All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,708
- 1,322
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 20,473–20,496 of 31,708 skills
- Dependency ScanningScan package dependencies for known vulnerabilities using Snyk, Dependabot, and OWASP Dependency-Check. Identify and remediate vulnerable libraries in your software supply chain. Use when managing third-party dependencies or implementing software composition analysis.Votes: 0GitHub stars: 20
- Dast ScanningPerform dynamic application security testing with OWASP ZAP, Burp Suite, and Nikto. Test running applications for security vulnerabilities through automated and manual testing. Use when testing web applications, APIs, or performing penetration testing.Votes: 0GitHub stars: 20
- Threat ModelingConduct threat modeling using STRIDE methodology. Identify threats, assess risks, and design security controls. Use when designing secure systems or assessing application security.Votes: 0GitHub stars: 20
- Penetration TestingPerform basic penetration testing and security assessments. Use reconnaissance, vulnerability discovery, and exploitation techniques. Use when validating security controls or assessing system security.Votes: 0GitHub stars: 20
- Windows HardeningHarden Windows servers per security baselines and CIS benchmarks. Configure Group Policy, Windows Defender, and security features. Use when securing Windows Server environments.Votes: 0GitHub stars: 20
- Linux HardeningApply CIS benchmarks and secure Linux servers. Configure SSH, manage users, implement firewall rules, and enable security features. Use when hardening Linux systems for production or meeting security compliance requirements.Votes: 0GitHub stars: 20
- Cis BenchmarksAudit and remediate CIS benchmark violations. Use automated tools to assess compliance and implement hardening recommendations. Use when meeting compliance requirements or implementing security baselines.Votes: 0GitHub stars: 20
- Prompt Injection DefenseDefend AI systems against prompt injection and indirect prompt attacks using input controls, tool permissions, output validation, and isolation boundaries.Votes: 0GitHub stars: 20
- Mcp Server SecuritySecure Model Context Protocol (MCP) servers with transport encryption, tool authorization, input validation, and audit logging for safe AI agent integrations.Votes: 0GitHub stars: 20
- Ai Security HardeningHarden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks. Covers input validation, output filtering, access control, model API security, and compliance controls for production AI systems.Votes: 0GitHub stars: 20
- Ai Red TeamingRun structured AI red team exercises for jailbreak resistance, data exfiltration risk, harmful output controls, and agent tool abuse resilience.Votes: 0GitHub stars: 20
- Openclaw Security HardeningHarden OpenClaw self-hosted environments with baseline host controls, auth tightening, secret handling, network segmentation, and safe update/rollback workflows. Use when deploying OpenClaw in home labs, startups, or production-like local AI infrastructure.Votes: 0GitHub stars: 20
- Startup It TroubleshootingPractical IT troubleshooting playbooks for small teams without dedicated IT staff.Votes: 0GitHub stars: 20
- Saas Security PostureAudit and harden your SaaS tool stack — enforce SSO, review OAuth grants, manage shadow IT, and secure admin accounts across Slack, GitHub, Google Workspace, and AWS. Use when tightening security across company SaaS tools.Votes: 0GitHub stars: 20
- Cloudflare Zero TrustProtect internal apps with Cloudflare Access, device posture, and Zero Trust policies.Votes: 0GitHub stars: 20
- Vendor ManagementImplement vendor risk management programs. Assess third-party security and maintain vendor inventory. Use when managing supplier security.Votes: 0GitHub stars: 20
- Access ReviewConduct periodic access reviews and certifications. Implement access governance and recertification workflows. Use when managing access compliance.Votes: 0GitHub stars: 20
- Pci Dss ComplianceImplement PCI DSS requirements for payment card data. Configure cardholder data environment and security controls. Use when processing payment cards.Votes: 0GitHub stars: 20
- Iso27001 ComplianceImplement ISO 27001 Information Security Management System. Configure ISMS controls and risk management. Use when implementing enterprise security frameworks.Votes: 0GitHub stars: 20
- Hipaa ComplianceImplement HIPAA security and privacy rules. Configure PHI protections and BAA requirements. Use when handling healthcare data.Votes: 0GitHub stars: 20
- Gdpr ComplianceImplement GDPR data protection requirements. Configure consent management, data subject rights, and privacy by design. Use when processing EU personal data.Votes: 0GitHub stars: 20
- Fedramp ComplianceImplement FedRAMP requirements for federal cloud services. Configure NIST 800-53 controls and continuous monitoring. Use when providing cloud services to US federal agencies.Votes: 0GitHub stars: 20
- Example SkillPerforms thorough code reviews following best practices. Use when reviewing pull requests, checking code quality, or ensuring coding standards compliance.Votes: 0GitHub stars: 20
- Github Oauth Nango IntegrationUse when implementing GitHub OAuth + GitHub App authentication with Nango - provides two-connection pattern for user login and repo access with webhook handlingVotes: 0GitHub stars: 20