All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,761
- 1,241
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 10,585–10,608 of 29,761 skills
- Broker Api Credentials To Ai Agents Without Exposing Raw Keys UsStore credentials once, then inject them into outbound agent requests at runtime so agents can call services without receiving raw secrets.Votes: 0GitHub stars: 4
- Brightdata Security BasicsApply Bright Data security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Bright Data security configuration. Trigger with phrases like "brightdata security", "brightdata secrets", "secure brightdata", "brightdata API key security".Votes: 0GitHub stars: 4
- BreachRed team engineering agent. Designs attack scenarios, builds threat models, applies MITRE ATT&CK/OWASP frameworks, runs Purple Team exercises, and performs AI/LLM red teaming. Use when adversarial security validation is needed.Votes: 0GitHub stars: 4
- Boutique Stored ValuesPersist individual values with Boutique's @StoredValue (UserDefaults) and @SecurelyStoredValue (Keychain), including set, reset, toggle, bindings, keypath setters, array and dictionary helpers, and async observation. Use when storing preferences, settings, feature flags, or sensitive data like auth tokens.Votes: 0GitHub stars: 4
- Bosskuai Tenant Isolation SecurityUse this for multi-tenant data isolation, organization scoping, cross-tenant leaks, authorization boundaries, row-level access, and SaaS tenant security review.Votes: 0GitHub stars: 4
- Bosskuai Prompt Injection DefenseUse this for prompt injection, tool abuse, memory poisoning, untrusted document handling, agent permissions, and AI workspace security.Votes: 0GitHub stars: 4
- Bosskuai Cybersecurity RiskUse this for cybersecurity review, privacy, abuse-case analysis, auth and authorization concerns, trust boundaries, fraud risk, and operational risk evaluation.Votes: 0GitHub stars: 4
- Bosskuai Agent Security HardeningUse this for securing AI-agent workspaces themselves, including instruction files, MCP setups, memory, external content, prompt-injection surfaces, and least-privilege configuration.Votes: 0GitHub stars: 4
- Borgbackup Deduplicating Encrypted BackupBorgBackup (Borg) is a deduplicating backup program with optional compression and authenticated encryption. It uses content-defined chunking for space-efficient daily backups, making it ideal for automating secure incremental backups to local or remote SSH targets.Votes: 0GitHub stars: 4
- Bog Payment GatewayBank of Georgia (BOG) Payment Gateway API integration for accepting online payments. Use this skill when implementing BOG payment processing, creating payment orders, handling refunds, checking payment status, or integrating with BOG's OAuth authentication. Triggers include mentions of BOG, Bank of Georgia, Georgian payments, ipay.ge, or requests for payment gateway integration in Georgia.Votes: 0GitHub stars: 4
- Bmad PipelineOrchestriert den kompletten BMAD-Entwicklungszyklus als automatische Pipeline: bmad-create-story → bmad-testarch-atdd → bmad-dev-story → bmad-testarch-test-review → bmad-code-review → bmad-security-review (Kassandra, conditional), jeweils in frischem Kontext. Führt git add nach dev-story aus. Der Code-Review-Skill fixt Minor Issues selbst ("fixe minor issues instantly"). Pausiert nur bei Major/Critical Issues (User-Entscheidung), am Epic-Ende zwingend mit Kassandra-Security-Review und danach ...Votes: 0GitHub stars: 4
- Block Agent Egress Mcp Prompt Injection And Secret ExfiltrationPut an inline firewall and containment layer in front of agent network traffic, tool calls, and MCP traffic before you trust an agent with local secrets.Votes: 0GitHub stars: 4
- Bicep Security ScannerScans Azure Bicep templates for security misconfigurations and compliance violations. Detects issues like public endpoints, missing encryption, overly permissive access, disabled logging, and insecure defaults. Produces a prioritized findings report with remediation guidance. USE FOR: Bicep security review, IaC security scanning, Azure resource hardening, pre-deployment security checks, compliance validation.Votes: 0GitHub stars: 4
- Best HackerThe hacker mindset - finding vulnerabilities and breaking systems to make them strongerVotes: 0GitHub stars: 4
- Benchmark Prompt Injection Attacks Defenses And Recovery PipelinRun structured prompt-injection attack and defense experiments against an LLM-integrated app before production by measuring attack success and testing detection or recovery pipelines.Votes: 0GitHub stars: 4
- Bearer Cli Sast Code Security Privacy ScannerBearer CLI is an open-source static application security testing (SAST) tool that scans source code to identify, filter, and prioritize security vulnerabilities and privacy risks. Covers OWASP Top 10 and CWE Top 25 with data flow analysis across multiple languages.Votes: 0GitHub stars: 4
- BattleRed vs Blue team security competition orchestrator. Runs long-running overnight battles with 1000s of interactions, scoring, and insight generation.Votes: 0GitHub stars: 4
- Baseline KitOpenClaw 安全配置基线生成器和审计工具。生成开发/团队/企业/隔离环境的安全配置模板，并审计现有配置的安全问题（网络暴露、认证限流、技能来源限制、审计日志、备份策略、密钥卫生）。Votes: 0GitHub stars: 4
- Bamboohr Security BasicsApply BambooHR security best practices for API keys, webhook verification, and PII data handling compliance. Use when securing API keys, implementing webhook signature validation, or handling sensitive employee data from BambooHR. Trigger with phrases like "bamboohr security", "bamboohr secrets", "secure bamboohr", "bamboohr PII", "bamboohr data protection".Votes: 0GitHub stars: 4
- Bamboohr Install AuthInstall and configure BambooHR API authentication with HTTP Basic Auth. Use when setting up a new BambooHR integration, configuring API keys, or initializing BambooHR REST API access in your project. Trigger with phrases like "install bamboohr", "setup bamboohr", "bamboohr auth", "configure bamboohr API key", "bamboohr credentials".Votes: 0GitHub stars: 4
- Backup And Disaster RecoveryPlan and run backups, set recovery objectives, and run disaster recovery drills. Use this skill when defining RPO/RTO targets, designing backup architecture, deciding what to back up and how often, planning for full-region or platform outages, or running a restoration drill. Triggers on backup, restore, RPO, RTO, disaster recovery, DR, business continuity, what if the database is gone, what if our hosting goes down, recovery drill, ransomware planning. Also triggers when an incident reveals a...Votes: 0GitHub stars: 4
- Backend Authz AuditUse this skill to audit backend authorization, IDOR, ownership checks, and tenant isolation. Do not use it for smart contracts or legal contract review.Votes: 0GitHub stars: 4
- Azure Waf Security ReviewReview Azure workload security posture against the Well-Architected Framework Security pillar: identity and access, network boundaries, data protection, threat detection, DevSecOps maturity, and policy compliance.Votes: 0GitHub stars: 4
- Azure Security Posture HardeningUse this skill for Azure security posture review, baseline hardening, managed identity adoption, Key Vault posture, private access decisions, Azure Policy guardrails, and logging or audit gap analysis. Trigger when the user asks how to harden an Azure workload or platform without defaulting to broad access or public exposure.Votes: 0GitHub stars: 4