Best security skills, page 19

Verification loop for Quarkus projects: build, static analysis (Checkstyle, PMD, SpotBugs), tests with JaCoCo coverage, OWASP dependency and container security scans, GraalVM native compilation…

affaan-m/ECC

Fast, template-based vulnerability scanning using ProjectDiscovery's Nuclei with extensive community templates covering CVEs, OWASP Top 10, misconfigurations, and security issues across web…

AgentSecOps/SecOpsAgentKit

Comprehensive SecOps skill for application security, vulnerability management, compliance, and secure development practices.

davila7/claude-code-templates

SQL injection detection→exploitation→proof for web apps and APIs.

s0ld13rr/pentestcode

Conduct periodic access reviews and certifications. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Attack-surface crawling with the crawl tool — BFS link/form/hidden-field collection, JS-bundle API route extraction, and auth boundary mapping through the scoped browser.

Ch1nfo/RiftX

Azure Key Vault Keys SDK for .NET. An agent skill from microsoft/skills.

microsoft/skills

Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening.

davila7/claude-code-templates

NVIDIA's runtime safety framework for LLM applications. An agent skill from Orchestra-Research/AI-Research-SKILLs.

Orchestra-Research/AI-Research-SKILLs

Secure key management for AI agents. An agent skill from profbernardoj/everclaw-community-branches.

profbernardoj/everclaw-community-branches

Generates Foundry invariant tests and Echidna property-based fuzz tests for Solidity contracts.

alt-research2/SolidityGuard

安全专家入口。用于 Codex CLI 的 $expert-security 调用. An agent skill from ReJeCtAll/ExpertTeam-Codex.

ReJeCtAll/ExpertTeam-Codex

Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR, HIPAA), conducting threat modeling and…

sangrokjung/claude-forge

Runs security audits on codebases — full scans, diff reviews, threat models, vulnerability triage, remediation guidance, and finding tracking.

fabricioctelles/skills

面向新手的全谱系逆向工程路由器，覆盖 Web/JavaScript、Android/iOS、Frida、脱壳、反分析、原生二进制、协议、固件、恶意软件、游戏、云 API、CTF、可复现一致性测试。用于逆向、起步、脱壳、反编译、hook、Frida、绕过检测、APK/SO/DEX/JS/PCAP/WASM/PE/ELF/Mach-O 分析、签名还原，或从样本到验证结果的完整调查。

manyuegong33/r0crawl_skills

A skill your agent uses when setting up an email inbox for an AI agent (Moltbot, Clawdbot, or similar) - configuring inbound email, webhooks, tunneling for local development, and implementing…

viclafouch/meme-studio

WordPress PHPStan review and setup guidance. An agent skill from jorgerosal/wordpress-skills.

jorgerosal/wordpress-skills

A ten-category security checklist for the agent-core codebase, to run before any security-sensitive change or pull request: secrets, input validation, SQL, access control and prompt injection.

openJiuwen-ai/agent-core

Use on passages a search just returned (memory, vault, session history, wiki, web) before reading them in.

kerpopule/hermes-jev-skills

Configure SAML 2.0 identity federation between on-premises Active Directory (via AD FS or a third-party IdP) and Microsoft Entra ID, covering federation models (AD FS, password hash sync…

mukul975/Anthropic-Cybersecurity-Skills

Operate Syft, Grype, Trivy, Gitleaks, Retire.js, package-manager metadata, and build evidence for advanced software-supply-chain assessment.

cyberful/cyberful

Tool to get the callee of a function in the codebase by function name and file path.

opensage-agent/opensage-adk

Open source license compliance check for a dependency list, a single library, or outbound code.

anthropics/claude-for-legal

Draft a security-audit scope from GitHub repos or API access, with a protocol narrative and a sizing table.

forefy/.context

Produce a daily news brief (AI/security/dev) with links, key takeaways, and action items.

clawdotnet/openclaw.net

Subdomain and DNS enumeration workflow using subfinder, amass, dnsenum, fierce, theharvester, gau, and waybackurls

CommonHuman-Lab/nyxstrike

Perform comprehensive security audit of a repository with detailed findings and step-by-step PoCs.

commercetools/ui-kit

Rust 服务审查：panic、SQL 注入、密钥、错误吞没、遗留标记

liuyanghejerry/Clausura

A skill your agent uses when performing systematic breadth-first review of all contracts during a security audit.

ccashwell/evm-cortex

Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities.

trailofbits/skills

Writes, reviews, and debugs property-based tests — Hypothesis, fast-check, proptest, jqwik, rapid, and Echidna or Medusa for Solidity invariants.

trailofbits/skills

Expands one confirmed or suspected vulnerability into a Trailmark graph neighborhood of variant candidates by finding sibling functions, shared callers and callees, common sensitive sinks, common…

trailofbits/skills

A skill your agent uses when reviewing Swift Concurrency performance and responsiveness, including task explosions, actor hopping, MainActor bottlenecks, cancellation, AsyncSequence cleanup…

Livsy90/iOS-Performance-Agent-Skills

Reference table of per-class false-positive patterns, minimum proof requirements, and impact overclaim traps.

yeswehack/claude-kit

Apply modern web development best practices for security, compatibility, and code quality.

tech-leads-club/agent-skills

Shared discipline for every hunt- skill: scope and authorization gating, the two-account rule, the confirmation gate that separates a real finding from a false positive, enumeration limits, stop…

Encod3d-Sec/TORCH

Queries a local CodexQA symbol graph for change review, regression scope, test gaps, error location, and entry risk.

openqa-cn/codexqa

Respond to blocked package installs and manage the Interlinked supply-chain allowlist.

QuentinCody/interlinked-cli

Configure code scanning in Harness pipelines using STO security scanners.

harness/harness-skills

Senior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices.

alirezarezvani/claude-skills

Expertise in LLVM-based static analysis including dataflow analysis, pointer analysis, taint tracking, and program verification.

aftermathlabs/llvm-msvc

Detect unsafe file handling and path traversal in upload/save/extract flows.

Tencent/AI-Infra-Guard

Detect data leakage, missing boundaries, or privilege mismatch in inter-agent communication.

Tencent/AI-Infra-Guard

Detect persistent instruction injection or long-term memory poisoning.

Tencent/AI-Infra-Guard

Check the live status of the Strait of Hormuz from the Hormuz Strait Monitor dashboard: open, restricted, or closed status, tanker transits vs normal, stranded vessels, Brent price impact, war-risk…

himself65/finance-skills

AWS security best practices, VPC security, IAM, KMS, CloudTrail, GuardDuty for CIA platform deployment

Hack23/cia

Audit local and OpenClaw skill libraries for privacy theft, credential theft, stealthy exfiltration, unsafe execution chains, deceptive instructions, and persistence behavior, then generate a visual…

yaojingang/yao-open-skills

Analyze disk images, file systems, and memory captures for digital evidence recovery in forensic investigations and CTF challenges.

briiirussell/cybersecurity-skills