All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 32,009
- 1,334
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 12,817–12,840 of 32,009 skills
- Container Image Vulnerability ScannerScans Docker and OCI container images for vulnerabilities using Trivy JSON output and the Docker Hub API v2 for image metadata. Analyzes base image layers via Syft SBOM generation and maps CVEs to fixed versions using the Alpine SecDB and Debian Security Tracker APIs.Votes: 0GitHub stars: 4
- Container AuditAudit Dockerfiles and docker-compose files for base image, user privileges, secret leaks, layer efficiency, signal handling, healthchecks, and compose safety. One sub-agent per Dockerfile. Static, live (Trivy/Grype), and apply modes.Votes: 0GitHub stars: 4
- Contabo Security HardeningAdvisory skill for hardening Contabo infrastructure security: SSH key management via secret IDs, default root and admin user policy, firewall posture review, OAuth2 credential hygiene including token short TTL and environment variable storage, and x-request-id UUIDv4 traceability for audit compliance. Use when the user needs to assess or improve Contabo instance or API security posture.Votes: 0GitHub stars: 4
- Connect GcpConnect to a GCP project, validate credentials, and discover what services are in use.Votes: 0GitHub stars: 4
- Connect AzureConnect to an Azure subscription, validate credentials, and discover what services are in use.Votes: 0GitHub stars: 4
- Connect AwsConnect to an AWS account, validate credentials, and discover what services are in use.Votes: 0GitHub stars: 4
- Configuring Vpc Endpoints For Private Aws Service AccessConfigures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3, DynamoDB, and other AWS services without internet gateway, NAT device, or public IP addresses. Covers endpoint creation, security groups, route tables, and DNS configuration.Votes: 0GitHub stars: 4
- Compliance ReportBuild a compliance bundle — CycloneDX SBOM, SPDX license report, SARIF findings, OpenVEX/CycloneDX VEX, optional cosign signatures, manifest.json with SHA-256 sums, Markdown index. Use when assembling an audit bundle, SOC 2 attestation, supply-chain compliance package, or evidence for a customer security questionnaire.Votes: 0GitHub stars: 4
- Compliance Regelsatz ErstellenErzeugt einen standardisierten Compliance-Regelsatz für den KI-Einsatz in Kanzleien mit zehn konkreten Geboten: kein Privat-Account, keine Mandatsdaten ohne Anonymisierung, keine PDF-Uploads ohne AVV, Korrekturlesung als Pflicht sowie Kennzeichnung KI-generierter Inhalte.Votes: 0GitHub stars: 4
- Compliance MappingMaps accessibility audit results to legal frameworks — Section 508, EN 301 549, EAA, ADA, AODA. Generates VPAT 2.5 tables, identifies non-WCAG requirements.Votes: 0GitHub stars: 4
- Compliance And AuditUse when a project requires a compliance framework mapping, when risks need formal documentation, when audit evidence must be collected, or when producing a compliance attestation before release. Applies to SOC 2, ISO 27001, GDPR, PCI DSS, NIST CSF, and DORA.Votes: 0GitHub stars: 4
- Company Ai PolicyAudit an agent system against Kaleva Retail Group's AI and data-usage policies. Produces a row-per-rule compliance report with verdicts (compliant / violating / "I can't tell") and evidence from the target system's files.Votes: 0GitHub stars: 4
- Cometchat Native ProductionProduction-readiness for React Native — server-minted auth tokens, user management CRUD, external-backend recipes (Express / Hono / Firebase Functions / Vercel Serverless). RN has no API routes, so the backend is always external.Votes: 0GitHub stars: 4
- Cometchat Flutter V6 ProductionProduction readiness for CometChat Flutter UIKit v6 — server-side auth tokens, user management, Android ProGuard/R8, iOS Info.plist, minSdk, release build checklist, environment configuration, and security hardening. Use when preparing a CometChat Flutter app for production deployment.Votes: 0GitHub stars: 4
- Coderabbit Security BasicsConfigure CodeRabbit for security-focused code review with secret detection and vulnerability scanning. Use when setting up security review rules, configuring secret detection in PRs, or hardening CodeRabbit configuration for compliance requirements. Trigger with phrases like "coderabbit security", "coderabbit secrets", "secure coderabbit", "coderabbit vulnerability detection", "coderabbit security review".Votes: 0GitHub stars: 4
- Coderabbit Data HandlingImplement CodeRabbit PII handling, data retention, and GDPR/CCPA compliance patterns. Use when handling sensitive data, implementing data redaction, configuring retention policies, or ensuring compliance with privacy regulations for CodeRabbit integrations. Trigger with phrases like "coderabbit data", "coderabbit PII", "coderabbit GDPR", "coderabbit data retention", "coderabbit privacy", "coderabbit CCPA".Votes: 0GitHub stars: 4
- Code ReviewReview code changes for security, performance, and correctness. Trigger with a PR URL or diff, "review this before I merge", "is this code safe?", or when checking a change for N+1 queries, injection risks, missing edge cases, or error handling gaps.Votes: 0GitHub stars: 4
- Code Review For PmsReview AI-generated code from a PM perspective: spec compliance, security red flags, data model soundness, UX issues in frontend code, and error handling against product requirements.Votes: 0GitHub stars: 4
- Code Of Practice Und Harmonisierte NormenVerhaltenskodizes nach Art. 56 KI-VO und harmonisierte Normen nach Art. 40 KI-VO: Entwicklung Beteiligung Vermutungswirkung gemeinsame Spezifikationen Art. 41. Praktische Bedeutung fuer Compliance und Konformitaetsbewertung.Votes: 0GitHub stars: 4
- Cmmc ExpertCMMC v2.0 expert for DoD contractors. Provides deep knowledge of Cybersecurity Maturity Model Certification including 5 levels, 14 domains, 171 practices, NIST 800-171 alignment, and C3PAO assessment preparation.Votes: 0GitHub stars: 4
- Cloud Security GuideSécurité cloud incluant IAM, encryption, networking, compliance, secrets management et CSPM. Se déclenche avec "sécurité cloud", "cloud security", "IAM", "encryption at rest", "CSPM", "compliance cloud"Votes: 0GitHub stars: 4
- Cloud Cloud Security GuideSécurité cloud incluant IAM, encryption, networking, compliance, secrets management et CSPM. Se déclenche avec "sécurité cloud", "cloud security", "IAM", "encryption at rest", "CSPM", "compliance cloud"Votes: 0GitHub stars: 4
- CloakPrivacy engineering and data governance agent. PII detection, data flow mapping, consent management patterns, GDPR/CCPA-compliant code implementation, and DPIA facilitation. Use when privacy-by-design implementation is needed.Votes: 0GitHub stars: 4
- Clickup Security BasicsSecure ClickUp API tokens, implement least-privilege access, and audit usage. Use when securing API keys, rotating tokens, configuring per-environment credentials, or auditing ClickUp API access patterns. Trigger: "clickup security", "clickup secrets", "secure clickup token", "clickup API key rotation", "clickup access audit".Votes: 0GitHub stars: 4