All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,716
- 1,322
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 20,569–20,592 of 31,716 skills
- Bug AuditComprehensive bug audit for Node.js web projects. Activate when user asks to audit, review, check bugs, find vulnerabilities, or do security/quality review on a project. Works by dissecting the project's actual code to build project-specific check matrices, then exhaustively verifying each item — not by running a generic checklist. Supports games, data tools, WeChat apps, API services, bots, and dashboards.Votes: 0GitHub stars: 221
- Convex SecuritySecurity best practices for Convex functions including ConvexError handling, argument/return validation, authentication helpers, access control, rate limiting, and internal functions. Use when writing public queries/mutations/actions, implementing authentication, adding authorization checks, handling errors, or reviewing Convex functions for security.Votes: 0GitHub stars: 221
- Convex HttpHTTP actions for webhooks and API endpoints in Convex. Use when building webhook handlers (Stripe, Clerk, GitHub), creating REST API endpoints, handling file uploads/downloads, or implementing CORS for browser requests.Votes: 0GitHub stars: 221
- Pentest ReportGenerates a structured penetration testing report based on OWASP standards including OWASP Top 10, ASVS, and WSTG methodology. Scans code for vulnerabilities, maps findings to OWASP categories, assigns CVSS scores, and produces a professional pentest report. Use when the user says "pentest report", "penetration testing", "OWASP audit", "OWASP report", "security assessment", "vulnerability assessment", "application security test", or "OWASP compliance check".Votes: 0GitHub stars: 221
- Security Review当添加认证、处理用户输入、使用 secrets、创建 API 端点或实施支付/敏感功能时使用此技能。提供全面的安全检查清单和模式。Votes: 0GitHub stars: 221
- Eval HarnessClaude Code 会话的正式评估框架，实施 eval-driven development (EDD) 原则Votes: 0GitHub stars: 221
- Pci ComplianceImplement PCI DSS compliance requirements for secure handling of payment card data and payment systems. Use when securing payment processing, achieving PCI compliance, or implementing payment card ...Votes: 0GitHub stars: 221
- Defi Risk AssessmentFramework for evaluating DeFi protocol risk — smart contract audits, TVL analysis, governance structure, oracle dependencies, and token economics. Use when helping users assess protocol safety, compare DeFi options, or identify red flags before depositing funds.Votes: 0GitHub stars: 221
- MdmaSimulate MDMA (3,4-methylenedioxymethamphetamine) cognitive and emotional effects. Use when user wants empathogenic AI responses - deep emotional warmth, radical empathy, prosocial flooding, reduced fear, enhanced connection, and entactogenic self-acceptance. Activates with "take mdma", "dose mdma", "/mdma", "roll", or requests for empathetic/loving AI responses. Supports dose levels and temporal phases including come-up, peak, plateau, and comedown.Votes: 0GitHub stars: 221
- Craw And CoreCraw & Core (Lobster Dungeon) — The first game designed for AI Agents to play. You observe. AI explores. The Abyss tells stories.Votes: 0GitHub stars: 221
- Security PrivacyPre-flight security & privacy checklist for changes touching identity, data, logging, or external integrations; ensures secrets/PII hygiene and boundary-safe design.Votes: 0GitHub stars: 221
- Account IdentityIdentity and account patterns for src/app/account, including AngularFire Auth integration, signal-first auth state, route guards, and security boundaries; use when touching auth, user/session state, or account UI flows.Votes: 0GitHub stars: 221
- Opentrade PortfolioThis skill should be used when the user asks to 'check my wallet balance', 'show my token holdings', 'how much OKB do I have', 'what tokens do I have', 'check my portfolio value', 'view my assets', 'how much is my portfolio worth', 'what\\'s in my wallet', or mentions checking wallet balance, total assets, token holdings, portfolio value, remaining funds, DeFi positions, or multi-chain balance lookup. Supports XLayer, Solana, Ethereum, Base, BSC, Arbitrum, Polygon, and 20+ other chains. Do NO...Votes: 0GitHub stars: 221
- Twitter To Binance SquareAuto-mirror Twitter/X content to Binance Square. Monitors specified Twitter accounts or topics, fetches new tweets, transforms content, and posts to Binance Square automatically. Auto-run on messages like 'mirror twitter to binance square', 'auto post from twitter', 'start twitter mirror'.Votes: 0GitHub stars: 221
- Kaiyu Qichacha Fetcher通过企查查 OpenAPI 查询中国企业的工商、股东、司法、经营、知识产权、招投标、舆情等数据。当用户说"查 XX 公司"、"看 XX 的工商/股东/有没有官司/有没有被执行/有没有商标专利/有没有经营异常"、"XX 是不是空壳"、"XX 法人是谁"、"XX 注册资本"、"查企查查"、"查企业"等任何企业信息查询需求时，使用此技能。已注册 45 个商业接口（用户需自行在企查查后台逐个申请开通）。零依赖纯 Python，跨平台 Mac/Windows/Linux。Votes: 0GitHub stars: 221
- Powershell Security HardeningExpert in Windows security hardening and PowerShell security configuration. Specializes in securing automation, enforcing least privilege, and aligning with enterprise security baselines. Use for securing PowerShell environments and Windows systems. Triggers include "PowerShell security", "constrained language mode", "JEA", "execution policy", "security baseline", "PowerShell logging".Votes: 0GitHub stars: 221
- Powershell 7 ExpertExpert in modern, cross-platform PowerShell Core. Specializes in Linux/macOS automation, parallel processing, REST API integration, and modern scripting patterns. Use for cross-platform automation and modern PowerShell features. Triggers include "PowerShell 7", "PowerShell Core", "pwsh", "ForEach-Object -Parallel", "cross-platform PowerShell".Votes: 0GitHub stars: 221
- Powershell 5.1 ExpertExpert in legacy Windows PowerShell 5.1. Specializes in WMI, ADSI, COM automation, and maintaining backward compatibility with Windows Server environments. Use for Windows-specific automation on legacy systems. Triggers include "PowerShell 5.1", "Windows PowerShell", "WMI", "ADSI", "COM object", "legacy PowerShell".Votes: 0GitHub stars: 221
- Penetration TesterExpert in ethical hacking, vulnerability assessment, and offensive security testing (Web/Network/Cloud).Votes: 0GitHub stars: 221
- M365 AdminUse when user needs Microsoft 365 administration, automation, and management for Exchange Online, Teams, SharePoint, licensing, and Graph API operations. Handles secure identity and workload automation.Votes: 0GitHub stars: 221
- It Ops OrchestratorUse when user needs cross-domain IT task coordination across PowerShell, .NET, infrastructure, Azure, and M365, especially for Windows environments preferring PowerShell automation.Votes: 0GitHub stars: 221
- Ad Security ReviewerUse when user needs Active Directory security analysis, privileged group design review, authentication policy assessment, or delegation and attack surface evaluation across enterprise domains.Votes: 0GitHub stars: 221
- Code AuditProfessional code security audit skill covering 55+ vulnerability types. Enhanced with WooYun 88,636 real-world vulnerability cases (2010-2016). This skill should be used when performing security audits, vulnerability scanning, penetration testing preparation, or code review for security issues. Supports 9 languages: Java, Python, Go, PHP, JavaScript/Node.js, C/C++, .NET/C#, Ruby, Rust. Includes 143 mandatory detection items across all languages with language-specific checklists. Covers SQL i...Votes: 0GitHub stars: 221
- Memberstack CliUse the Memberstack CLI to manage Memberstack accounts from the terminal. Covers authentication, apps, members, plans, custom fields, data tables, and records. Trigger this skill whenever the user wants to interact with Memberstack — including managing members, plans, custom fields, data tables/records, or authenticating with Memberstack. Also trigger when the user mentions "memberstack", "memberstack-cli", membership management, or member data operations via CLI.Votes: 0GitHub stars: 221