All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,293
- 1,304
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 15,937–15,960 of 31,293 skills
- Security Audit审计安全漏洞，覆盖注入、XSS、CSRF、认证绕过、数据暴露等常见风险并生成含严重级别的修复报告。Votes: 0GitHub stars: 2
- Security Audit审计安全漏洞，覆盖注入、XSS、CSRF、认证绕过、数据暴露等常见风险并生成含严重级别的修复报告。Votes: 0GitHub stars: 2
- System ArchitectSenior System Architect for SaaS specifications. Security-first design with ISO 27001 compliance. Use for system architecture, tech specs, API design, technology choices, distributed systems, cloud infrastructure.Votes: 0GitHub stars: 9
- Code ReviewComprehensive code review for commits and pull requests. Covers security, TDD, code quality, and documentation standards.Votes: 0GitHub stars: 9
- Code ReviewComprehensive code review for commits and pull requests. Covers security, TDD, code quality, and documentation standards.Votes: 0GitHub stars: 9
- Aid Tech SpecAID Phase 2 - Technical Specification. Use for system architecture, API contracts, data models, security architecture, transitioning from PRD to implementation.Votes: 0GitHub stars: 9
- Few Tokens Matter Vlm AttacksDemonstrate that adversarial attacks on vision-language models need not target all tokens equally. Entropy-guided attacks identify high-entropy tokens (critical decision points) where perturbations have maximum impact, achieving comparable attack success with 80% fewer tokens targeted.Votes: 0GitHub stars: 6
- Answer Matching EvaluationEvaluate language models using open-ended answer generation and semantic matching instead of multiple choice, eliminating test-taking shortcuts and achieving near-perfect alignment with human judgment.Votes: 0GitHub stars: 6
- Agent Skills Security AnalysisEmpirically analyzes 31,132 agent skills to identify 14 distinct vulnerability patterns, finding 26.1% contain security flaws including data exfiltration, privilege escalation, and malicious intent risks that require mandatory vetting.Votes: 0GitHub stars: 6
- Release IroncrewPrepare, verify, version, and publish an IronCrew release through develop and main, including protected Docker Hub promotion and latest verification. Use when the user asks to release, cut a release, ship a version, bump the product version for release, or integrate dependency work into a release. Do not use for routine dependency updates, PR review alone, or deployment without release intent.Votes: 0GitHub stars: 2
- Github Repo ManagementClone, create, fork, configure, and manage GitHub repositories. Manage remotes, secrets, releases, and workflows. Works with gh CLI or falls back to git + GitHub REST API via curl.Votes: 0GitHub stars: 17
- XurlX/Twitter via xurl CLI: post, search, DM, media, v2 API.Votes: 0GitHub stars: 17
- XitterInteract with X/Twitter via the x-cli terminal client using official X API credentials. Use for posting, reading timelines, searching tweets, liking, retweeting, bookmarks, mentions, and user lookups.Votes: 0GitHub stars: 17
- Google WorkspaceGmail, Calendar, Drive, Contacts, Sheets, and Docs integration via Python. Uses OAuth2 with automatic token refresh. No external binaries needed — runs entirely with Google's Python client libraries in the Hermes venv.Votes: 0GitHub stars: 17
- Native McpBuilt-in MCP (Model Context Protocol) client that connects to external MCP servers, discovers their tools, and registers them as native Hermes Agent tools. Supports stdio and HTTP transports with automatic reconnection, security filtering, and zero-config tool injection.Votes: 0GitHub stars: 17
- Github AuthSet up GitHub authentication for the agent using git (universally available) or the gh CLI. Covers HTTPS tokens, SSH keys, credential helpers, and gh auth — with a detection flow to pick the right method automatically.Votes: 0GitHub stars: 17
- Marine Offshore EngineeringMarine and offshore engineering fundamentals for platform design, subseaVotes: 0GitHub stars: 17
- Gmail Multi AccountMulti-account Gmail management via himalaya CLI. Three accounts (aceengineer, achantav, skestates) with distinct triage rules, contact DBs, and tone profiles. Foundation skill for email automation.Votes: 0GitHub stars: 17
- Gmail Headless OauthManual OAuth2 token exchange for Gmail on headless servers. Bypass gmail-mcp-multiauth browser requirement. Generate auth URLs, exchange codes, manage multi-account credentials with auto-refresh.Votes: 0GitHub stars: 17
- Gmail Data ExtractionExtract structured data from Gmail emails using REST API (no pip dependencies). Covers inbox scanning, subject line regex extraction, email text parsing, thread-aware drafting, and legal-scan-before-commit workflow.Votes: 0GitHub stars: 17
- 1 Always Provide DefaultsSub-skill of json-config-loader: 1. Always Provide Defaults (+4).Votes: 0GitHub stars: 17
- 1 Image OptimizationSub-skill of docker: 1. Image Optimization (+4).Votes: 0GitHub stars: 17
- Common IssuesSub-skill of n8n: Common Issues (+1).Votes: 0GitHub stars: 17
- 5 Data Transformation With Code NodeSub-skill of n8n: 5. Data Transformation with Code Node (+1).Votes: 0GitHub stars: 17