All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,845
- 1,327
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 17,185–17,208 of 31,845 skills
- Metasploit ExpertExpert-level Metasploit Framework skill for penetration testing, exploit development, and post-exploitation operations. Triggers: 'Metasploit', '渗透测试', '红队', '漏洞利用'. Works with: Claude Code, Codex, OpenCode, Cursor, Cline, OpenClaw, Kimi.Votes: 0GitHub stars: 2
- LocksmithExpert locksmith specializing in residential, commercial, and automotive lock services including emergency lockout response, key cutting, lock installation, master key systems, and security assessmentsVotes: 0GitHub stars: 2
- Information Security AdminExpert-level Information Security Administrator with deep expertise in security policy management, Identity and Access Management (IAM), SIEM/threat monitoring, vulnerability management, incident response, and regulatory compliance (ISO 27001, NIST CSF, SOC... Use when: information-security, iam, siem, vulnerability-management, incident-response.Votes: 0GitHub stars: 2
- Incident ResponderElite Incident Response skill with expertise in cyber attack detection, digital forensics, malware analysis, crisis management, and post-incident recovery. Transforms AI into a senior incident responder capable of leading breach investigations and coordinating crisis response. Use when: incident-response, digital-forensics, malware-analysis, breach-investigation, crisis-management, soc.Votes: 0GitHub stars: 2
- Import Export SpecialistLicensed Customs Broker and International Trade Specialist with 12+ years managing global supply chains, customs clearance, and trade compliance. Expert in HTS classification, Incoterms, FTA utilization, and supply chain security. Licensed by CBP, IIEI certified. Managed $500M+ in annual import/export value. Use when: customs clearance, trade compliance, import/export documentation, HTSVotes: 0GitHub stars: 2
- Icu NurseICU Nurse specializing in critical care nursing, life support management, hemodynamic monitoring, and emergency response. Use when managing ventilated patients, hemodynamic instability, or rapid patient deterioration in intensive care settings. Use when: healthcare, critical-care, icu, nursing, emergency.Votes: 0GitHub stars: 2
- Flight AttendantExpert-level Flight Attendant with FAA Certification and 10,000+ flight hours, specializing in cabin safety, passenger service, emergency procedures, and crew resource management. Expert-level Flight Attendant with FAA Certification and 10,000+ flight Use when: flight-attendan...Votes: 0GitHub stars: 2
- Crowdstrike SecurityExpert skill for crowdstrike-securityVotes: 0GitHub stars: 2
- Container Security ExpertExpert-level Container Security skill using Trivy, Snyk, and other tools for vulnerability scanning, compliance checking, and container hardening. Triggers: '容器安全', '漏洞扫描', 'Trivy', 'Docker安全', 'K8s安全'.Votes: 0GitHub stars: 2
- Check Security ReviewAudit code for security vulnerabilities, injection risks, hardcoded secrets, and proper input validation.Votes: 0GitHub stars: 2
- Burpsuite ExpertExpert-level Burp Suite skill for web application penetration testing, vulnerability scanning, and security assessment. Covers proxy configuration, active/passive scanning, Intruder/Repeater, and OWASP Top 10 testing. Use when: burpsuite, web-security, penetration-testing, owasp, web-vulnerabilities.Votes: 0GitHub stars: 2
- Border InspectorSenior border inspector specializing in immigration control, passport verification, security screening, and traveler risk assessmentVotes: 0GitHub stars: 2
- Aquaculture ExpertExpert aquaculture specialist with 15+ years in freshwater/marine fish farming, shrimp culture, and RAS systems. Specializes in water quality management (DO, pH, ammonia), disease diagnosis, feeding optimization (FCR 1.2-1.8), and production system design. Use when: aquaculture, fish-farming, shrimp-farming, water-quality, disease-management.Votes: 0GitHub stars: 2
- Ai Security EngineerExpert AI Security Engineer specializing in adversarial machine learning, LLM security, model supply chain protection, and MLSecOps. Use when: securing LLM applications, evaluating model robustness, implementing differential privacy, conducting authorized AI red-teaming, securing ML pipelines, or mapping AI systems to EU AI Act/NIST AI RMF.Votes: 0GitHub stars: 2
- Ai Safety ResearcherExpert AI Safety Researcher with deep specialization in LLM alignment, Constitutional AI, RLHF/DPO, red-teaming, interpretability, and safety evaluation frameworksVotes: 0GitHub stars: 2
- Agent Persona DesignerExpert-level Agent Persona Designer specializing in crafting agent personalities, character traits, and behavioral styles with strict security policies that prevent system prompt leakage, PII exposure, sensitive data disclosure, and prompt injection. Use when: agent-design, persona, safety, privacy, security.Votes: 0GitHub stars: 2
- Skill AuditRead-only static security audit of Claude Code skills, commands, and plugins. Analyzes SKILL.md frontmatter, body content, supporting scripts, and hooks for security risks. Use this skill when the user asks to "audit a skill", "review skill security", "check SKILL.md for risks", "scan a plugin for dangerous patterns", "verify skill safety", "check skill permissions", "analyze skill hooks", "audit a skill from GitHub", "review a remote skill", "check a skill by URL", or needs a security assess...Votes: 0GitHub stars: 20
- SecurityAgentOperations Agent--> <!-- AUTHOR_SIGNATURE: 9a7f3c2e-MD-BABU-MIA-2026-MSSM-SECURE --> --- name: 'security-agent-operations' description: 'Operate security-focused coding agents with scoped authorization, lab isolation, adversarial workflows, tool boundaries, and defensive validation inspired by Raptor.' measurable_outcome: 'Execute skill workflow successfully with valid output within 15 minutes.' allowed-tools: - read_file - run_shell_command - web_fetch ---Votes: 0GitHub stars: 7
- Shield Kms Byok SetupConfigure Shield Platform Encryption with customer-supplied (BYOK) or customer-held (Cache-Only Key Service) tenant secrets, rotate them, and recover. NOT for Classic Encryption or field masking.Votes: 0GitHub stars: 3
- Security Incident ResponseWhen to use: active or suspected Salesforce org compromise, unauthorized access investigation, attacker containment, forensic evidence collection from EventLogFile/LoginHistory, session revocation, OAuth token cleanup, eradication of attacker persistence, and post-incident recovery verification. Trigger keywords: org compromised, suspicious login, attacker access, session revocation, forensic investigation, breach response, event log forensics, login anomaly investigation, incident response r...Votes: 0GitHub stars: 3
- Security Health CheckUse when running, interpreting, or acting on Salesforce Security Health Check results — reading the score, understanding risk categories, evaluating specific settings, creating or importing a custom baseline, querying the Tooling API programmatically, or planning remediation from findings. Triggers: 'security health check score', 'health check failing settings', 'custom baseline', 'remediate health check findings', 'fix risk'. NOT for org hardening implementation, permission model design, or ...Votes: 0GitHub stars: 3
- Login ForensicsInvestigate Salesforce login activity using LoginHistory, IdentityVerificationHistory, and Login Forensics (Event Monitoring add-on): reconstruct per-user login timelines, identify failed logins, analyze source IPs, review identity verification events, and configure Login Flows for step-up authentication. NOT for MFA setup (use org-setup-and-configuration). NOT for downloading EventLogFile CSVs or configuring real-time threat detection (use event-monitoring).Votes: 0GitHub stars: 3
- Guest User SecurityUse when hardening the Experience Cloud guest user profile, controlling unauthenticated access to records and Apex, or investigating data exposure through guest SOQL. Covers object permissions, sharing model enforcement for unauthenticated users, and Apex execution context. NOT for Experience Cloud site creation (use Experience Cloud skills) or for authenticated external user security (use security/experience-cloud-security).Votes: 0GitHub stars: 3
- Event MonitoringShield Event Monitoring: event log types, downloading logs via REST API and SOQL, real-time event monitoring with streaming API, and threat detection policies. NOT for debug logs (use debug-logs-and-developer-console). NOT for custom platform event publishing/subscribing (use platform-events-apex).Votes: 0GitHub stars: 3