Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 31,166
pages available: 1,299

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 15,313–15,336 of 31,166 skills

Vc Brave SearchBWeb and news search powered by Brave Search. Use this skill when users want to search the web, find news articles, or look up current information. Pay-per-call via Vincent credit system. Triggers on "search the web", "web search", "brave search", "search news", "find information", "look up", "current events".securitygobashVotes: 0GitHub stars: 14
Reddit ApiBReddit API with PRAW (Python) and Snoowrap (Node.js)securitytypescriptpythonVotes: 0GitHub stars: 14
Workspace MssqlAExecute read-only SQL queries against multiple Microsoft SQL Server databases. Use when: (1) querying MSSQL/SQL Server databases, (2) exploring database schemas/tables, (3) running SELECT queries for data analysis, (4) checking database contents. Supports multiple database connections with descriptions for intelligent auto-selection. Blocks all write operations (INSERT, UPDATE, DELETE, DROP, etc.) for safety.securitypythonbashVotes: 0GitHub stars: 14
Workspace AtlassianAManage Jira issues and Confluence wiki pages in Atlassian Cloud. Use when: (1) searching/creating/updating Jira issues with JQL, (2) searching/reading/creating Confluence pages with CQL, (3) managing Jira workflows, transitions, and comments, (4) browsing Confluence spaces and page hierarchies. Supports OAuth 2.1 via MCP server (recommended) or API token authentication (fallback).securitypythongoVotes: 0GitHub stars: 14
Neon AutomationAAutomate Neon serverless Postgres operations -- manage projects, branches, databases, roles, and connection URIs via the Composio MCP integration.securityapidatabaseVotes: 0GitHub stars: 14
Context ManagerAUse for managing shared state, information retrieval, and data synchronization when multiple agents need coordinated access to context and metadata.securitygorailsVotes: 0GitHub stars: 14
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
ExamplesAGoal: build a skill that finds real vulnerabilities while minimizing false positives.securityrustgoVotes: 0GitHub stars: 14
Oc Vulnerability ScannerAAdvanced vulnerability analysis for OWASP 2025, supply chain security, attack surface mapping, and risk prioritization.securitypythonrustVotes: 0GitHub stars: 14
Physiology ExpertAExpert-level physiology covering organ system function, homeostasis, cardiovascular physiology, respiratory physiology, renal physiology, endocrinology, and integrative physiology.securitygoVotes: 0GitHub stars: 14
Payment IntegrationAUse this agent when implementing payment systems, integrating payment gateways, or handling financial transactions that require PCI compliance, fraud prevention, and secure transaction processing.securityrustrailsVotes: 0GitHub stars: 14
Dependency ManagerAUse this agent when you need to audit dependencies for vulnerabilities, resolve version conflicts, optimize bundle sizes, or implement automated dependency updates.securitypythongoVotes: 0GitHub stars: 14
Security AuditorAUse this agent when conducting comprehensive security audits, compliance assessments, or risk evaluations across systems, infrastructure, and processes. Invoke when you need systematic vulnerabilit...securityrailstestingVotes: 0GitHub stars: 14
Powershell Security HardeningAUse this agent when you need to harden PowerShell automation, secure remoting configuration, enforce least-privilege design, or align scripts with enterprise security baselines and compliance frame...securityshellapiVotes: 0GitHub stars: 14
Architect ReviewerAUse this agent when you need to evaluate system design decisions, architectural patterns, and technology choices at the macro level.securitygocode-reviewVotes: 0GitHub stars: 14
Ad Security ReviewerAUse this agent when you need to audit Active Directory security posture, evaluate privilege escalation risks, review identity delegation patterns, or assess authentication protocol hardening.securityrustshellVotes: 0GitHub stars: 14
Openai Security Threat ModelARepository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.securityrustgoVotes: 0GitHub stars: 14
Gha Security ReviewAGitHub Actions security review for workflow exploitation vulnerabilities. Use when asked to "review GitHub Actions", "audit workflows", "check CI security", "GHA security", "workflow security review", or review .github/workflows/ for pwn requests, expression injection, credential theft, and supply chain attacks. Exploitation-focused with concrete PoC scenarios.securityrustshellVotes: 0GitHub stars: 14
Penetration Testing ExpertAConduct penetration tests on web apps, APIs, and infrastructure. Covers recon, exploitation techniques, reporting, and defensive recommendations.securitypythongoVotes: 0GitHub stars: 14
Penetration TesterAUse this agent when you need to conduct authorized security penetration tests to identify real vulnerabilities through active exploitation and validation. Use penetration-tester for offensive secur...securityawstestingVotes: 0GitHub stars: 14
Vibesec SkillsCThis skill helps Claude write secure web applications. Use this when working on any web application or when a user requests a scan or audit to ensure security best practices are followed.securityjavascriptpythonVotes: 0GitHub stars: 14
Security BluebookACreate or refine a concise, normative security policy ("Blue Book") for sensitive applications. Use when users need a threat model, data classification rules, auth/session policy, logging and audit requirements, retention/deletion expectations, incident response, or security gates for apps handling PII/PHI/financial data.securityrustgoVotes: 0GitHub stars: 14
Appsec ExpertAExpert-level application security. Use when identifying security vulnerabilities, implementing input validation, preventing XSS/CSRF/SQLi/SSRF, securing APIs, implementing secure coding practices, or performing threat modeling. Also use when the user mentions 'OWASP', 'XSS', 'CSRF', 'SQL injection', 'security vulnerability', 'threat model', 'penetration testing', 'CVE', or 'security audit'.securityjavascripttypescriptVotes: 0GitHub stars: 14
Auth ExpertAExpert-level authentication and authorization. Use when implementing OAuth2, OIDC, JWT, session management, RBAC, ABAC, MFA, SSO, password hashing, or integrating auth providers (Auth0, Clerk, NextAuth, Supabase Auth). Also use when the user mentions 'OAuth', 'JWT', 'OIDC', 'RBAC', 'MFA', 'SSO', 'session management', 'refresh token', 'access token', or 'login flow'.securitytypescriptpythonVotes: 0GitHub stars: 14
Oc DepguardADependency audit, vulnerability scanning, and license compliance.securityawsdocumentationVotes: 0GitHub stars: 14