All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,770
- 1,241
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 10,393–10,416 of 29,770 skills
- Evil User StoriesThreat-model a feature described as a user story. Generates evil user stories (AS/I/SO format) mapped to MITRE CWE weaknesses, each paired with a concrete security control. Use when a user story describes a new feature to build (upload, email, search, API, auth, archive, etc.) and the goal is to identify what security controls must be implemented.Votes: 0GitHub stars: 4
- EvidenceCollect and store point-in-time compliance evidence snapshots for audit trail.Votes: 0GitHub stars: 4
- Evernote Security BasicsImplement security best practices for Evernote integrations. Use when securing API credentials, implementing OAuth securely, or hardening Evernote integrations. Trigger with phrases like "evernote security", "secure evernote", "evernote credentials", "evernote oauth security".Votes: 0GitHub stars: 4
- Eu Ai ActAssess EU AI Act compliance — risk classification, prohibited uses, high-risk requirements, transparencyVotes: 0GitHub stars: 4
- Etsy Listing PublisherPublishes draft Etsy listings live via Etsy API v3 with mandatory compliance gates. Use when the user wants to publish an Etsy listing, push a draft live, or activate an inactive listing. Validates required fields, applies AI Disclosure tag where required, sets shipping profile + return policy + production partner. Refuses to publish if compliance gaps exist. Defaults to draft mode — operator must confirm before going live.Votes: 0GitHub stars: 4
- Ethics CommitteeAct as a research ethics committee — stress-test a protocol the way an IRB / REC / HREC would. Reviews informed consent, risk-benefit balance, vulnerable populations, data privacy, deception, debriefing, payment, dual-use risks, AI/LLM use in research, and equity in recruitment. Produces a committee-style decision letter with required revisions, recommended changes, and approval pathway. Useful before IRB submission, when responding to IRB feedback, when drafting ethics sections of a paper or...Votes: 0GitHub stars: 4
- Error Handling ReviewerReview test cases for OAuth/OIDC error handling. Covers authorization endpoint errors, token endpoint errors, error response formats, HTTP status codes, and all error codes per OAuth 2.1 and OIDC Core 1.0.Votes: 0GitHub stars: 4
- Erforderlichkeit DokumentierenPruefe die Erforderlichkeit der Offenlegung von Berufsgeheimnissen gegenueber dem KI-Dienstleister nach Absatz eins der einschlaegigen Dienstleisterregelung (BRAO StBerG WPO PAO BNotO). Bezugspunkt ist nach DAV-Stellungnahme zweiunddreissig der Zweck der Offenlegung nicht die KI-Strategie der Kanzlei. Erstelle einen internen Compliance-Vermerk mit Beurteilungsspielraum und Grenzen.Votes: 0GitHub stars: 4
- Eresus Threat ModelerThreat modeling skill for new features, services, endpoints, or repositories. Trigger when the user asks to: "threat model this", "analyze attack surface", "find abuse cases", "map trust boundaries", "prioritize security review", or wants a structured security design review before or alongside coding. Complements eresus-sast-scanner by turning architecture into a prioritized scan plan.Votes: 0GitHub stars: 4
- Eresus Serialization ReviewSerialization and deserialization security review skill for object mappers, parser pipelines, message formats, and state transfer mechanisms. Trigger when the user asks to: "review serialization security", "check deserialization", "audit Jackson/Fastjson/YAML/XML parsing", "look for gadget-chain risk", "review session or message deserialization", or wants a focused audit of parser-driven attack surface. Complements eresus-sast-scanner with a deep dive on serialization abuse paths.Votes: 0GitHub stars: 4
- Eresus Sast ScannerGeneral-purpose Static Application Security Testing (SAST) skill for code vulnerability analysis. Trigger when the user asks to: "analyze code for vulnerabilities", "review code security", "find security bugs", "do a SAST scan", "check for [vulnerability type] in code", "audit source code", or requests a security code review of any language or framework. Covers 34 vulnerability classes across web, API, auth, mobile, and logic layers.Votes: 0GitHub stars: 4
- Eresus RemediatorSecurity remediation skill for fixing confirmed or likely SAST findings in source code. Trigger when the user asks to: "fix a vulnerability", "patch this security bug", "remediate SAST findings", "harden this endpoint", "make this auth flow safe", or wants code changes that remove a confirmed security issue while preserving intended behavior. Best used alongside eresus-sast-scanner.Votes: 0GitHub stars: 4
- Eresus Python AuditDeep Python-specific security audit skill with 50+ vulnerability class coverage across 7 categories. Trigger when auditing Python code: "audit this Python app", "find Python security issues", "check Flask/Django for vulnerabilities", "Python SAST review", "check for pickle vulnerabilities", "review this FastAPI code". Covers misconfiguration, injection, crypto, XSS, deserialization, and ML/AI attack surfaces. Includes scripts/rules.json for programmatic rule lookup.Votes: 0GitHub stars: 4
- Eresus Pr Security ReviewSecurity-focused pull request and diff review skill for finding newly introduced vulnerabilities, risky regressions, and missing security tests in changed code. Trigger when the user asks to: "review this PR for security", "check this diff for vulns", "do a security code review", "audit changed files", or wants findings on a patch instead of a full-repo scan. Best used alongside eresus-sast-scanner.Votes: 0GitHub stars: 4
- Eresus Php AuditDeep PHP-specific security audit skill covering injection, deserialization, file operations, auth bypass, POP chain discovery, and CMS-specific patterns. Trigger when auditing PHP code: "audit this PHP app", "find PHP security issues", "check Laravel/WordPress for vulnerabilities", "PHP SAST review", "check for PHP deserialization", "review this WordPress plugin". Includes scripts/rules.json for programmatic rule lookup.Votes: 0GitHub stars: 4
- Eresus Deser AuditDeserialization vulnerability audit skill with gadget chain knowledge for all major languages. Trigger when the user asks to: "audit deserialization", "check for insecure deserialization", "find pickle vulnerabilities", "Marshal.load audit", "gadget chain analysis", "check for unsafe YAML loading", or when reviewing code that processes serialized data (JSON with type info, YAML, XML, binary formats).Votes: 0GitHub stars: 4
- Equilateral Agents22 production-ready AI agents with database-driven orchestration for security reviews, code quality analysis, deployment validation, infrastructure checks, and compliance. Auto-activates for security concerns, deployment tasks, code reviews, quality checks, and compliance questions. Includes upgrade paths to enterprise features (GDPR, HIPAA, multi-account AWS, ML-based optimization).Votes: 0GitHub stars: 4
- Environment Configuration SkillEnvironment variables, setup procedures, API configurations, and security for the omer-akben portfolio. Use when setting up the project, configuring services, or troubleshooting environment issues.Votes: 0GitHub stars: 4
- EnvaultOfficial AI Agent Skill for Envault Secrets Management platform. Enforces strict zero-hardcode rules, Client-Side Encryption, and Human-in-the-Loop (HITL) approval workflows.Votes: 0GitHub stars: 4
- Env Update SecretsUse when updating environment secrets like GITHUB_TOKEN, NPM_TOKEN, or API keys on the user's machineVotes: 0GitHub stars: 4
- Enumerating Network ServicesEnumerate and exploit network services including SMB, FTP, SSH, RDP, HTTP, databases (MySQL, MSSQL, PostgreSQL, MongoDB), LDAP, NFS, DNS, and SNMP. Use when testing network service security or performing port-based exploitation.Votes: 0GitHub stars: 4
- Encrypting And Decrypting DataValidate encryption implementations and cryptographic practices. Use when reviewing data security measures. Trigger with 'check encryption', 'validate crypto', or 'review security keys'.Votes: 0GitHub stars: 4
- Encrypt And Decrypt Age Secrets With Hardware Backed Yubikey IdeUse age-plugin-yubikey when an agent needs age encryption tied to a physical YubiKey identity instead of software-only keys.Votes: 0GitHub stars: 4
- Email SenderSend and read emails via SMTP/IMAP using configured accounts (Web.de, Gmail, etc.). Supports plain text, HTML emails, attachments, CC/BCC, IMAP reading, searching, thread tracking, and summarization. Features retry-logic, timeout handling, and proper logging. Uses credentials from .env file.Votes: 0GitHub stars: 4