Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,761
pages available: 1,241

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 10,609–10,632 of 29,761 skills

Azure Entra Id SpecialistAUse this skill for Microsoft Entra ID specialist work, especially Conditional Access, authentication methods, MFA and SSPR registration, identity protection, workload identities, app registrations, external identities, agent identities, break-glass posture, and tenant identity control reviews.securitygoazureVotes: 0GitHub stars: 4
Axiom ShippingAUse when preparing ANY app for submission, handling App Store rejections, writing appeals, or managing App Store Connect. Covers submission checklists, rejection troubleshooting, metadata requirements, privacy manifests, age ratings, export compliance.securitygoswiftVotes: 0GitHub stars: 4
Axiom SecurityAUse when storing credentials securely, encrypting data, implementing passkeys, code signing, or managing certificates and provisioning profiles.securitygoswiftVotes: 0GitHub stars: 4
Axiom Scan Security PrivacyAUse when the user mentions security review, App Store submission prep, Privacy Manifest requirements, hardcoded credentials, or sensitive data storage.securityrustgoVotes: 0GitHub stars: 4
Axiom DataAUse when working with ANY data persistence, database, storage, CloudKit, migration, or serialization. Covers SwiftData, Core Data, GRDB, SQLite, CloudKit sync, file storage, Codable, migrations.securityswiftsqlVotes: 0GitHub stars: 4
Aws Security Posture HardeningAReview broad AWS security posture across Security Hub CSPM, GuardDuty, Inspector, Macie, Config, CloudTrail, IAM, public exposure, vulnerability findings, and remediation governance. Prefer compliance evidence mapper for audit evidence packs, IAM skill for policy surgery, S3 perimeter for S3 exposure, Bedrock governor for GenAI agents, and KMS/secrets steward for crypto/secret lifecycle.securitygoawsVotes: 0GitHub stars: 4
Skills DirectorySkills Directory 3 slots · $399/mo · one ad per page · sponsors can never buy grades.See placements
Aws Network And Identity FoundationAUse when designing, reviewing, or hardening the in-account AWS network and identity foundation after account topology exists and security and infrastructure-platform have decided trust zones and the identity model. Produces VPC topology (per-env, per-tier, multi-AZ subnets), inter-account connectivity (Transit Gateway / peering / PrivateLink), IAM Identity Center federation, IAM role-assumption patterns and permission boundaries, KMS CMK strategy, Secrets Manager with rotation, and Route 53 z...securityrustgoVotes: 0GitHub stars: 4
Aws Kms Secrets Lifecycle StewardAReview AWS KMS and Secrets Manager lifecycle posture across key policies, grants, rotation, multi-Region keys, imported key material, aliases, secret rotation, replication, caching, endpoint conditions, recovery, and break-glass access. Prefer this for cryptography/secret lifecycle; prefer IAM skill for general permissions review.securitygoawsVotes: 0GitHub stars: 4
Aws Iam Least Privilege ReviewAReview AWS IAM identity policies, trust policies, resource policies, permission boundaries, SCPs, session policies, role design, pass-role, federation, and Access Analyzer findings for least-privilege risk. Prefer KMS/secrets steward for key/secret lifecycle design and S3 perimeter governor for S3 exposure/data-perimeter posture unless the request is primarily policy surgery.securityrustgoVotes: 0GitHub stars: 4
Aws Generative Ai DeveloperABuild Amazon Bedrock and serverless generative AI applications using Lambda, API Gateway, Step Functions, EventBridge, S3, DynamoDB, SQS, Guardrails, and IAM. Prefer this for serverless GenAI app design and implementation; prefer aws-agentcore for AgentCore runtime, aws-bedrock-agent-security-governor for deep Bedrock security, and aws-serverless-production-readiness for final operational hardening.securitygobashVotes: 0GitHub stars: 4
Aws Compliance Evidence MapperAMap AWS compliance evidence for audits across Security Hub controls, AWS Config rules/conformance packs, Audit Manager assessments, evidence folders, manual evidence, AWS Artifact reports, CloudTrail, and control narratives. Use for evidence packaging and audit readiness, not general security hardening.securitygoawsVotes: 0GitHub stars: 4
Aws CloudformationAAuthor, validate, and troubleshoot AWS CloudFormation templates. Covers template authoring with secure defaults, pre-deployment validation (cfn-lint, cfn-guard, change sets), and root-cause diagnosis of failed stacks using CloudFormation events and CloudTrail correlation.securityrustgoVotes: 0GitHub stars: 4
Aws Cloudformation Drift Detector 4AMonitors AWS CloudFormation stacks for configuration drift using the AWS SDK DetectStackDrift and DescribeStackResourceDrifts APIs. Generates remediation templates and integrates with AWS Config rules for continuous compliance.securitygoawsVotes: 0GitHub stars: 4
Aws Bedrock Agent Security GovernorAReview Amazon Bedrock agents, AgentCore, Guardrails, knowledge bases, action groups, memory, MCP/tool integrations, prompt-injection and prompt-leakage defenses, PII handling, encryption, logging, observability, and least-privilege IAM. Use for AWS-native GenAI and agent security posture.securitygorailsVotes: 0GitHub stars: 4
Aws Api Edge Delivery ReviewAReview AWS API and edge delivery posture across API Gateway, CloudFront, AWS WAF, Shield, ALB, custom domains, TLS policies, authentication, authorization, throttling, quotas, caching, origin protection, logging, and abuse controls. Use when public APIs, web entry points, or edge delivery can affect security and availability.securitygoawsVotes: 0GitHub stars: 4
Awiki Agent Did MessageBVerifiable DID identity and end-to-end encrypted inbox for AI Agents. Built on ANP (Agent Network Protocol) and did:wba. Provides self-sovereign identity, Handle (short name) registration, content pages publishing, federated messaging, group communication, and HPKE-based E2EE — Web-based, not blockchain. Designed natively for autonomous Agents. Triggers: DID, identity, handle, profile, content, publish, page, inbox, send message, follow, group, E2EE, WebSocket, listener, search, find user. Pr...securitypythonrustVotes: 0GitHub stars: 4
Avg PrivacyAHelpt bij het bouwen van privacy-conforme systemen volgens de AVG (Algemene Verordening Gegevensbescherming / GDPR), Privacy by Design, Privacy by Default en DPIA-vereisten voor Nederlandse overheidsorganisaties. Biedt richtlijnen voor gegevensverwerking, rechten van betrokkenen, bewaartermijnen en technische privacy-maatregelen. Gebruik deze skill wanneer de gebruiker vraagt over 'AVG', 'GDPR', 'privacy', 'persoonsgegevens', 'personal data', 'gegevensbescherming', 'data protection', 'Privacy...securitypythongoVotes: 0GitHub stars: 4
Authz ReviewAUse when reviewing authorization end-to-end — route → gate → policy → query scope → response filter — before changes to permissions, tenants, ownership, or admin flows.securityrustgoVotes: 0GitHub stars: 4
Auth SecurityAOAuth 2.1 + JWT authentication security best practices. Use when implementing auth, API authorization, token management. Follows RFC 9700 (2025).securityjavascripttypescriptVotes: 0GitHub stars: 4
Auth ImplementANode.js Express 백엔드의 JWT 인증 시스템을 구현하는 스킬. 'auth 구현', '로그인 만들어줘', '회원가입 API', 'JWT 미들웨어', '인증 시스템 구현'처럼 인증/계정 관련 구현을 요청하면 이 스킬을 사용할 것. auth-builder 에이전트가 사용한다.securitybashsqlVotes: 0GitHub stars: 4
Auth Factor DesignADecision-aid skill for authentication factor architecture. Forces explicit have/know/are mapping, coercion-resistance analysis, FIDO2 PIN/UV policy, and identifies anti-patterns like Python deps in PRF hot pathssecuritypythonrustVotes: 0GitHub stars: 4
Auth ArchitectureALiteLLM-RS Authentication Architecture. Covers JWT + API Key + RBAC multi-method auth, rate limiting with DashMap, middleware pipeline, and secure credential management.securityrustgoVotes: 0GitHub stars: 4
AuditorAUse when: auditing a website URL or codebase, checking site health score, SEO audit, performance audit, security scan, accessibility audit, mobile audit, broken links, meta tags, structured data. Triggers: 'audit my website', 'check https://...', 'what's wrong with my site', 'site health', 'audit this URL', 'find issues on my site', 'check for SEO problems', 'run a full audit'.securitygosecurityVotes: 0GitHub stars: 4
Auditing Access ControlAAudit access control implementations for security vulnerabilities and misconfigurations. Use when reviewing authentication and authorization. Trigger with 'audit access control', 'check permissions', or 'validate authorization'.securityshellbashVotes: 0GitHub stars: 4