Best security skills, page 54

Validate API consistency between two versions of Java libraries.

ArabelaTso/Skills-4-SE

Validate API consistency between two versions of Python libraries.

ArabelaTso/Skills-4-SE

Review the finished app against OWASP Top 10:2025, fix what is exploitable, prove each fix with a test, and report.

receptron/mulmoterminal

Review the built app against OWASP Top 10:2025 as an attacker would, fix what is exploitable, prove it on the local stack, and write the report.

receptron/mulmoterminal

Check for duplicate or similar cases. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Ask the user to confirm before taking a significant action. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Save investigation findings to a markdown report file. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Generate hierarchical site structure and navigation maps. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Generate controlled vocabulary thesaurus for content domains.

dandye/ai-runbooks

当涉及添加身份验证（Authentication）、处理用户输入、操作机密（Secrets）、创建 API 终端节点或实现支付/敏感功能时，请使用此技能。提供全面的安全检查清单和模式。

xu-xiang/everything-claude-code-zh

在添加身份验证、处理用户输入、操作机密信息（Secrets）、创建 API 端点以及实现支付/敏感功能时使用此技能。提供全面的安全检查清单和模式。

xu-xiang/everything-claude-code-zh

在添加身份验证、处理用户输入、操作机密信息、创建 API 接口或实现支付/敏感功能时使用此技能。提供全面的安全自查清单和模式。

xu-xiang/everything-claude-code-zh

使用 AgentShield 扫描 Claude Code 配置（.claude/ 目录）中的安全漏洞、配置错误和注入风险。检查 CLAUDE.md、settings.json、MCP 服务端、钩子（Hooks）和智能体（Agents）定义。

xu-xiang/everything-claude-code-zh

使用 AgentShield 扫描您的 Claude Code 配置（.claude/ 目录）是否存在安全漏洞、配置错误和注入风险。检查项包括 CLAUDE.md、settings.json、MCP 服务器、钩子（Hooks）以及智能体（Agent）定义。

xu-xiang/everything-claude-code-zh

Spring Boot 服务的 Spring Security 身份验证/授权、验证、CSRF、密钥、响应头、速率限制和依赖项安全最佳实践。

xu-xiang/everything-claude-code-zh

Spring Boot 服务的身份验证/授权、校验、CSRF、机密管理、响应头、速率限制及依赖安全的 Spring Security 最佳实践。

xu-xiang/everything-claude-code-zh

A skill your agent uses when targeting Financial Cryptography and Data Security (FC) or deciding whether a computer-science manuscript fits this venue.

franklee16/academic-research-skills

A skill your agent uses when targeting IACR Conference on Cryptographic Hardware and Embedded Systems (CHES) or deciding whether a computer-science manuscript fits this venue.

franklee16/academic-research-skills

A skill your agent uses when auditing an ICML main-track submission for OpenReview, LaTeX formatting, 8-page body, anonymity, supplementary material, impact statement, dual submission, concurrent…

franklee16/academic-research-skills

A skill your agent uses when targeting Journal of Operations Management (JOM) or deciding whether an empirical / survey-based / behavioral operations-and-supply-chain manuscript fits this venue.

franklee16/academic-research-skills

A skill your agent uses when targeting Network and Distributed System Security Symposium (NDSS) or deciding whether a computer-science manuscript fits this venue.

franklee16/academic-research-skills

Generates Records of Processing Activities automatically from IT system inventories including Active Directory, cloud service catalogs, API gateway logs, and database schemas.

mukul975/Privacy-Data-Protection-Skills

Implements technical breach detection capabilities including SIEM integration, DLP alert configuration, anomaly detection rules, and insider threat monitoring.

mukul975/Privacy-Data-Protection-Skills

Builds a comprehensive breach response team playbook defining CSIRT and privacy team structure with named roles (incident commander, legal counsel, communications, IT forensics, DPO), escalation…

mukul975/Privacy-Data-Protection-Skills

Conduct LINDDUN privacy threat modeling across all seven categories: Linking, Identifying, Non-repudiation, Detecting, Data Disclosure, Unawareness, and Non-compliance.

mukul975/Privacy-Data-Protection-Skills

Assessment of pseudonymization techniques and re-identification risk.

mukul975/Privacy-Data-Protection-Skills

Fast workflow to inspect PCAPs and extract protocol-level details using tshark

benchflow-ai/skillsbench

Ingest a CVE writeup, blog post, advisory, or GitHub repo into the wiki - fetch, dedup via sources:, update the right technique/tool page(s), re-index.

Encod3d-Sec/TORCH

Comprehensive security vulnerability analysis for codebases and infrastructure.

aiskillstore/marketplace

Comprehensive threat modeling for multi-agent systems using CSA MAESTRO 7-layer framework and OWASP Multi-Agentic System Threat Modeling Guide v1.0.

OWASP/secure-agent-playbook

Remove AI-generated code slop from a branch: unnecessary comments, redundant defensive checks, boilerplate, style drift, and type casts.

foryourhealth111-pixel/Vibe-Skills

Guide for reverse-engineering and recreating programmatically-generated ray-traced images.

lazyFrogLOL/Harness_Engineering

Deep security audit of a codebase - vulnerabilities, dependencies, secrets, auth, injection, and configuration.

RedWoodOG/Hermes-Desktop

Risk-based vendor assessment framework for IT service providers, technology vendors, and third-party partners under DORA, NIS2, GDPR.

lawve-ai/awesome-legal-skills

Patch a Go dependency to fix a CVE using the appropriate strategy based on Go version compatibility.

openshift-eng/ai-helpers

Generate an AI SBOM declaration for a PR description. An agent skill from openshift-eng/ai-helpers.

openshift-eng/ai-helpers

A skill your agent uses when resolving which GitHub repository to clone for CVE analysis from a container image name in a Jira ticket summary, pscomponent label, or Downstream Component Name field.

openshift-eng/ai-helpers

A skill your agent uses when /compliance:analyze-cve is invoked with --jira= or --jql= and needs the CVE ID, image name, branch, and enriched ticket context from a Jira issue.

openshift-eng/ai-helpers

Configure Go projects to use Go's native FIPS 140 module instead of openssl-based FIPS.

openshift-eng/ai-helpers

A skill your agent uses when posting a completed CVE analysis report or PR follow-up as a Jira comment on the source ticket from /compliance:analyze-cve.

openshift-eng/ai-helpers

Triage Go stdlib CVEs against an OpenShift release image to determine which CVEs are fixed by the Go version each component was built with.

openshift-eng/ai-helpers

Perform evidence-driven security code reviews across application repositories, services, libraries, and pull requests.

SpecterOps/skills

A skill your agent uses to grow a TikTok account — the TikTok-specific growth strategy that diagnoses where growth is stuck and orchestrates the other skills to fix it.

social-media-skills/skills

A skill your agent uses to reverse-engineer why a piece of content went viral (or overperformed) — yours or someone else's — and extract the repeatable mechanism to apply to your own content.

social-media-skills/skills

Build or challenge an application threat model from architecture, dataflows, identities, trust boundaries, business invariants, dependencies, and deployment context.

cyberful/cyberful

Route broad AI-agent security reviews to focused Cyberful skills across risk, model supply chain, context and capabilities, prompt injection, tool authorization, and RAG isolation.

cyberful/cyberful

Coordinate a repository-wide white-box application security audit across architecture, source, configuration, dependencies, build, and deployment paths.

cyberful/cyberful

Audit C, C++, unsafe Rust, native extensions, parsers, codecs, FFI boundaries, and systems code for memory corruption and low-level exploitation risk.

cyberful/cyberful