Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,770
pages available: 1,241

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 10,249–10,272 of 29,770 skills

Jira ContextAExtracts JIRA issue keys from PR context and enriches with ticket details using claude.ai Atlassian MCP. NON-BLOCKING. Also scans fetched content for prompt injection.securityVotes: 0GitHub stars: 4
Jenkins Shared Library Auditor AgentAAudits Jenkins shared libraries for security vulnerabilities using the Jenkins Script Console API and Groovy AST analysis. Detects unsafe method calls, credential leaks, and sandbox escapes in pipeline libraries.securitygogitVotes: 0GitHub stars: 4
Java SecurityAReviews or implements Spring Security configuration — JWT authentication, OAuth2, method-level security, CORS, and CSRF. Use when user asks to "add authentication", "secure this API", "implement JWT", "configure Spring Security", "add OAuth2 login", "protect endpoints", or "review security config".securitygojavaVotes: 0GitHub stars: 4
Java Security CheckAQuick OWASP security scan for injection risks, hardcoded secrets, weak crypto, and Spring Security misconfigs. Use when user asks to "security scan", "check for vulnerabilities", "any security issues", "OWASP check", "hardcoded secrets", or "is this secure".securitygojavaVotes: 0GitHub stars: 4
Java DockerAContainerize Java applications - Dockerfile optimization, JVM settings, securitysecuritygojavaVotes: 0GitHub stars: 4
Ivangrynenko Cursorrules DrupalADrupal development and security patterns from Ivan Grynenko's cursor rules. Covers OWASP Top 10, authentication, access control, injection prevention, cryptography, configuration, database standards, file permissions, and more.securitysqlgitVotes: 0GitHub stars: 4
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Iso27001AAssess ISO/IEC 27001 ISMS compliance — Annex A controls, risk treatment, Statement of ApplicabilitysecuritytestingsecurityVotes: 0GitHub stars: 4
IsmAExpert Australian Information Security Manual (ISM) advisor for government entities and their supply chains. Use for ISM control selection, gap analysis, system authorisation, IRAP assessment preparation, security documentation, and ASD compliance. Triggers on: ISM controls, ASD compliance, IRAP assessment, PROTECTED system scoping, Essential Eight vs ISM, system authorisation, NC/OS/ PROTECTED/SECRET/TOP SECRET classification markings, security objectives, ISM guidelines or chapters, control...securitygosecurityVotes: 0GitHub stars: 4
Ip Relaxation And RestrictionADesign IP-based access controls: profile login IP ranges, org-wide trusted IPs, IP relaxation per profile, and the interaction with MFA and SSO. Trigger keywords: login IP range, trusted IP, IP relaxation, restricted IP, IP allowlist, login hours. Does NOT cover: network-layer firewalling, corporate VPN design, or Shield Event Monitoring.securityrustgoVotes: 0GitHub stars: 4
Ios App Store SubmissionABuild and submit iOS apps to App Store Connect using fastlane (match/gym/pilot/deliver) or EAS (eas build / eas submit) for native (Swift/SwiftUI/UIKit), React Native, Expo, Flutter, and Capacitor projects. Use when archiving to .xcarchive, validating, uploading to TestFlight, configuring code signing and provisioning, writing ExportOptions.plist, generating or updating PrivacyInfo.xcprivacy, populating App Store Connect metadata, generating screenshots, submitting for App Review, responding ...securitypythonrustVotes: 0GitHub stars: 4
IomAComplete user guide for the IoM (Implant-over-Middleware) C2 framework. Covers architecture concepts, basic operations, startup parameters, authentication configuration, troubleshooting, documentation resources, and community feedback. Trigger conditions: use this skill when the user asks about how IoM works, command usage, architecture concepts, configuration methods, how to troubleshoot issues, where to find documentation, or how to file an issue. Should also trigger for questions like "how...securitygoshellVotes: 0GitHub stars: 4
Intercom Security BasicsBApply Intercom security best practices for tokens, webhook verification, and scopes. Use when securing access tokens, implementing webhook signature validation, or configuring least-privilege OAuth scopes. Trigger with phrases like "intercom security", "intercom secrets", "secure intercom", "intercom webhook signature", "intercom token rotation".securitytypescriptbashVotes: 0GitHub stars: 4
Intercom Install AuthAInstall and configure Intercom API authentication with access tokens or OAuth. Use when setting up a new Intercom integration, configuring API credentials, or initializing the intercom-client SDK in your project. Trigger with phrases like "install intercom", "setup intercom", "intercom auth", "configure intercom API key", "intercom access token".securitytypescriptbashVotes: 0GitHub stars: 4
Intent RecognitionDUse BEFORE any tool call that could modify state, touch sensitive targets, rewrite history, install dependencies, publish packages, or expose credentials/environment data. Classifies intent into Passive/Read, Reconnaissance, Modification, or Destructive/Irreversible using operation type plus target sensitivity, then runs Identify / Confirm / Verify before action. Do NOT use for deciding what code to write, executing already-classified work, reactive post-execution guardrails, or defining upst...securitygoshellVotes: 0GitHub stars: 4
Instantly Security BasicsAApply Instantly.ai security best practices for API keys, scopes, and access control. Use when securing API keys, implementing least-privilege access, or auditing Instantly workspace permissions. Trigger with phrases like "instantly security", "instantly api key safety", "instantly least privilege", "secure instantly", "instantly access control".securitytypescriptgoVotes: 0GitHub stars: 4
Input Validation Sanitization AuditorAIdentifies and fixes XSS, SQL injection, and command injection vulnerabilities with validation schemas, sanitization libraries, and safe coding patterns. Use for "input validation", "XSS prevention", "SQL injection", or "sanitization".securitytypescriptsqlVotes: 0GitHub stars: 4
Injection TestingAValidate NoSQL injection vulnerabilities across MongoDB, Cassandra, CouchDB, Redis, and other NoSQL databases. Test operator injection, JavaScript injection, and query manipulation patterns. Use when testing CWE-943 (Improper Neutralization of Special Elements in Data Query Logic) and related NoSQL injection classes.securityjavascriptpythonVotes: 0GitHub stars: 4
Infrastructure VulnerabilitiesAOWASP Infrastructure Top 10 vulnerability knowledge base for identifying, assessing, and remediating security risks in internal IT infrastructure environments.securitygogitVotes: 0GitHub stars: 4
Infisical Secret Management PlatformAInfisical is an open-source platform for managing application secrets, environment variables, and certificates across teams and infrastructure. This skill enables agents to sync secrets, rotate credentials, and manage PKI using the Infisical CLI and API.securitygogitVotes: 0GitHub stars: 4
Infisical Cli Secrets Injection And Access ManagementAInfisical CLI retrieves, injects, and manages secrets across local development, CI/CD, staging, and production environments. It is useful when agent workflows need a structured way to pull environment variables and secret material without hardcoding credentials into scripts.securitygogitVotes: 0GitHub stars: 4
Incident To PromptAUse this skill to convert a security incident or public vulnerability pattern into reusable audit prompts, checklists, tests, and AGENTS.md rules. Do not use it to generate exploit instructions.securityrustgoVotes: 0GitHub stars: 4
Ideogram Security BasicsAApply Ideogram security best practices for API key management and access control. Use when securing API keys, implementing key rotation, or auditing Ideogram security configuration. Trigger with phrases like "ideogram security", "ideogram secrets", "secure ideogram", "ideogram API key security", "ideogram key rotation".securitytypescriptbashVotes: 0GitHub stars: 4
Iac Terraform AuditAAudit Terraform, OpenTofu, Terragrunt, and Pulumi modules for state, provider pinning, security (Checkov/tfsec), module hygiene, environment separation, drift, and cost. One sub-agent per module. Static, live, and apply modes.securitytypescriptpythonVotes: 0GitHub stars: 4
Hubspot Security BasicsAApply HubSpot security best practices for tokens, scopes, and webhook verification. Use when securing private app tokens, implementing least privilege scopes, or validating HubSpot webhook signatures. Trigger with phrases like "hubspot security", "hubspot token rotation", "secure hubspot", "hubspot scopes", "hubspot webhook verify".securitytypescriptbashVotes: 0GitHub stars: 4