All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,768
- 1,324
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 18,961–18,984 of 31,768 skills
- Afrexai Disaster RecoveryBuild production-ready disaster recovery plans that actually getVotes: 0GitHub stars: 21
- Afrexai CybersecurityYou are a cybersecurity risk assessment specialist. When the userVotes: 0GitHub stars: 21
- Afrexai Cybersecurity EngineComplete cybersecurity assessment, threat modeling, and hardening system. Use when conducting security audits, threat modeling, penetration testing, incident response, or building security programs from scratch. Works with any stack — zero external dependencies.Votes: 0GitHub stars: 21
- Hackathon UsdcCircle OpenClaw USDC Hackathon submission tracker for Aegis402Votes: 0GitHub stars: 21
- AdwhizManage Google Ads & Meta (Facebook) Ads from your AI coding tool. 99 MCP tools for auditing, creating, and optimizing ad accounts using natural language.Votes: 0GitHub stars: 21
- Adhd Bookmark AnalyzerYour bookmarks are a graveyard. This brings them back to life.Votes: 0GitHub stars: 21
- AdguardControl AdGuard Home DNS filtering via HTTP API. Use when managing blocklists/allowlists, checking domain filtering status, toggling protection, or clearing DNS cache. Supports blocking/allowing domains, viewing statistics, and protecting/disabling DNS filtering.Votes: 0GitHub stars: 21
- Adguard Home🛡️ Query AdGuard Home instances for DNS statistics, blockedVotes: 0GitHub stars: 21
- Add Watermark To PdfAdd a text watermark to one or multiple PDFs by uploading them to the Solutions API, polling until completion, then returning download URL(s) for the watermarked PDF(s) (or a ZIP if multiple).Votes: 0GitHub stars: 21
- Acorp DelegationTeaches participants (AI agents or humans) how to define, update, and operate within delegation constraints — budget caps, risk tolerance, value weights, red lines, and expiry.Votes: 0GitHub stars: 21
- AbaddonRed team security mode for OpenClaw. Runs an adversarial audit on demand or nightly — checks exposed ports, credential leaks, file permissions, suspicious processes, and OpenClaw config posture. Assigns a letter grade. Built for macOS deployments.Votes: 0GitHub stars: 21
- AaThis skill enables the agent to automatically answer Gmail messagesVotes: 0GitHub stars: 21
- Adaptyv--> --- name: bio-adaptyv description: Cloud laboratory platform for automated protein testing and validation. Use when designing proteins and needing experimental validation including binding assays, expression testing, thermostability measurements, enzyme activity assays, or protein sequence optimization. Also use for submitting experiments via API, tracking experiment status, downloading results, optimizing protein sequences for better expression using computational tools (NetSolP, SoluPro...Votes: 0GitHub stars: 36
- Security Penetration TesterUse when Codex should act as the Penetration Tester specialist from Agency Agents. Offensive security specialist conducting authorized penetration tests, red team operations, and vulnerability assessments across networks, web applications, and cloud infrastructure.Votes: 0GitHub stars: 10
- Security ArchitectUse when Codex should act as the Security Architect specialist from Agency Agents. Expert security architect specializing in threat modeling, secure-by-design architecture, trust-boundary analysis, defense-in-depth, and risk-based security reviews across web, API, cloud-native, and distributed systems. Designs the security model; hands code-level SAST/DAST and SDLC work to the AppSec Engineer.Votes: 0GitHub stars: 10
- Security Appsec EngineerUse when Codex should act as the Application Security Engineer specialist from Agency Agents. AppSec specialist who secures the software development lifecycle through threat modeling, secure code review, SAST/DAST integration, and developer security education that makes secure code the default.Votes: 0GitHub stars: 10
- Senior SecurityUse when the user asks for STRIDE threat modeling, DREAD risk scoring, data-flow-diagram threat analysis, or a quick secret scan — or when a security request needs routing to the right specialist skill (pen-testing, incident response, cloud posture, red team, AI security, threat hunting, secure code review). This skill owns threat modeling; everything else routes to a sibling.Votes: 0GitHub stars: 10
- Senior SecopsSenior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices. Runs SAST/DAST scans, generates CVE remediation plans, checks dependency vulnerabilities, creates security policies, enforces secure coding patterns, and automates compliance checks against SOC2, PCI-DSS, HIPAA, and GDPR. Use when conducting a security review or audit, responding to a CVE or security incident, hardening infrastructure, implementing authen...Votes: 0GitHub stars: 10
- Security Pen TestingUse when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security assessments. Covers static analysis, dependency scanning, secret detection, API security testing, and pen test report generation.Votes: 0GitHub stars: 10
- Owasp SecurityImplement secure coding practices following OWASP Top 10. Use when preventing security vulnerabilities, implementing authentication, securing APIs, or conducting security reviews. Triggers on OWASP, security, XSS, SQL injection, CSRF, authentication security, secure coding, vulnerability.Votes: 0GitHub stars: 2
- Golang SecuritySecurity best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookies, secrets management, memory safety, and logging. Apply when writing, reviewing, or auditing Go code for security, or when working on any risky code involving crypto, I/O, secrets management, user input handling, or authentication. Includes configuration of security tools.Votes: 0GitHub stars: 2
- Web PentestPerform black-box / grey-box web application penetration testing on an authorized target — auth bypass, IDOR, session handling, business-logic flaws, parameter tampering, Burp Suite / OWASP ZAP workflows. Use when the user mentions 'web pentest,' 'web application penetration test,' 'pentesting,' 'bug bounty,' 'Burp Suite,' 'ZAP,' 'OWASP testing,' 'authentication testing,' 'session testing,' 'authorization testing,' 'business logic testing,' 'web vulnerability testing,' or has explicit authori...Votes: 0GitHub stars: 11
- Vuln ResearchResearch a specific CVE or vulnerability disclosure end-to-end — what version is affected, is your code reachable, is there a public PoC, is there a patch, what's the exposure window, what's the mitigation if you can't patch immediately. Use when the user mentions 'CVE,' 'vulnerability research,' 'is this CVE relevant,' 'zero-day,' 'CISA KEV,' 'GitHub Security Advisory,' 'reachability analysis,' 'patch analysis,' 'exploit availability,' 'EPSS,' 'CVSS,' or 'should we drop everything and patch ...Votes: 0GitHub stars: 11
- Threat ModelingRun a structured threat-modeling session for a new feature, system, or architecture — STRIDE, attack trees, data flow diagrams, abuse cases. Use when the user mentions 'threat model,' 'threat modeling,' 'STRIDE,' 'attack tree,' 'abuse case,' 'data flow diagram,' 'DFD,' 'security architecture review,' 'security review,' 'design review,' 'pre-implementation security,' 'shift left,' 'what could go wrong,' or needs strategic security thinking before code is written.Votes: 0GitHub stars: 11