Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,769
pages available: 1,241

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 10,057–10,080 of 29,769 skills

Rails Review FlowAMulti-pass Rails code review workflow that identifies bugs, security vulnerabilities, and architectural issues; assigns severity levels (Critical, Suggestion, Nice-to-have); and generates actionable review comments with a mandatory re-review loop for Critical findings. Use for full PR review workflows, multi-pass security or architecture audits, or implementing and verifying responses to review feedback. Trigger: review this PR, full code review, multi-pass review, audit security vulnerabilit...securitysqlrailsVotes: 0GitHub stars: 4
Rag Ai App Security AuditAUse this skill to audit RAG and AI application security, including retrieval boundaries, prompt injection, citations, memory, and data exposure. Do not use it as a scanner or exploit runner.securityrustsecurityVotes: 0GitHub stars: 4
Qa Tester SkillASystematically test web applications for functionality, security, and usability issues using browser automation. Reports findings by severity (CRITICAL/HIGH/MEDIUM/LOW) with immediate alerts for critical failures. Use when testing web apps, validating user flows, conducting security checks, or performing pre-deployment audits.securityjavascripttypescriptVotes: 0GitHub stars: 4
Qa SecurityAPerform a security audit based on OWASP. Use when the user wants to verify security, look for vulnerabilities, or before a production deployment.securitytypescriptgoVotes: 0GitHub stars: 4
Qa Security ScanASecurity scanning templates and checklists for OWASP Top 10, authentication, authorization, data protection. Use when conducting security testing or vulnerability assessment. This skill provides comprehensive security testing: - OWASP Top 10 checklist with remediation - Authentication and authorization testing - Data protection verification - Security report generation - Integration with Codex CLI MCP for automated scanning Triggers: "security scan", "vulnerability check", "OWASP", "securit...securityjavascriptgoVotes: 0GitHub stars: 4
Pypi DopplerALOCAL-ONLY PyPI publishing with Doppler credentials. TRIGGERS - publish to PyPI, pypi upload, local publish. NEVER use in CI/CD.securitypythongoVotes: 0GitHub stars: 4
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Prompt ScaffoldingCDefensive prompt scaffolding, injection prevention, safety guardrails. 防禦提示架構、注入防護、安全護欄之法。 Use when: building user-facing prompts, hardening against injection attacks, adding safety layers to system prompts.securityrustrailsVotes: 0GitHub stars: 4
Prompt ClashBAll-in-one prompt engineering competition toolkit — attack generation, defense hardening, real-time analysis, and pattern reference for AI security tournaments like Clash of Prompts. Use when preparing for or competing in prompt engineering competitions, red-teaming LLMs, hardening system prompts, analyzing prompt injection techniques, or practicing timed prompt challenges. Trigger phrases include "prompt clash", "prompt competition", "prompt tournament", "red team this prompt", "harden this ...securitypythonrustVotes: 0GitHub stars: 4
Prometheus Alerting Cardinality ReviewAUse this skill when reviewing Prometheus or AlertManager configuration for cardinality, alerting correctness, scrape security, remote_write safety, or retention adequacy. Trigger when a user provides prometheus.yml, alertmanager.yml, recording rules YAML, alerting rules YAML, or asks whether their Prometheus setup is production-ready.securityrustgoVotes: 0GitHub stars: 4
Program AuditAUse this skill when the user wants to audit a Solana or Anchor program for security vulnerabilities — account validation, PDA safety, arithmetic, CPI risks, reinit attacks, and authority confusion. Includes a checklist and the most common bug classes.securityrustgoVotes: 0GitHub stars: 4
Profiles And CredentialsBUse when authoring or modifying any claude-team-toolkit skill that loads credentials, switches between accounts/orgs/environments, or needs confirmation for destructive operations. Reference for the shared profile + ctt_* helper pattern used by all credential-bearing skills.securitybashreactVotes: 0GitHub stars: 4
Production System AuditAComprehensive system audit methodology for production web applications. Use when auditing systems before launch, identifying technical debt, troubleshooting systematic issues, preparing for security reviews, or creating improvement roadmaps. Systematically audits database schema, API endpoints, external integrations, performance, security, and monitoring across all layers.securitygosqlVotes: 0GitHub stars: 4
Procore Security BasicsAProcore security basics — construction management platform integration. Use when working with Procore API for project management, RFIs, or submittals. Trigger with phrases like "procore security basics", "procore-security-basics".securitypythonbashVotes: 0GitHub stars: 4
Procore Install AuthAProcore install auth — construction management platform integration. Use when working with Procore API for project management, RFIs, or submittals. Trigger with phrases like "procore install auth", "procore-install-auth".securitypythongoVotes: 0GitHub stars: 4
ProbeAOWASP ZAP/Burp Suite/Nuclei integration, penetration test planning, DAST execution, and vulnerability scanning. For dynamic security testing, pentesting, or runtime vulnerability validation. Complements Sentinel static analysis.securityrustgoVotes: 0GitHub stars: 4
Probe Ml And Llm Systems For Regressions And Vulnerabilities WitARun automated red-team and failure scans against an LLM or RAG app before users find the breakage.securitypythongoVotes: 0GitHub stars: 4
Probe Ai Agents For Dangerous Tool Chains And Execution Side EffATest agent systems for graph-discovered tool-chain vulnerabilities, silent side effects, and multi-phase trust exploits before deployment.securitypythonrustVotes: 0GitHub stars: 4
Privacy EngineeringAPrivacy engineering patterns — PII classification and inventory, GDPR consent flows, data minimization, right-to-erasure implementation, pseudonymization/encryption, privacy-by-design architecture, and DPIA checklist.securitypythongoVotes: 0GitHub stars: 4
Privacy CheckAUse to assess Privacy by Design compliance and GDPR/data protection alignment for a feature or system.securityreactsecurityVotes: 0GitHub stars: 4
Preflight Agent Specs For Prompt Injection Risk Across Prompt ToADescribe an agent in `agent_spec.yaml`, run deterministic prompt-injection analysis, generate mitigations, and validate defenses before rollout.securitypythongoVotes: 0GitHub stars: 4
Prd AuthoringAGuide for authoring comprehensive PRDs with parallel planning support. Use for drafting technical specifications, defining requirements, and synthesizing planner outputs. Use proactively when creating PRDs, architecture designs, or implementation plans. Examples: - user: "Draft a PRD for user auth" → create PRD with purpose, requirements, and scenarios - user: "Analyze these PRD requirements" → verify SHALL/MUST usage and scenario structure - user: "Synthesize planner outputs" → merge the str...securitytypescriptgoVotes: 0GitHub stars: 4
Pr Security ReviewAUse this skill to review a PR or diff for security regressions. Do not use it for full-repository audits or legal contract review.securityrustgoVotes: 0GitHub stars: 4
Postgres Security And Data Access HardeningAUse when designing, reviewing, or hardening PostgreSQL access control and data protection against the security architecture and data classification. Produces TLS and connection-security configuration, least-privilege role and grant model, row-level security policies for tenant isolation, column-level grants and encryption for PII, pgcrypto and at-rest/TDE posture, pgaudit configuration, credential and secret rotation posture, and network-exposure review. Do not use for schema design, query op...securityrustgoVotes: 0GitHub stars: 4
Post Milestone Audit SwiftAAudit a Swift / Xcode codebase after a milestone tag is cut — drift, regressions, extraction signals, and convention compliance against documented rules.securityswiftVotes: 0GitHub stars: 4