All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,293
- 1,304
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 15,913–15,936 of 31,293 skills
- Ecc Homelab Wireguard VpnWireGuard VPN server setup, peer configuration, key generation, split tunneling vs full tunnel routing, and remote access to a home network from mobile and laptop clients.Votes: 0GitHub stars: 9
- Ecc Hipaa ComplianceHIPAA-specific entrypoint for healthcare privacy and security work. Use when a task is explicitly framed around HIPAA, PHI handling, covered entities, BAAs, breach posture, or US healthcare compliance requirements.Votes: 0GitHub stars: 9
- Ecc Healthcare Phi ComplianceProtected Health Information (PHI) and Personally Identifiable Information (PII) compliance patterns for healthcare applications. Covers data classification, access control, audit trails, encryption, and common leak vectors.Votes: 0GitHub stars: 9
- Ecc Fastapi PatternsFastAPI patterns for async APIs, dependency injection, Pydantic request and response models, OpenAPI docs, tests, security, and production readiness.Votes: 0GitHub stars: 9
- Ecc Eval HarnessFormal evaluation framework for Claude Code sessions implementing eval-driven development (EDD) principlesVotes: 0GitHub stars: 9
- Ecc Django SecurityDjango security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.Votes: 0GitHub stars: 9
- Ecc Defi Amm SecuritySecurity checklist for Solidity AMM contracts, liquidity pools, and swap flows. Covers reentrancy, CEI ordering, donation or inflation attacks, oracle manipulation, slippage, admin controls, and integer math.Votes: 0GitHub stars: 9
- TriageTriage a batch of raw security findings. Verify each is real,Votes: 0GitHub stars: 9
- Threat ModelBuild a threat model for a target codebase. Three modes: "interview" walks an application owner through the four-question framework and produces a threat model from their answers; "bootstrap" derives a threat model from the code plus past vulnerabilities (CVEs, git history, pentest reports) when no owner is available; "bootstrap-then-interview" chains the two when both owner and codebase are present. All write THREAT_MODEL.md in a shared schema. Use when asked to "threat model", "build a thre...Votes: 0GitHub stars: 9
- CustomizeAdapt this C/C++ ASAN vulnerability pipeline to a different vulnerability class, target shape, language, or detection mechanism. Use when the user wants to port, migrate, retarget, customize, or fork the pipeline for something other than C/C++ memory-safety bugs — web apps, smart contracts, deserialization, ML systems, or any other domain.Votes: 0GitHub stars: 9
- Osint MethodologyComprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments. Covers the 5-stage recon pipeline, asset-graph discipline, severity rubric, confidence upgrade workflows, time budgeting, identity-fabric mapping, breach×identity correlation, detectability tagging, detection-aware probing, WAF/CDN bypass, vulnerability prioritization, phishing infrastructure planning, bug bounty submission, and client deliverable templates. Use when planning or executi...Votes: 0GitHub stars: 9
- Hermes A2a SetupInstall and configure hermes-a2a plugin for agent-to-agent communication. Based on Google's A2A protocol. When user says "a2a"、"agent对话"、"agent通信"、 "给agent发消息"、"跟别的agent说话"、"agent间通信"时加载。Votes: 0GitHub stars: 9
- Security ReviewSecurity review of the diff — the third review axis alongside Standards and Spec. Reviews for injection, auth, secrets, deserialization, SSRF, path traversal, unsafe operations, and dependency confusion. Use as a parallel sub-agent with fresh context (diff-only, anti-anchored) during the review phase.Votes: 0GitHub stars: 10
- Flow InitInitialize, inspect, resume, or migrate portable PWDEV Flow project state. Use when the user asks to set up PWDEV Flow, adopt an existing repository or legacy PWDEV Code workspace, resume its workflow, or diagnose its current state.Votes: 0GitHub stars: 3
- Flow HealthDiagnose repository and PWDEV Flow health without changing the project. Use when the user asks for a health check, workspace consistency check, dependency assessment, readiness report, or evidence-based scorecard.Votes: 0GitHub stars: 3
- DevsecopsSegurança de infraestrutura e pipeline — Trivy, Falco, CrowdSec, Fail2Ban, WAF, TLS, IAM, secrets, OWASP, Security Hub. Use quando o usuário disser "segurança", "vulnerabilidade", "CVE", "hardening", "WAF", "secrets", "exposto", "auditoria de segurança", "pentest".Votes: 0GitHub stars: 3
- Tauri StingerTauri 2 engineering for desktop and mobile: updates, migration, IPC, capabilities, sidecars, AI runtimes, persistence, signing, updater, testing, and distribution. Use for Tauri-specific work.Votes: 0GitHub stars: 95
- Security StingerSecurity audit for SvelteKit, Neon/Drizzle, WorkOS, Stripe, Vercel, Doppler, and GoHighLevel. First gate of the Ship Gate - scans, triages, and remediates vulnerabilities before quality-stinger.Votes: 0GitHub stars: 95
- Http Rest Fundamentals StingerAudit HTTP and REST behavior. Use for methods, status codes, headers, caching, CORS, conditional requests, or API semantics. Read README.md for the guide map.Votes: 0GitHub stars: 95
- Highlevel Ai Studio StingerHighLevel AI Studio specialist for Vibe sites, Content AI, Funnel & Website AI, and WordPress AI pages. Use for HighLevel AI content, site building, publishing, or troubleshooting.Votes: 0GitHub stars: 95
- Elevenlabs Api StingerElevenLabs API integration for speech, voices, streaming, webhooks, usage, and key boundaries. Use for ElevenLabs API implementation, review, or troubleshooting.Votes: 0GitHub stars: 95
- Dependency Audit StingerAudit dependencies for the target repository's ecosystem: lockfiles, vulnerability triage, SBOM and provenance. Use for supply-chain or publish safety; Hivemind is a worked npm example.Votes: 0GitHub stars: 95
- Auth StingerDesign and implement authentication. Use for provider choice, OAuth, passkeys, MFA, RBAC, sessions, or B2B SSO. Read README.md for the guide map.Votes: 0GitHub stars: 95
- ReviewRun pipeline Stage 6 (Code Review) for a project. Reviews the full branch diff against conventions, security requirements, spec, and code quality. Produces a review-report.md with categorized findings and a verdict.Votes: 0GitHub stars: 3