All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,807
- 1,326
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 19,417–19,440 of 31,807 skills
- Content Security ScanAutomated security scanner for external skill/agent content fetched from GitHub or web sources. Runs a 7-step PASS/FAIL security gate against fetched markdown/text content.Votes: 0GitHub stars: 40
- Building Secure ContractsSmart contract and secure API contract security analysis — invariant checking, access control, reentrancy, and integer overflow patterns. Implements Checks-Effects-Interactions pattern, formal invariant verification, and OpenSCV vulnerability taxonomy for Solidity/EVM and Rust/Solana contracts.Votes: 0GitHub stars: 40
- Authentication Flow RulesOAuth 2.1 compliant authentication flows (MANDATORY Q2 2026). PKCE required for ALL clients, Implicit Flow removed, modern token security.Votes: 0GitHub stars: 40
- Auth Security ExpertOAuth 2.1, JWT (RFC 8725), encryption, and authentication security expert. Enforces 2026 security standards.Votes: 0GitHub stars: 40
- Api TestingAPI security testing and validation for REST/GraphQL/gRPC endpoints, contract testing, load testing, fuzzing, and Postman/Bruno/Hurl workflowsVotes: 0GitHub stars: 40
- Zero State ReturnTrigger Vault/first-depositor pattern detected - Inject Into Depth-edge-case agent (extends existing ZERO_STATE_ECONOMICS)Votes: 0GitHub stars: 281
- Fork AncestryTrigger Pattern Always (run during recon TASK 0, not breadth) - Inject Into Recon agent only (meta_buffer.md enrichment)Votes: 0GitHub stars: 281
- Zero State ReturnTrigger Always inject into Arithmetic agent (extends existing ZERO_STATE_ECONOMICS) - Purpose Check protocol return-to-zero state, not just initial zero stateVotes: 0GitHub stars: 281
- Verification ProtocolTrigger Pattern Always (used by all verifier agents) - Inject Into security-verifier agents (Phase 5)Votes: 0GitHub stars: 281
- Fork AncestryTrigger Pattern Always (run during recon TASK 0, not breadth) - Inject Into Recon agent only (meta_buffer.md enrichment)Votes: 0GitHub stars: 281
- Zero State ReturnTrigger Always inject into Arithmetic agent (extends existing ZERO_STATE_ECONOMICS) - Purpose Check protocol return-to-zero state, not just initial zero stateVotes: 0GitHub stars: 281
- Verification ProtocolTrigger Pattern Always (used by all verifier agents) - Inject Into security-verifier agents (Phase 5)Votes: 0GitHub stars: 281
- Fork AncestryTrigger Pattern Always (run during recon TASK 0, not breadth) - Inject Into Recon agent only (meta_buffer.md enrichment)Votes: 0GitHub stars: 281
- Zero State ReturnTrigger Always inject into Arithmetic agent (extends existing ZERO_STATE_ECONOMICS) - Purpose Check protocol return-to-zero state, not just initial zero stateVotes: 0GitHub stars: 281
- Verification ProtocolTrigger Pattern Always (used by all verifier agents) - Inject Into security-verifier agents (Phase 5)Votes: 0GitHub stars: 281
- Security AuditAudit a repository for security problems: map its attack surfaces, verify each candidate finding, compare it with the last audit, and save Markdown and JSON reports.Votes: 0GitHub stars: 36
- Threat ModelingThreat modeling workflow for software systems: scope, data flow diagrams, STRIDE analysis, risk scoring, and turning mitigations into backlog and tests. Use when designing new features, reviewing architecture changes, handling sensitive data, or hardening auth/payment/multi-tenant flows.Votes: 0GitHub stars: 74
- Security ScanningCI security scanning: secrets, deps, SAST, triage, expiring exceptionsVotes: 0GitHub stars: 74
- Code Review StandardsSeverity-tagged code review checklist (CRITICAL/HIGH/MEDIUM/LOW) used by code-critic agentVotes: 0GitHub stars: 74
- Code Production ProcessSix-stage quality-gate pipeline for any code implementation taskVotes: 0GitHub stars: 74
- Api ReviewAPI security checklist for reviewing endpoints before deployment. Use when creating or modifying API routes to ensure proper authentication, authorization, and input validation.Votes: 0GitHub stars: 74
- Vercel Security AccessVercel security and access controls including RBAC, SSO, deployment protection, firewall, bot defense, audit logs, and 2FA. Use when securing Vercel projects or managing access.Votes: 0GitHub stars: 74
- Wordpress Security ValidationSecurity-first WordPress development with nonces, sanitization, validation, and escaping to prevent XSS, CSRF, and SQL injection vulnerabilities.Votes: 0GitHub stars: 74
- SparkeyTime-limited, self-destructing SSH access for AI agents. Four-layer defense-in-depth: certificate TTL, OS account expiry, command-restricted dispatch, and automated cleanup. Zero session artifacts survive.Votes: 0GitHub stars: 2,128