All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 32,009
- 1,334
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 12,697–12,720 of 32,009 skills
- Eresus Pr Security ReviewSecurity-focused pull request and diff review skill for finding newly introduced vulnerabilities, risky regressions, and missing security tests in changed code. Trigger when the user asks to: "review this PR for security", "check this diff for vulns", "do a security code review", "audit changed files", or wants findings on a patch instead of a full-repo scan. Best used alongside eresus-sast-scanner.Votes: 0GitHub stars: 4
- Eresus Php AuditDeep PHP-specific security audit skill covering injection, deserialization, file operations, auth bypass, POP chain discovery, and CMS-specific patterns. Trigger when auditing PHP code: "audit this PHP app", "find PHP security issues", "check Laravel/WordPress for vulnerabilities", "PHP SAST review", "check for PHP deserialization", "review this WordPress plugin". Includes scripts/rules.json for programmatic rule lookup.Votes: 0GitHub stars: 4
- Eresus Deser AuditDeserialization vulnerability audit skill with gadget chain knowledge for all major languages. Trigger when the user asks to: "audit deserialization", "check for insecure deserialization", "find pickle vulnerabilities", "Marshal.load audit", "gadget chain analysis", "check for unsafe YAML loading", or when reviewing code that processes serialized data (JSON with type info, YAML, XML, binary formats).Votes: 0GitHub stars: 4
- Equilateral Agents22 production-ready AI agents with database-driven orchestration for security reviews, code quality analysis, deployment validation, infrastructure checks, and compliance. Auto-activates for security concerns, deployment tasks, code reviews, quality checks, and compliance questions. Includes upgrade paths to enterprise features (GDPR, HIPAA, multi-account AWS, ML-based optimization).Votes: 0GitHub stars: 4
- Environment Configuration SkillEnvironment variables, setup procedures, API configurations, and security for the omer-akben portfolio. Use when setting up the project, configuring services, or troubleshooting environment issues.Votes: 0GitHub stars: 4
- EnvaultOfficial AI Agent Skill for Envault Secrets Management platform. Enforces strict zero-hardcode rules, Client-Side Encryption, and Human-in-the-Loop (HITL) approval workflows.Votes: 0GitHub stars: 4
- Env Update SecretsUse when updating environment secrets like GITHUB_TOKEN, NPM_TOKEN, or API keys on the user's machineVotes: 0GitHub stars: 4
- Enumerating Network ServicesEnumerate and exploit network services including SMB, FTP, SSH, RDP, HTTP, databases (MySQL, MSSQL, PostgreSQL, MongoDB), LDAP, NFS, DNS, and SNMP. Use when testing network service security or performing port-based exploitation.Votes: 0GitHub stars: 4
- Encrypting And Decrypting DataValidate encryption implementations and cryptographic practices. Use when reviewing data security measures. Trigger with 'check encryption', 'validate crypto', or 'review security keys'.Votes: 0GitHub stars: 4
- Encrypt And Decrypt Age Secrets With Hardware Backed Yubikey IdeUse age-plugin-yubikey when an agent needs age encryption tied to a physical YubiKey identity instead of software-only keys.Votes: 0GitHub stars: 4
- Email SenderSend and read emails via SMTP/IMAP using configured accounts (Web.de, Gmail, etc.). Supports plain text, HTML emails, attachments, CC/BCC, IMAP reading, searching, thread tracking, and summarization. Features retry-logic, timeout handling, and proper logging. Uses credentials from .env file.Votes: 0GitHub stars: 4
- Elk SkillElastic Stack を用いた Active Directory ログ分析・脅威検知支援スキル。Elasticsearch クエリ、Logstash パイプライン、Kibana 可視化を通じて、Windows イベントログおよび Sysmon ログの多角的な脅威検知を実現します。Active Directory 攻撃検知に最適化。Elasticsearch クエリ設計、Windows/AD 脅威検知、Logstash パイプライン、Kibana ダッシュボード、SIEM 運用保守をサポート。Votes: 0GitHub stars: 4
- Element14Search Newark, Farnell, and element14 for electronic components — find parts by MPN or distributor part number, check pricing/stock, download datasheets, analyze specifications. One unified API covers all three storefronts (Newark for US, Farnell for UK/EU, element14 for APAC). Free API key, simple query-parameter auth, no OAuth. Datasheets download directly from farnell.com CDN with no bot protection. Sync and maintain a local datasheets directory for a KiCad project, or use batch MPN-list s...Votes: 0GitHub stars: 4
- ElectronZoom Meeting SDK for Electron desktop applications. Use when embedding Zoom meetings in an Electron app with the Node addon wrapper, JWT auth, join/start flows, settings controllers, and raw data integration.Votes: 0GitHub stars: 4
- Ecosystem Vuln ScanScan one dependency surface, draft the advisory, and package the approved publication bundle.Votes: 0GitHub stars: 4
- Due DiligenceComprehensive application audit. Analyzes best practices, security compliance, frontend design quality. Identifies top improvements and critical errors. Produces scores for design, code quality, and security.Votes: 0GitHub stars: 4
- Dsgvo Compliance BausteineStellt datenschutzrechtliche Textbausteine für KI-Nutzungsrichtlinien bereit: Art. 2 Abs. 1, Art. 6, Art. 9, Art. 15, Art. 28 DSGVO; Auftragsverarbeitungsvertrag, Drittlandstransfer, Datenminimierung, Zweckbindung sowie Anonymisierung und Pseudonymisierung.Votes: 0GitHub stars: 4
- Draconian Rls AuditDefault-Deny security posture for Supabase. Mandates strict RLS and 'WITH CHECK' clauses.Votes: 0GitHub stars: 4
- Dotnet Minimal Api TemplatesCreate production-ready ASP.NET Core Minimal API projects with async patterns, dependency injection, and comprehensive error handling. Use when building new .NET API applications or setting up backend API projects with .NET 8+.Votes: 0GitHub stars: 4
- Dotnet CoreApply these opinionated .NET 8 architecture recipes for backend services: clean architecture layering, CQRS with MediatR, minimal APIs, Entity Framework Core, JWT authentication, AOT compilation, cloud-native patterns.Votes: 0GitHub stars: 4
- Dotnet Aspnet CoreBuild, debug, modernize, or review ASP.NET Core applications with correct hosting, middleware, security, configuration, logging, and deployment patterns on current .NET.Votes: 0GitHub stars: 4
- Dotfile Systems ArchitectGuides the creation of a "Minimal Root" home directory using the XDG Base Directory specification and a Bare Git Repository. Manages config separation, secrets, and cross-platform syncing.Votes: 0GitHub stars: 4
- Dos Resource ExhaustionFind denial of service vulnerabilities through resource exhaustion, algorithmic complexity, memory exhaustion, and file/network resource abuse. Use when auditing code for availability issues.Votes: 0GitHub stars: 4
- Doppler WorkflowsDoppler credential and publishing workflows. TRIGGERS - PyPI publish, AWS credentials, Doppler secrets.Votes: 0GitHub stars: 4