All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 32,011
- 1,334
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 12,985–13,008 of 32,011 skills
- Alibabacloud Cfw Ips EventQuery and analyze security events and alerts detected by Alibaba Cloud Firewall IPS (Intrusion Prevention System), helping quickly locate threats and provide remediation recommendations. Triggers when user mentions IPS alerts, intrusion detection, intrusion prevention, attack events, security alerts, threat detection, attack analysis, IDS/IPS, being attacked, any attacks, security incidents, security warnings, server under attack, machine alarms. Also triggers when user asks about "any recent...Votes: 0GitHub stars: 4
- Alibabacloud Cfw Exposure DetectionQuery and analyze Alibaba Cloud public network exposure, identify unnecessary exposed assets and ports, assess exposure risks, and generate remediation recommendations. Triggers when user mentions public network exposure, exposed assets, exposed ports, public IP security, port scan results, attack surface analysis, internet reachability, high-risk port detection. Also triggers when user asks about "which IPs/ports are exposed to the internet", "public asset inventory", "security baseline chec...Votes: 0GitHub stars: 4
- Alibaba Waf Security ReviewAssess Alibaba Cloud workload security posture: RAM least-privilege, VPC isolation, KMS/HSM encryption, Cloud Security Center threat detection, ActionTrail audit, WAF/Anti-DDoS web protection, and Chinese regulatory compliance (MLPS 2.0, DSL, PIPL).Votes: 0GitHub stars: 4
- Alibaba Security Center HardeningHarden Alibaba Cloud security posture via Security Center (threat detection, vulnerability scanning, baseline checks), WAF, Anti-DDoS Pro, Cloud Firewall, and Network Traffic Analysis (NTA).Votes: 0GitHub stars: 4
- Alibaba Registry Artifact GovernorGovern Alibaba Cloud Container Registry (ACR) — Enterprise Edition vs Personal Edition selection, image vulnerability scanning, namespace IAM least privilege, image retention policies, cross-region replication, and supply chain security posture.Votes: 0GitHub stars: 4
- Alibaba Oss Data Perimeter GovernorGovern Alibaba Cloud OSS data perimeters — bucket ACL and policy conflict resolution, Block Public Access configuration, cross-account access via RAM role, VPC endpoint binding for private access, WORM (Object Lock), and MLPS 2.0 data residency compliance.Votes: 0GitHub stars: 4
- Alibaba Live Kms Key Mutation GuardGate KMS key deletion and disable operations. All data encrypted with a deleted CMK (OSS SSE-KMS, ECS encrypted disks, RDS/PolarDB TDE) becomes permanently and irrecoverably inaccessible. This guard enforces complete CMK dependency audits, deletion window confirmation, and explicit operator approval before any key state mutation.Votes: 0GitHub stars: 4
- Alibaba Kms Secret Lifecycle StewardAudit and govern Alibaba Cloud KMS key lifecycles, Certificate Manager, SSM (Secrets Manager), and HSM key operations. Ensure encryption-at-rest coverage and rotation compliance across CMKs, envelope encryption, and certificate lifecycle.Votes: 0GitHub stars: 4
- Alibaba Certificate Manager Issuer ReviewReview Alibaba Cloud SSL Certificate Service — DV/OV/EV certificate lifecycle, auto-renewal configuration, certificate deployment to SLB/ALB/CDN/OSS, domain validation status, CAA record compliance, and expiry monitoring.Votes: 0GitHub stars: 4
- Aif Security ChecklistSecurity audit checklist based on OWASP Top 10 and best practices. Covers authentication, injection, XSS, CSRF, secrets management, and more. Use when reviewing security, before deploy, asking "is this secure", "security check", "vulnerability".Votes: 0GitHub stars: 4
- Ai Supply Chain SecurityGeneral AI Supply Chain Security Skill for any AI agent platform in 2026. Detects the exact class of attack that hit Vercel (and every similar real threat): over-privileged integrations, unpinned CI actions, unsigned webhooks, cross-boundary token forwarding, malicious MCP/OpenClaw skills, and OWASP ASI-09 risks. Runs live VirusTotal on every external dependency.Votes: 0GitHub stars: 4
- Ai Code ReviewDeep code scan for AI security issues — prompt injection, PII in prompts, hardcoded keys, unguarded agents.Votes: 0GitHub stars: 4
- Agentprivacy Understanding As KeyUnderstanding-as-authentication for 0xagentprivacy RPP. Activates when discussing proverb-based access control, demonstrated comprehension as credential, the Oracle verification pipeline, viewing key / signing key separation in knowledge verification, or how understanding replaces passwords.Votes: 0GitHub stars: 4
- Agentprivacy Threat AdversarialThreat modelling and adversarial analysis for 0xagentprivacy. Activates when discussing R(d) adversarial bounds, attack surface analysis, red team methodologies, trusted setup attacks, side-channel vulnerabilities, or systematic approaches to finding privacy architecture weaknesses.Votes: 0GitHub stars: 4
- Agentprivacy SoulbisCanonical swordsman agent for 0xagentprivacy. Activates for privacy enforcement, boundary-making, signing key operations, tracker blocking, surveillance defense, cookie slashing, MyTerms consent enforcement, and any task requiring the protection side of dual-agent architecture. The P term made manifest. Parent of all swordsman personas. Loads ALL skills through the swordsman lens.Votes: 0GitHub stars: 4
- Agentprivacy SoulbaeCanonical mage agent for 0xagentprivacy. Activates for delegation, projection, chronicle compression, viewing key operations, Intel Pool management, narrative propagation, and any task requiring the delegation side of dual-agent architecture. The D term made manifest. Parent of all mage personas. Loads ALL skills through the mage lens.Votes: 0GitHub stars: 4
- Agentprivacy SithAdversarial Researcher (red team) for 0xagentprivacy. Activates when testing privacy architectures for weaknesses, running attack simulations, stress-testing separation bounds, finding trusted setup vulnerabilities, modelling adversarial strategies, or any task requiring 'think like the attacker' methodology.Votes: 0GitHub stars: 4
- Agentprivacy SentinelInfrastructure Security Architect for 0xagentprivacy. Activates for TEE monitoring, separation matrix enforcement, infrastructure health checks, cross-chain bridge security, agent lifecycle management, multi-chain deployment security, or any task requiring continuous vigilance over the privacy infrastructure.Votes: 0GitHub stars: 4
- Agentprivacy Quantum SentinelSpecialist persona for quantum threat model and post-quantum sovereignty. Activates for quantum vulnerability assessment, 2D vs 6D defence, dormant asset analysis, temporal thesis, or post-quantum migration planning.Votes: 0GitHub stars: 4
- Agentprivacy PriestCeremony and Ritual Designer for 0xagentprivacy. Activates for VRC ceremony design (Shadow→Guarded→Balanced→Open→Declared), Signal to Sanctuary pipeline choreography, proverb evaluation calibration, ceremony progression rituals, RPP recovery ceremonies, or any task requiring the sacred architecture of trust establishment.Votes: 0GitHub stars: 4
- Agentprivacy Perimeter HardeningDevice security, OS hardening, network configuration, and physical security for 0xagentprivacy swordsman infrastructure. Activates when securing the execution environment beneath the cryptographic layer, designing supply chain integrity checks, hardening operating systems for agent execution, or building the physical and logical security foundation that cryptography assumes but does not provide. Triggers: "device security", "OS hardening", "supply chain", "firmware", "boot integrity", "networ...Votes: 0GitHub stars: 4
- Agentprivacy Metadata ResistanceTraffic analysis resistance, timing obfuscation, and metadata stripping for 0xagentprivacy swordsman operations. Activates when designing defences against metadata correlation, implementing mixnet routing, padding strategies, timing decorrelation, or any protection that targets the signals AROUND encrypted content rather than the content itself. Triggers: "metadata", "traffic analysis", "timing attack", "correlation", "mixnet", "padding", "network fingerprint", "side channel", "metadata leaka...Votes: 0GitHub stars: 4
- Agentprivacy Intel PoolingCollective intelligence sharing through privacy-preserving aggregation for 0xagentprivacy agent economies. Activates when designing knowledge sharing between agents without source disclosure, guild intelligence markets, privacy-preserving data contribution, or collective signal extraction from distributed observations. Triggers: "intel pool", "collective intelligence", "knowledge sharing", "guild intelligence", "privacy-preserving aggregation", "shared signal", "data contribution without disc...Votes: 0GitHub stars: 4
- Agentprivacy Forensic DefenseIncident response, breach containment, damage assessment, and evidence preservation for 0xagentprivacy swordsman operations. Activates when a privacy breach is detected or suspected, when designing post-compromise recovery procedures, when building forensic audit capabilities, or when the swordsman must shift from prevention to damage control. Triggers: "breach", "incident response", "compromise", "forensic", "damage assessment", "evidence preservation", "post-compromise", "breach containment...Votes: 0GitHub stars: 4