Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 32,009
pages available: 1,334

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 12,337–12,360 of 32,009 skills

Repo ForensicsFSecurity forensics for git repos, AI skills, and MCP servers. Audits dependencies, detects prompt injection, credential theft, runtime dynamism, manifest drift, known CVEs, CISA KEV (actively exploited) vulns, and 2026 attack patterns. Not for fixing vulnerabilities or pentesting.securitypythonrustVotes: 0GitHub stars: 4
Replit Security BasicsAApply Replit security best practices: Secrets management, REPL_IDENTITY tokens, Auth headers, and public Repl safety. Use when securing API keys, validating request identity, or auditing Replit security configuration. Trigger with phrases like "replit security", "replit secrets", "secure replit", "replit public safety", "replit identity token".securitytypescriptpythonVotes: 0GitHub stars: 4
Reopt CliBBaseline guidance for the reopt CLI — authentication, login, global flags, security rules, and exit codes. Use before other reopt CLI skills or whenever a task involves `reopt login`, `reopt status`, brandapp credentials, or CI automation.securitygoshellVotes: 0GitHub stars: 4
Remofirst Install AuthARemoFirst install auth — global HR, EOR, and payroll platform integration. Use when working with RemoFirst for global employment, payroll, or compliance. Trigger with phrases like "remofirst install auth", "remofirst-install-auth", "global HR API".securitypythonbashVotes: 0GitHub stars: 4
RemediateAGet interactive remediation guidance for compliance findings, including Terraform code and step-by-step instructions.securitypythonbashVotes: 0GitHub stars: 4
Remediate Pfx CertificatesASkill helps user to remove checked-in certificates from source code in case of exposed secretssecurityrustazureVotes: 0GitHub stars: 4
Skills DirectorySkills Directory 3 slots · $399/mo · one ad per page · sponsors can never buy grades.See placements
Release ReviewASenior developer-level release review for macOS/iOS apps. Identifies security, privacy, UX, and distribution issues with actionable fixes. Use when preparing an app for release, want a critical review, or before App Store submission.securityrustgoVotes: 0GitHub stars: 4
Red Team BundlerAInteractively prepares a targeted Red Team Review package. It conducts a brief discovery interview to determine the threat model, generates a strict security auditor prompt, compiles a manifest of relevant project files, and bundles them into a single Markdown artifact or ZIP archive ready for an external LLM (like Grok, ChatGPT, or Gemini) or a human reviewer.securitypythongoVotes: 0GitHub stars: 4
React SecurityAThis skill should be used when the user is securing a React application, asking about "XSS in React", "dangerouslySetInnerHTML security", "Server Actions security", "React data exposure", "sensitive data in React", "auth token storage", "IDOR in Next.js", "React security audit", "secure React forms", "Server Component secrets", "server-only package", "React taint API", "DOMPurify React", "prototype pollution React", "hardcoded secrets React", or reviewing React code for security vulnerabilities.securityjavascriptgoVotes: 0GitHub stars: 4
Ramp Security BasicsARamp security basics — corporate card and expense management API integration. Use when working with Ramp for card management, expenses, or accounting sync. Trigger with phrases like "ramp security basics", "ramp-security-basics", "corporate card API".securitypythonbashVotes: 0GitHub stars: 4
Ramp Install AuthARamp install auth — corporate card and expense management API integration. Use when working with Ramp for card management, expenses, or accounting sync. Trigger with phrases like "ramp install auth", "ramp-install-auth", "corporate card API".securitypythongoVotes: 0GitHub stars: 4
Rails Security ReviewAPerforms security audits and vulnerability assessments on Ruby on Rails application code. Use when reviewing Rails code for security risks, assessing authentication or authorization, auditing parameter handling, redirects, file uploads, secrets management, or checking for XSS, CSRF, SSRF, SQL injection, and other common vulnerabilities.securityrustgoVotes: 0GitHub stars: 4
Rails Review FlowAMulti-pass Rails code review workflow that identifies bugs, security vulnerabilities, and architectural issues; assigns severity levels (Critical, Suggestion, Nice-to-have); and generates actionable review comments with a mandatory re-review loop for Critical findings. Use for full PR review workflows, multi-pass security or architecture audits, or implementing and verifying responses to review feedback. Trigger: review this PR, full code review, multi-pass review, audit security vulnerabilit...securitysqlrailsVotes: 0GitHub stars: 4
Rag Ai App Security AuditAUse this skill to audit RAG and AI application security, including retrieval boundaries, prompt injection, citations, memory, and data exposure. Do not use it as a scanner or exploit runner.securityrustsecurityVotes: 0GitHub stars: 4
Qa Tester SkillASystematically test web applications for functionality, security, and usability issues using browser automation. Reports findings by severity (CRITICAL/HIGH/MEDIUM/LOW) with immediate alerts for critical failures. Use when testing web apps, validating user flows, conducting security checks, or performing pre-deployment audits.securityjavascripttypescriptVotes: 0GitHub stars: 4
Qa SecurityAPerform a security audit based on OWASP. Use when the user wants to verify security, look for vulnerabilities, or before a production deployment.securitytypescriptgoVotes: 0GitHub stars: 4
Qa Security ScanASecurity scanning templates and checklists for OWASP Top 10, authentication, authorization, data protection. Use when conducting security testing or vulnerability assessment. This skill provides comprehensive security testing: - OWASP Top 10 checklist with remediation - Authentication and authorization testing - Data protection verification - Security report generation - Integration with Codex CLI MCP for automated scanning Triggers: "security scan", "vulnerability check", "OWASP", "securit...securityjavascriptgoVotes: 0GitHub stars: 4
Pypi DopplerALOCAL-ONLY PyPI publishing with Doppler credentials. TRIGGERS - publish to PyPI, pypi upload, local publish. NEVER use in CI/CD.securitypythongoVotes: 0GitHub stars: 4
Prompt ScaffoldingCDefensive prompt scaffolding, injection prevention, safety guardrails. 防禦提示架構、注入防護、安全護欄之法。 Use when: building user-facing prompts, hardening against injection attacks, adding safety layers to system prompts.securityrustrailsVotes: 0GitHub stars: 4
Prompt ClashBAll-in-one prompt engineering competition toolkit — attack generation, defense hardening, real-time analysis, and pattern reference for AI security tournaments like Clash of Prompts. Use when preparing for or competing in prompt engineering competitions, red-teaming LLMs, hardening system prompts, analyzing prompt injection techniques, or practicing timed prompt challenges. Trigger phrases include "prompt clash", "prompt competition", "prompt tournament", "red team this prompt", "harden this ...securitypythonrustVotes: 0GitHub stars: 4
Prometheus Alerting Cardinality ReviewAUse this skill when reviewing Prometheus or AlertManager configuration for cardinality, alerting correctness, scrape security, remote_write safety, or retention adequacy. Trigger when a user provides prometheus.yml, alertmanager.yml, recording rules YAML, alerting rules YAML, or asks whether their Prometheus setup is production-ready.securityrustgoVotes: 0GitHub stars: 4
Program AuditAUse this skill when the user wants to audit a Solana or Anchor program for security vulnerabilities — account validation, PDA safety, arithmetic, CPI risks, reinit attacks, and authority confusion. Includes a checklist and the most common bug classes.securityrustgoVotes: 0GitHub stars: 4
Profiles And CredentialsBUse when authoring or modifying any claude-team-toolkit skill that loads credentials, switches between accounts/orgs/environments, or needs confirmation for destructive operations. Reference for the shared profile + ctt_* helper pattern used by all credential-bearing skills.securitybashreactVotes: 0GitHub stars: 4
Production System AuditAComprehensive system audit methodology for production web applications. Use when auditing systems before launch, identifying technical debt, troubleshooting systematic issues, preparing for security reviews, or creating improvement roadmaps. Systematically audits database schema, API endpoints, external integrations, performance, security, and monitoring across all layers.securitygosqlVotes: 0GitHub stars: 4