All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,067
- 1,212
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 2,281–2,304 of 29,067 skills
- Ai Task DecomposerBreak a broad goal, epic or approved spec into small, ordered tasks an AI agent can each finish, validate and get reviewed as ONE pull request (PR): each task has one intent, an observable acceptance criterion with the evidence that will prove it, the likely files or layers touched, a provisional change class, known risks, dependencies and order, and any human-approval boundary it will cross. Oversized or vague tasks are split again; unknowns become spike tasks or owner questions, never guess...Votes: 0GitHub stars: 4
- Integrating External Tools And ApisTurn APIs, queries and code into described, schema-bound LangChain tools that an agent can select, call and recover from safely.Votes: 0GitHub stars: 2
- Bad Frontmatter块标量正文里误写顶层列表项，整行会被解析器丢弃。Votes: 0GitHub stars: 112
- Speakers+++ Title = "Kathryn Bouskill" type = "speaker" image = "kathryn-bouskill.jpg" linktitle = "kathryn-bouskill" +++ <h3> Anthropologist Meta Infrastructure Team </h3> <p> Bouskill is a senior researcher at Meta where she works in Meta’s Reliability Engineering organization. An anthropologist by training, Bouskill has worked around the world on a range of issues related to technology, risk & security, and public health. She is an adjunct researcher at the RAND Corporation and professor at the Pa...Votes: 0GitHub stars: 194
- PhpModern PHP 8.5 practices: type system, OOP, security, architecture, async, testing, tooling. Use when writing or reviewing PHP code.Votes: 0GitHub stars: 54
- AwsAWS best practices: IAM, secrets, networking, security, compute, IaC, ops. Use when building, reviewing, or modifying AWS resources.Votes: 0GitHub stars: 54
- Reverse Skill RouterUse the reverse-skill repository from Codex for authorized reverse engineering, security analysis, CTF, and defensive testing tasks. Requires the reverse-skill repository to be available as the current workspace or an explicitly supplied local path.Votes: 0GitHub stars: 2
- Ctf Sandbox OrchestratorDefault entrypoint and master ctf-sandbox-orchestrator workflow for CTF, exploit, reverse engineering, DFIR, pwnable, crypto, stego, mobile, AI-agent, cloud, container, Active Directory, Windows-host, and identity challenges. Use first when the user presents challenge infrastructure, binaries, prompts, hosts, or identities that should be treated as sandbox-internal by default and Codex needs to choose, route, and load the right downstream analysis path with concise evidence.Votes: 0GitHub stars: 2
- Ai SwarmDrive PWN::Plugins::REPL::AISwarm from pwn_eval.Votes: 0GitHub stars: 86
- Ai Console UsageDrive PWN::Plugins::REPL::AIConsoleUsage from pwn_eval.Votes: 0GitHub stars: 86
- Ai Console CommandsDrive PWN::Plugins::REPL::AIConsoleCommands from pwn_eval.Votes: 0GitHub stars: 86
- Ai ConsoleDrive PWN::Plugins::REPL::AIConsole from pwn_eval.Votes: 0GitHub stars: 86
- Model CatalogDrive PWN::AI::ModelCatalog from pwn_eval.Votes: 0GitHub stars: 86
- Security Audit[Code Quality] Use when a workflow step or the user asks for a security review or audit: OWASP Top 10, secrets, supply-chain, infrastructure, CI/CD, AI-agent risks.Votes: 0GitHub stars: 3
- Security Audit[Code Quality] Use when a workflow step or the user asks for a security review or audit: OWASP Top 10, secrets, supply-chain, infrastructure, CI/CD, AI-agent risks.Votes: 0GitHub stars: 3
- JevgrepOperate Jevgrep (`jg`) as optional remote-agent discovery over explicitly scoped skills, wiki pages, or graph source documents. Use only when the user explicitly requests Jevgrep and separately approves transmitting source content and queries to the configured provider with potential cost. Preserve native catalog, exact/LSP/zvec retrieval and Graphify query/path/explain as defaults; Jevgrep does not query or rebuild durable graphs.Votes: 0GitHub stars: 46
- Jev Tool GuardUse `jev_guard_tool_call` immediately before a consequential tool invocation. Do not use it to bypass an approval already required by the user, platform, or policy.Votes: 0GitHub stars: 17
- Jev Task RouterUse `jev_route_task` before committing to an execution path when the task has meaningful ambiguity or risk.Votes: 0GitHub stars: 17
- Customs Trade Compliance通関書類、関税分類、関税最適化、制限当事者スクリーニング、複数の法域にわたる規制コンプライアンスのための成文化された専門知識。15年以上の経験を持つ貿易コンプライアンス専門家に情報。HS分類ロジック、インコターム適用、FTA利用、ペナルティ軽減を含みます。通関許可、関税分類、貿易コンプライアンス、輸入/輸出ドキュメント、または関税最適化を処理するときに使用します。Votes: 0GitHub stars: 17
- Read The Damn DocsUse when implementing, integrating, upgrading, debugging, or answering anything involving third-party APIs, libraries, frameworks, CLIs, cloud services, model/provider SDKs, fast-moving product behavior, user requests for latest/current/official behavior, unfamiliar repo docs/specs, errors that may indicate API drift, or high-stakes auth, security, billing, data, migration, deployment, compliance, or privacy behavior. Forces Codex to web-search for current official docs and read primary docs ...Votes: 0GitHub stars: 17
- Plow AheadUse when the user explicitly wants autonomous progress without routine clarification stops: "plow ahead", "do not stop", "use your best judgment", "keep going until done", "finish while I am away", "do not ask questions unless truly blocked", or similar. Convert ordinary ambiguity into stated assumptions, proceed through implementation and validation, stop only for true blockers, and end with a clear recap of decisions, changes, verification, and residual risk.Votes: 0GitHub stars: 17
- Top Web VulnerabilitiesThis skill should be used when the user asks to \"identify web application vulnerabilities\", \"explain common security flaws\", \"understand vulnerability categories\", \"learn about inject...Votes: 0GitHub stars: 8
- Security Scanning Security HardeningCoordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.Votes: 0GitHub stars: 8
- Security AuditorExpert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulnerability assessment, threat modeling, secure authentication (OAuth2/OIDC), OWASP standards, cloud security, and security automation. Handles DevSecOps integration, compliance (GDPR/HIPAA/SOC2), and incident response. Use PROACTIVELY for security audits, DevSecOps, or compliance implementation.Votes: 0GitHub stars: 8