Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,769
pages available: 1,241

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 10,129–10,152 of 29,769 skills

Overheid AuthenticatieAHelpt bij het implementeren van authenticatie en autorisatie voor overheidsdiensten met DigiD, eHerkenning, eIDAS en het Afsprakenstelsel Elektronische Toegangsdiensten. Biedt richtlijnen voor SAML, OpenID Connect, betrouwbaarheidsniveaus en BSN-verwerking. Gebruik deze skill wanneer de gebruiker vraagt over 'DigiD', 'eHerkenning', 'eIDAS', 'inloggen overheid', 'authenticatie overheid', 'government authentication', 'BSN koppeling', 'betrouwbaarheidsniveau', 'LOA', 'level of assurance', 'SAML ...securitypythongoVotes: 0GitHub stars: 4
Output Dev CredentialsAStore and reference encrypted secrets in Output SDK workflows using @outputai/credentials. Use when integrating API keys, database passwords, or third-party tokens.securitytypescriptbashVotes: 0GitHub stars: 4
Output Credentials EditAView and edit encrypted credentials in an Output.ai project. Use when adding secrets, updating API keys, verifying credential values, or retrieving a specific credential.securitytypescriptbashVotes: 0GitHub stars: 4
Oss VulnerabilitiesAOWASP Open Source Software Top 10 vulnerability knowledge base for identifying, assessing, and remediating security risks in open source software dependencies.securitygogitVotes: 0GitHub stars: 4
Oss Bucket ExploitB对象存储（S3/OSS/COS/OBS）Bucket 误配利用。当发现 AWS S3、阿里云 OSS、腾讯云 COS、华为云 OBS 等对象存储服务，或在 HTTP 响应中看到 x-amz-*、x-oss-*、x-cos-* 等 Header 时使用。覆盖 Bucket 枚举、ACL 误配检测、公开读写利用、Bucket 接管、Object 遍历、任意文件上传、Policy 策略滥用。发现任何云存储桶相关的资产或 URL（*.s3.amazonaws.com、*.oss-cn-*.aliyuncs.com、*.cos.*.myqcloud.com 等）都应使用此技能。优先使用 coscli/tccli 操作腾讯云 COS，awscli 操作 AWS S3securitypythongoVotes: 0GitHub stars: 4
Oraclecloud Prod ChecklistAPre-production readiness checklist for OCI — backup policies, security audit, key rotation, encryption, and Cloud Guard. Use when preparing an OCI environment for production workloads or auditing an existing deployment. Trigger with "oraclecloud prod checklist", "oci production ready", "oci security audit", "oci well-architected".securitypythongoVotes: 0GitHub stars: 4
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Openrouter Install AuthBSet up OpenRouter API authentication and configure API keys. Use when starting a new OpenRouter integration, rotating keys, or troubleshooting auth issues. Triggers: 'openrouter setup', 'openrouter api key', 'configure openrouter auth', 'sk-or key'.securitytypescriptpythonVotes: 0GitHub stars: 4
Openrouter Compliance ReviewAReview OpenRouter integration for regulatory compliance (SOC2, GDPR, HIPAA). Use when preparing for audits, evaluating data handling, or documenting compliance posture. Triggers: 'openrouter compliance', 'openrouter gdpr', 'openrouter soc2', 'openrouter data residency'.securitypythongoVotes: 0GitHub stars: 4
Openclaw Ghsa MaintainerAMaintainer workflow for OpenClaw GitHub Security Advisories (GHSA). Use when Codex needs to inspect, patch, validate, or publish a repo advisory, verify private-fork state, prepare advisory Markdown or JSON payloads safely, handle GHSA API-specific publish constraints, or confirm advisory publish success.securityshellbashVotes: 0GitHub stars: 4
Open Cve ScannerA오픈소스 취약점 분석 스킬. 사용자가 오픈소스 패키지 이름과 사용 중인 버전을 입력하면, NVD(NIST), OSV.dev(Google), GitHub Advisory 3개 데이터 소스에서 CVE 취약점을 조회하여 최신 버전 정보와 함께 보안 리포트를 생성한다. 마크다운, Excel/CSV, JSON 형식으로 출력 가능하다. package.json, requirements.txt 등 의존성 파일 업로드를 통한 일괄 분석도 지원한다. \"CVE\", \"취약점\", \"vulnerability\", \"보안 검사\", \"security audit\", \"오픈소스 보안\", \"패키지 취약점\", \"의존성 검사\", \"dependency check\" 등의 키워드가 포함된 요청에서 트리거한다. cve-scanner라는 이름으로 직접 호출할 수도 있다.securityrustgoVotes: 0GitHub stars: 4
Onenote Upgrade MigrationAMigrate OneNote integrations across Graph SDK versions, auth deprecations, and API changes. Use when upgrading Graph SDK, migrating from app-only to delegated auth, or handling deprecated endpoints. Trigger with "onenote upgrade", "onenote migration", "graph sdk upgrade", "onenote breaking changes".securitytypescriptpythonVotes: 0GitHub stars: 4
Onenote Security BasicsBImplement secure authentication, token management, and permission scoping for OneNote Graph API. Use when hardening OneNote integrations, implementing least-privilege permissions, or managing token lifecycle. Trigger with "onenote security", "onenote permissions", "onenote token management", "onenote least privilege".securitytypescriptpythonVotes: 0GitHub stars: 4
Obsidian Vault ManagerAObsidian Vault Manager is built around HashiCorp Vault secrets platform. The underlying ecosystem is represented by hashicorp/vault (35,266+ GitHub stars). It gives an agent a more technical and reliable way to work with the tool than a thin one-line wrapper, using stable interfaces like KV v2, policies, leases, tokens, transit, dynamic secrets and preserving the […]securitygogitVotes: 0GitHub stars: 4
Obsidian Security BasicsAImplement secure Obsidian plugin development practices. Covers credential storage, input validation, XSS prevention, network security, URI handler safety, and Electron security. Use when handling user data, storing API keys, making network requests, or preparing for community plugin submission. Trigger with phrases like "obsidian security", "secure obsidian plugin", "obsidian data protection", "obsidian privacy", "obsidian api key storage".securityjavascripttypescriptVotes: 0GitHub stars: 4
Oauth2 Oidc AdvisorAImplémentation d'OAuth2, OpenID Connect, JWT et gestion des tokens pour sécuriser des APIs et applications web. À utiliser quand l'utilisateur configure de l'authentification, des tokens JWT, ou intègre un identity provider. Se déclenche aussi avec "OAuth2", "OIDC", "OpenID Connect", "JWT", "token", "refresh token", "identity provider", "Keycloak", "Azure AD", "Auth0".securitygoazureVotes: 0GitHub stars: 4
Oauth2 Flow DebuggerAInspects and debugs OAuth 2.0 authorization flows including PKCE, client credentials, and device code grants. Uses jose JWT library and node-fetch to validate tokens, decode claims, and trace redirect chains.securitygonodeVotes: 0GitHub stars: 4
Nutrient Document ProcessingAProcess documents with Nutrient DWS. Use when the user wants to generate PDFs from HTML or URLs, convert Office/images/PDFs, assemble or split packets, OCR scans, extract text/tables/key-value pairs, redact PII, watermark, sign, fill forms, optimize PDFs, or produce compliance outputs like PDF/A or PDF/UA. Triggers include convert to PDF, merge these PDFs, OCR this scan, extract tables, redact PII, sign this PDF, make this PDF/A, or linearize for web delivery.securitypythonshellVotes: 0GitHub stars: 4
Npm Package Vulnerability ScannerAScans npm dependencies for known vulnerabilities using the npm audit JSON API and the OSV.dev REST API (api.osv.dev/v1/query). Cross-references findings with the GitHub Advisory Database (GHSA) for severity scoring.securitygogitVotes: 0GitHub stars: 4
Npm Package Supply Chain AuditorAAudits npm dependencies for supply chain risks using npm audit, Socket.dev API, and Snyk vulnerability database. Detects typosquatting, install scripts, and maintainer account takeovers.securitygogitVotes: 0GitHub stars: 4
Npm Package Auditor Registry ApiAAudits NPM packages using the NPM Registry API with dependency tree resolution and vulnerability scanning via OSV.dev API. Generates SBOM in CycloneDX format and checks license compliance against SPDX expression parser.securitygoexpressVotes: 0GitHub stars: 4
Npm Package Audit ReferenceAProvides deep dependency analysis using npm audit, socket.dev API for supply chain risk scoring, and bundlephobia API for bundle size impact assessment. Generates license compliance reports via license-checker.securitygogitVotes: 0GitHub stars: 4
Npm Package Audit License CheckerAAudits npm dependencies using npm audit, license-checker-rspack, and the npm registry API (registry.npmjs.org). Reports CVE vulnerabilities with CVSS scores, license compatibility matrices, and identifies abandoned packages via download trend analysis.securitygogitVotes: 0GitHub stars: 4
Npm Package Audit AnalyzerAAnalyzes npm package security advisories using npm audit, the npm Registry API, and the GitHub Advisory Database GraphQL API. Produces prioritized vulnerability reports with upgrade path recommendations.securitygogitVotes: 0GitHub stars: 4
Npm Dependency Audit ScannerAScans Node.js projects for vulnerable dependencies using npm audit and the OSV.dev REST API. Cross-references CVE databases via the National Vulnerability Database API v2.0 and generates SBOM documents in CycloneDX format.securitygonodeVotes: 0GitHub stars: 4