All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,770
- 1,241
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 10,273–10,296 of 29,770 skills
- Hubspot AuthAuthenticate production HubSpot integrations and survive the auth-sideVotes: 0GitHub stars: 4
- Huawei Pentesting华为云渗透测试方法论。当目标使用华为云服务、发现 obs.*.myhuaweicloud.com 资产、获取华为云 AK/SK、在 ECS 实例内可访问 169.254.169.254 OpenStack 风格元数据、或需要对华为云 IAM/ECS/OBS/RDS/CCE/FunctionGraph 等服务进行安全评估时使用。覆盖 IAM 提权（OpenStack Keystone）、ECS 接管、OBS 对象存储利用、RDS 数据库攻击、CCE 容器集群、FunctionGraph 函数计算、ELB 负载均衡、LTS 日志、KMS 密钥管理。华为云使用 OpenStack CLI + obsutil + REST API 三种接口Votes: 0GitHub stars: 4
- Horcrux Shamir Secret File SplitterHorcrux splits files into encrypted fragments using Shamir Secret Sharing, so you can distribute pieces across locations and reconstruct the original with a configurable threshold — no password required.Votes: 0GitHub stars: 4
- Hootsuite Security BasicsApply Hootsuite security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Hootsuite security configuration. Trigger with phrases like "hootsuite security", "hootsuite secrets", "secure hootsuite", "hootsuite API key security".Votes: 0GitHub stars: 4
- Hootsuite Install AuthInstall and configure Hootsuite SDK/CLI authentication. Use when setting up a new Hootsuite integration, configuring API keys, or initializing Hootsuite in your project. Trigger with phrases like "install hootsuite", "setup hootsuite", "hootsuite auth", "configure hootsuite API key".Votes: 0GitHub stars: 4
- Hooks EvalEvaluate hook security, performance, and SDK compliance. Use for audits.Votes: 0GitHub stars: 4
- Hm SecurityAuditoria de segurança profunda (L1/L2/L3). Use antes de deploy externo, após adicionar auth/dados sensíveis/fluxo financeiro, ou periodicamente como manutenção. Cobre 14 domínios — CIS Docker, OWASP Top 10, OWASP API Top 10, ASVS AuthN/Session, dados/compliance (LGPD/GDPR/PCI), supply chain, AI/LLM (prompt injection, tool calling, multi-tenant LLM), file upload, business logic, secrets scan com 20+ patterns, Supabase/PostgREST RLS regime absoluto. Barra Tempest / Trail of Bits / Cure53.Votes: 0GitHub stars: 4
- Hipaa Compliance AuditorA clinical-grade PII/PHI detection and de-identification tool for healthcare text data.Votes: 0GitHub stars: 4
- Hex Security BasicsApply Hex security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Hex security configuration. Trigger with phrases like "hex security", "hex secrets", "secure hex", "hex API key security".Votes: 0GitHub stars: 4
- Healthcare Phi Compliance中文优先：用于医疗PHI合规相关任务，帮助识别、设计、实现或验证对应工作流。English keywords: Protected Health Information (PHI) and Personally Identifiable Information (PII) compliance patterns for healthcare applications. Covers data classification, access control, audit trails, encryption, and common leak vectors.Votes: 0GitHub stars: 4
- Hashicorp Vault Secrets Rotation Agent 2Automates secret rotation in HashiCorp Vault using the Vault API and dynamic secrets engines. Manages database credential leases, PKI certificate renewal, and AWS STS token generation with TTL policies.Votes: 0GitHub stars: 4
- Hashicorp Vault Secret Scanner 2Scans codebases for hardcoded secrets using HashiCorp Vault SDK and truffleHog patterns. Integrates with Vault Transit engine for automatic secret rotation and re-encryption of detected credentials.Votes: 0GitHub stars: 4
- Hashicorp Vault Secret Rotation Agent 2Connects to HashiCorp Vault HTTP API for automated secret rotation workflows. Manages dynamic database credentials via Vault database secrets engine, handles PKI certificate renewal, and implements lease lifecycle management with TTL monitoring.Votes: 0GitHub stars: 4
- Hashicorp Vault Mcp ServerThe official HashiCorp Vault MCP server lets AI assistants read, write, list, and delete secrets in Vault's KV engine through a safe, auditable MCP interface. Supports both stdio and HTTP transports, TLS encryption, and CORS controls.Votes: 0GitHub stars: 4
- Halo Cli AuthUse when working with Halo CLI login, bearer token or basic auth, profile setup, profile switching, current profile inspection, or fixing missing keyring credentials.Votes: 0GitHub stars: 4
- Hackernews CliUse cli-web-hackernews to browse and interact with Hacker News — top stories, newest, best, Ask HN, Show HN, jobs, search stories/comments, view story details with comments, user profiles, and (with auth) upvote, submit stories, post comments, favorite, hide, view favorites, submissions, and comment threads. Invoke this skill whenever the user asks about Hacker News, HN stories, HN search, trending tech posts, tech news, startup news, or wants to browse/search/interact with Hacker News conten...Votes: 0GitHub stars: 4
- Gws SetupSet up the Google Workspace CLI (gws) from scratch. Guides through GCP project creation, OAuth credentials, authentication, and installing 90+ agent skills for Claude Code. Use when setting up gws for the first time, configuring Google Workspace API access, or troubleshooting gws auth issues. Triggers: "set up gws", "google workspace cli", "gws setup", "install gws".Votes: 0GitHub stars: 4
- Guidewire Security BasicsImplement Guidewire security: OAuth2 JWT, API roles, Gosu secure coding, and data protection. Trigger: "guidewire security basics", "security-basics".Votes: 0GitHub stars: 4
- GuardiaoRevisa segurança de código, arquitetura, incidentes e dependências de terceiros para identificar vulnerabilidades reais, fragilidades exploráveis, risco de supply chain e mitigações seguras. Use em security review, incidente, validação pré-produção/compliance, auditoria de bibliotecas e scripts ou revisão de APIs, serviços, front-end, back-end, banco, uploads, webhooks e integrações externas.Votes: 0GitHub stars: 4
- Gsd SecureSecurity audit of changes; enforce defense in depth and OWASP best practicesVotes: 0GitHub stars: 4
- Gsc Deep DiveUse when the user wants Google Search Console data pulled directly into the session instead of manually screenshotting / CSV-exporting from search.google.com. Pulls top queries, top pages, coverage status, manual actions, security issues, and Core Web Vitals field data via the GSC API in one call. Triggers from "pull GSC data for example.com", "Search Console deep dive", "GSC queries last 90 days", "GSC coverage report", "GSC indexing status", "GSC manual actions check", "GSC Core Web Vitals ...Votes: 0GitHub stars: 4
- Grype Container Sbom Vulnerability ScannerScan container images, filesystems, and SBOMs for known vulnerabilities using Anchore Grype. Supports major OS package ecosystems and language-specific packages with EPSS risk scoring and OpenVEX filtering.Votes: 0GitHub stars: 4
- Groq Security BasicsApply Groq security best practices for API key management and data protection. Use when securing API keys, implementing least privilege access, or auditing Groq security configuration. Trigger with phrases like "groq security", "groq secrets", "secure groq", "groq API key security".Votes: 0GitHub stars: 4
- Granola Security BasicsSecurity and privacy configuration for Granola meeting data. Use when reviewing data handling practices, configuring encryption, ensuring SOC 2/GDPR compliance, or securing meeting recordings. Trigger: "granola security", "granola privacy", "granola encryption", "granola SOC 2", "granola GDPR", "secure granola".Votes: 0GitHub stars: 4