All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,770
- 1,241
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 11,185–11,208 of 29,770 skills
- Sr BrainstormPhase 1 of the SRS workflow. User gives a project topic → AI runs a deep, categorized brainstorm (5 mandatory rounds) to fully understand actors, features, scope boundary, tech constraints, and business rules before writing anything.Votes: 0GitHub stars: 19
- Backend MindsetBuild robust backend systems — APIs (REST, GraphQL, gRPC), authentication (OAuth 2.1, JWT), databases, performance optimization, security (OWASP Top 10), scalability patterns (microservices, caching, sharding), and testing. Use when designing APIs, implementing auth, optimizing queries, handling security vulnerabilities, building microservices, or developing production-ready backend systems.Votes: 0GitHub stars: 19
- Owasp Top 10Apply OWASP Top 10 to identify, assess, and mitigate security risks in systems, processes, and data handling.Votes: 0GitHub stars: 2
- Mitre AttckApply MITRE ATT&CK to identify, assess, and mitigate security risks in systems, processes, and data handling.Votes: 0GitHub stars: 2
- FedrampApply FedRAMP to identify, assess, and mitigate security risks in systems, processes, and data handling.Votes: 0GitHub stars: 2
- DoraApply DORA to manage ICT risk and operational resilience for EU financial entities, covering governance, incident reporting, resilience testing, third-party risk, and threat intelligence sharing.Votes: 0GitHub stars: 2
- Cis ControlsApply the CIS Controls to prioritize and implement a defensible set of cyber-defense actions — using Implementation Groups to scale safeguards to an organization's size and risk, starting from the highest-leverage controls.Votes: 0GitHub stars: 2
- Threat AnalystMonitors authorized threat intelligence feeds, attack patterns, and risk assessments to proactively identify emerging threats. Analyzes adversary TTPs using MITRE ATT&CK, NIST CSF, and ISO 27001 risk frameworks to inform defensive strategies and prevent incidents before they occur.Votes: 0GitHub stars: 2
- Security AuditorConducts comprehensive security audits of codebases, infrastructure, and architecture against ISO 27001, SOC 2, PCI-DSS, and NIST Cybersecurity Framework standards.Votes: 0GitHub stars: 2
- Security ArchitectDesigns secure systems, encryption strategies, and defense-in-depth security architecturesVotes: 0GitHub stars: 2
- Penetration TesterPerforms ethical hacking and security testing to identify vulnerabilities before malicious actors can exploit themVotes: 0GitHub stars: 2
- Incident ResponderHandles security breaches, forensics, and emergency response protocols to minimize damage and recover quicklyVotes: 0GitHub stars: 2
- Ethical HackerConducts authorized security testing to identify vulnerabilities, exploits, and attack vectors before malicious actors can exploit them. Follows strict ethical guidelines, responsible disclosure practices, and OWASP/MITRE frameworks to deliver safe, non-destructive security assessments.Votes: 0GitHub stars: 2
- Compliance OfficerEnsures regulatory compliance and industry security standards across the organizationVotes: 0GitHub stars: 2
- SecuritySecurity review and threat work — threat modeling, vulnerability assessment, penetration test, incident response, OWASP Top 10, LLM Top 10, API Top 10, CVE triage, STRIDE, NIST CSF, SBOM. Auto-loops on any task touching PII, auth, payments or regulated data.Votes: 0GitHub stars: 2
- Internal Compliance Risk Identification当需要对企业内部的合规管理体系进行系统性审查，识别制度缺漏、流程缺陷和数据隐私合规风险时触发此技能。 典型触发场景包括但不限于： - 企业委托律师或合规顾问进行内部合规风险评估 - 企业拟上市、并购或接受监管检查前进行合规自查 - 发生合规事件后，需要排查管理体系中的系统性缺陷 - 企业建立或更新合规管理体系时，需要评估现有制度与法律法规的匹配度 - 用户要求审查企业内部规章制度、核心业务流程或隐私政策协议的合规性 本技能覆盖三大审查维度：制度体系完整性审查、业务流程控制有效性审查、个人信息保护合规性审查。Votes: 0GitHub stars: 57
- Data Compliance Ai Rd围绕固定项目“数据合规AI项目 / 数据合规与AI应用探讨”做研发推进、范围收缩、知识库设计、工作流原型、验证标准、会议结论沉淀与 IMA 笔记同步。用户一旦在聊这个项目的 MVP、法规库、隐私政策审查、数据出境、任务分工、技术路线、验证指标、会议补充或新想法时，就应使用本 skill。Votes: 0GitHub stars: 57
- Compliance Review合规审查：对企业经营行为、合同条款、数据合规、劳动用工等事项进行法律合规分析Votes: 0GitHub stars: 57
- Identify Inconsistencies And Vulnerabilities In Prior Witness TestimonyImpeachment vulnerability memorandum focused on contradictory statements across multiple prior testimony forums, assessing false statement exposure in each forum, and analyzing the impact of inconsistencies on key defenses including good-faith reliance on professional advice.Votes: 0GitHub stars: 57
- Scenario 01Helps an agent review a contested divorce settlement proposal for asset characterization, support, tax, parenting, and release-language issues, with attention to quantification where the record permits and to preserving future enforcement and modification rights.Votes: 0GitHub stars: 57
- Draft Indenture For Auto Loan Abs TransactionDrafting a trust indenture for an auto loan ABS issuance by adapting a prior transaction template to a new structure that introduces a non-advancing servicer, turbo principal waterfall, and subordinated note class, while flagging structural issues that require resolution before the document is finalized.Votes: 0GitHub stars: 57
- Identify Issues In Estoppel CertificateGuides tenant-by-tenant review of estoppel certificates against lease abstracts, rent roll, and acquisition agreement requirements, identifying factual discrepancies, qualification language, and coverage gaps that affect closing conditions.Votes: 0GitHub stars: 57
- Draft Tenant Notification LetterGuides drafting of a tenant notification letter for an ownership and management transition by integrating closing documents, lease provisions, and renovation plans, while separately identifying legal risks and cross-document discrepancies in a companion advisory memo.Votes: 0GitHub stars: 57
- Draft ComplaintDrafting a federal complaint for trade secret misappropriation and breach of an employment agreement requires pleading each claim element with supporting factual specificity, satisfying the applicable trade secret statute's definitional requirements, and pairing the complaint with a separate strategic concerns memo.Votes: 0GitHub stars: 57