All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,104
- 1,296
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 14,641–14,664 of 31,104 skills
- Att&CkExhaustively test each MITRE ATT&CK technique.Votes: 0GitHub stars: 86
- Hermes Security AuditPerform a comprehensive security audit of a Hermes installation — check secrets, permissions, network exposure, code patterns, dependencies, and infrastructure. Returns prioritized findings with remediation steps.Votes: 0GitHub stars: 36
- Security Audit MethodologyPlan authorized security reviews with threat modeling, architecture and dependency audits, and vulnerability classification. Use for scoped defensive security assessment.Votes: 0GitHub stars: 36
- Hermes Security AuditPerform a comprehensive security audit of a Hermes installation — check secrets, permissions, network exposure, code patterns, dependencies, and infrastructure. Returns prioritized findings with remediation steps.Votes: 0GitHub stars: 36
- Google WorkspaceGmail, Calendar, Drive, Docs, Sheets via gws CLI or Python.Votes: 0GitHub stars: 3
- Native McpMCP client: connect servers, register tools (stdio/HTTP).Votes: 0GitHub stars: 3
- Github AuthGitHub auth setup: HTTPS tokens, SSH keys, gh CLI login.Votes: 0GitHub stars: 3
- 1passwordSet up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in, and reading/injecting secrets for commands.Votes: 0GitHub stars: 3
- ShopifyShopify Admin & Storefront GraphQL APIs via curl. Products, orders, customers, inventory, metafields.Votes: 0GitHub stars: 3
- Security AuditorExpert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulnerability assessment, threat modeling, secure authentication (OAuth2/OIDC), OWASP standards, cloud security, and security automation. Handles DevSecOps integration, compliance (GDPR/HIPAA/SOC2), and incident response. Use PROACTIVELY for security audits, DevSecOps, or compliance implementation.Votes: 0GitHub stars: 23
- Mobile Security CoderExpert in secure mobile coding practices specializing in input validation, WebView security, and mobile-specific security patterns. Use PROACTIVELY for mobile security implementations or mobile security code reviews.Votes: 0GitHub stars: 23
- Frontend Security CoderExpert in secure frontend coding practices specializing in XSS prevention, output sanitization, and client-side security patterns. Use PROACTIVELY for frontend security implementations or client-side security code reviews.Votes: 0GitHub stars: 23
- Backend Security CoderExpert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.Votes: 0GitHub stars: 23
- SecurityreviewThis document outlines your standard procedures, principles, and skillsets for conducting security audits. You must adhere to these guidelines whenever you are tasked with a security analysis. ---Votes: 0GitHub stars: 4
- ZhihuManage Zhihu (知乎) AI Bot integration. Use for: (1) Publishing pins (想法) to Zhihu Rings, (2) Liking/unliking pins and comments, (3) Creating comments on pins, (4) Deleting comments, (5) Getting ring details and content lists, (6) Getting comment lists. Requires Zhihu API credentials (app_key and app_secret).Votes: 0GitHub stars: 4
- Clawsec FeedSecurity advisory feed with automated NVD CVE polling for OpenClaw-related vulnerabilities. Updated daily.Votes: 0GitHub stars: 4
- Testing Testing Api TesterExpert API testing specialist focused on comprehensive API validation, performance testing, and quality assurance across all systems and third-party integrationsVotes: 0GitHub stars: 2
- Specialized Agentic Identity TrustDesigns identity, authentication, and trust verification systems for autonomous AI agents operating in multi-agent environments. Ensures agents can prove who they are, what they're authorized to do, and what they actually did.Votes: 0GitHub stars: 2
- Engineering Engineering Security EngineerExpert application security engineer specializing in threat modeling, vulnerability assessment, secure code review, security architecture design, and incident response for modern web, API, and cloud-native applications.Votes: 0GitHub stars: 2
- Setting Up A Data Warehouse SourceGuide the user through connecting a new data warehouse source — Postgres, MySQL, Stripe, Hubspot, MongoDB, Salesforce, BigQuery, Snowflake, and so on. Use when the user wants to "connect Stripe", "import data from Postgres", "add a new data source", "sync my warehouse tables", or wants to pick sync methods for each table. Walks through source-type discovery, credential validation, table discovery, per-table sync_type selection, and the final create call. Also covers picking a good prefix and ...Votes: 0GitHub stars: 4
- Prompt EngineeringWrite effective prompts for LLMs — structure, few-shot examples, chain-of-thought, system prompts, and output parsing.Votes: 0GitHub stars: 4
- Network Request AuditingAfter navigating and interacting in Cursor's built-in browser, use browser_network_requests to audit every fetch/XHR for failures, slowness, duplicate calls, and suspicious payloads. Use for API-heavy pages and after backend or client networking changes.Votes: 0GitHub stars: 4
- Gha Security ReviewGitHub Actions security review for workflow exploitation vulnerabilities. Use when asked to "review GitHub Actions", "audit workflows", "check CI security", "GHA security", "workflow security review", or review .github/workflows/ for pwn requests, expression injection, credential theft, and supply chain attacks. Exploitation-focused with concrete PoC scenarios.Votes: 0GitHub stars: 4
- Auditing SecurityPerform a systematic security audit of a codebase, checking for OWASP Top 10 vulnerabilities, secrets exposure, and insecure patterns.Votes: 0GitHub stars: 4