All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,067
- 1,212
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 2,209–2,232 of 29,067 skills
- Mcplab Authorization Scoping Client Compatibility Option Comparison MatrixUse when several tools, designs, methods, or workflows could satisfy the same need for Model Context Protocol servers and integrations: authorization scoping for client compatibility. Produce an evidence-backed option-comparison matrix with scope, versions, decisions, and evidence for this task-specific gate: Verify the target host/client protocol version and negotiated capabilities with the actual supported client matrix. Success means options are compared on user-approved criteria with unce...Votes: 0GitHub stars: 2
- Mcplab Authorization Scoping Client Compatibility Failure Triage And RecoveryUse when an unexpected result needs diagnosis without widening risk or losing evidence for Model Context Protocol servers and integrations: authorization scoping for client compatibility. Produce a failure-triage record and reversible recovery plan with scope, versions, decisions, and evidence for this task-specific gate: Verify the target host/client protocol version and negotiated capabilities with the actual supported client matrix. Success means the failure is bounded by observations, one...Votes: 0GitHub stars: 2
- Mcplab Authorization Scoping Client Compatibility Design BlueprintUse when a solution needs a coherent structure before implementation or production for Model Context Protocol servers and integrations: authorization scoping for client compatibility. Produce a staged design blueprint with scope, versions, decisions, and evidence for this task-specific gate: Verify the target host/client protocol version and negotiated capabilities with the actual supported client matrix. Success means interfaces, dependencies, constraints, and review points are testable befo...Votes: 0GitHub stars: 2
- Mcplab Authorization Scoping Client Compatibility Build Configuration RunbookUse when an authorized implementation needs repeatable steps and a visible change boundary for Model Context Protocol servers and integrations: authorization scoping for client compatibility. Produce a bounded build or configuration runbook with scope, versions, decisions, and evidence for this task-specific gate: Verify the target host/client protocol version and negotiated capabilities with the actual supported client matrix. Success means the prepared result is reproducible, reviewable, an...Votes: 0GitHub stars: 2
- Microsoft Foundry Agent ObservabilityUse when a task involves instrumenting and evaluating hosted agents on Microsoft Foundry with trace, quality, safety, and cost visibility to identify the intended outcome, relevant inputs, platform or version, sensitive data, and permission boundary before acting. Use current primary documentation for version-sensitive behavior, produce a reviewable artifact, and verify it against stated criteria. Trigger for planning, implementation, evaluation, or troubleshooting in this focused domain; do ...Votes: 0GitHub stars: 2
- Infosec RtInfosec Red Team — structured threat modeling for security-focused code review. Convenes attacker personas, identifies exploit chains, returns a ranked hardening plan.Votes: 0GitHub stars: 3
- Senior SecuritySecurity engineering toolkit for threat modeling, vulnerability analysis, secure architecture, and penetration testing. Includes STRIDE analysis, OWASP guidance, cryptography patterns, and security scanning toolsVotes: 0GitHub stars: 10
- Senior SecopsSecOps — app security, vuln management, compliance verification, secure dev practicesVotes: 0GitHub stars: 10
- Data Breach Blast RadiusPre-breach impact — PII/PHI/PCI-DSS inventory, data flow tracing, exposure scoringVotes: 0GitHub stars: 10
- Security And HardeningUse when building anything that accepts user input, implementing authentication or authorization, storing or transmitting sensitive data, integrating external APIs, or adding file uploads, webhooks, or callbacks. Covers input validation, secrets, authz checks, and PII and payment handling.Votes: 0GitHub stars: 10
- Security ReviewCodebase security scan — data flow tracing, OWASP top 10, secrets, dependency CVEsVotes: 0GitHub stars: 10
- Security Agent RemediationPulls AWS Security Agent findings (pentest and code review) into a gitignored .security-agent/, builds a prioritized triage and drives remediation. Use when asked to fix, triage or prioritize findings, Security Agent pentest or code review results, or vulnerabilities reported in the AWS account, even without naming the service.Votes: 0GitHub stars: 5
- Aws Security AgentRuns AWS Security Agent through the security-agent MCP. Use for security scans of the code (full, or diff-only before a commit, PR or deploy), threat model reviews of requirements.md or design.md, pentests of a deployed application, and scan status or results. Also use to suggest a scan when a change to auth, endpoints or external input is finished, or before generating tasks from a design. To triage and fix findings already reported, use security-agent-remediation.Votes: 0GitHub stars: 5
- Security Agent RemediationTraz os findings do AWS Security Agent (pentest e code review) para .security-agent/ fora do git, monta a triagem priorizada e conduz a correção. Use quando pedirem para corrigir, triar ou priorizar findings, resultados de pentest ou code review do Security Agent, ou vulnerabilidades reportadas na conta AWS, mesmo sem nomear o serviço.Votes: 0GitHub stars: 5
- Security AuditUse when performing security vulnerability assessment (OWASP, secrets, dependencies, IaC, LLM, API, MCP/agentic) or when "thinking like a hacker" to find exploits.Votes: 0GitHub stars: 6
- Security Best PracticeAudit and harden authentication code for security best practices. Use when the user wants to check their auth implementation for vulnerabilities, harden session handling, fix credential storage, validate OAuth/OIDC flows, add MFA/passkeys, or apply OWASP-recommended security patterns.Votes: 0GitHub stars: 41
- Clawtributor Coralshades Acm AiCommunity incident reporting for AI agents. Contribute to collective security by reporting threats.Votes: 0GitHub stars: 666
- Code Security ReviewSecurity review of any codebase that is not Solidity. Traces each reachable handler from input to effect and reports the access-control, injection, data-exposure and failure-path bugs the code proves, each with file, line and fix. Use when asked to review a web app, API, service, CLI or library for security vulnerabilities, before a release, or to test a suspected web or backend finding against the code. Runs on your own model with no account.Votes: 0GitHub stars: 2
- honeybadgerScan a GitHub or GitLab repository for security issues before installing it as a skill, tool, or MCP server. Use when the user wants to check, vet, scan, or review a repository for safety before installation. Detects hardcoded secrets, known CVEs, supply chain risks, and build provenance.Votes: 0GitHub stars: 3
- Honeybadger DevHow to add a scanner, lockfile parser, or rule to HoneyBadger, plus the test-fixture and self-check requirements. Use when extending scanners or contributing to honeybadger.Votes: 0GitHub stars: 3
- Report ReviewUse when a peer worktree session (southpaw·orthodox·spare 등) sends the central control session a draft it is about to show the user or publish — 완료 보고·결정 요청·분석 결과, 또는 PR 생성 전 커밋 메시지·PR 본문 초안. Triggers on "유저 보고 검수해줘", "이 보고 내보내도 돼?", "커밋 메시지·PR 본문 봐줘", 피어가 보낸 `[보고 검수]`·`[PR 문안 검수]` 머리의 메시지. Does NOT trigger on 계획 문서 리뷰(plan-review 스킬), PR 리뷰(review 스킬), 하위 세션에 관문을 알리는 일(control-brief 스킬), 이 세션이 유저에게 직접 답하는 일.Votes: 0GitHub stars: 15
- MssqlExecute read-only SQL queries against multiple Microsoft SQL Server databases. Use when: (1) querying MSSQL/SQL Server databases, (2) exploring database schemas/tables, (3) running SELECT queries for data analysis, (4) checking database contents. Supports multiple database connections with descriptions for intelligent auto-selection. Blocks all write operations (INSERT, UPDATE, DELETE, DROP, etc.) for safety.Votes: 0GitHub stars: 158
- Emblem Ai Agent WalletConnect to EmblemVault and manage wallet-aware workflows via EmblemAI with review-first, operator-controlled actions. Supports Solana, Ethereum, Base, BSC, Polygon, Hedera, and Bitcoin. Also use when the user needs Emblem's auth model explained: one browser auth flow can log a user in with wallets, email/password, or social sign-in, while agent mode can auto-provision a profile-scoped wallet with no manual setup.Votes: 0GitHub stars: 158
- Cyhber DeployUse when preparing staging/production deploys, modifying CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins), changing IaC (Terraform, Kubernetes, Docker), handling authentication/authorization/sessions/secrets, detecting injection vulnerabilities, reviewing security groups/IAM/RBAC, hardcoded credentials, exposed endpoints, or requesting security reviewsVotes: 0GitHub stars: 19