Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,770
pages available: 1,241

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 10,513–10,536 of 29,770 skills

CryptotokenkitAAccess security tokens and smart cards using CryptoTokenKit. Use when building token driver extensions with TKTokenDriver and TKToken, communicating with smart cards via TKSmartCard, implementing certificate-based authentication, managing token sessions, or integrating hardware security tokens with the system keychain.securityrustgoVotes: 0GitHub stars: 4
CryptokitAPerform cryptographic operations using Apple CryptoKit. Use when hashing data with SHA256/SHA384/SHA512, generating HMAC authentication codes, encrypting with AES-GCM or ChaChaPoly, signing with P256/P384/P521/Curve25519 keys, performing ECDH key agreement, storing keys in the Secure Enclave, or migrating from CommonCrypto to CryptoKit.securitygoswiftVotes: 0GitHub stars: 4
Crypto Primitive SelectionADecision-aid skill for choosing cryptographic primitives (AEAD, KDF, MAC, signature) and identifying anti-patterns (CBC-without-MAC, ad-hoc KDF, key reuse, PBKDF2-on-high-entropy, openssl enc without explicit flags)securitypythonrustVotes: 0GitHub stars: 4
CryptACryptographic architecture design: algorithm selection, key management, E2EE, KMS integration, signature verification, and TLS configuration.securitygoawsVotes: 0GitHub stars: 4
Crewai Task And Tool DesignAUse when an approved ai-architecture.md defines CrewAI tasks or callable tools. Produces task decomposition, tool schemas, an auth-enforcing execution adapter, idempotency, audit logging, and failure tests. Not for crew topology, retrieval design, or provider SDK work.securityrustapiVotes: 0GitHub stars: 4
CredentialsAn8n credential types, REST API credential management, HTTP Request node authentication, predefinedCredentialType vs genericCredentialType, httpCustomAuth JSON format, credential creation via API, credential testing, credential type discovery, OAuth flows, and service-specific credential schemas. Auto-triggers on n8n credential, httpCustomAuth, predefinedCredentialType, genericCredentialType, credential API, credential test, OAuth, and HTTP Request auth tasks.securitygobashVotes: 0GitHub stars: 4
Skills DirectorySkills Directory 3 slots · $399/mo · one ad per page · sponsors can never buy grades.See placements
Credential VaultDSecure API key management for Claude Code — encrypted storage, auto-rotation, leak detection, safe injectionsecuritygoshellVotes: 0GitHub stars: 4
Creating Secrets Using Best PracticesACreates and manages secrets in AWS Secrets Manager following security best practices. Always use this skill when creating secrets — it sets up dedicated KMS encryption keys, automatic rotation, least-privilege IAM policies, CloudTrail auditing, and lifecycle management that are essential for production-grade secret handling.securityawsapiVotes: 0GitHub stars: 4
Create Threat ModelAAnalyze a codebase and produce a structured threat model at .turbo/threat-model.md covering assets, trust boundaries, attack surfaces with existing mitigations, attacker stories, and calibrated severity. Use when the user asks to \"create a threat model\", \"threat model\", \"threat model this codebase\", \"security analysis\", \"analyze the attack surface\", \"what are the threats\", or \"identify security risks\".securityrustgoVotes: 0GitHub stars: 4
Create Associate NsgACreates a new Network Security Group and associates it with the specified subnets and/or NICs of a Virtual Network.securityshellazureVotes: 0GitHub stars: 4
Cosmian KmsCExpert guidance for Cosmian Key Management System including key generation, certificate management, encryption operations, access policies, and KMS CLI operations. Use this when working with Cosmian KMS, cryptographic key management, or Cosmian-specific PKI operations.securitypythongoVotes: 0GitHub stars: 4
Coreweave Security BasicsASecure CoreWeave deployments with RBAC, network policies, and secrets management. Use when hardening GPU workloads, managing model access, or configuring namespace isolation. Trigger with phrases like "coreweave security", "coreweave rbac", "secure coreweave", "coreweave secrets".securitytypescriptbashVotes: 0GitHub stars: 4
Convention Security HardeningA보안 강화(Security Hardening) 컨벤션 참조 스킬. 입력 검증, SQL injection 방지, XSS 방지, 암호화, 권한 관리 등 프로덕션 배포 전 필수 보안 조치를 제공한다.securitypythongoVotes: 0GitHub stars: 4
Container Image Vulnerability ScannerAScans Docker and OCI container images for vulnerabilities using Trivy JSON output and the Docker Hub API v2 for image metadata. Analyzes base image layers via Syft SBOM generation and maps CVEs to fixed versions using the Alpine SecDB and Debian Security Tracker APIs.securitygodockerVotes: 0GitHub stars: 4
Container AuditBAudit Dockerfiles and docker-compose files for base image, user privileges, secret leaks, layer efficiency, signal handling, healthchecks, and compose safety. One sub-agent per Dockerfile. Static, live (Trivy/Grype), and apply modes.securityrustgoVotes: 0GitHub stars: 4
Contabo Security HardeningAAdvisory skill for hardening Contabo infrastructure security: SSH key management via secret IDs, default root and admin user policy, firewall posture review, OAuth2 credential hygiene including token short TTL and environment variable storage, and x-request-id UUIDv4 traceability for audit compliance. Use when the user needs to assess or improve Contabo instance or API security posture.securitygoterraformVotes: 0GitHub stars: 4
Connect GcpAConnect to a GCP project, validate credentials, and discover what services are in use.securitypythongoVotes: 0GitHub stars: 4
Connect AzureAConnect to an Azure subscription, validate credentials, and discover what services are in use.securitypythonbashVotes: 0GitHub stars: 4
Connect AwsAConnect to an AWS account, validate credentials, and discover what services are in use.securitypythonbashVotes: 0GitHub stars: 4
Configuring Vpc Endpoints For Private Aws Service AccessAConfigures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3, DynamoDB, and other AWS services without internet gateway, NAT device, or public IP addresses. Covers endpoint creation, security groups, route tables, and DNS configuration.securityawssecurityVotes: 0GitHub stars: 4
Compliance ReportABuild a compliance bundle — CycloneDX SBOM, SPDX license report, SARIF findings, OpenVEX/CycloneDX VEX, optional cosign signatures, manifest.json with SHA-256 sums, Markdown index. Use when assembling an audit bundle, SOC 2 attestation, supply-chain compliance package, or evidence for a customer security questionnaire.securitygobashVotes: 0GitHub stars: 4
Compliance Regelsatz ErstellenAErzeugt einen standardisierten Compliance-Regelsatz für den KI-Einsatz in Kanzleien mit zehn konkreten Geboten: kein Privat-Account, keine Mandatsdaten ohne Anonymisierung, keine PDF-Uploads ohne AVV, Korrekturlesung als Pflicht sowie Kennzeichnung KI-generierter Inhalte.securityVotes: 0GitHub stars: 4
Compliance MappingAMaps accessibility audit results to legal frameworks — Section 508, EN 301 549, EAA, ADA, AODA. Generates VPAT 2.5 tables, identifies non-WCAG requirements.securitygoVotes: 0GitHub stars: 4
Compliance And AuditAUse when a project requires a compliance framework mapping, when risks need formal documentation, when audit evidence must be collected, or when producing a compliance attestation before release. Applies to SOC 2, ISO 27001, GDPR, PCI DSS, NIST CSF, and DORA.securityrustgoVotes: 0GitHub stars: 4