All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,845
- 1,327
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 17,257–17,280 of 31,845 skills
- Rfc 8693 Token ExchangeToken exchange for delegation, impersonation, and cross-domain identity federation. Use when implementing or validating rfc 8693 token exchange protocol compliance.Votes: 0GitHub stars: 13
- Rfc 7662 IntrospectionToken validation endpoint for resource servers and admin panels. Use when implementing or validating rfc 7662 introspection protocol compliance.Votes: 0GitHub stars: 13
- Rfc 7636 PkceProof Key for Code Exchange implementation for secure OAuth 2.0 authorization. Use when implementing or validating rfc 7636 pkce protocol compliance.Votes: 0GitHub stars: 13
- Rfc 7519 JwtComplete JWT implementation guide with claims validation and multi-tenancy patterns. Use when implementing or validating rfc 7519 jwt protocol compliance.Votes: 0GitHub stars: 13
- Rfc 6750 Bearer TokenImplementation guide for OAuth 2.0 Bearer Token Usage with multi-tenancy security. Use when implementing or validating rfc 6750 bearer token protocol compliance.Votes: 0GitHub stars: 13
- Rfc 6749 Oauth2Complete implementation guide for OAuth 2.0 Authorization Framework with multi-tenancy support. Use when implementing or validating rfc 6749 oauth2 protocol compliance.Votes: 0GitHub stars: 13
- Rezvani Soc2 ComplianceUse when the user asks to prepare for SOC 2 audits, map Trust Service Criteria, build control matrices, collect audit evidence, perform gap analysis, or assess SOC 2 Type I vs Type II readiness.Votes: 0GitHub stars: 13
- Rezvani Skill Security Auditor>. Use when you need help with skill security auditor.Votes: 0GitHub stars: 13
- Rezvani Senior SecuritySecurity engineering toolkit for threat modeling, vulnerability analysis, secure architecture, and penetration testing. Includes STRIDE analysis, OWASP guidance, cryptography patterns, and security scanning tools. Use when the user asks about security reviews, threat analysis, vulnerability assessments, secure coding practices, security audits, attack surface analysis, CVE remediation, or security best practices.Votes: 0GitHub stars: 13
- Rezvani Senior SecopsSenior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices. Runs SAST/DAST scans, generates CVE remediation plans, checks dependency vulnerabilities, creates security policies, enforces secure coding patterns, and automates compliance checks against SOC2, PCI-DSS, HIPAA, and GDPR. Use when conducting a security review or audit, responding to a CVE or security incident, hardening infrastructure, implementing authen...Votes: 0GitHub stars: 13
- Rezvani Security Pen TestingUse when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security assessments. Covers static analysis, dependency scanning, secret detection, API security testing, and pen test report generation.Votes: 0GitHub stars: 13
- Rezvani Red TeamUse when planning or executing authorized red team engagements, attack path analysis, or offensive security simulations. Covers MITRE ATT&CK kill-chain planning, technique scoring, choke point identification, OPSEC risk assessment, and crown jewel targeting.Votes: 0GitHub stars: 13
- Rezvani Ms365 Tenant ManagerMicrosoft 365 tenant administration for Global Administrators. Automate M365 tenant setup, Office 365 admin tasks, Azure AD user management, Exchange Online configuration, Teams administration, and security policies. Generate PowerShell scripts for bulk operations, Conditional Access policies, license management, and compliance reporting. Use for M365 tenant manager, Office 365 admin, Azure AD users, Global Administrator, tenant configuration, or Microsoft 365 automation.Votes: 0GitHub stars: 13
- Rezvani Information Security Manager Iso27001ISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies. Use for ISMS design, security risk assessment, control implementation, ISO 27001 certification, security audits, incident response, and compliance verification. Covers ISO 27001, ISO 27002, healthcare security, and medical device cybersecurity.Votes: 0GitHub stars: 13
- Rezvani Incident ResponseUse when a security incident has been detected or declared and needs classification, triage, escalation path determination, and forensic evidence collection. Covers SEV1-SEV4 classification, false positive filtering, incident taxonomy, and NIST SP 800-61 lifecycle.Votes: 0GitHub stars: 13
- Rezvani Fda Consultant SpecialistFDA regulatory consultant for medical device companies. Provides 510(k)/PMA/De Novo pathway guidance, QSR (21 CFR 820) compliance, HIPAA assessments, and device cybersecurity. Use when user mentions FDA submission, 510(k), PMA, De Novo, QSR, premarket, predicate device, substantial equivalence, HIPAA medical device, or FDA cybersecurity.Votes: 0GitHub stars: 13
- Rezvani Ai SecurityUse when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS technique mapping, injection signature detection, and adversarial robustness scoring.Votes: 0GitHub stars: 13
- Rezvani Ai Act Readiness/cs:ai-act-readiness <system> — EU AI Act 6-question forcing interrogation. Use during AI-system intake, before EU deployment, or during annual compliance refresh as Article 113 obligations phase in (2025-02-02 / 2025-08-02 / 2026-08-02 / 2027-08-02). Use when you need help with ai act readiness.Votes: 0GitHub stars: 13
- Rezvani Adversarial ReviewerAdversarial code review that breaks the self-review monoculture. Use when you want a genuinely critical review of recent changes, before merging a PR, or when you suspect Claude is being too agreeable about code quality. Forces perspective shifts through hostile reviewer personas that catch blind spots the author's mental model shares with the reviewer.Votes: 0GitHub stars: 13
- Redteam Llm ExpertJailbreak suites, garak, PyRIT, Promptfoo red-team — adversarial testing for LLM apps. Use when evaluating, monitoring, or observing LLM performance with redteam llm.Votes: 0GitHub stars: 13
- Php Laravel Security Audit AgentAutonomous agent that audits PHP/Laravel codebases for security vulnerabilities based on OWASP and RFC standards. Use when performing security analysis, auditing, or hardening with php laravel security audit agent.Votes: 0GitHub stars: 13
- Pci Dss ComplianceExpert in PCI-DSS compliance for payment card security - cardholder data protection, network security, and audit controls. Use when performing security analysis, auditing, or hardening with pci dss compliance.Votes: 0GitHub stars: 13
- Oauth Authorization Server ValidatorRFC compliance validator for OAuth Authorization Server implementations - OAuth 2.0, JWT, PKCE, DPoP, mTLS. Use when you need help with oauth authorization server validator.Votes: 0GitHub stars: 13
- Mythos Web Exploit CrafterWeb vulnerability exploitation chains for in-scope assets — SSRF, prototype pollution, deserialization, JWT, ATO. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving web exploit crafter.Votes: 0GitHub stars: 13