration skill that coordinates the entire 4-phase security scanning pipelineVotes: 0GitHub stars: 4
- Sc LdapLDAP Injection detection in search filters, DN construction, and bind operationsVotes: 0GitHub stars: 4
- Sc JwtJWT implementation flaw detection — algorithm confusion, weak secrets, missing validation, and storage issuesVotes: 0GitHub stars: 4