Best security skills, page 58

Guide for resolving NullAway static analysis errors. An agent skill from nwjs/chromium.src.

nwjs/chromium.src

Reusable writing-style contract for agent outputs (reports, ARCH docs, verdicts, threat models).

avelikiy/great_cto

Reviewing a diff or feature for exploitable vulnerabilities before it ships.

Zfinix/aster

Supply chain mapping, supplier dependency analysis, customer concentration, geographic concentration, bottleneck identification, supply chain risk, logistics network, sourcing strategy, inventory…

agentii-ai/agentii-investment-intelligence

Security best practices for Micronaut/Kotlin backend including authentication, authorization, input validation, and OWASP prevention.

c0x12c/ai-toolkit

Security audit for Terraform codebases covering IAM, networking, encryption, secrets, access control, and compliance.

c0x12c/ai-toolkit

Generate abstract Control Flow Graph (CFG) representations of programs showing loops, branches, and function calls for static analysis or verification.

ArabelaTso/Skills-4-SE

Analyze CVE reachability in software repositories by examining how vulnerable dependencies are imported and used.

ArabelaTso/Skills-4-SE

Analyze detected vulnerabilities to assess realistic exploitability by examining control flow, input sources, sanitization logic, and execution context.

ArabelaTso/Skills-4-SE

Generate randomized and edge-case inputs to detect unexpected failures, bugs, and security vulnerabilities through fuzz testing.

ArabelaTso/Skills-4-SE

Analyze source code statically to detect potential functional bugs including null dereferences, incorrect condition checks, unreachable code, inconsistent state updates, logic errors, resource…

ArabelaTso/Skills-4-SE

Statically analyze code to detect security vulnerabilities including buffer overflows, injection risks (SQL, command, XSS), insecure deserialization, improper authentication, hard-coded credentials…

ArabelaTso/Skills-4-SE

Detects security vulnerabilities by matching code against known vulnerability patterns, insecure coding idioms, and CVE-style patterns.

ArabelaTso/Skills-4-SE

Applies abstract interpretation using different abstract domains (intervals, octagons, polyhedra, sign, congruence) to statically analyze program variables and infer invariants, value ranges, and…

ArabelaTso/Skills-4-SE

Performs abstract interpretation over source code to infer possible program states, variable ranges, and data properties without executing the program.

ArabelaTso/Skills-4-SE

Beginner-friendly workflow for IDA project export, function-range extraction, naming, type propagation, xrefs, and machine-readable artifacts.

manyuegong33/r0crawl_skills

Automatically load this skill when investigating application outages, service degradation, or errors that could have security-related root causes — including unexplained downtime, authentication or…

aws/tools-for-devops-agent

Install-time cooldowns for npm/bun plus a sandboxed pre-install scan for bypasses.

jamditis/claude-skills-journalism

Creating fuzz driver for Python libraries using LibFuzzer. An agent skill from benchflow-ai/skillsbench.

benchflow-ai/skillsbench

Exact detection thresholds for identifying malicious network patterns including port scans, DoS attacks, and beaconing behavior.

benchflow-ai/skillsbench

Use Trivy vulnerability scanner in offline mode to discover security vulnerabilities in dependency files.

benchflow-ai/skillsbench

Generate structured CSV security audit reports from vulnerability data with proper filtering and formatting.

benchflow-ai/skillsbench

Subagent for figma-from-code Phase 0b. An agent skill from bitovi/ai-enablement-prompts.

bitovi/ai-enablement-prompts

Security vulnerability scanner and OWASP compliance auditor for codebases.

curiositech/some_claude_skills

WordPress security code review for Codex. An agent skill from jorgerosal/wordpress-skills.

jorgerosal/wordpress-skills

Maintainer workflow for the pre-PR secure loop: code, build/test, SAST/CodeQL, dynamic sanitizer checks, fixes, and concise handoff.

InternationalColorConsortium/iccDEV

Ranked next offensive moves from engagement state. An agent skill from Encod3d-Sec/TORCH.

Encod3d-Sec/TORCH

Google Gemini CLI for second opinions, architectural advice, code reviews, security audits.

secondsky/claude-skills

REST API security hardening with authentication, rate limiting, input validation, security headers.

secondsky/claude-skills

Implements CSRF protection using synchronizer tokens, double-submit cookies, and SameSite attributes.

secondsky/claude-skills

Configures HTTP security headers to protect against XSS, clickjacking, and MIME sniffing attacks.

secondsky/claude-skills

XSS attack prevention with input sanitization, output encoding, Content Security Policy.

secondsky/claude-skills

Dedicated security-audit route for OWASP-style risks, secret leaks, auth flaws, injection, unsafe input handling, SSRF/XSS, and sensitive-data exposure.

foryourhealth111-pixel/Vibe-Skills

Expert Australian Information Security Manual (ISM) advisor for government entities and their supply chains.

lawve-ai/awesome-legal-skills

Perform SCCM reconnaissance and takeover prerequisite validation, including site-role mapping, provider and AdminService checks, site database separation checks, and relay-path prechecks.

SpecterOps/skills

Perform a security-focused review of current git changes. An agent skill from SpecterOps/skills.

SpecterOps/skills

Query Shodan for reconnaissance, target enrichment, and exposed service discovery.

SpecterOps/skills

Produce a repository-grounded application security threat model with assets, boundaries, abuse paths, priorities, and mitigations.

nightly-labs/openbot

Review or write Python, JavaScript, TypeScript, or Go code using secure defaults.

nightly-labs/openbot

Go coding rules: style, patterns, security, testing. An agent skill from softspark/ai-toolkit.

softspark/ai-toolkit

Transform bounded HAR captures into deterministic HTTP evidence about methods, origins, paths, status classes, header presence, redirects, cookies, and body sizes without replaying traffic or…

cyberful/cyberful

Normalize and correlate bounded SARIF and Cyberful finding exports offline by rule, location, fingerprint, source, level, suppression, and evidence reference without treating scanner severity as…

cyberful/cyberful

Assess AI-system risk from architecture, intended use, affected actors, model limitations, data lineage, autonomy, human oversight, monitoring, and failure consequences.

cyberful/cyberful

Audit container runtime isolation across namespaces, capabilities, seccomp, mandatory access control, mounts, devices, daemon sockets, cgroups, identity, and host integration.

cyberful/cyberful

Find leaked API keys, tokens, and credentials in public GitHub repositories.

uphiago/recon-skills

Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them.

sundial-org/awesome-openclaw-skills

Implement comprehensive input validation to prevent XSS, SQL injection, and command injection attacks with sanitization strategies

Hack23/cia

OSINT collection, source evaluation, data integration, verification techniques for Swedish political intelligence

Hack23/cia