All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,807
- 1,326
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 19,657–19,680 of 31,807 skills
- Tanstack React Query Best PracticesTanStack Query conventions for cache-backed React server state. Use when creating or reviewing React queries, mutations, query keys, or cache updates.Votes: 0GitHub stars: 12
- Review Security PrivacyUse when the user asks for a pre-PR or diff security and privacy review, especially for authentication, authorization, tenant isolation, public endpoints, webhooks, payments, secrets, logs, personal data, files, exports, or observability access. Reports only reachable regressions introduced or materially changed by the diff.Votes: 0GitHub stars: 130
- Dependency UpgraderUse when the user asks to update, bump, or migrate Java, Kotlin, Gradle, Maven, Node, or TypeScript dependencies; audit direct or transitive dependencies for CVEs or security advisories; or remediate a dependency vulnerability. Preserves the package manager, applies small verified upgrades, and checks vulnerability, release-age, and supply-chain risk.Votes: 0GitHub stars: 130
- Create PrUse when the user asks to prepare, publish, or open a GitHub pull request from a local checkout. Verifies branch and diff scope, runs relevant checks, creates needed commits, pushes only when authorized, and opens a truthful draft or ready PR.Votes: 0GitHub stars: 130
- Supply ChainUse when assessing dependency and build-pipeline risk. Covers dependency vetting, lockfiles, SBOMs, provenance and signing, pinning CI actions, and responding to a compromised package. Trigger on "is this package safe to add", "npm audit shows vulnerabilities", "pin our github actions", "a dependency was compromised". Do not use for leaked credentials — see the secrets-management skill; for pipeline structure, see the ci-cd skill.Votes: 0GitHub stars: 35
- Security ReviewUse when auditing code or a change for vulnerabilities. Produces severity-ranked findings with exploit paths and fixes, covering the OWASP Top 10, authorization, secrets, and dependency risk. Trigger on "security review this pr", "is this code vulnerable", "audit before we go public", "triage this pentest report". Do not use for writing new auth or input handling — see the secure-coding skill; for design-time risk, see the threat-modeling skill.Votes: 0GitHub stars: 35
- Secure CodingUse when writing code that handles untrusted input, authentication, or sensitive data. Covers injection prevention, authentication and session handling, authorization, cryptography, and the defaults that make code safe by construction. Trigger on "prevent sql injection", "how should i hash passwords", "check permissions on this endpoint". Do not use for auditing a finished change — see the security-review skill; for storing credentials, see the secrets-management skill.Votes: 0GitHub stars: 35
- Ch015Run CH015 AI Security Firm workflows for security audits, vulnerability assessment, adversarial verification, pentesting, red team review, compliance checks, fix guidance, and report generation.Votes: 0GitHub stars: 4
- Wifi MedicalSecure and robust WiFi connectivity for medical devices: WPA3/enterprise auth, certificate management, coexistence, resilience, and hospital network integration.Votes: 0GitHub stars: 8
- Secure OtaEnsure OTA updates are authenticated, integrity-checked, atomic, and safely recoverable, with regulatory considerations for software changes.Votes: 0GitHub stars: 8
- Secure BootEstablish a root of trust and verify firmware integrity/authenticity from reset through handoff, including anti-rollback and recovery.Votes: 0GitHub stars: 8
- Release ManagementDefine controlled release process for medical device software: versioning, branching, verification, approvals, documentation, and post-release monitoring.Votes: 0GitHub stars: 8
- Pipeline DesignDefine regulated-friendly CI/CD pipelines with compliance checks, artifact management, and auditability for medical device software.Votes: 0GitHub stars: 8
- Triaging Vulnerabilities With Ssvc FrameworkPrioritize vulnerability remediation using SSVC decision logic by combining exploitation intelligence, technical impact, and mission context into deterministic response classes.Votes: 0GitHub stars: 72
- Securing Kubernetes On CloudHarden managed Kubernetes clusters on major cloud providers by enforcing pod security, workload identity, network segmentation, RBAC constraints, image admission controls, and runtime monitoring.Votes: 0GitHub stars: 72
- Securing Github Actions WorkflowsHarden GitHub Actions workflows against supply chain abuse, token misuse, and unsafe workflow execution patterns through enforceable CI security controls.Votes: 0GitHub stars: 72
- Securing Container Registry ImagesSecure container image registries by enforcing vulnerability scanning, image signing, SBOM traceability, and promotion gates that prevent unsafe artifacts from deployment.Votes: 0GitHub stars: 72
- Securing Aws Iam PermissionsHarden AWS IAM permissions with least-privilege controls, boundary guardrails, key-risk reduction, and continuous monitoring backed by auditable evidence.Votes: 0GitHub stars: 72
- Scanning Docker Images With TrivyPerform comprehensive Docker image security assessment with Trivy, including vulnerabilities, misconfigurations, secrets, and SBOM generation, with clear remediation gates.Votes: 0GitHub stars: 72
- Remediating S3 Bucket MisconfigurationIdentify and remediate S3 bucket misconfigurations that can expose data, then enforce preventive controls to reduce recurrence risk.Votes: 0GitHub stars: 72
- Performing Vulnerability Scanning With NessusExecute Nessus-based vulnerability assessments with validated findings, risk-prioritized remediation guidance, and auditable scan evidence.Votes: 0GitHub stars: 72
- Performing Kubernetes Cis Benchmark With Kube BenchAssess Kubernetes cluster security posture against CIS benchmark controls using kube-bench and produce remediation-prioritized evidence for hardening programs.Votes: 0GitHub stars: 72
- Performing Container Security Scanning With TrivyRun comprehensive Trivy-based container security scanning across images, filesystem sources, and configuration artifacts with policy-driven enforcement outputs.Votes: 0GitHub stars: 72
- Os PlatformDefine and execute operating system baseline, hardening, and patching workflows with verifiable platform health controls.Votes: 0GitHub stars: 72