Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,769
pages available: 1,241

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 10,009–10,032 of 29,769 skills

Sc GraphqlAGraphQL injection, introspection abuse, query complexity attacks, and authorization bypass detectionsecurityjavascriptgoVotes: 0GitHub stars: 4
Sc DockerADocker-specific security checks — image hardening, secrets in layers, compose security, and runtime configurationsecuritygonodeVotes: 0GitHub stars: 4
Sc Dependency AuditASupply chain and dependency security analysis across all package ecosystemssecuritypythonrustVotes: 0GitHub stars: 4
Sc CsrfACross-Site Request Forgery detection — missing tokens, SameSite misconfiguration, and CORS-CSRF interactionsecurityjavascriptpythonVotes: 0GitHub stars: 4
Sc CryptoACryptography misuse detection — weak algorithms, ECB mode, static IVs, weak PRNG, and key management flawssecurityjavascriptpythonVotes: 0GitHub stars: 4
Sc Ci CdBCI/CD pipeline security — GitHub Actions injection, secret exposure, untrusted actions, and artifact poisoningsecurityrustgoVotes: 0GitHub stars: 4
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Sc AuthzAAuthorization flaw detection — IDOR, broken access control, horizontal and vertical privilege issuessecurityjavascriptpythonVotes: 0GitHub stars: 4
Sc AuthAAuthentication flaw detection — weak passwords, broken auth, credential stuffing, and bypass vectorssecurityjavascriptpythonVotes: 0GitHub stars: 4
Sc Api SecurityAREST, GraphQL, and gRPC API security audit — authentication, authorization, data exposure, and configurationsecurityjavascriptgoVotes: 0GitHub stars: 4
SbomAGenerate a Software Bill of Materials (SBOM) from your AWS environment and scan for vulnerable/compromised packages.securitypythonbashVotes: 0GitHub stars: 4
SastASource code vulnerability hunting (SAST). Decomposes analysis into specialized passes: map entry points, map dangerous ops, trace flows, find gaps, adversarial validation, exploit. Usage: /sast <repo_path> [--lang c|cpp|rust|java|python|go|php] [--min-score 4] [--max-files 30] [--skip-static] [--best-of N]securitypythonrustVotes: 0GitHub stars: 4
Sast ScanAStatic application security testing (SAST) for changed source files — Vulnetix''s built-in rule set plus optional Semgrep augmentation when `.semgrep` config is present. Use when reviewing a PR for code-level vulnerabilities, scanning a feature branch before merge, gating CI on critical findings, or running rule-specific checks for a known weakness class.securitygobashVotes: 0GitHub stars: 4
Sammelantrag Gap ChecklisteAStrukturierte Checkliste fuer den jaehrlichen Sammelantrag (Mehrfachantrag) Direktzahlungen und ELER nach GAP-Strategieplan. Antragsfrist 15. Mai (jeweilige laenderspezifische Verlaengerung pruefen). Erfasst Hektar Flaechen-Identifikator FID Kulturarten Konditionalitaet GLOEZ-Standards Oekoregelungen Junglandwirts-Foerderung Cross Compliance Greening-Aenderungen 2023. Antrags-Korrektur bis 31. Mai Anpassung bis 30. September. Sanktionen bei Versaeumnis und bei Verstoss Cross Compliance. Vor-O...securityapiVotes: 0GitHub stars: 4
Salesloft Security BasicsASecure SalesLoft OAuth tokens, API keys, and webhook signatures. Use when implementing token rotation, securing webhook endpoints, or auditing SalesLoft API access controls. Trigger: "salesloft security", "salesloft secrets", "secure salesloft", "salesloft token rotation".securitytypescriptbashVotes: 0GitHub stars: 4
Salesforce Security BasicsAApply Salesforce security best practices for Connected Apps, OAuth, and field-level security. Use when securing API credentials, implementing least privilege access, or auditing Salesforce security configuration. Trigger with phrases like "salesforce security", "salesforce secrets", "secure salesforce", "salesforce connected app security", "salesforce FLS".securitytypescriptbashVotes: 0GitHub stars: 4
Salesforce Install AuthAInstall and configure Salesforce SDK/CLI authentication with jsforce or Salesforce CLI. Use when setting up a new Salesforce integration, configuring OAuth flows, or initializing Salesforce connectivity in your project. Trigger with phrases like "install salesforce", "setup salesforce", "salesforce auth", "configure salesforce", "jsforce setup", "sf cli login".securitytypescriptpythonVotes: 0GitHub stars: 4
Salesforce Bulk Api Sync AgentAPerform high-volume data synchronization with Salesforce using the Bulk API 2.0 for CSV-based upsert, delete, and query operations. Handles OAuth 2.0 JWT bearer flow authentication via jsforce.securitygogitVotes: 0GitHub stars: 4
Safe VersionAFind the newest version of a package that is free of known vulnerabilities, capped by a `--max-major-bump` policy. Use when picking an upgrade target for a vulnerable dep, evaluating major-version churn risk, generating a "safe pin" for a lockfile, or building an `overrides` block.securitygobashVotes: 0GitHub stars: 4
Rwrw01 Security AuditARun a full security-in-depth audit including OWASP Top 10, dependency analysis, and defense-in-depth review. Use for security audit, pentest review, or vulnerability assessment.securitypythonrustVotes: 0GitHub stars: 4
Rust StrictARust security, strictness, and vulnerability prevention rules. Use when writing, reviewing, or auditing Rust code. Complements rust-skills (179 general rules) with security-focused rules: unsafe audit, unwrap/expect bans, error handling hierarchy, secret handling, concurrency safety, input validation for Tauri commands, and release profile hardening. Derived from production Rust projects.securityrustgoVotes: 0GitHub stars: 4
Rust SecurityARust security skill for supply chain safety and memory-safe development. Use when auditing dependencies with cargo-audit, enforcing policies with cargo-deny, reviewing RUSTSEC advisories, writing memory-safe FFI patterns, or integrating fuzzing and Miri into a security review pipeline. Activates on queries about cargo-audit, cargo-deny, RUSTSEC advisories, supply chain security, Rust CVEs, safe FFI, or fuzzing for security.securityrustgoVotes: 0GitHub stars: 4
Rust RulesARust coding rules from ai-toolkit: coding-style, frameworks, patterns, security, testing. Triggers: .rs, Cargo.toml, Cargo.lock, Tokio, Axum, Serde, clippy, cargo test. Load when writing, reviewing, or editing Rust code.securityrustgoVotes: 0GitHub stars: 4
Rust Dependency AuditAAudit Rust dependencies for vulnerabilities, license compliance, supply chain integrity, and freshness using cargo-audit, cargo-deny, cargo-vet, and cargo-outdated. Use whenever the user asks about dependency auditing, vulnerability scanning, license checks, supply chain verification, crate freshness, or says 'cargo outdated' or 'cargo update'. Also use before any Rust crate release. Do NOT use for Rust tooling guidance on refactoring, profiling, or benchmarking (use rust-sota-arsenal instead).securityrustgoVotes: 0GitHub stars: 4
Run Autonomous White Box Pentests Against Web Apps And Apis WithAAnalyze a web app's source code, execute real exploit attempts against the running target, and return proof-backed findings before release.securitygonodeVotes: 0GitHub stars: 4