Best security skills, page 5

A skill your agent uses when running chaitin-cli commands to manage Chaitin security products: SafeLine WAF (site management, IP blocking, ACL, policy rules, attack logs), X-Ray vulnerability…

chaitin/chaitin-cli

Install or initialize HOL Guard local runtime protection for Claude Code.

hashgraph-online/hol-guard

Runs supply-chain risk analysis on CycloneDX BOMs with cdx-audit predictive auditing and cdxgen --bom-audit embedded rules, covering npm and PyPI package compromise posture, CI permission risk…

cdxgen/cdxgen

A skill your agent uses to perform a security-focused audit of the codebase to identify vulnerabilities, sandbox escapes, and logic flaws.

ziggy42/epsilon

Design a loss function and harness for a long-running /goal optimization run (loss-function development, LFD).

elvisun/loss-function-development

Perform a systematic code review of all source files, focusing on security, performance, backwards compatibility, and design principles.

MichaelGrafnetter/DSInternals

PHP Web 归档解压（Zip Slip/路径穿越）审计工具。识别解压条目名如何与目标目录拼接、是否存在 base dir 约束缺失，输出可利用性分级、可观测 PoC 与修复建议（禁止省略）。

0xShe/PHP-Code-Audit-Skill

Applies safer package manager defaults and dependency vetting to JavaScript and TypeScript projects to reduce supply-chain attack risk.

bodadotsh/npm-security-best-practices

Adding a built-in Agent Skill (an attack technique like ssrf, xxe, rce) that ships hardcoded in RedAmon: classified by the Intent Router, injected into the agent prompt, toggled per project, badged…

samugit83/redamon

Maximum-fidelity Python source reconstruction from Nuitka .nbc / NBC/2 files produced by nuitkadecompiler.py.

DimaReverse/nuitka-static-unpacker

Analyze an OpenTaint scan's dropped external methods and decide which of them are propagators and optionally sinks.

seqra/opentaint

Configure signed release manifests with packslip: add the jdx/packslip action or packslip create to a release workflow, declare completions, man pages, CLI specs, skills, and SBOMs as resources, and…

jdx/packslip

Author CycloneDX-VEX or OpenVEX documents that import cleanly into ReARM.

relizaio/rearm

Comprehensive security review framework for AI agents. An agent skill from slowmist/slowmist-agent-security.

slowmist/slowmist-agent-security

Run the security-focused Skeptic persona on the local working tree's diff against a base branch.

RaoFoundation/subtensor

Scans code with a bundled Node scanner for injection, secret leaks and other dangerous patterns, and requires documented decisions for accepted risks.

telagod/code-abyss

Request a security expert assessment for code changes that touch child process spawning, file system access, configuration loading, or environment variable handling.

ktnyt/cclsp

GATES method validation for hunt-derived detections. An agent skill from Nebulock-Inc/agentic-threat-hunting-framework.

Nebulock-Inc/agentic-threat-hunting-framework

Creates structured agent definitions using the 7-component format grounded in persona science (the alignment-accuracy tradeoff), vocabulary routing, and the MAST failure taxonomy + Forge watchlist.

jdforsythe/forge

Run a security scan on the kedro-plugins codebase or a pull request.

kedro-org/kedro-plugins

Runs the codecrucible CLI for LLM-backed security scans of a repository, checks scope and cost first with a dry run, and reads the SARIF results.

block/codecrucible

Supply chain investigation, evidence recovery, and forensic analysis for GitHub repositories.

Tommy-yw/RunbookHermes

A skill your agent uses when the dependency audit goes red — .github/scripts/check/dependencyaudit.sh or the bundler-audit CI job — or when a newly published CVE/GHSA on a dependency gem blocks a PR.

DataDog/dd-trace-rb

Applies the AI SAFE2 framework to security reviews, code reviews and compliance mapping for AI agents, RAG pipelines and MCP servers.

CyberStrategyInstitute/ai-safe2-framework

Research any crypto or meme token by address — real-time price, market cap, liquidity, holder list, trader list, top Smart Money and KOL positions, security audit (honeypot, rug pull risk, dev…

GMGNAI/gmgn-skills

Monitor and manage your Clawdbot agent fleet from within an agent.

Temaki-AI/clawd-control

Explains what each aru doctor architecture-check finding means in the Arandu Go framework, why it is never suppressed, and how to fix the line it points to.

arandu-io/arandu

Runs a full workflow for authorized Android app security testing: static APK analysis, rooted emulator setup, traffic interception and Frida hook generation.

ptn1411/skill

A skill your agent uses when scanning code for security vulnerabilities.

tanviet12/vbsec

KISA 가이드라인 기반 배포 전 보안 컴플라이언스 체크리스트를 실행합니다. An agent skill from cdppcorp/KESE-KIT.

cdppcorp/KESE-KIT

Connect to a Windows 98 game or app that a person is running in their browser on wine-assembly, then see its screen and play it with mouse and keyboard.

vgrichina/berrry-wine

Read AI Safety HOT daily digests, search recent AI safety research and incidents, and follow current hot topics.

wuyoscar/AISafetyHot-Hub

Routes a whole-product security request to the right Strix test per asset, source code, a live app, an API or a CI pipeline, then turns results into one ranked remediation plan.

usestrix/strix

Audit an agent skill with Semia Skill Behavior Mapping. An agent skill from berabuddies/Semia.

berabuddies/Semia

Automatically use for Levyra Android Intent, deep-link, PendingIntent, exported component, receiver, service, provider, URI-grant, FileProvider, caller-verification, or onNewIntent security work.

LUC4N3X/Levyra-deepsound

Check and apply security updates across the photofield project (api/Go, ui/npm, docs/npm, e2e/npm).

SmilyOrg/photofield

Audit and harden the Hedioum Pool Tunnel against nation-state DPI and censorship, as a filtering/anti-censorship expert would.

hedioum/Hedioum-Pool-Tunnel

Enable, configure, and query Elasticsearch security audit logs.

aspectrr/deer

Security best practices, vulnerability review, and full security audits for LLM Gateway.

theopenco/llmgateway

CI/CD with GitHub Actions for Golang — testing, linting, SAST, security scanning, coverage, Dependabot, Renovate, GoReleaser, release pipelines.

context-labs/whip

A skill your agent uses when configuring, running, or fixing PHPStan static analysis in WordPress projects (plugins/themes/sites): phpstan.neon setup, baselines, WordPress-specific typing, and…

Automattic/agent-skills

Generate SITF-compliant attack flow JSON files from attack descriptions or incident reports.

wiz-sec-public/SITF

Render app UI on the Gradle managed device and look at the result without spending a fortune in vision tokens.

parawanderer/OpenTagViewer

Shows how to replace unsafe hasattr and setattr loops over user-controlled kwargs with an explicit allowlist when configuring ONNX Runtime option objects.

microsoft/onnxruntime

Handle a security fix end to end for MidnightBSD src - triage a FreeBSD security advisory (FreeBSD-SA-) or CVE against this tree, port the fix to master and both stable branches, add the UPDATING…

MidnightBSD/src

Security-focused code review checklist and automated scanning patterns.

nicepkg/auto-company

Runs a capture-the-flag box from first scan to root with a driver script that tracks progress and prints the next action each turn.

Encod3d-Sec/TORCH

Analyze potential Ankaios security vulnerabilities from pasted reports, local evidence, or advisory URLs.

eclipse-ankaios/ankaios