All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,769
- 1,241
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 10,081–10,104 of 29,769 skills
- Post Milestone Audit React NativeAudit a React Native / Expo codebase after a milestone tag is cut — drift, regressions, extraction signals, and convention compliance against documented rules.Votes: 0GitHub stars: 4
- Post Milestone Audit PythonAudit a Python codebase after a milestone tag is cut — drift, regressions, extraction signals, and convention compliance against documented rules.Votes: 0GitHub stars: 4
- Post Milestone Audit DotnetAudit a .NET / C# codebase after a milestone tag is cut — drift, regressions, extraction signals, and convention compliance against documented rules.Votes: 0GitHub stars: 4
- Pop Assessment SecurityValidates PopKit security posture using concrete vulnerability patterns, automated secret scanning, and OWASP-aligned checklistsVotes: 0GitHub stars: 4
- Policy GenGenerate SOC 2 compliance policy documents tailored to your company.Votes: 0GitHub stars: 4
- Physical Threat ModelingThreat library for physical-access threats that STRIDE and OWASP Top 10 don't cover — evil-maid, DMA, hostile peripheral, travel-host, coercion, cold-boot, supply-chain implant, side-channelVotes: 0GitHub stars: 4
- Phase 7 Seo SecurityEnhance SEO (meta tags, semantic HTML) and security (vulnerability checks, hardening). Triggers: SEO, security, meta tags, vulnerability, 검색 최적화, 보안.Votes: 0GitHub stars: 4
- Personal Pre Push ReviewPre-push adversarial review for personal repos before git push. Runs adversarial-input sweep, parallel-implementation symmetry audit, project AGENTS.md compliance, dead-code sweep, secrets scan. Use before any push; mandatory for repos that will become public or shared. Tier 2 sub-agent does the bulk; Tier 3 main synthesizes.Votes: 0GitHub stars: 4
- Personal Data ExpertActs as a Personal Data Expert providing PDPA and GDPR compliance guidance, risk assessments, privacy documentation, and breach response procedures in Thai, grounded in official PDPC standards.Votes: 0GitHub stars: 4
- Persona Security BasicsSecure Persona API keys, webhook secrets, PII handling in verification data. Use when working with Persona identity verification. Trigger with phrases like "persona security-basics", "persona security-basics".Votes: 0GitHub stars: 4
- Perplexity Security BasicsApply Perplexity security best practices for API key management and query safety. Use when securing API keys, implementing query sanitization, or auditing Perplexity security configuration. Trigger with phrases like "perplexity security", "perplexity secrets", "secure perplexity", "perplexity API key security", "perplexity PII".Votes: 0GitHub stars: 4
- Perl Security中文优先：用于Perl安全相关任务，帮助识别、设计、实现或验证对应工作流。English keywords: Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies.Votes: 0GitHub stars: 4
- Performing Security TestingTest automate security vulnerability testing covering OWASP Top 10, SQL injection, XSS, CSRF, and authentication issues. Use when performing security assessments, penetration tests, or vulnerability scans. Trigger with phrases like "scan for vulnerabilities", "test security", or "run penetration test".Votes: 0GitHub stars: 4
- Performing Security Code Review'Execute this skill enables AI assistant to conduct a security-focusedVotes: 0GitHub stars: 4
- Performing Security AuditsAnalyze code, infrastructure, and configurations by conducting comprehensive security audits. It leverages tools within the security-pro-pack plugin, including vulnerability scanning, compliance checking, and cryptography review. Use when assessing security or running audits. Trigger with phrases like 'security scan', 'audit', or 'vulnerability'.Votes: 0GitHub stars: 4
- Performing Penetration TestingPerform security testing on web applications, APIs, and codebases. Use when the user asks to "run a security scan", "check for vulnerabilities", "audit dependencies", "check security headers", "find security issues", "pentest", "security audit", or "scan for secrets". Trigger with "pentest", "security scan", "vulnerability check", "audit dependencies", "check headers", "find secrets".Votes: 0GitHub stars: 4
- PerchServer intelligence layer for RunCloud-managed Linux servers. Use when the user mentions Perch, /perch_*, RunCloud, nginx-rc, server intelligence, server diagnosis, WordPress site auditing, plugin vulnerability scanning, or any time they want to investigate, monitor, or heal a server they own.Votes: 0GitHub stars: 4
- PentesterAuthorized exploitation, proof-of-concept chain, kill-chain mapping.Votes: 0GitHub stars: 4
- Pentest WirelessWireless network pentest — WPA/WPA2/WPA3, evil twin, 802.1X enterprise, Bluetooth advisory. Triggers on wireless pentest, WiFi, WPA2, WPA3, PMKID, evil twin, deauth, Aircrack, hcxdumptool, 802.1X, Bluetooth, BLE security.Votes: 0GitHub stars: 4
- Pentest WebWeb application security testing methodology — OWASP Top 10, SSRF, IDOR, auth bypass, injection sinifi advisory. Burp/ZAP cikti analizi. Triggers on web pentest, OWASP, SQL injection, XSS, SSRF, IDOR, auth bypass, Burp output, ZAP, parameter pollution, request smuggling.Votes: 0GitHub stars: 4
- Pentest Threat ModelThreat modeling — STRIDE, DREAD, attack tree, data flow diagram, MITRE ATT&CK Navigator integration. Triggers on threat model, STRIDE, DREAD, attack tree, DFD, data flow diagram, MITRE ATT&CK, threat matrix, risk scoring.Votes: 0GitHub stars: 4
- Pentest StigDISA STIG (Security Technical Implementation Guide) audit + GPO remediation + keep-open justification advisory. Triggers on STIG, DISA, SCAP, OpenSCAP, Compliance Master, GPO, group policy hardening, keep-open justification, CKL.Votes: 0GitHub stars: 4
- Pentest ReconReconnaissance ve enumeration advisory — Nmap/Nessus/Nikto/BloodHound output parsing, attack surface prioritization, next-step onerisi. OSINT (domain recon, email harvest, breach data) dahil. Triggers on recon, reconnaissance, enumeration, Nmap output, attack surface, target prioritization, subdomain enum, port scan analysis, OSINT, domain recon.Votes: 0GitHub stars: 4
- Pentest PfsensePentest especializado para pfSense CE e Plus — cobre todas as superfícies de ataque a partir da rede externa e interna, mapeado ao PTES e ao código-fonte real do pfSenseVotes: 0GitHub stars: 4