All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 32,009
- 1,334
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 12,601–12,624 of 32,009 skills
- Git Secrets Precommit ScannerScans git diffs for exposed secrets using truffleHog entropy detection and custom regex patterns. Integrates with pre-commit hooks and GitHub push protection API for real-time blocking.Votes: 0GitHub stars: 4
- Git Secret ScannerDetects leaked secrets in Git repositories using pattern-based scanning with Gitleaks rule definitions and the GitHub Secret Scanning API. Identifies exposed API keys, tokens, and credentials across full commit history using git log --all -p analysis.Votes: 0GitHub stars: 4
- Git Secret Scanner GitleaksScans Git repositories for leaked secrets using Gitleaks, TruffleHog, and custom regex patterns. Detects API keys, AWS credentials, private keys, and database connection strings across commit history.Votes: 0GitHub stars: 4
- Ghsa Skill BuilderUse when building or updating vulnerability pattern Skills from multiple sources: GitHub Security Advisories (GHSA), HackerOne Hacktivity, or NVD. Triggers on keywords: GHSA, CVE, vulnerability skill, vuln pattern, update skills, security advisory, HackerOne, H1, hacktivity, pentest skill, bug bounty, check for updates.Votes: 0GitHub stars: 4
- Gh ExportFormats all confirmed pentest findings from findings.json into copy-pasteable GitHub issue markdown blocks, following the AppSec reporting guide template.Votes: 0GitHub stars: 4
- GetnoteSave, search, list, and organize Get 笔记 notes, images, tags, and knowledge resources through the Get 笔记 OpenAPI. Use when storing text or links as notes, uploading an image into a note workflow, recalling prior notes, inspecting note details, managing tags or knowledge bases, or recovering from Get 笔记 authentication failures with the local auth.json setup.Votes: 0GitHub stars: 4
- Gesellschaftsgruender Geschaeftsfuehrer Pflichten StartphaseErste 100 Tage Geschaeftsfuehrer-Pflichten nach HR-Eintragung. Buchfuehrung Bilanz Jahresabschluss Veroeffentlichung Bundesanzeiger. Steuer-Anmeldungen USt LSt KSt GewSt. Sozialversicherungs-Anmeldungen. Insolvenzantragspflicht Paragraf 15a InsO. Compliance GwG Datenschutz Arbeitsschutz. Haftung Paragraf 43 GmbHG. Sorgfaltspflichten.Votes: 0GitHub stars: 4
- Gesellschafts ComplianceGesellschafts-Compliance-Tracker – Initialisierung, Fälligkeitsbericht, Status-Update, Gesundheits-Audit, Export. Pflegt eine compliance-tracker.yaml aus der Gesellschaftstabelle, berechnet Einreichungsfristen nach Rechtsträger und Rechtsordnung und zeigt auf, was in den nächsten 30/60/90 Tagen fällig ist. Trigger: „Gesellschafts-Compliance\", „Einreichungsfristen\", „Bilanzpublizität\", „Transparenzregister\", „Jahresabschluss einreichen\", „was ist fällig\".Votes: 0GitHub stars: 4
- Generic Fullstack Code ReviewerReview full-stack code for bugs, security vulnerabilities, performance issues, accessibility gaps, and CLAUDE.md compliance. Enforces TypeScript strict mode, input validation, GPU-accelerated animations, and design system consistency. Use when completing features, before commits, or reviewing pull requests.Votes: 0GitHub stars: 4
- Generating Security Audit ReportsGenerate comprehensive security audit reports for applications and systems. Use when you need to assess security posture, identify vulnerabilities, evaluate compliance status, or create formal security documentation. Trigger with phrases like "create security audit report", "generate security assessment", "audit security posture", or "PCI-DSS compliance report".Votes: 0GitHub stars: 4
- Generating Compliance ReportsGenerate comprehensive compliance reports for security standards. Use when creating compliance documentation. Trigger with 'generate compliance report', 'compliance status', or 'audit compliance'.Votes: 0GitHub stars: 4
- Geldwaesche Sicherungsmassnahmen IcpBaut praxistaugliche interne Sicherungsmaßnahmen, Richtlinien, Kontrollen, Eskalationen, Schulungen und Audit-Trail.Votes: 0GitHub stars: 4
- Geldwaesche Gruppenweite ComplianceSteuert gruppenweite Policies, Auslagerung, Dienstleister, ausländische Tochtergesellschaften, Datenflüsse und Kontrollberichte.Votes: 0GitHub stars: 4
- Gcp Workspace PivotGCP 到 Google Workspace 的穿越攻击方法论。当已获取 GCP Service Account 或 Project 权限并发现目标组织使用 Google Workspace、需要从云平台穿越到企业邮件/文档/管理控制台、或发现 Domain-Wide Delegation 配置时使用。覆盖 Domain-Wide Delegation 滥用、OAuth 范围利用、Workspace API 数据窃取(Gmail/Drive/Calendar/Admin Directory)、以及 Workspace 持久化技术Votes: 0GitHub stars: 4
- Gcp ServicesConfigure GCP IAM, Secret Manager, and VPC networking with security best practices. PROACTIVELY activate for: (1) setting up service accounts and IAM permissions, (2) managing secrets in Secret Manager, (3) configuring VPC and firewall rules. Triggers: "iam", "secret manager", "vpc"Votes: 0GitHub stars: 4
- Gcp Serverless Production ReadinessReview Cloud Run and Cloud Functions gen2 for production readiness — min-instances cold start, memory and CPU allocation, VPC connector configuration, Secret Manager injection, CMEK encryption, concurrency limits, and traffic splitting safety.Votes: 0GitHub stars: 4
- Gcp Security Posture HardeningReview GCP security posture via Security Command Center findings, CIS GCP Benchmark gaps, org policy enforcement baseline, Assured Workloads controls, Binary Authorization, and CSPM recommendations. Prefer gcp-iam-least-privilege-review for IAM binding surgery and gcp-vpc-service-controls-architect for VPC-SC perimeter design unless the request is primarily broad posture hardening.Votes: 0GitHub stars: 4
- Gcp Secret Kms Lifecycle StewardAudit and govern Cloud KMS key lifecycles, Secret Manager secrets, CMEK configurations across GCP services (Cloud SQL, BigQuery, GCS, Compute), key rotation schedules, and envelope encryption patterns. Prefer gcp-iam-least-privilege-review for IAM binding review on KMS keys and gcp-security-posture-hardening for broad org-level encryption policy gaps.Votes: 0GitHub stars: 4
- Gcp Registry Artifact GovernorGovern GCP Artifact Registry — container image signing via Binary Authorization, vulnerability scanning via Container Analysis, repository IAM least privilege, artifact retention policies, and supply chain security posture.Votes: 0GitHub stars: 4
- Gcp Live Kms Key Destruction GuardGate Cloud KMS key version destruction and key ring deletion against a complete CMEK dependency audit. All Cloud SQL, GCS, BigQuery, Compute Engine disk, and Secret Manager resources encrypted by the key version become permanently inaccessible once destruction completes — this guard ensures no key version is destroyed without enumerating every dependent resource and obtaining explicit operator approval.Votes: 0GitHub stars: 4
- Gcp Hardening[STUB - Not implemented] GCP security hardening with IAM least privilege, VPC security, and Secret Manager. PROACTIVELY activate for: [TODO: Define on implementation]. Triggers: [TODO: Define on implementation]Votes: 0GitHub stars: 4
- Gcp AuthGoogle Cloud Platform (GCP) の Application Default Credentials 認証を実行。BigQuery や Cloud Storage 等の GCP サービス利用前に「GCP認証して」と言うだけで認証手順をガイド。Votes: 0GitHub stars: 4
- Gcloud SecretsManage Google Cloud Secret Manager for storing and fetching environment secrets. Use when working with deployment, secrets, or gcloud commands.Votes: 0GitHub stars: 4
- Gathering SecurityThe drum sounds. Spider and Raccoon gather for complete security work. Use when implementing auth or auditing security end-to-end.Votes: 0GitHub stars: 4