All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,845
- 1,327
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 17,881–17,904 of 31,845 skills
- Skill AdapterThis skill enables Claude to automatically scan code and configuration files for potential data privacy vulnerabilities using the data-privacy-scanner plugin. It identifies sensitive data exposure, compliance violations, and other privacy-related risks. Use this skill when the user requests to "scan for data privacy issues", "check privacy compliance", "find PII leaks", "identify GDPR violations", or needs a "privacy audit" of their codebase. The skill is most effective when used on projects ...Votes: 0GitHub stars: 21
- Skill AdapterThis skill helps to identify Cross-Site Request Forgery (CSRF) vulnerabilities in web applications. It validates the implementation of CSRF protection mechanisms, such as synchronizer tokens, double-submit cookies, SameSite attributes, and origin validation. Use this skill when you need to analyze your application's security posture against CSRF attacks or when asked to "validate csrf", "check for csrf vulnerabilities", or "test csrf protection".Votes: 0GitHub stars: 21
- Skill AdapterThis skill enables Claude to validate Cross-Origin Resource Sharing (CORS) policies. It uses the cors-policy-validator plugin to analyze CORS configurations and identify potential security vulnerabilities. Use this skill when the user requests to "validate CORS policy", "check CORS configuration", "analyze CORS headers", or asks about "CORS security". It helps ensure that CORS policies are correctly implemented, preventing unauthorized cross-origin requests and protecting sensitive data.Votes: 0GitHub stars: 21
- Skill AdapterThis skill enables Claude to generate compliance reports based on various security standards and frameworks. It leverages the compliance-report-generator plugin to automate the report creation process. Use this skill when a user requests a "compliance report", "security audit report", or needs documentation for "regulatory compliance". The skill is particularly useful for generating reports related to standards like PCI DSS, HIPAA, SOC 2, or ISO 27001. It can also assist with documenting adhe...Votes: 0GitHub stars: 21
- Skill AdapterThis skill allows Claude to check infrastructure compliance against industry standards such as SOC2, HIPAA, and PCI-DSS. It analyzes existing infrastructure configurations and reports on potential compliance violations. Use this skill when the user asks to assess compliance, identify security risks related to compliance, or generate reports on compliance status for SOC2, HIPAA, or PCI-DSS. Trigger terms include: "compliance check", "SOC2 compliance", "HIPAA compliance", "PCI-DSS compliance", ...Votes: 0GitHub stars: 21
- Skill AdapterThis skill enables Claude to validate authentication implementations against security best practices and industry standards. It analyzes various authentication methods, including JWT, OAuth, session-based authentication, and API keys. Use this skill when you need to perform an authentication security check, assess password policies, evaluate MFA implementation, or analyze session security. Trigger this skill with phrases like "validate authentication," "authentication check," or "authcheck."Votes: 0GitHub stars: 21
- Skill AdapterThis skill enables Claude to perform automated fuzz testing on APIs to discover vulnerabilities, crashes, and unexpected behavior. It leverages malformed inputs, boundary values, and random payloads to generate comprehensive fuzz test suites. Use this skill when you need to identify potential SQL injection, XSS, command injection vulnerabilities, input validation failures, and edge cases in APIs. Trigger this skill by requesting fuzz testing, vulnerability scanning, or security analysis of an...Votes: 0GitHub stars: 21
- CollectionCreate EARS (Easy Approach to Requirements Syntax) formal requirements - Layer 3 artifact using WHEN-THE-SHALL-WITHIN formatVotes: 0GitHub stars: 24
- CollectionRun Bandit security analysis to find common security issues and vulnerabilities in Python code. Use when the user mentions Bandit, security analysis, vulnerability scanning, security audit, software composition analysis (SCA), or wants to check for security issues in Python code.Votes: 0GitHub stars: 24
- CollectionTransform prompts into structured TCRO format with phase-specific clarification. Automatically invoked by /ai-eng/research, /ai-eng/plan, /ai-eng/work, and /ai-eng/specify commands. Use when refining vague prompts, structuring requirements, or enhancing user input quality before execution.Votes: 0GitHub stars: 24
- CollectionTest for security vulnerabilities using OWASP principles. Use when conducting security audits, testing auth, or implementing security practices.Votes: 0GitHub stars: 24
- CollectionCredential exposure detection, OAuth flow validation, API key management testing, and data sanitization verification for n8n workflows. Use when validating n8n workflow security.Votes: 0GitHub stars: 24
- CollectionDebug and diagnose model errors in Pollinations services. Analyze logs, find error patterns, identify affected users. For taking action on user tiers, see tier-management skill.Votes: 0GitHub stars: 24
- CollectionCredential exposure detection, OAuth flow validation, API key management testing, and data sanitization verification for n8n workflows. Use when validating n8n workflow security.Votes: 0GitHub stars: 24
- CollectionSenior Security Engineer with 12+ years application security experience. Use when implementing authentication/authorization, configuring JWT/OAuth2, conducting security reviews, implementing rate limiting, ensuring GDPR compliance, or performing security scanning.Votes: 0GitHub stars: 24
- CollectionПолучение валидных JWT Bearer токенов для аутентификации MikoPBX REST API v3. Использовать когда нужно тестировать API эндпоинты, отлаживать проблемы аутентификации или при возникновении ошибок 401 Unauthorized. Автоматически обрабатывает вход с username/password и возвращает готовый к использованию access token.Votes: 0GitHub stars: 24
- CollectionMANDATORY skill for ALL commits. Must be used EVERY TIME before creating any git commit. No exceptions.Votes: 0GitHub stars: 24
- CollectionSPEC document authoring guide - YAML metadata, EARS syntax (5 patterns with Unwanted Behaviors), validation checklistVotes: 0GitHub stars: 24
- CollectionEnsures proper use of PAL MCP tools (thinkdeep, debug, codereview, consensus, planner) for complex tasks requiring deep analysis, multi-model collaboration, or systematic investigation. Auto-activates when: - User requests debugging, code review, or planning assistance - Complex problems require systematic investigation - Multi-model consensus needed for architectural decisions - Deep thinking required for root cause analysis Provides guidance on: - When to use each PAL MCP tool - Proper co...Votes: 0GitHub stars: 24
- CollectionModern authentication patterns with MFA, FIDO2, WebAuthn & PasskeysVotes: 0GitHub stars: 24
- CollectionSPEC writing standards with EARS format and TAG traceabilityVotes: 0GitHub stars: 24
- CollectionEnterprise configuration schema validation and management orchestratorVotes: 0GitHub stars: 24
- CollectionClaude Code hook execution strategies, timing models, sequencing patterns, and orchestration for automated workflow enforcement. Covers all hook types and execution timing models.Votes: 0GitHub stars: 24
- CollectionGenerate or update PRD documents interactively with the user. Use this skill when the user wants to create new product requirements, refine existing PRD docs, or document a new feature. Asks clarifying questions iteratively to produce complete, accurate requirements.Votes: 0GitHub stars: 24