Best security skills, page 64

Guidance for the Microsoft unified security operations platform that brings Microsoft Sentinel, Microsoft Defender XDR, Security Copilot, Threat Intelligence, and Microsoft Security Exposure…

vinayaklatthe/microsoft-security-skills

Audit all open HackerOne-sourced VULN Jira tickets and their linked engineering child items to identify what needs action.

bitwarden/ai-plugins

Performs a security-focused code review by launching multiple specialized agents and a verification agent to ensure comprehensive coverage and accurate findings.

bitwarden/ai-plugins

This skill should be used when the user asks to "review Dependabot alerts", "check for vulnerable dependencies", "audit third-party packages", "assess supply chain risk", "run an Aikido scan", or…

bitwarden/ai-plugins

This skill should be used when the user asks to "triage security findings", "fix an Aikido finding", "review Aikido issues", "dismiss a false positive", "check SAST/IaC alerts", or needs to work…

bitwarden/ai-plugins

Identify content gaps and organizational opportunities. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Automated content similarity and grouping analysis. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Develop hierarchical classification systems. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Comprehensive content quality and maintenance assessment. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Design comprehensive metadata frameworks. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Systematic cataloging of information assets. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Security best practices for secure coding, authentication, authorization, and data protection.

OpenHands/extensions

Conducts digital forensics investigations following a personal data breach, covering evidence preservation, chain of custody documentation, log analysis, scope determination, and root cause analysis.

mukul975/Privacy-Data-Protection-Skills

Complete guide to LINDDUN privacy threat modeling methodology covering seven threat categories: Linking, Identifying, Non-repudiation, Detecting, Data Disclosure, Unawareness, and Non-compliance.

mukul975/Privacy-Data-Protection-Skills

Guides implementation of technical, contractual, and organisational supplementary measures for international data transfers per EDPB Recommendations 01/2020.

mukul975/Privacy-Data-Protection-Skills

浏览器交互式挖洞:登录态操作、双账号越权对比、SPA渲染取证、DOM XSS确认、验证码登录、前端隐藏功能绕过. An agent skill from langbyyi/CyberStrikeAI-SRC.

langbyyi/CyberStrikeAI-SRC

移动应用安全深度测试专业技能（v3.0）：移动端深层攻击链（App→API→后端→云）、Android/iOS深度逆向与动态调试、Frida全面对抗与加固脱壳、iOS越狱检测绕过/ObjC Runtime/LLDB调试/证书固定绕过、跨平台框架漏洞（Flutter/React…

langbyyi/CyberStrikeAI-SRC

安全自动化顶级专业技能：DevSecOps全流程集成、CI/CD安全管道、SAST/DAST/SCA/容器/IaC自动化扫描编排、安全工具链集成实战、攻防双视角自动化（红队打点/蓝队检测响应）、SOAR深度编排、Agentic AI安全自动化（LLM Agent编排扫描与响应）、大模型安全运营（AI告警降噪/剧本生成）、误报治理与质量保障、合规自动化（证据收集/报告）

langbyyi/CyberStrikeAI-SRC

安全意识培训深度专业技能（v3.0高级版）：AI时代社工威胁升级、深度伪造语音/视频钓鱼、AI生成个性化钓鱼、Evilginx2全链路仿真演练、防御方角色化培训体系、Kirkpatrick四层量化效果评估、AI大模型结合（LLM生成教材/演练内容/数据分析/大模型使用安全规范）、新威胁面培训（提示注入/Deepfake识别/供应链/QR钓鱼）、红蓝对抗演练组织方法论，从"意识培训"升级为"行为安…

langbyyi/CyberStrikeAI-SRC

Information security expertise for cybersecurity frameworks (NIST, ISO 27001), security architecture, incident response, vulnerability management, identity management, and cloud security.

travisjneuman/.claude

Sustainability and ESG expertise for ESG strategy, carbon footprint management, sustainable supply chains, circular economy, renewable energy, climate risk, and ESG reporting (GRI, SASB, TCFD).

travisjneuman/.claude

A skill your agent uses when auditing an Anchor or bare-Rust Solana program end to end; because Solana ships no static analyzers, the coverage strategy is compiler-warning triage, manual source…

mtarcure/claude-vibe-squad

A skill your agent uses when reviewing Solana program code for the account-model bug classes — unchecked account owner, absent signer, discriminator confusion, caller-controlled CPI seeds…

mtarcure/claude-vibe-squad

MASTER SECURITY: OWASP Top 10, SAST/DAST, PenTest. An agent skill from Dokhacgiakhoa/Agent-Skills-4-Vibe-Coding-CLI.

Dokhacgiakhoa/Agent-Skills-4-Vibe-Coding-CLI

Advanced vulnerability analysis principles. An agent skill from Dokhacgiakhoa/Agent-Skills-4-Vibe-Coding-CLI.

Dokhacgiakhoa/Agent-Skills-4-Vibe-Coding-CLI

This skill should be used when the user asks about "AIR", "algebraic intermediate representation", "ZK constraints", "trace design", "constraint soundness", "polynomial commitments", "FRI", "STARK"…

aiskillstore/marketplace

Scan GitHub Actions workflow files for security vulnerabilities by reading the YAML and reporting findings directly — no external tools, no installation, no shell execution.

aiskillstore/marketplace

Expert code review specialist for quality, security, and maintainability.

aiskillstore/marketplace

RouterOS packet capture and TZSP streaming for protocol debugging.

aiskillstore/marketplace

Validate at every layer data passes through to make bugs impossible.

secondsky/claude-skills

Automated security scanning for dependencies, code, containers with Trivy, Snyk, npm audit.

secondsky/claude-skills

Query and analyze structured CSV datasets on critical minerals production, trade, and supply chains

lamm-mit/scienceclaw

Compute supply chain risk metrics for critical minerals — HHI concentration, net import reliance, top-3 share, and trend analysis

lamm-mit/scienceclaw

Analyze CVE reachability against downstream repository forks at version-specific release branches

openshift-eng/ai-helpers

Analyze a Go codebase to determine if it is impacted by a specific CVE using multiple verification methods and assign a risk level

openshift-eng/ai-helpers

Gather comprehensive vulnerability information from multiple authoritative sources with fallback strategies

openshift-eng/ai-helpers

Query and deduplicate open CVE vulnerability issues from OCPBUGS for Node team components

openshift-eng/ai-helpers

Generate triage reports and post findings to Jira and Slack. An agent skill from openshift-eng/ai-helpers.

openshift-eng/ai-helpers

Guides package selection, security review, and troubleshooting in conda workflows using Anaconda MCP.

Kilo-Org/kilo-marketplace

DevSecOps, secure software development lifecycle (SSDLC), and application security (AppSec) practices covering secret handling, input validation, dependency hygiene, authentication/authorization…

Mindrally/skills

Expert knowledge for Azure External Attack Surface Management development including configuration.

MicrosoftDocs/Agent-Skills

Expert knowledge for Azure Firewall Manager development including best practices, decision making, security, and configuration.

MicrosoftDocs/Agent-Skills

Expert knowledge for Azure Firmware Analysis development including best practices, security, integrations & coding patterns, and deployment.

MicrosoftDocs/Agent-Skills

Expert knowledge for Azure Security development including best practices, decision making, security, configuration, integrations & coding patterns, and deployment.

MicrosoftDocs/Agent-Skills

Deterministically reconcile bounded offline cloud control-plane snapshots to expose resource, public-access, principal, policy, encryption, logging, and lifecycle drift without querying a live…

cyberful/cyberful

Deterministically compare bounded offline release manifests to identify artifact, digest, provenance, signer, permission, dependency, and deployment-input changes that alter the reviewed security…

cyberful/cyberful

Trace secret fingerprints through bounded offline configuration, deployment, log, and runtime snapshots to identify allowed placement, unexpected propagation, stale copies, and cleanup gaps without…

cyberful/cyberful

Top username lists for enumeration: common usernames, default credentials, names.

Ch1nfo/RiftX