Best security skills, page 51

Establish least-privilege OAuth, secret, webhook, data, card, and financial-write controls for a Ramp integration.

jeremylongshore/tons-of-skills-marketplace

Review RemoFirst account, group, report, connector, and worker-data controls.

jeremylongshore/tons-of-skills-marketplace

Harden Runway keys, organization access, prompts, media, generated outputs, and support evidence.

jeremylongshore/tons-of-skills-marketplace

Detect API security vulnerabilities including injection, broken auth, and data exposure.

jeremylongshore/tons-of-skills-marketplace

Threat-model a WebContainer or StackBlitz embed across host, runtime, user-code, filesystem, dependency, network, preview, secret, and persistence boundaries.

jeremylongshore/tons-of-skills-marketplace

Enforce organizational governance for Supabase projects: shared RLS policy library with reusable templates, table and column naming conventions, migration review process with CI checks, cost alert…

jeremylongshore/tons-of-skills-marketplace

Harden Snagit and Camtasia automation around capture consent, license secrecy, local storage, share destinations, least privilege, and artifact review.

jeremylongshore/tons-of-skills-marketplace

Secure Together AI integrations with project-scoped keys, environment isolation, prompt/output data controls, bounded model behavior, safe logging, rotation, and incident response.

jeremylongshore/tons-of-skills-marketplace

Configure TwinMind across development, staging, and production environments with separate accounts and API key management.

jeremylongshore/tons-of-skills-marketplace

Apply Vercel security best practices for secrets, headers, and access control.

jeremylongshore/tons-of-skills-marketplace

Audit MCP (Model Context Protocol) server configurations for security issues.

boshi-xixixi/TraeSkill

Executes joiner, mover and leaver processes — provisioning, group membership, access changes on role change, and complete deprovisioning.

cbrock84/headcount

Designs and tests controls over financial reporting — segregation of duties, approval limits, evidence, and preparing for audit.

cbrock84/headcount

Reviews a design or change for security before it ships — authentication and authorization, data handling, secrets, dependencies, and the secure-development practices around it.

cbrock84/headcount

Manages the flow of goods and inputs — sourcing, inventory, lead times, fulfillment, and supply risk.

cbrock84/headcount

Identifies what could go wrong in a system before it is built or changed — the assets worth attacking, the entry points, the trust boundaries, and the controls that actually address the realistic…

cbrock84/headcount

Runs the loop from discovering a weakness to confirming it is fixed — scanning, triage, prioritization by real exploitability, remediation tracking, and patch policy.

cbrock84/headcount

Configure Claude Code sandbox network isolation with trusted domains, custom access policies, and environment variables

Microck/ordinary-claude-skills

Orchestrate multiple Antigravity skills through guided workflows for SaaS MVP delivery, security audits, AI agent builds, and browser QA.

aiskillstore/marketplace

Security audit workflow - vulnerability scan → verification. An agent skill from parcadei/Continuous-Claude-v3.

parcadei/Continuous-Claude-v3

SecOps for application security, vulnerability management, compliance, and secure development.

borghei/Claude-Skills

STRIDE threat modeling, DREAD risk scoring, secret detection, and secure architecture design.

borghei/Claude-Skills

扫描代码安全漏洞，检测依赖漏洞、密钥泄露和OWASP安全模式。当用户提到安全扫描、漏洞检测、依赖审计、密钥泄露、API key、OWASP、npm audit、pip-audit或SQL注入/XSS等关键词时触发。

rongxinzy/RongxinAI

Audit trending repos for real exploitable vulnerabilities and disclose responsibly — Private Vulnerability Reporting for code flaws and verified secrets, public PRs only for already-disclosed…

BankrBot/skills

Run a Python fuzzer script (provided as a string) for a fixed duration.

opensage-agent/opensage-adk

Audit or harden a defined application-security attack surface when the user explicitly requests a security audit, vulnerability investigation, or scoped security-hardening pass.

swyxio/skills

Supply Chain Bottleneck Analyzer for Shopify/DTC stores. An agent skill from nexscope-ai/eCommerce-Skills.

nexscope-ai/eCommerce-Skills

Supply Chain Bottleneck Analyzer for Walmart Marketplace sellers.

nexscope-ai/eCommerce-Skills

Entry P0 primary router and operating doctrine for HackSkills.

yaklang/hack-skills

Entry P1 category router for injection testing. An agent skill from yaklang/hack-skills.

yaklang/hack-skills

Supply Chain Optimization (Lite) - Diagnose bottlenecks and provide cost reduction strategies through conversation

nexscope-ai/eCommerce-Skills

Supply Chain Bottleneck Analyzer for TikTok Shop sellers. An agent skill from nexscope-ai/eCommerce-Skills.

nexscope-ai/eCommerce-Skills

Add a comment to a case to document findings, actions, or recommendations.

dandye/ai-runbooks

A skill your agent uses when writing fuzz tests for Solidity contracts.

ccashwell/evm-cortex

Comprehensive reentrancy attack patterns and defenses for Solidity.

ccashwell/evm-cortex

A skill your agent uses when running Slither static analysis on Solidity contracts.

ccashwell/evm-cortex

Security-focused Solidity development patterns. An agent skill from ccashwell/evm-cortex.

ccashwell/evm-cortex

Search the U.S. An agent skill from mvanhorn/printing-press-library.

mvanhorn/printing-press-library

Query and analyze Dynatrace security data in security.events with DQL: vulnerabilities, threat detections, compliance posture, and scan coverage.

Dynatrace/dynatrace-for-ai

This skill should be used when analyzing binaries, executables, or bytecode to understand what they do or how they work.

aiskillstore/marketplace

Run defensive pre-release security tests for Python web applications.

aiskillstore/marketplace

Security-first development guidance based on OWASP ASVS (Application Security Verification Standard).

OWASP/secure-agent-playbook

Read-only audit of MCP definition language across an existing surface — tools, resources, prompts, server instructions.

cyanheads/pubmed-mcp-server

Run semgrep via the mantissemgrep MCP server and triage results into the candidate/confirmed/rejected lifecycle

deonmenezes/mantishack

A skill your agent uses whenever reasoning about manufacturing, scaling production, pricing strategies, operational efficiency, vertical integration, or labor compensation.

K-Dense-AI/mimeographs

A skill your agent uses whenever you need to reason like John D.

K-Dense-AI/mimeographs

Chief Security Officer mode. An agent skill from mr-daedalium/ostack-saas.

mr-daedalium/ostack-saas

Extract bounded, deterministic evidence from crash and sanitizer logs, including signals, sanitizer classes, memory-safety indicators, stack-frame hashes, and source provenance, while reserving…

cyberful/cyberful