Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,770
pages available: 1,241

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 11,161–11,184 of 29,770 skills

Cc Skill Security ReviewAUse this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist a...securitytypescriptbashVotes: 0GitHub stars: 36
Find BugsAFind bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.securitygosqlVotes: 0GitHub stars: 36
Aws Penetration TestingBThis skill should be used when the user asks to \"pentest AWS\", \"test AWS security\", \"enumerate IAM\", \"exploit cloud infrastructure\", \"AWS privilege escalation\", \"S3 bucket testing...securitypythonshellVotes: 0GitHub stars: 36
Hubspot IntegrationAExpert patterns for HubSpot CRM integration including OAuth authentication, CRM objects, associations, batch operations, webhooks, and custom objects. Covers Node.js and Python SDKs. Use when: hubs...securitypythonnodeVotes: 0GitHub stars: 36
Security HardeningAThis skill activates when users discuss WordPress security, OWASP vulnerabilities, CSP headers, XSS prevention, SQL injection, or security hardening. Provides guidance on securing WordPress themes and applications following OWASP Top 10 best practices.securityjavascriptrustVotes: 0GitHub stars: 3
Fail Closed AuditAUse when reviewing any gate, guard, validator, or permission check — audit that it FAILS CLOSED (absent input/config/token/manifest → block, never pass). Prevents the fail-open pattern (bug-230) where a gate silently succeeds because its input is missing.securityrustgoVotes: 0GitHub stars: 3
Skills DirectorySkills Directory Pro Download any skill as a ZIP for Claude.ai, Claude Desktop, or .claude/skills.See Pro
Ops ComplianceACheck codebases against compliance frameworks (SOC2, GDPR, HIPAA, PCI-DSS). Generates compliance reports with pass/fail status and remediation guidance.securitygobashVotes: 0GitHub stars: 6
Mailbox MiningAMine a mailbox into the typed contact graph under an enforced export-control and PII redaction contract, and gate outbound career mail behind a mandatory /ask roundtable. Mailbox access is delegated entirely to /gmail; this skill adds only what /gmail does not own — what may enter a searchable knowledge graph, and what must happen before a message is sent. Use when an agent needs warm contacts from email, referral paths, reply outcomes for tracked outreach, or validation of an outbound draft ...securitypythonrustVotes: 0GitHub stars: 6
HackAContainerized hardening validation and authorized security auditing tools. All operations run in isolated Docker containers for safety.securitypythonrustVotes: 0GitHub stars: 6
Github SearchADeep GitHub repository and code search. For implementation research, uses the sibling brave-search skill to discover candidates, ranks them by requested criteria, stars, and relevance, clones the leaders to /tmp, verifies a detected entry point, then locates and evaluates the requested code.securitypythonrustVotes: 0GitHub stars: 6
Evidence Case LabASelf-improving evidence case convergence loop. Runs question banks against /create-evidence-case, diagnoses mismatches, and tracks convergence across cycles.securitygobashVotes: 0GitHub stars: 6
DogpileADeep research aggregator that searches Brave (Web), GitHub (Code/Issues), ArXiv (Papers), YouTube (Videos), optional Context7 library docs, and optional feed/archive/book sources. Provides a consolidated Markdown report with an ambiguity check, grounded synthesis, and Agentic Handoff.securitypythonrustVotes: 0GitHub stars: 6
Cui MarkerADetect, classify, and mark Controlled Unclassified Information (CUI) per 32 CFR Part 2002. Scans documents and ArangoDB collections for CUI indicators, applies proper markings, and tracks CUI flow through the system.securitygobashVotes: 0GitHub stars: 6
Create Gsn DiagramAGSN (Goal Structuring Notation) diagrams + OMG SACM 2.2 XML export from compliance graph. Supports taxonomy context mapping (Mind tags → SACM Context nodes), OSCAL evidence linking, and Lean4 proof references.securitygobashVotes: 0GitHub stars: 6
Cmmc AssessorAAssess CMMC Level 2/3 compliance by mapping NIST SP 800-171 controls to Embry OS features and detected configurations. Generates gap analysis reports.securitygosecurityVotes: 0GitHub stars: 6
Best Practices SecurityAGeneral application, service, plugin, and agent security hardening baseline. Use before /hack, /security-scan, /code-runner probe generation, or security review. Grounded in OWASP ASVS, OWASP Cheat Sheet Series, Node.js security guidance, and agent/plugin trust-boundary lessons.securityrustgoVotes: 0GitHub stars: 6
BattleARed vs Blue team security competition orchestrator. Runs long-running overnight battles with 1000s of interactions, scoring, and insight generation.securitypythonrustVotes: 0GitHub stars: 6
Sr BrainstormAPhase 1 of the SRS workflow. User gives a project topic → AI runs a deep, categorized brainstorm (5 mandatory rounds) to fully understand actors, features, scope boundary, tech constraints, and business rules before writing anything.securitygosecurityVotes: 0GitHub stars: 19
Sr BrainstormAPhase 1 of the SRS workflow. User gives a project topic → AI runs a deep, categorized brainstorm (5 mandatory rounds) to fully understand actors, features, scope boundary, tech constraints, and business rules before writing anything.securitygosecurityVotes: 0GitHub stars: 19
Backend MindsetABuild robust backend systems — APIs (REST, GraphQL, gRPC), authentication (OAuth 2.1, JWT), databases, performance optimization, security (OWASP Top 10), scalability patterns (microservices, caching, sharding), and testing. Use when designing APIs, implementing auth, optimizing queries, handling security vulnerabilities, building microservices, or developing production-ready backend systems.securitytestingrefactoringVotes: 0GitHub stars: 19
Sr SpecAPhase 2 of the SRS workflow. Reads projects/{slug}/brainstorm.md and writes a comprehensive spec.md. No word limit.securitygoapiVotes: 0GitHub stars: 19
Sr BrainstormAPhase 1 of the SRS workflow. User gives a project topic → AI runs a deep, categorized brainstorm (5 mandatory rounds) to fully understand actors, features, scope boundary, tech constraints, and business rules before writing anything.securitygosecurityVotes: 0GitHub stars: 19
Backend MindsetABuild robust backend systems — APIs (REST, GraphQL, gRPC), authentication (OAuth 2.1, JWT), databases, performance optimization, security (OWASP Top 10), scalability patterns (microservices, caching, sharding), and testing. Use when designing APIs, implementing auth, optimizing queries, handling security vulnerabilities, building microservices, or developing production-ready backend systems.securitytestingrefactoringVotes: 0GitHub stars: 19
Sr SpecAPhase 2 of the SRS workflow. Reads projects/{slug}/brainstorm.md and writes a comprehensive spec.md. No word limit.securitygoapiVotes: 0GitHub stars: 19