All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,067
- 1,212
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 2,233–2,256 of 29,067 skills
- SlackxUse the `slackx` CLI to cache and read Slack threads, channel history, DMs, users, and channels from a local SQLite database. It fetches threads via `conversations.replies`, channel history via `conversations.history`, and workspace users/channels, storing everything locally so subsequent reads are instant and incremental. Trigger when the user wants to read, cache, refresh, or poll a Slack thread or channel, render a thread with human-readable author names, search the workspace and cache mat...Votes: 0GitHub stars: 10
- Review ImplementationReview a code implementation for correctness, quality, test coverage, security, performance, and spec alignment.Votes: 0GitHub stars: 10
- Quick Pr ReviewRapidly review and approve a GitHub pull request to unblock others. Approves unless there are significant risks or significant public interface changes.Votes: 0GitHub stars: 10
- Audit SecurityScan the codebase for code-level security vulnerabilities including hardcoded secrets, injection risks, missing auth checks, and insecure patterns, then produce a prioritized remediation plan.Votes: 0GitHub stars: 10
- Audit SdlcRun multiple audit skills against the project and produce a unified findings report with prioritized action items.Votes: 0GitHub stars: 10
- Assess Pr RiskEstimate how risky a GitHub pull request is and how confident that estimate is, then recommend the next action for a human reviewer. Self-contained: it gathers its evidence from the diff, the codebase, and churn of the touched files, so it can run in parallel with the other review skills. Use when the user asks "how risky is this PR", "assess PR risk", "risk and confidence for this PR", "should I review this deeply", or wants to decide what to do next with a PR.Votes: 0GitHub stars: 10
- Trekify> *"Captain, I've routed all sensitive data through the privacy buffers."* Privacy through technobabble. Transform sensitive information into Star Trek terminology — **every substitution flagged with 🖖**.Votes: 0GitHub stars: 56
- RewardMotto: Rewards should feel earned and fitting.Votes: 0GitHub stars: 56
- PersonaIdentity layers for characters — WHO they are vs WHAT they doVotes: 0GitHub stars: 56
- Wp Security AuditRun a structured security audit on any WordPress site — core integrity, plugin/theme CVE cross-check, wp-config and file-permission hardening, malware/compromise detection, and triaged code review of risky plugins. Use this skill whenever the user asks to "audit WordPress security", "check my WP site for vulnerabilities", "is my WordPress site secure", "scan my site", "security check", "harden WordPress", "check my plugins for vulnerabilities", "was my site hacked", or shares a WordPress site...Votes: 0GitHub stars: 2
- Role ModelUse when routing model requests through an externally running role-model runtime, inspecting role-model aliases, or diagnosing the role-model provider route.Votes: 0GitHub stars: 117
- Risk AssessmentFramework-directable information security risk assessment. Identifies threats, evaluates likelihood/impact via a 3x3 matrix, maps findings to any compliance framework, and recommends risk treatment options with prioritization guidance.Votes: 0GitHub stars: 2
- Project PlanningDeep project planning workflow—goals and non-goals, work breakdown, dependencies, critical path, risks and buffers, milestones, and communication rhythm. Use when kicking off initiatives, replanning after slips, or coordinating cross-team delivery.Votes: 0GitHub stars: 2
- ComplianceTrack compliance requirements and generate audit trail reports. Use when auditing controls, checking policies, generating audit trails.Votes: 0GitHub stars: 2
- Cross Team Comm通过 Tailscale、SSH、Gateway API 与 sessions_send 实现跨团队、跨实例的 OpenClaw 协作通信。Votes: 0GitHub stars: 2
- Workspace Mingjing> **版本**：v2.0（增强版） > **角色**：明镜 (Ming Jing - The Aegis of Order) > **背景**：西南政法大学本科 + 哈佛法学院博士，盈科/四大经验 > **模式**：Skill Manifest（只引用，不承载内容） > **更新日期**：2026-05-01Votes: 0GitHub stars: 2
- Security AuditAnalyze code for security vulnerabilities, potential attack vectors, and compliance with security best practices.Votes: 0GitHub stars: 3
- Code SecurityCode security capability pack. Gives AI agents the judgment rules for SAST scanning (Semgrep), DAST testing (Nuclei), secret detection (Gitleaks/TruffleHog), IaC security linting (Checkov), and vulnerability triage (osv-scanner/Grype/Snyk). Research-grounded rules from tool documentation, OWASP guidelines, and real-world pipeline architecture. Use for any application security scanning, secret leak prevention, infrastructure hardening, or vulnerability prioritization task.Votes: 0GitHub stars: 3
- Snyk TriageValidate Snyk SAST / Code findings against repo evidence; emits per-finding verdicts (CONFIRMED / FALSE_POSITIVE / NEEDS_REVIEW / DUPLICATE / NOT_APPLICABLE). Use when a Snyk or Jira-exported scanner report is provided.Votes: 0GitHub stars: 504
- Entra Posture ReviewReview a Microsoft Entra ID tenant's identity posture from read-only Graph exports, checking Conditional Access basics, security defaults, standing Global Administrators, guests with roles, stale guests, long-lived app secrets, high-risk Graph application permissions, consent and invitation settings and legacy sign-ins. Use when asked \"who are our Global Admins?\", to baseline a tenant, before an ISO 27001 or Essential Eight audit, or after taking one over. Not for Intune devices (intune-bas...Votes: 0GitHub stars: 2
- Self InstallerAutomated installation and setup of THIS Secure Vibe Coding OS SaaS application. This skill installs the current application only. Use when user says "install app", "setup app", "install this app", "install from readme", or "run the installation". Automates Clerk authentication setup, Convex backend configuration, webhook setup, billing enablement, and application testing using Playwright browser automation.Votes: 0GitHub stars: 2
- Security TestingTest security features and verify implementation before deployment. Use this skill when you need to test CSRF protection, rate limiting, input validation, verify security headers, run security audits, or check the pre-deployment security checklist. Triggers include "test security", "security testing", "verify security", "security checklist", "pre-deployment", "test CSRF", "test rate limit", "security verification".Votes: 0GitHub stars: 2
- Threat ModelingSecurity analysis and threat modeling prompt templates for STRIDE analysis, code review, OWASP compliance, and vulnerability assessment. Use for security planning, pre-deployment reviews, and ongoing threat assessment. Triggers include "STRIDE", "threat model", "security review", "code review", "OWASP", "payment security", "security analysis", "vulnerability assessment".Votes: 0GitHub stars: 2
- Prompt EngineeringComprehensive security prompt templates for implementing secure features with multiple security layers. Use for complex implementations like forms, authenticated endpoints, public APIs, admin features, file uploads, middleware composition, and security testing. Triggers include "secure form", "authenticated endpoint", "public endpoint", "admin action", "file upload", "composable middleware", "security testing", "new security control".Votes: 0GitHub stars: 2