All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,293
- 1,304
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 16,225–16,248 of 31,293 skills
- Pr ReviewLightweight per-PR security gate that detects Critical and High severity OWASP/LLM issues in changed files only. Use when scanning a small git diff in CI for blocking findings. Single-pass; does not dispatch subagents and does not perform threat modeling or attack-chain analysis.Votes: 0GitHub stars: 20
- Path TraversalDetects file operations with user-controlled paths vulnerable to ../Votes: 0GitHub stars: 20
- Open RedirectDetects redirects to user-controlled URLs that enable phishing and OAuthVotes: 0GitHub stars: 20
- Oauth ImplementationDetects weak JWT validation, loose redirect_uri matching, and missing stateVotes: 0GitHub stars: 20
- Numeric Trust BoundaryDetects untrusted numeric input that flows through a conversion, cast, or parser into a length, size, index, or authorization comparison without bounds-checking the post-conversion value. Use when writing or modifying code that calls atoi/strtol/parseInt/strconv.Atoi on user-supplied or network-supplied input, casts between signed and unsigned integer types, narrows an integer width before a bounds check, or uses an untrusted integer as an allocation size, array index, file offset, length arg...Votes: 0GitHub stars: 20
- Nosql InjectionDetects MongoDB and other NoSQL queries that mix user input into operators orVotes: 0GitHub stars: 20
- Multi Agent TrustDetects agent-to-agent calls without authentication, authorization, orVotes: 0GitHub stars: 20
- Model TheftDetects inference endpoints without authentication or throttling, allowingVotes: 0GitHub stars: 20
- Memory Api MisuseDetects function-local misuse of memory and resource APIs in C, C++, and Rust unsafe — allocations whose return value is not checked, frees on error paths that race the success path, locks initialized incorrectly, file descriptors leaked across exec. Use when writing or modifying C or C++ code that calls malloc/calloc/realloc/free, mmap/munmap, pthread_mutex_*, fopen/open, or any kernel/library memory or resource primitive. Use when writing Rust code inside an unsafe block that calls a raw al...Votes: 0GitHub stars: 20
- Mcp SecurityDetects MCP tool handlers vulnerable to malicious inputs, hardcoded secrets,Votes: 0GitHub stars: 20
- Mass AssignmentDetects ORM create/update calls that spread request bodies without an explicitVotes: 0GitHub stars: 20
- Logging FailuresDetects missing security event logs, logged secrets, and log injection throughVotes: 0GitHub stars: 20
- Llm Supply ChainDetects compromised or backdoored models loaded from unverified sources,Votes: 0GitHub stars: 20
- Ipc SecurityDetects IPC receivers that accept input without verifying caller identity. UseVotes: 0GitHub stars: 20
- Integrity FailuresDetects unsafe deserialization, unverified software updates, and tampered CIVotes: 0GitHub stars: 20
- Insecure Plugin DesignDetects LLM tool definitions without parameter validation, allowing promptVotes: 0GitHub stars: 20
- Insecure Output HandlingDetects unsafe rendering or execution of LLM output that enables XSS, commandVotes: 0GitHub stars: 20
- Insecure Local StorageDetects sensitive data written to unprotected local files, preference stores,Votes: 0GitHub stars: 20
- Insecure DesignDetects missing security controls — rate limits, MFA, re-auth — that shouldVotes: 0GitHub stars: 20
- InjectionDetects SQL, command, and template injection caused by user input reaching anVotes: 0GitHub stars: 20
- HotspotsMaps security-sensitive code locations in a codebase to focus review effort.Votes: 0GitHub stars: 20
- Header InjectionDetects HTTP response header construction from user input vulnerable to CRLFVotes: 0GitHub stars: 20
- Hardcoded SecretsDetects API keys, passwords, tokens, and credentials embedded directly inVotes: 0GitHub stars: 20
- File UploadDetects file upload handlers that accept executable content or write to web-Votes: 0GitHub stars: 20