Best security skills, page 11

CodeIgniter 框架特效安全审计工具。针对 CodeIgniter 的 CSRF、XSS 输出过滤、数据库查询构造、路由与验证器配置、会话 Cookie 安全等机制进行白盒静态审计，并映射到通用漏洞类型体系（CSRF/AUTH/XSS/SQL/CFG/SESS 等）。

0xShe/PHP-Code-Audit-Skill

Spawning and hardening scan containers from the recon orchestrator: the security flags that look correct and break the container, and the sibling bind-mount path handling.

samugit83/redamon

Update Mira topic articles from cases and patterns. An agent skill from vw2x/Mira.

vw2x/Mira

The telemetry each Active Directory technique generates and what alerts a defender: Kerberoasting produces Event 4769 with RC4 encryption (0x17) and an MDI alert, DCSync produces Event 4662 with the…

ADScanPro/Claude-AD

Audit SkiaSharp's native dependencies for security vulnerabilities and CVEs, including Component Governance (CG) alerts from the combined skiasharp-package Azure DevOps pipeline.

mono/SkiaSharp

Server-Side Template Injection — fingerprint the engine first (Jinja2 / Twig / Velocity / Freemarker / ERB / Smarty / Mako / Handlebars / Pug), then escalate the engine-specific primitive to RCE or…

PentesterFlow/agent

Troubleshoot and repair Alibaba Cloud ECS Windows instances from inside the GuestOS or remotely via Cloud Assistant.

aliyun/alibabacloud-ecs-troubleshoot-skills

Test for authentication and authorization flaws including credential attacks, session issues, and access control bypasses

NeoTheCapt/RedteamAgent

Check for existing SIEM alerts and case management entries related to IOCs.

dandye/ai-runbooks

Advanced vulnerability analysis principles. An agent skill from xenitV1/Antigravity-Workflows.

xenitV1/Antigravity-Workflows

A declarative routing engine that turns ticket / error attributes (reporter, label, project, area path, error class, environment) into a tag + AI agent + priority assignment, so cross-source…

aozyildirim/Agena

SAP dependency security and MCP executable trust policy with secure upgrades, cooldowns, staged rollout, and supply-chain protection.

secondsky/sap-skills

Converts CycloneDX BOMs to SPDX 3.0.1 JSON-LD or between CycloneDX spec versions with cdx-convert, and validates BOMs against JSON schema, deep consistency checks, and OWASP SCVS and EU Cyber…

cdxgen/cdxgen

This skill provides guidance for cracking 7z archive password hashes.

lazyFrogLOL/Harness_Engineering

Senior ISMS Audit Expert for internal and external information security management system auditing.

davila7/claude-code-templates

A skill your agent uses when stitching kernels into a multi-launch ELF and the AIE compiler rejects the merged module (BD exhaustion, channel routing, herd shape conflict, IR validation error, DMA…

Xilinx/mlir-air

Handle confidential GitHub Security Advisory response for Paperclip.

paperclipai/paperclip

Host security hardening and risk-tolerance configuration for OpenClaw deployments.

trpc-group/trpc-agent-go

Applies the AI SAFE2 v3.1 governance framework to designing, building, auditing and testing AI agents, RAG pipelines, MCP and tool integrations and AI infrastructure.

CyberStrategyInstitute/ai-safe2-framework

A skill your agent uses when conducting security audits, reviewing code for vulnerabilities, or analyzing infrastructure security.

AratKruglik/claude-laravel

Provides cryptography attack techniques for CTF challenges. An agent skill from ljagiello/ctf-skills.

ljagiello/ctf-skills

Security audit and code review for Solidity smart contracts.

sablier-labs/evm-monorepo

Prepare Solidity projects for a security audit — test coverage, test quality, NatSpec docs, code hygiene, dependency health, best-practice enforcement, deployment readiness, and project…

PlamenTSV/plamen

AI 도구(Claude, ChatGPT, Cursor, Copilot)용 시큐어 코딩 프롬프트와 가이드를 생성합니다.

cdppcorp/KESE-KIT

Detects input validation failures and arithmetic vulnerabilities in smart contracts.

quillai-network/quillshield_skills

A skill your agent uses when the user has concrete failing cases in code or a guardrail/classifier/filter/prompt/API they own — a red-team failure catalogue OR a CI/CD test-failure report (failing…

gaasher/Agent-Loop-Skills

IoM Operational Security (OPSEC) advisor. An agent skill from chainreactors/malice-network.

chainreactors/malice-network

ONVIF device security scanner for testing authentication and brute-forcing credentials.

BrownFineSecurity/iothackbot

Run bandit against the Python source in the repository and map its hits into the findings shape.

alpha-omega-security/scrutineer

Audit Zhin.js changes for security, performance, lifecycle, and architecture regressions.

zhinjs/zhin

A skill your agent uses for ANY new software project from idea to release — websites, WordPress/WooCommerce plugins, MCP servers, web apps, components, or libraries.

joseconti/declaracion-renta-espana

Competitive Ad Intelligence. An agent skill from zubair-trabzada/ai-ads-claude.

zubair-trabzada/ai-ads-claude

Apply STRIDE methodology to systematically identify threats.

sangrokjung/claude-forge

Add security coverage to Guardana the way this repository requires — as a rule, evaluator or target, never by patching the engine — with the fixtures, the framework mapping and the documentation…

guardana/guardana

Master network protocol reverse engineering including packet analysis, protocol dissection, and custom protocol documentation.

wshobson/agents

Detect Insecure Direct Object Reference (IDOR) vulnerabilities in a codebase using a three-phase approach: recon (find candidates), batched verify (check authorization in parallel subagents, 3…

utkusen/sast-skills

Expert workflow for reviewing Tauri 2 desktop app security. An agent skill from mukiwu/tempo-term.

mukiwu/tempo-term

Remediate security vulnerabilities found by Grype or pnpm audit.

stacklok/toolhive-studio

Ingest the official MITRE CWE database and generate per-domain security audit taxonomies for PromptKit.

microsoft/PromptKit

Scans container images, filesystems and SBOMs with Grype for known vulnerabilities, ranks them by CVSS, EPSS and CISA KEV, and wires scans into CI/CD thresholds.

AgentSecOps/SecOpsAgentKit

Find bugs, security vulnerabilities, and code quality issues in local branch changes.

getsentry/skills

Runs a parallel security audit with three vulnerability hunters and two proof-of-concept engineers, rating each finding by whether it is actually exploitable.

code-yeongyu/oh-my-openagent

Review code for security vulnerabilities. An agent skill from kklimuk/docx-cli.

kklimuk/docx-cli

Screens a vulnerability finding with a seven-question gate and pre-submission checks before any report is written, so weak or out-of-scope findings are dropped early.

awarexone/Agentic-Bug-Hunter

A skill your agent uses for authorized reverse engineering of custom binary protocols, Protobuf/gRPC, WebSocket frames, and PCAP-driven protocol recovery.

zhaoxuya520/reverse-skill

Raise Go modules to caller-supplied minimum fixed versions from CVE/GO findings in any format, per tracked module root, sync go.mod/go.sum and root vendor/, audit the source module graphs, run the…

kubernetes-sigs/cloud-provider-azure

Root memory dump of DEX from a running Android app: no injection, no ptrace (survives ptrace-blocking anti-debug; invisible to Frida checks), twin tools cross-check each other.

index-login/MobileRE-Skill

Watch a pushed PR's checks with the Monitor tool, and act on the verdict.

parawanderer/OpenTagViewer