All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,697
- 1,321
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 20,425–20,448 of 31,697 skills
- Building Vulnerability Aging And Sla TrackingImplement a vulnerability aging dashboard and SLA tracking system that measures time-to-remediation against severity-based deadlines (e.g. 14 days critical, 30 days high, 60 days medium, 90 days low), with automated escalations and compliance metrics reporting. Use when designing SLA policies, building aging/remediation dashboards, or proving compliance with remediation timelines.Votes: 0GitHub stars: 67
- Building Soc Playbook For Ransomware'Builds a structured SOC incident response playbook for ransomware attacksVotes: 0GitHub stars: 67
- Building Soc Escalation MatrixBuild a structured SOC escalation matrix defining severity tiers, responseVotes: 0GitHub stars: 67
- Building Red Team C2 Infrastructure With HavocDeploy and configure the Havoc C2 framework (teamserver, HTTPS/HTTP/SMBVotes: 0GitHub stars: 67
- Websocket EngineerUse when building real-time communication systems with WebSockets or Socket.IO. Invoke for bidirectional messaging, horizontal scaling with Redis, presence tracking, room management.Votes: 0GitHub stars: 20
- Terraform EngineerUse when implementing infrastructure as code with Terraform across AWS, Azure, or GCP. Invoke for module development (create reusable modules, manage module versioning), state management (migrate backends, import existing resources, resolve state conflicts), provider configuration, multi-environment workflows, and infrastructure testing.Votes: 0GitHub stars: 20
- Secure Code GuardianUse when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities — including custom security implementations such as hashing passwords with bcrypt/argon2, sanitizing SQL queries with parameterized statements, configuring CORS/CSP headers, validating input with Zod, and setting up JWT tokens. Invoke for authentication, authorization, input validation, encryption, OWASP Top 10 prevention, secure session management, and security hardening. For p...Votes: 0GitHub stars: 20
- Atlassian McpIntegrates with Atlassian products to manage project tracking and documentation via MCP protocol. Use when querying Jira issues with JQL filters, creating and updating tickets with custom fields, searching or editing Confluence pages with CQL, managing sprints and backlogs, setting up MCP server authentication, syncing documentation, or debugging Atlassian API integrations.Votes: 0GitHub stars: 20
- Multiline FlowFixture with valid multiline flow collections in workflow YAML.Votes: 0GitHub stars: 20
- Wow Api Lua EnvironmentComplete reference for the WoW Lua 5.1 runtime environment, restrictions, secure execution, taint system, addon security model, timers, hooks, frame scripting, logging, and restricted actions. Covers hooksecurefunc, C_Timer, securecallfunction, issecurevariable, taint propagation, combat lockdown, protected frames, InCombatLockdown, C_RestrictedActions, C_Log, and the FrameScript sandbox. Use when working with Lua restrictions, secure code, taint, timers, hooks, addon security, debugging, or ...Votes: 0GitHub stars: 20
- Spring Boot SecurityConfigure Spring Security 6+ with Lambda DSL, JWT, and hardening rules. Use when configuring Spring Security 6+, OAuth2, JWT, or security hardening in Spring Boot.Votes: 0GitHub stars: 20
- Specialist Security ReviewerHigh-density security audit persona. Enforces OWASP Top 10, Vibe Security, trust gating, and runtime hardening for code and agentic review flows.Votes: 0GitHub stars: 20
- Specialist Mobile ReverserDeep Mobile Security Red Team persona. Executes OWASP MASTG procedures including APK/IPA decompilation, Frida dynamic hooking, biometric bypasses, and local database decryption.Votes: 0GitHub stars: 20
- Specialist Logic HackerRed Team persona for Business Logic and Auth manipulation. Generates and executes stateful fuzzing scripts (Playwright/Python) to test RBAC bypasses, BOLA/IDOR, race conditions, and complex multi-step transaction flaws.Votes: 0GitHub stars: 20
- Specialist Aspm CorrelatorApplication Security Posture Management persona. Correlates findings from SAST, DAST, and SCA tools, deduplicates noise, maps vulnerabilities to specific code commits, and generates targeted remediation PRs.Votes: 0GitHub stars: 20
- React SecurityPrevent XSS, secure auth flows, and harden React client-side applications. Use when preventing XSS, securing auth flows, or auditing third-party dependencies in React.Votes: 0GitHub stars: 20
- React Native SecuritySecure storage, network traffic, and deep links in React Native mobile apps. Use when implementing secure storage, certificate pinning, or deep link validation in React Native.Votes: 0GitHub stars: 20
- Laravel Sessions MiddlewareConfigure Redis session drivers, register security-header middleware, and prevent session fixation in Laravel. Use when switching session drivers, adding HSTS/CSP headers via middleware, or regenerating sessions after login.Votes: 0GitHub stars: 20
- Laravel SecurityHarden Laravel apps with Policies for model authorization, Gate-based RBAC, validated mass assignment, and CSRF protection. Use when creating authorization policies, securing env config access, or preventing mass assignment vulnerabilities.Votes: 0GitHub stars: 20
- Laravel ApiBuild REST endpoints with API Resources, Sanctum authentication, and versioned route groups in Laravel. Use when creating JsonResource classes, adding token-based auth, or defining rate-limited API routes.Votes: 0GitHub stars: 20
- Ios SecuritySecure iOS apps with secure storage, biometrics, and data protection. Use when implementing secure storage, Face ID/Touch ID, or data protection in iOS.Votes: 0GitHub stars: 20
- Ios PersistenceImplement local persistence with SwiftData, Core Data, and secure storage. Use when setting up SwiftData models, Core Data stacks, or local persistence in iOS.Votes: 0GitHub stars: 20
- Golang ConfigurationLoad and validate application configuration from environment variables and config files. Use when managing Go application config with environment variables or viper.Votes: 0GitHub stars: 20
- Flutter SecuritySecure Flutter token/PII storage, build-time secrets, network trust, and release hardening using OWASP Mobile practices. Use for secure storage, secret injection, certificate pinning, jailbreak/root risk, or release builds—not generic form validation, API error handling, auth-provider setup, or tests of existing security services.Votes: 0GitHub stars: 20