All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,769
- 1,241
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 10,033–10,056 of 29,769 skills
- Ruby RulesRuby coding rules from ai-toolkit: coding-style, frameworks, patterns, security, testing. Triggers: .rb, Gemfile, .gemspec, Rails, ActiveRecord, Sidekiq, RSpec, Sorbet, rubocop. Load when writing, reviewing, or editing Ruby code.Votes: 0GitHub stars: 4
- Roundcube WebmailReads and summarizes emails from Roundcube webmail with SAML/TOTP authentication using Playwright. Use when checking webmail, reading university email, automating Roundcube login, or setting up daily email digest via Slack/OpenClaw cron. macOS only.Votes: 0GitHub stars: 4
- Rootnode Domain Software EngineeringSpecialized software engineering prompt methodology for Claude. Use when building prompts for system design, code review, incident response, security analysis, API design, architecture decisions, RFCs, ADRs, runbooks, or technical leadership. Trigger on: "build a prompt for code review," "system design prompt," "SRE prompt," "security review prompt," "incident response prompt," "API design prompt," "architecture decision prompt," "RFC prompt," "runbook prompt." Provides 11 tested approaches a...Votes: 0GitHub stars: 4
- Reviewing PrsReviews GitHub pull requests for the Medusa repository. Checks PR template compliance, contribution guidelines, code conventions, and community contribution limits. Posts a review comment and applies initial-approval or requires-more label. Use when a PR is opened or updated.Votes: 0GitHub stars: 4
- Reviewing ChangesRun a layered quality gate over a code change — code quality, security audit, and architecture consistency, in that order. Use after writing or modifying code, before opening or merging a PR, when reviewing a diff or branch, or when asked for a code review, security audit, or architecture review. Produces severity-ranked findings (Critical / Major / Minor) tied to file:line, each with a concrete fix. Covers OWASP Top 10, SOLID, KISS / YAGNI / DRY, ruff + mypy for Python, golangci-lint for Go,...Votes: 0GitHub stars: 4
- Review DependencyUse for security review of dependency updates — bumps, upgrades, or new dependencies.Votes: 0GitHub stars: 4
- Review AuthProduction-readiness audit for authentication. Use when auth code changes or when auth feels fragile, unclear, or unsafe. Covers OIDC, sessions, tokens, route protection, and secret management.Votes: 0GitHub stars: 4
- Review AdversarialChallenge a design, plan, or artifact by actively looking for weaknesses, risks, and blind spots. Use when the user says 'challenge this design', 'red team this', 'steelman the alternative', or 'find what we missed'.Votes: 0GitHub stars: 4
- Responding To Security IncidentsAnalyze and guide security incident response, investigation, and remediation processes. Use when you need to handle security breaches, classify incidents, develop response playbooks, gather forensic evidence, or coordinate remediation efforts. Trigger with phrases like "security incident response", "ransomware attack response", "data breach investigation", "incident playbook", or "security forensics".Votes: 0GitHub stars: 4
- Repomix ContextTRIGGER: "analise meu repo inteiro", "repomix", "empacotar código", "passar repo para LLM", "compress repo", "share with AI". Usa Repomix para empacotar repo em um único arquivo (XML/JSON/Markdown) otimizado para context window de LLM, com filtros por extensão/path e remoção de comentários/secrets.Votes: 0GitHub stars: 4
- Repo Security ReviewSecurity audit for GitHub repositories before installation. Use when user wants to check if a repo/app is safe to install, review install scripts for malicious code, verify an open source project isn't collecting data, or audit dependencies for suspicious packages. Triggers on phrases like "is this safe to install", "check this repo", "review this script", "audit this code", "is this sketchy".Votes: 0GitHub stars: 4
- Repo GuardianPre-clone security scanner — detect malicious hooks, poisoned MCP configs, credential-harvesting patterns before Claude Code processes reposVotes: 0GitHub stars: 4
- Repo ForensicsSecurity forensics for git repos, AI skills, and MCP servers. Audits dependencies, detects prompt injection, credential theft, runtime dynamism, manifest drift, known CVEs, CISA KEV (actively exploited) vulns, and 2026 attack patterns. Not for fixing vulnerabilities or pentesting.Votes: 0GitHub stars: 4
- Replit Security BasicsApply Replit security best practices: Secrets management, REPL_IDENTITY tokens, Auth headers, and public Repl safety. Use when securing API keys, validating request identity, or auditing Replit security configuration. Trigger with phrases like "replit security", "replit secrets", "secure replit", "replit public safety", "replit identity token".Votes: 0GitHub stars: 4
- Reopt CliBaseline guidance for the reopt CLI — authentication, login, global flags, security rules, and exit codes. Use before other reopt CLI skills or whenever a task involves `reopt login`, `reopt status`, brandapp credentials, or CI automation.Votes: 0GitHub stars: 4
- Remofirst Install AuthRemoFirst install auth — global HR, EOR, and payroll platform integration. Use when working with RemoFirst for global employment, payroll, or compliance. Trigger with phrases like "remofirst install auth", "remofirst-install-auth", "global HR API".Votes: 0GitHub stars: 4
- RemediateGet interactive remediation guidance for compliance findings, including Terraform code and step-by-step instructions.Votes: 0GitHub stars: 4
- Remediate Pfx CertificatesSkill helps user to remove checked-in certificates from source code in case of exposed secretsVotes: 0GitHub stars: 4
- Release ReviewSenior developer-level release review for macOS/iOS apps. Identifies security, privacy, UX, and distribution issues with actionable fixes. Use when preparing an app for release, want a critical review, or before App Store submission.Votes: 0GitHub stars: 4
- Red Team BundlerInteractively prepares a targeted Red Team Review package. It conducts a brief discovery interview to determine the threat model, generates a strict security auditor prompt, compiles a manifest of relevant project files, and bundles them into a single Markdown artifact or ZIP archive ready for an external LLM (like Grok, ChatGPT, or Gemini) or a human reviewer.Votes: 0GitHub stars: 4
- React SecurityThis skill should be used when the user is securing a React application, asking about "XSS in React", "dangerouslySetInnerHTML security", "Server Actions security", "React data exposure", "sensitive data in React", "auth token storage", "IDOR in Next.js", "React security audit", "secure React forms", "Server Component secrets", "server-only package", "React taint API", "DOMPurify React", "prototype pollution React", "hardcoded secrets React", or reviewing React code for security vulnerabilities.Votes: 0GitHub stars: 4
- Ramp Security BasicsRamp security basics — corporate card and expense management API integration. Use when working with Ramp for card management, expenses, or accounting sync. Trigger with phrases like "ramp security basics", "ramp-security-basics", "corporate card API".Votes: 0GitHub stars: 4
- Ramp Install AuthRamp install auth — corporate card and expense management API integration. Use when working with Ramp for card management, expenses, or accounting sync. Trigger with phrases like "ramp install auth", "ramp-install-auth", "corporate card API".Votes: 0GitHub stars: 4
- Rails Security ReviewPerforms security audits and vulnerability assessments on Ruby on Rails application code. Use when reviewing Rails code for security risks, assessing authentication or authorization, auditing parameter handling, redirects, file uploads, secrets management, or checking for XSS, CSRF, SSRF, SQL injection, and other common vulnerabilities.Votes: 0GitHub stars: 4