Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,770
pages available: 1,241

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 10,225–10,248 of 29,770 skills

Linux RhelBRed Hat Enterprise Linux (RHEL 7/8/9) and compatible distros (CentOS, AlmaLinux, Rocky). Covers systemd (units/targets/journald), LVM (pvcreate/vgcreate/lvcreate/extend/migrate), SELinux (enforcing/permissive/audit2allow/semanage/restorecon), firewalld/iptables, nmcli/nmtui network configuration, bonding/teaming/VLANs, dnf/rpm/subscription-manager, kdump/crash analysis, performance tuning (perf/sar/vmstat/iostat/tuned), and RHEL security hardening (PAM/auditd/FIPS). Use for RHEL admin tasks, ...securitygoshellVotes: 0GitHub stars: 4
Linux Linux Security HardenerBDurcissement sécurité Linux — SSH, fail2ban, SELinux, audit, gestion des utilisateurs et mises à jour. Se déclenche avec "sécurité Linux", "hardening Linux", "SSH sécurisé", "fail2ban", "SELinux", "audit Linux".securityshellsecurityVotes: 0GitHub stars: 4
Linux At Spi2AExpert in AT-SPI2 (Assistive Technology Service Provider Interface) for Linux desktop automation. Specializes in accessible automation of GTK/Qt applications via D-Bus accessibility interface. HIGH-RISK skill requiring security controls for system-wide access.securitypythongoVotes: 0GitHub stars: 4
Linear Security BasicsASecure API key management, OAuth best practices, and webhook verification for Linear integrations. Trigger: "linear security", "linear API key security", "linear OAuth", "secure linear", "linear webhook verification", "linear secrets management", "linear token refresh".securitytypescriptgoVotes: 0GitHub stars: 4
Lindy Security BasicsAImplement security best practices for Lindy AI agents and integrations. Use when securing API keys, configuring agent permissions, verifying webhooks, or auditing agent access. Trigger with phrases like "lindy security", "secure lindy", "lindy API key security", "lindy permissions", "lindy audit".securitytypescriptgoVotes: 0GitHub stars: 4
Lindy Install AuthBSet up Lindy AI account, API access, and webhook authentication. Use when onboarding to Lindy, configuring API keys for webhook triggers, or connecting Lindy agents to your application. Trigger with phrases like "install lindy", "setup lindy", "lindy auth", "configure lindy API key", "lindy webhook secret".securitytypescriptpythonVotes: 0GitHub stars: 4
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Lindy Data HandlingAData handling best practices for Lindy AI agents. Use when managing sensitive data in agent workflows, implementing data privacy controls, or ensuring compliance. Trigger with phrases like "lindy data", "lindy privacy", "lindy PII", "lindy data handling", "lindy GDPR", "lindy HIPAA".securitygogitVotes: 0GitHub stars: 4
License ComplianceAAudits package dependency licenses using the Very Good CLI packages_check_licenses MCP tool. Flags non-compliant or unknown licenses and produces a compliance summary.securitygoVotes: 0GitHub stars: 4
LibsecretAlibsecret - Secret generation and environment utilities. generateSecret creates cryptographic random secrets. generateSecretB64 creates base64url secrets. createJwt signs HS256 JSON Web Tokens. getEnvVar and setEnvVar manage .env files. hashValues creates deterministic hashes. Use for credential management, JWT creation, and environment configuration.securityjavascriptjavaVotes: 0GitHub stars: 4
Legal Tos PrivacyACreate bulletproof Terms of Service and Privacy Policy documents for SaaS applications. Infers company information from codebase/marketing site, conducts comprehensive audits, drafts documents, then asks user ONLY for missing details at the end. Minimizes user interaction. Use when the user needs to draft, review, or update legal documents (ToS, Terms of Service, Privacy Policy, legal pages). Triggers on requests for legal documents, terms drafting, privacy policy creation, "cover our bases l...securityrustgoVotes: 0GitHub stars: 4
Legal CheckAReviews code, documents, and configurations for IT legal compliance. Triggers: legal, license, compliance, privacy, GDPR, copyright, terms, contract, OSS license, intellectual property, data protection. Source-code read-only — never modifies source code or test files. Outputs legal check report to output/reports/legal/ (requires Write permission to output/reports/legal/). Takes optional argument: /legal-check <target-scope or instruction>securitybashapiVotes: 0GitHub stars: 4
Langfuse Security BasicsAImplement Langfuse security best practices for API keys and data privacy. Use when securing Langfuse integration, protecting API keys, or implementing data privacy controls for LLM observability. Trigger with phrases like "langfuse security", "langfuse API key security", "langfuse data privacy", "secure langfuse", "langfuse PII".securitytypescriptgoVotes: 0GitHub stars: 4
Landpacht Und Hoferbfolge PruefenAPruefraster fuer Landpachtvertrag §§ 585 ff. BGB und Hoefeerbfolge nach HoefeO oder regionalem Hoefeerecht. Pachtformen Geld-Pacht Natural-Pacht Teilpacht Pachtvertragsanzeige § 2 LPachtVG Pachtpreisanpassung § 593 BGB Vertragsdauer Beendigung Verlaengerung Bewirtschaftungspflicht. Hoefeerecht Anerbenrecht Hofeszession nach Ehe-/Erbverhaeltnis Abfindungs-Anspruch der weichenden Erben § 12 HoefeO Hoefe-Wert berechnen einheitlicher Hofeswert. Verweist auf ELER und GAP-Foerderrecht Direktzahlung...securityVotes: 0GitHub stars: 4
Kubernetes ReviewAReviews Kubernetes manifests for best practices, security, and homelab standards compliance. Use when reviewing YAML files, K8s manifests, Helm values, or ArgoCD applications.securitygonodeVotes: 0GitHub stars: 4
Kompliance XAPerforms intelligent compliance audits for software projects. Automatically detects which regulatory frameworks (GDPR, HIPAA, PCI-DSS, CCPA, SOC 2) apply based on project analysis and user context. Provides tiered reports with executive summaries and detailed technical findings. Use when the user asks about compliance, regulatory requirements, security standards, data protection, or wants to audit their codebase for legal/regulatory adherence.securitygoapiVotes: 0GitHub stars: 4
Klingai Install AuthASet up Kling AI API authentication with JWT tokens. Use when starting a new Kling AI integration or troubleshooting auth issues. Trigger with phrases like 'kling ai setup', 'klingai api key', 'kling ai authentication', 'configure klingai'.securityjavascriptpythonVotes: 0GitHub stars: 4
Klingai Compliance ReviewASecurity and compliance review framework for Kling AI integrations. Use when preparing for audits or reviewing security posture. Trigger with phrases like 'klingai compliance', 'kling ai security review', 'klingai audit prep', 'video generation compliance'.securitypythongoVotes: 0GitHub stars: 4
Kev WatchACISA + EU KEV (Known Exploited Vulnerabilities) catalog watch — pull recent KEV additions, intersect with installed dependencies, surface entries with imminent due dates. Use when checking if you have KEV-listed CVEs in your repo, monitoring CISA additions on a schedule, or producing a deadline-driven action list with `--since` filtering.securitygobashVotes: 0GitHub stars: 4
Kafka Security AuditAAudit Kafka security configuration across the codebase and live cluster using the Lenses MCP server. Checks authentication (SASL), encryption (SSL/TLS), authorisation (ACLs), secrets management and environment tier mismatches. Use when user says "audit Kafka security", "check security config", "is my cluster secure" or asks about authentication, encryption or credentials. Do NOT use for configuring certificates, creating SASL users or setting up ACLs.securitygobashVotes: 0GitHub stars: 4
Juicebox Security BasicsAApply Juicebox security best practices. Trigger: "juicebox security", "juicebox api key security".securitytypescriptexpressVotes: 0GitHub stars: 4
Juicebox Data HandlingAJuicebox data privacy and GDPR. Trigger: "juicebox data privacy", "juicebox gdpr".securitytypescriptgoVotes: 0GitHub stars: 4
Judge Security AuditorAUse when a diff may introduce security risk — authZ, injection, secrets, unsafe deserialization, SSRF, XSS, mass assignment — dispatched by /review-changes, /do-and-judge, /judge.securityrustgoVotes: 0GitHub stars: 4
Judge CtfACTF flag 评判检查清单。当需要判断 CTF 挑战是否完成（flag 是否已获取）、分析攻击失败原因、或为下一步攻击提供精确指导时使用。覆盖 flag 搜索验证、漏洞发现评估、漏洞利用评估、flag 位置推断、常见题型模式匹配（SQLi/LFI/RCE/IDOR/SSRF/反序列化）securitygosqlVotes: 0GitHub stars: 4
Jira SyncBSync guidance for SpecWeave increments with JIRA epics/stories (content SpecWeave→JIRA, status JIRA→SpecWeave). Use when asking about JIRA integration setup or troubleshooting sync. For actual syncing, use /sw-jira:sync command instead.securitygobashVotes: 0GitHub stars: 4