All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,807
- 1,326
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 19,633–19,656 of 31,807 skills
- Azure Keyvault Keys Rust|Votes: 0GitHub stars: 477
- Azure Identity Rust|Votes: 0GitHub stars: 477
- Azure Identity Dotnet|Votes: 0GitHub stars: 477
- Azure Eventgrid Dotnet|Votes: 0GitHub stars: 477
- Azure Communication Common JavaAzure Communication Services common utilities for Java. Use when working with CommunicationTokenCredential, user identifiers, token refresh, or shared authentication across ACS services.Votes: 0GitHub stars: 477
- Azure Ai Vision Imageanalysis Py|Votes: 0GitHub stars: 477
- Azure Ai Contentsafety Py|Votes: 0GitHub stars: 477
- Aws Penetration TestingThis skill should be used when the user asks to \"pentest AWS\", \"test AWS security\", \"enumerate IAM\", \"exploit cloud infrastructure\", \"AWS privilege escalation\", \"S3 bucket testing...Votes: 0GitHub stars: 477
- Auth Implementation PatternsMaster authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing A...Votes: 0GitHub stars: 477
- Attack Tree ConstructionBuild comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.Votes: 0GitHub stars: 477
- Api Security Best PracticesImplement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilitiesVotes: 0GitHub stars: 477
- Anti Reversing TechniquesUnderstand anti-reversing, obfuscation, and protection techniques encountered during software analysis. Use when analyzing protected binaries, bypassing anti-debugging for authorized analysis, or u...Votes: 0GitHub stars: 477
- Active Directory AttacksThis skill should be used when the user asks to \"attack Active Directory\", \"exploit AD\", \"Kerberoasting\", \"DCSync\", \"pass-the-hash\", \"BloodHound enumeration\", \"Golden Ticket\", ...Votes: 0GitHub stars: 477
- Security And HardeningOWASP Top 10 prevention, auth patterns, secrets management, dependency auditing, boundary validation. Use when handling user input, auth, or external integrations.Votes: 0GitHub stars: 8
- Npm Trusted PublishingPublish npm packages via GitHub Actions with OIDC trusted publishing and provenance. Use when setting up automated npm publishes, debugging ENEEDAUTH/E404 errors, configuring provenance attestations, or setting up a new package for publication.Votes: 0GitHub stars: 8
- GithubOperate GitHub repositories, workflows, and PRs efficiently. Use for Actions optimization, PR hygiene, repo maintenance, and team collaboration patterns.Votes: 0GitHub stars: 8
- Text CleanupRemove AI-generated filler, repetition, inflated language, and redundant comments while preserving meaning.Votes: 0GitHub stars: 8
- Prompt RefinementTransform prompts into structured TCRO format with phase-specific clarification. Automatically invoked by /ai-eng/research, /ai-eng/plan, /ai-eng/work, and /ai-eng/specify commands. Use when refining vague prompts, structuring requirements, or enhancing user input quality before execution.Votes: 0GitHub stars: 8
- Shipping And LaunchPre-launch checklists, feature flag lifecycle, staged rollouts, rollback procedures, monitoring setup. Use when preparing to deploy to production.Votes: 0GitHub stars: 8
- Security And HardeningOWASP Top 10 prevention, auth patterns, secrets management, dependency auditing, three-tier boundary system. Use when handling user input, auth, data storage, or external integrations.Votes: 0GitHub stars: 8
- Prompt RefinementTransform prompts into structured TCRO format with phase-specific clarification. Automatically invoked by /ai-eng/research, /ai-eng/plan, /ai-eng/work, and /ai-eng/specify commands. Use when refining vague prompts, structuring requirements, or enhancing user input quality before execution.Votes: 0GitHub stars: 8
- Warden ScanAutomated SAST + dependency vulnerability scan. Runs Semgrep (code vulnerabilities) and pip-audit (CVE-matched dependencies) and writes a structured JSON report. Use when asked to "scan for vulnerabilities", "run a security scan", "check for CVEs", or "audit dependencies".Votes: 0GitHub stars: 77
- Engagement MemoryUse when recalling prior techniques at recon/weaponize, or recording a confirmed finding at report — cross-engagement pattern memory ranked by impactVotes: 0GitHub stars: 400
- Container K8s EscapeUse when breaking out of a container or escalating inside Kubernetes — runc/BuildKit CVEs, privileged/capability/cgroup misconfig escapes, NVIDIA GPU toolkit escape, K8s RBAC abuse, kubelet RCE, ingress/admission-controller RCE, node-to-cluster pivotVotes: 0GitHub stars: 400