Security · For devops and sre engineers

Entry point for any development task in this repo — feature, bugfix, refactor, cleanup, a new command, target or evaluator, a collector change.

guardana/guardana

Reviews dependency-scan findings against repo source to mark each as confirmed (real risk) or falsepositive (not exploitable in this codebase context).

epam/ai-dial-chat

Choose and implement the right Circle wallet type for your application.

circlefin/skills

Clang/LLVM compiler skill for C/C++ projects. An agent skill from mohitmishra786/low-level-dev-skills.

mohitmishra786/low-level-dev-skills

Audit architecture, dead code, duplication, type confusion, and code smells across a codebase.

pedronauck/skills

当需要对嵌入式 C/C++ 代码运行 cppcheck、clang-tidy 或 GCC analyzer 静态分析，或进行 MISRA-C 合规检查时使用。

LeoKemp223/embed-ai-tool

Security scanning and vulnerability detection. An agent skill from ruvnet/ruflo.

ruvnet/ruflo

Configure host-based firewalls (iptables, nftables, UFW) and cloud security groups (AWS, GCP, Azure) with practical rules for common scenarios like web servers, databases, and bastion hosts.

ancoleman/ai-design-components

Scan any agent skill for security risks before you install or use it.

LeoYeAI/openclaw-master-skills

Audit raytsystem changes for prompt injection, provenance bypass, path/symlink/hardlink escape, secret leakage, stale fencing, partial promotion, unsafe parsing, and unapproved side effects.

romarayt/raytsystem-public-os

A skill your agent uses when asked to generate a vulnerability and exposure management report, assess security posture, or review CVEs, security configurations, and attack paths.

SCStelz/security-investigator

Audit JS/TS projects against NPM Security Guidelines covering project setup, dependency hygiene, CI/CD pipeline, Dependabot, and incident response.

c0x12c/ai-toolkit

Perform a focused security review of pending git changes to identify high-confidence security vulnerabilities with real exploitation potential.

waybarrios/opencode-power-pack

CVE lookup via MITRE + NVD: severity, CVSS, affected products, refs

taracodlabs/aiden

Azure Key Vault Keys SDK for Rust. An agent skill from aiskillstore/marketplace.

aiskillstore/marketplace

Hunting skill for cache poison vulnerabilities. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Finding validation before writing any report. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

This skill covers conducting comprehensive security assessments of Operational Technology (OT) networks including SCADA systems, DCS architectures, and industrial control system communication paths.

mukul975/Anthropic-Cybersecurity-Skills

Test native or language object reconstruction, polymorphic type selection, gadget reachability, schema bypass, mass object binding, and unsafe serializer configuration in authorized applications or…

cyberful/cyberful

PHP Web 源码 CRLF/响应分割审计工具。识别用户输入进入 HTTP 响应头，分析换行/控制字符过滤与编码，输出分级、PoC 与修复建议（禁止省略）。

0xShe/PHP-Code-Audit-Skill

PHP Web 源码加密与密钥安全审计工具。识别弱哈希/弱加密/硬编码密钥/签名校验缺陷，输出分级、PoC 与修复建议（禁止省略）。

0xShe/PHP-Code-Audit-Skill

PHP Web 源码 XXE 审计工具。识别 XML 解析点与实体处理配置，追踪 XML 输入来源与回显，输出可利用性分级、PoC 与修复建议（禁止省略）。

0xShe/PHP-Code-Audit-Skill

Configure single-project Cloud Logging on Google Cloud: regional log buckets, log sinks, log views, restricting or hiding sensitive logs in the default view (Default) filter, IAM permissions for…

google/skills

Create standardized report headers with metadata for all agent-generated reports.

maslennikov-ig/claude-code-orchestrator-kit

AWS security finding analysis: analyze findings, map to Atmos components/stacks, generate structured remediation with exact Terraform changes and deploy commands

cloudposse/atmos

Atmos SBOM provenance: CycloneDX and SPDX generation from vendor and Terraform evidence, coverage diagnostics, NTIA validation, and native CI workflow-artifact publication

cloudposse/atmos

在仓库中寻找可利用、值得赏金的安全问题。专注于远程可访问的漏洞，这些漏洞符合实际报告的条件，而不是嘈杂的仅本地发现. An agent skill from affaan-m/ECC.

affaan-m/ECC

Run osv-scanner via the mantisosvscanner MCP server for SCA (vulnerable dependency) findings

deonmenezes/mantishack

Extract structured data via stored browser-templates or one-shot DOM queries, with mandatory AIDefence PII + prompt-injection gates before content reaches the model

ruvnet/ruflo

Continuous security posture assessment. An agent skill from bolivian-peru/os-moda.

bolivian-peru/os-moda

Guide rapid triage and initial response to security incidents following NIST SP 800-61 methodology.

briiirussell/cybersecurity-skills

Engineer and audit SIEM detection rules — log source coverage, Sigma / KQL / SPL / Elastic query authoring, MITRE ATT&CK mapping, false-positive tuning, and detection-as-code workflows.

briiirussell/cybersecurity-skills

Build, run, and improve a Security Operations Center — alert prioritization, runbook authoring, escalation criteria, on-call structure, alert tuning workflow, MTTD / MTTR / fidelity KPIs, analyst…

briiirussell/cybersecurity-skills

Conduct proactive, hypothesis-driven threat hunts — search SIEM / EDR / logs for adversaries who haven't tripped an alert yet.

briiirussell/cybersecurity-skills

Run a structured threat-modeling session for a new feature, system, or architecture — STRIDE, attack trees, data flow diagrams, abuse cases.

briiirussell/cybersecurity-skills

Apply Karpathy-style minimalism and anti-dependency principles to code and system design.

LearnPrompt/andrej-karpathy-skills

Enforce output quality, evidence verification, and quality gates across security audits.

github/awesome-copilot

Connect the shared untrusted-data source group to new reusable OpenTaint sink groups.

seqra/opentaint

Inventories project dependencies and runtimes across ecosystems and reports known CVEs, supply-chain risks and a prioritized upgrade plan.

criptogus/agent-evolve-network

Review secret detection patterns and scanning workflows. An agent skill from IgorWarzocha/Opencode-Workflows.

IgorWarzocha/Opencode-Workflows

Security review checklist for Convex functions, auth logic, public queries, admin routes, webhooks, uploads, and AI-generated code.

waynesutton/markdown-site

A skill your agent uses when Codex is already in the finding-discovery phase of a security scan or the user explicitly asks to discover candidate security findings in a repository or code change.

vlinx-io/VelaTerm

A skill your agent uses when Codex is already in the threat-modeling phase of a security scan, the user explicitly invokes $threat-model, or the user explicitly asks to create, update, or persist a…

vlinx-io/VelaTerm

Deploys and configures Wazuh SIEM/XDR for endpoint detection, covering agent authentication and management, custom decoder and rule XML creation, alert querying via the Wazuh REST API, rule testing…

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure Proofpoint Email Protection as a secure email gateway to detect and block phishing, malware, BEC, and spam before messages reach user inboxes.

mukul975/Anthropic-Cybersecurity-Skills

A cryptographic audit systematically reviews an application's use of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms, insecure modes, hardco

mukul975/Anthropic-Cybersecurity-Skills

Deploy AI and NLP-powered detection systems to identify business email compromise attacks by analyzing writing style, behavioral patterns, and contextual anomalies that evade traditional rule-based…

mukul975/Anthropic-Cybersecurity-Skills

A skill your agent uses when reviewing a project's security posture, setting up CI pipelines, or responding to a reported vulnerability in a dependency.

thedaviddias/Front-End-Checklist