All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 32,011
- 1,334
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 13,009–13,032 of 32,011 skills
- Agentprivacy DragonwakerQuantum threat response persona. Activates when discussing post-quantum security, the 1200-qubit threshold, secp256k1 vulnerability, dragon flight conditions, or the transition from stored secrets to behavioral manifold proofs.Votes: 0GitHub stars: 4
- Agentprivacy Dark ForestDark forest strategy and adversarial environment navigation for 0xagentprivacy. Activates when discussing R(d) strategic disclosure, information asymmetry, predator-prey dynamics in data markets, position-revealing risks, or how to navigate environments where visibility means vulnerability.Votes: 0GitHub stars: 4
- Agentic VulnerabilitiesOWASP Agentic Security Top 10 vulnerability knowledge base for identifying, assessing, and remediating security risks in AI agent systems.Votes: 0GitHub stars: 4
- Agentic Security ReviewRun the OWASP-aligned agentic security review path — covers goal hijacking, tool misuse, excessive agency, memory poisoning, secrets exposure, handoff failures, and observability. Opt-in from Stage 9 (Review) or the QA track. Not a new track — no state file or slash command namespace. Triggers "agentic security review", "agent security", "security review for agents", "/agentic-security-review".Votes: 0GitHub stars: 4
- Agentic Secrets HandlingAPI anahtarları, kubeconfig ve Juju credential için saklama sırası ve log maskeleme kurallarını uygularken kullan.Votes: 0GitHub stars: 4
- Agentic Cli LoggingYapılandırılmış log alanları, stderr vs dosya ve secret redaction kurallarını uygularken kullan.Votes: 0GitHub stars: 4
- Agent WalletGive the AI agent its own EVM wallet with admin-controlled policies the agent CANNOT bypass even under prompt injection. Encrypted keystore (AES-256-GCM, scrypt KDF), policy file the agent has no tool to write, deterministic policy gate on every signing operation, optional local HTTP dashboard. Triggers: agent wallet, give the agent a wallet, agent address, fund the agent, agent autonomy, policy gate, kill switch, agent permissions, bounded autonomy, ERC-4337 alternative, session-key alternat...Votes: 0GitHub stars: 4
- Agent Security HardenerSécurisation d'agents IA contre injections, abus et fuites de données. Se déclenche avec "sécurité agent", "agent security", "prompt injection", "jailbreak", "agent abuse", "guardrails", "safe agent", "sécuriser mon agent", "agent en production sécurisé".Votes: 0GitHub stars: 4
- Agent Api Caller SubagentSous-agent spécialisé dans les appels API REST/GraphQL avec retry, auth et transformation de données. Se déclenche avec "sous-agent API", "API caller agent", "agent qui appelle une API", "REST agent", "HTTP agent", "API integration subagent", "external API agent".Votes: 0GitHub stars: 4
- Ag Verificar SegurancaAuditoria de seguranca, qualidade e conformidade. OWASP Top 10, secrets scan, dependency audit. Use antes de deploy.Votes: 0GitHub stars: 4
- Ag SentinelMaquina autonoma de seguranca, load testing e LGPD. 6 dimensoes, modo hybrid, convergencia SSS >= 80. Security Certificate + Load Report + Fix PR.Votes: 0GitHub stars: 4
- Afx Cicd ScaffoldBootstrap a complete .github/workflows/ set for a new project: CI (build/test/lint), CD (workflow_dispatch with env choice + OIDC + ECR), security-scan (gitleaks + dependency scan + CodeQL), and optional database-migration. Use this skill when the user wants to add GitHub Actions CI/CD to a project that does not already have it, or when they want to add missing workflows alongside existing ones.Votes: 0GitHub stars: 4
- Adobe Upgrade MigrationAnalyze, plan, and execute Adobe SDK upgrades — including the critical JWT-to-OAuth migration, PDF Services SDK v3-to-v4, and Photoshop API endpoint changes (cutout v1 to remove-background v2). Trigger with phrases like "upgrade adobe", "adobe migration", "adobe breaking changes", "update adobe SDK", "jwt to oauth".Votes: 0GitHub stars: 4
- Adobe Security BasicsApply Adobe security best practices for OAuth credentials, secret rotation, I/O Events webhook signature verification, and least-privilege scoping. Use when securing API credentials, implementing webhook validation, or auditing Adobe security configuration. Trigger with phrases like "adobe security", "adobe secrets", "secure adobe", "adobe credential rotation", "adobe webhook signature".Votes: 0GitHub stars: 4
- Adobe Known PitfallsIdentify and avoid Adobe-specific anti-patterns: using deprecated JWT auth, not caching IMS tokens, ignoring Firefly content policy, missing async job polling, and leaking p8_ secrets. Real code examples with fixes. Trigger with phrases like "adobe mistakes", "adobe anti-patterns", "adobe pitfalls", "adobe what not to do", "adobe code review".Votes: 0GitHub stars: 4
- Adobe Data HandlingImplement data handling for Adobe APIs including PII redaction in logs, Firefly content policy compliance, PDF document data classification, and GDPR/CCPA data subject access requests via Adobe Privacy Service. Trigger with phrases like "adobe data", "adobe PII", "adobe GDPR", "adobe data retention", "adobe privacy", "adobe content policy".Votes: 0GitHub stars: 4
- Admin Auth GuideAdmin authentication and authorization system reference — login flow, JWT, TOTP, sessions, RBACVotes: 0GitHub stars: 4
- Add VercelAdd Vercel deployment capability to NanoClaw agents. Installs the Vercel CLI in agent containers and sets up OneCLI credential injection for api.vercel.com. Use when the user wants agents to deploy web applications to Vercel.Votes: 0GitHub stars: 4
- Add Security AuditSecurity audit: OWASP Top 10, multi-tenancy, injection, auth, XSS, dependencies.Votes: 0GitHub stars: 4
- Add Gmail ToolAdd Gmail as an MCP tool (read, search, send, label, draft) using OneCLI-managed OAuth. The agent gets Gmail tools in every enabled group; OneCLI injects real tokens at request time so no raw credentials are ever in the container or on disk in usable form.Votes: 0GitHub stars: 4
- Ad Delegation AttackKerberos 委派攻击（非约束/约束/RBCD）。当 BloodHound 发现委派配置、或已获取有 SPN 的服务账号/机器账号控制权时使用。通过 S4U 协议滥用可实现跨服务模拟任意用户，常用于域内权限提升和横向移动。Votes: 0GitHub stars: 4
- Ad Acl AbuseActive Directory ACL 滥用攻击方法论。当 BloodHound 发现 GenericAll/WriteDACL/WriteOwner/GenericWrite/ForceChangePassword 等危险 ACE 时使用。覆盖 ACE 枚举、权限滥用链、Shadow Credentials、RBCD 攻击Votes: 0GitHub stars: 4
- Account TakeoverHow to identify and test for account takeover vulnerabilities in web applications. Use this skill whenever the user mentions account takeover, authentication bypass, password reset attacks, email verification bypass, session hijacking, or any technique to compromise user accounts. This includes testing authorization issues, unicode normalization attacks, reset token reuse, CORS/CSRF/XSS exploitation, cookie manipulation, and OAuth vulnerabilities.Votes: 0GitHub stars: 4
- Accessibility Services AbuseAndroid Accessibility Service security analysis and pentesting. Use this skill whenever the user mentions Android security testing, accessibility service abuse, RAT detection, malware analysis, ClayRat, PlayPraetor, overlay phishing, credential harvesting, or any Android app security assessment involving AccessibilityService APIs. This skill helps detect malicious accessibility services, analyze abuse patterns, and harden apps against accessibility-based attacks.Votes: 0GitHub stars: 4