All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,150
- 1,298
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 15,265–15,288 of 31,150 skills
- Security Threat ModelerConducts systematic security analyses using methodologies like STRIDE to identify vulnerabilities in software architectures and propose mitigations.Votes: 0GitHub stars: 14
- Security Implementation GuideComprehensive security patterns for authentication, authorization, input validation, and common vulnerability preventionVotes: 0GitHub stars: 14
- Security Essentials PackCurated bundle of essential security skills for building secure applications. Includes threat modeling, hardening guides, audit checklists, compliance frameworks, and contract analysis. Use when establishing security practices for a project.Votes: 0GitHub stars: 14
- Gdpr Compliance CheckAudits web applications and architectures for compliance with GDPR, CCPA, and other privacy regulations, focusing on consent, data minimization, and user rights.Votes: 0GitHub stars: 14
- Specstory GuardInstall a pre-commit hook that scans .specstory/history for secrets before commits. Run when user says "set up secret scanning", "install specstory guard", "protect my history", or "check for secrets".Votes: 0GitHub stars: 14
- Oauth Flow ArchitectImplements OAuth 2.0 and OpenID Connect authentication flows with proper security, token management, and common provider integrations.Votes: 0GitHub stars: 14
- Dotfile Systems ArchitectGuides the creation of a "Minimal Root" home directory using the XDG Base Directory specification and a Bare Git Repository. Manages config separation, secrets, and cross-platform syncing.Votes: 0GitHub stars: 14
- Azure Service BusExpert knowledge for Azure Service Bus development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when using queues/topics, sessions, filters, geo-replication/DR, or Premium scaling and throughput limits, and other Azure Service Bus related development tasks. Not for Azure Event Hubs (use azure-event-hubs), Azure Event Grid (use azure-event-grid), Azure Re...Votes: 0GitHub stars: 14
- Azure SecurityExpert knowledge for Azure Security development including troubleshooting, best practices, decision making, security, configuration, integrations & coding patterns, and deployment. Use when securing AKS workloads, SBOMs, Notation image signing, Key Vault/HSM keys, or Customer Lockbox access, and other Azure Security related development tasks. Not for Azure Defender For Cloud (use azure-defender-for-cloud), Azure Firewall (use azure-firewall), Azure DDos Protection (use azure-ddos-protection),...Votes: 0GitHub stars: 14
- Azure Metrics AdvisorExpert knowledge for Azure AI Metrics Advisor development including decision making, security, configuration, and integrations & coding patterns. Use when configuring data feeds, tuning anomaly detection, managing alert hooks, securing creds, or calling Metrics Advisor APIs, and other Azure AI Metrics Advisor related development tasks. Not for Azure AI Anomaly Detector (use azure-anomaly-detector), Azure Monitor (use azure-monitor), Azure Stream Analytics (use azure-stream-analytics).Votes: 0GitHub stars: 14
- Azure Event HubsExpert knowledge for Azure Event Hubs development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when using Kafka clients/Streams, .NET SDK, Flink/Spark, geo-disaster recovery, or Premium processing units, and other Azure Event Hubs related development tasks. Not for Azure Service Bus (use azure-service-bus), Azure Event Grid (use azure-event-grid), Azure ...Votes: 0GitHub stars: 14
- Azure BastionExpert knowledge for Azure Bastion development including best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and integrations & coding patterns. Use when configuring Bastion for AKS private clusters, VM scale sets, Entra ID auth, hub/spoke VNets, or native SSH/RDP clients, and other Azure Bastion related development tasks. Not for Azure Virtual Network (use azure-virtual-network), Azure Virtual Machines (use azure-virtual-machines), Azure...Votes: 0GitHub stars: 14
- Azure BackupExpert knowledge for Azure Backup development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when backing up Azure VMs, SQL/SAP HANA/PostgreSQL, Files/Blobs/Disks, configuring vaults/policies, or using CLI/PowerShell/REST, and other Azure Backup related development tasks. Not for Azure Site Recovery (use azure-site-recovery), Azure Virtual Machines (use az...Votes: 0GitHub stars: 14
- Azure App ConfigurationExpert knowledge for Azure App Configuration development including troubleshooting, best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when using feature flags, dynamic refresh, snapshots, Key Vault integration, or App Configuration REST APIs, and other Azure App Configuration related development tasks. Not for Azure App Service (use azure-app-service), Azure Key Vault (use azure-key-vault), Azure Automation (use azur...Votes: 0GitHub stars: 14
- Gdpr Breach Sentinel Oliver Schmidt PrietzElite incident response and legal compliance guidance for data breaches under GDPR Articles 33 & 34. Use when: (1) User reports a data breach or security incident, (2) User asks about breach notification obligations or deadlines, (3) User mentions "72 hours", Art. 33, Art. 34, or notification requirements, (4) Discussion involves security incidents affecting personal data, (5) User needs breach risk assessment using ENISA methodology, (6) User mentions "Data Breach" or "Incident" or "Data Lea...Votes: 0GitHub stars: 14
- Contract Review AnthropicReview contracts against your organization's negotiation playbook, flagging deviations and generating redline suggestions. Use when reviewing vendor contracts, customer agreements, or any commercial agreement where you need clause-by-clause analysis against standard positions.Votes: 0GitHub stars: 14
- Vip LoanBinance Vip-loan request using the Binance API. Authentication requires API key and secret key.Votes: 0GitHub stars: 14
- FiatBinance Fiat request using the Binance API. Authentication requires API key and secret key.Votes: 0GitHub stars: 14
- Analyzing Pdf Malware With PdfidAnalyzes malicious PDF files using PDFiD, pdf-parser, and peepdf to identify embedded JavaScript, shellcode, exploits, and suspicious objects without opening the document. Determines the attack vector and extracts embedded payloads for further analysis. Activates for requests involving PDF malware analysis, malicious document analysis, PDF exploit investigation, or suspicious attachment triage.Votes: 0GitHub stars: 14
- Production AuditAudit a shipped repo for production-readiness gaps across RLS, webhooks, secrets, grants, Stripe idempotency, mobile UX, and deployment health.Votes: 0GitHub stars: 14
- Zo TwitterLet Zo use your X (Twitter) accountVotes: 0GitHub stars: 14
- Zo LinkedinLinkedIn tool for searching profiles, checking messages, and summarizing your feed using session cookies.Votes: 0GitHub stars: 14
- Mcporter SetupInstall MCPorter and configure MCP servers from scratch. Use when setting up MCP integration for the first time, adding new MCP servers, or troubleshooting MCP connectivity. Handles installation, configuration, secrets management, and connection testing.Votes: 0GitHub stars: 14
- WalletThe agent's wallet for EVM chain transactions and raw signing. Use this skill when users want to create a wallet, transfer tokens, swap on DEXs, interact with smart contracts, or sign messages. Triggers on "wallet", "create wallet", "transfer ETH", "swap tokens", "send transaction", "check balance", "EVM wallet", "raw signer", "sign message".Votes: 0GitHub stars: 14