Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,775
pages available: 1,241

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 12,145–12,168 of 29,775 skills

VerboseACryptography rarely fails at the primitive — it fails at the seams, in how the pieces are wired together. Name the property you need, then pick the primitive that provides exactly that.securitypythongoVotes: 0GitHub stars: 2
MinimalAChoose the right cryptographic primitive for a job, and use it with the parameters that make it safe. Never design your own.securitypythongoVotes: 0GitHub stars: 2
MinimalBReduce what a container can do and what it contains, so that code execution inside it yields as little as possible.securitypythonshellVotes: 0GitHub stars: 2
VerboseAScope is the first and most consequential decision in an assessment. It determines which systems an auditor examines, how much evidence you must produce, and how long remediation takes. Get it wrong in either direction and the assessment fails: too narrow and it collapses when the auditor traces a data flow you excluded; too broad and you spend a year evidencing systems that never touch regulated data.securityrustgoVotes: 0GitHub stars: 2
MinimalALay out VPCs, subnets, routing, and private connectivity so traffic reaches only what it should — without paying a fortune to cross an availability-zone boundary.securitydatabasesecurityVotes: 0GitHub stars: 2
VerboseAAuthentication starts with never holding the secret you are checking. Store a verifier — a slow, salted hash — not the password.securitypythonrustVotes: 0GitHub stars: 2
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
MinimalADesign authentication that proves who a user is, without leaking credentials or sessions.securityjavascriptpythonVotes: 0GitHub stars: 2
VerboseAAn API has no UI to hide things behind. Every identifier a client has ever seen is an identifier it can replay against every endpoint. The dominant API vulnerability class — broken object-level authorization — is not a missing authentication check; the attacker is fully authenticated as themselves.securitypythonrustVotes: 0GitHub stars: 2
MinimalAIdentify and close the failure modes specific to APIs — where the caller is a program, every endpoint is directly reachable, and the UI enforces nothing.securitypythonsqlVotes: 0GitHub stars: 2
MinimalAConcrete configuration that shrinks an API's attack surface at the edge and in the runtime — transport, CORS, limits, headers, and egress.securitypythongoVotes: 0GitHub stars: 2
Threat ModelingAEvery methodology — STRIDE, PASTA, LINDDUN, attack trees — is a technique forsecurityrustgoVotes: 0GitHub stars: 2
Object Storage PatternsAAlmost every object-storage mistake comes from carrying filesystem instincts intosecuritygonodeVotes: 0GitHub stars: 2
Api SecurityAAn API has no UI to hide things behind.securitypythonrustVotes: 0GitHub stars: 2
Agent Zero TrustAExpert en architecture zero trust (identity-based, micro-segmentation, ZTNA, BeyondCorp)securityrustgoVotes: 0GitHub stars: 6
Agent Voice Cloning LegalAExpert en aspects légaux du clonage vocal (consentement, licensing, lois deepfake, réglementations, contexte DZ)securityvueawsVotes: 0GitHub stars: 6
Agent Threat IntelligenceAExpert en threat intelligence (MITRE ATT&CK, IOCs, CTI, threat hunting, dark web)securitygitsecurityVotes: 0GitHub stars: 6
Agent Threat Intelligence V2AThreat intelligence v2 — MITRE ATT&CK, IOCs, CTI, threat hunting, dark web monitoringsecurityrustgitVotes: 0GitHub stars: 6
Agent Telemedicine PlatformATelemedicine Platform Specialist IA — Expert en plateformes de télémédecine (video conferencing, EHR, HIPAA, remote monitoring)securityapisecurityVotes: 0GitHub stars: 6
Agent Security AuditorASecurity Auditor IA — Expert en sécurité (OWASP, pentesting, SAST/DAST, compliance, secrets management)securitypythonsqlVotes: 0GitHub stars: 6
Agent Security Auditor V3ASecurity auditor v3 — OWASP, pentesting, compliance, risk assessment, remediation, ISO 27001securitytestingsecurityVotes: 0GitHub stars: 6
Agent Securite Red TeamASécurité & Red Team IA — Expert en sécurité offensive et défensive pour agents IA. Pentesting, jailbreak, durcissement VPS, audit de configuration.securitygodockerVotes: 0GitHub stars: 6
Agent Securite Red Team V2ASecurity red team v2 — pentesting, OWASP, exploit dev, reporting DZsecuritydockertestingVotes: 0GitHub stars: 6
Agent Secrets ManagementAExpert en gestion des secrets (Vault, Doppler, SOPS, sealed secrets, rotation)securitynodekubernetesVotes: 0GitHub stars: 6
Agent Secrets Management V2ASecrets management v2 — Vault, Doppler, SOPS, sealed secrets, rotation, audit, zero-trustsecurityrustdockerVotes: 0GitHub stars: 6