All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,145
- 1,298
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 15,217–15,240 of 31,145 skills
- Cyber Building Detection Rule With Splunk SplBuild effective detection rules using Splunk Search Processing Language (SPL) correlation searches to identify security threats in SOC environments.Votes: 0GitHub stars: 2
- Cyber Auditing Uefi Firmware With ChipsecUse Intel CHIPSEC to assess platform firmware configuration, SPI flash write protection, BIOS lock, SMM/SMRR, and Secure Boot variable state, dump SPI flash, and triage UEFI variables for firmware-level threats.Votes: 0GitHub stars: 2
- Cyber Auditing Azure Active Directory ConfigurationAuditing Microsoft Entra ID (Azure Active Directory) configuration to identify risky authentication policies, overly permissive role assignments, stale accounts, conditional access gaps, and guest user risks using AzureAD PowerShell, Microsoft Graph API, and ScoutSuite.Votes: 0GitHub stars: 2
- Cyber Auditing Aws S3 Bucket PermissionsSystematically audit AWS S3 bucket permissions to identify publicly accessible buckets, overly permissive ACLs, misconfigured bucket policies, and missing encryption settings using AWS CLI, S3audit, and Prowler to enforce least-privilege data access controls.Votes: 0GitHub stars: 2
- Cyber Attacking Oauth With Device Code Phishing[LAB-GATED; discovery is not runtime authorization; offensive/dual-use — authorized-lab gate] Run OAuth 2.0 device-code and illicit-consent phishing against Microsoft Entra ID to steal access and refresh tokens, bypass MFA, and pivot across Microsoft 365 services.Votes: 0GitHub stars: 2
- Cyber Analyzing Ethereum Smart Contract VulnerabilitiesPerform static and symbolic analysis of Solidity smart contracts using Slither and Mythril to detect reentrancy, integer overflow, access control, and other vulnerability classes before deployment to Ethereum mainnet.Votes: 0GitHub stars: 2
- Cyber Achieving Cmmc Level 2 Compliance>- Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, manage a compliant POA&M, and ready the organization for a C3PAO assessment. Use when an organization handles Controlled Unclassified Information (CUI) under a DoDVotes: 0GitHub stars: 2
- Cyber Abusing Shadow Credentials For Privesc[LAB-GATED; discovery is not runtime authorization; offensive/dual-use — authorized-lab gate] Take over Active Directory user and computer accounts by writing alternate certificate keys to msDS-KeyCredentialLink (Shadow Credentials) with pyWhisker, Whisker, and Certipy, then authenticate via PKINIT.Votes: 0GitHub stars: 2
- Cyber Abusing Dpapi For Credential Access[LAB-GATED; discovery is not runtime authorization; offensive/dual-use — authorized-lab gate] Extract DPAPI-protected secrets such as credentials and browser data offline and online.Votes: 0GitHub stars: 2
- Pre Flight ReviewOne-command pre-execution review pipeline. Runs scope review → architecture review → security review → design review (auto-detects which apply) before executing any workflow. Surfaces only taste decisions for user approval. Auto-fixes obvious issues. Use before executing multi-step workflows, deploying, or when user says "review this plan", "check before running", "pre-flight", or "is this ready?". Runs CEO → eng → security automatically with encoded decision principles.Votes: 0GitHub stars: 17
- Ln 761 Secret ScannerScans codebase for hardcoded secrets. Returns normalized findings with severity and remediation guidance. Pre-commit hook integration.Votes: 0GitHub stars: 17
- Ln 625 Dependencies AuditorChecks outdated packages, unused deps, reinvented wheels, vulnerability scan (CVE/CVSS). Supports mode: full | vulnerabilities_only.Votes: 0GitHub stars: 17
- Ln 621 Security AuditorChecks hardcoded secrets, SQL injection, XSS, insecure dependencies, missing input validation. Returns findings with severity, location, effort, recommendations.Votes: 0GitHub stars: 17
- Google Cloud Waf SecurityGenerates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate a workload, identify security requirements, and provide actionable recommendations for IAM, network security, data protection, and operational security.Votes: 0GitHub stars: 17
- Google Cloud Recipe AuthProvides expert guidance on authenticating and authorizing to Google Cloud services and APIs, covering human users, service identities, Application Default Credentials (ADC), and best practices for secure access.Votes: 0GitHub stars: 17
- Agent Platform Skill RegistryInteract with the Gemini Enterprise Agent Platform Skill Registry to create and search for available skills. Use this skill to enable agents to register functionality or discover new capabilities.Votes: 0GitHub stars: 17
- Quarkus SecurityQuarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security.Votes: 0GitHub stars: 17
- Quarkus SecurityQuarkus認証、認可、JWT/OIDC、RBAC、入力検証、CSRF、シークレット管理、依存関係セキュリティのセキュリティベストプラクティス。Votes: 0GitHub stars: 17
- Homelab Wireguard VpnホームラボWireGuard VPN設定、リモートアクセス、キー管理、およびエンドツーエンド暗号化。Votes: 0GitHub stars: 17
- Uspeedo Email Sending ChannelSends user-authorized transactional email via uSpeedo API with ACCESSKEY credentials (env preferred). Before SendEmail, calls GetSenderList to resolve SendEmail (default first enabled sender; user may override). Requires explicit confirmation of sender, recipients, subject, and content before sending.Votes: 0GitHub stars: 14
- Toolweb Database Security AuditComprehensive API for processing database security audits and generating detailed compliance reports across access control, encryption, network security, and backup domains.Votes: 0GitHub stars: 14
- Slack WorkspaceSend and manage messages, channels, and files in Slack workspaces — powered by ClawLink.Votes: 0GitHub stars: 14
- Porteden EmailSecure Email Management - Gmail, Outlook & Exchange. Use when the user wants to read, search, or triage email; sending, replying, forwarding, deleting, or modifying require explicit user confirmation (gog-cli & gws secure alternative).Votes: 0GitHub stars: 14
- Maverick Slack McpSearch, read, and update Slack messages, channel history, canvases, and users via Slack's hosted MCP server (https://mcp.slack.com/mcp). Use when the user asks about Slack messages, channels, threads, canvases, users, or wants to send a Slack message.Votes: 0GitHub stars: 14