Security · For devops and sre engineers

Run semgrep's p/security-audit and p/secrets rulesets and map hits into the findings shape.

alpha-omega-security/scrutineer

Streamlines the creation, modification, and management of IAM allow policies (v1) and deny policies (v2).

google/skills

Remediates Google Cloud Security Command Center findings, including IAM permission fixes, cloud resource misconfigurations, vulnerabilities, and Toxic Combinations.

google/skills

Complete workflow for static structural analysis. An agent skill from Cai-aa/CAE-Agent-Hub.

Cai-aa/CAE-Agent-Hub

Define analysis steps and procedures. An agent skill from Cai-aa/CAE-Agent-Hub.

Cai-aa/CAE-Agent-Hub

Detect Remote Code Execution (RCE) vulnerabilities in a codebase using a three-phase approach: recon (find dangerous execution sinks), batched verify (trace user input to sinks in parallel…

utkusen/sast-skills

A skill your agent uses when analyzing owned or authorized software artifacts for source recovery, architecture mapping, security auditing, dependency review, and defensive remediation.

ptn1411/skill

蓝队与紫队工程：检测规则编写、SIEM/EDR 调优、事件响应、数字取证、威胁狩猎、ATT&CK 映射、紫队演练闭环。Use when writing Sigma/YARA detection rules, tuning SIEM noise, responding to security incidents, conducting forensic analysis, hunting…

telagod/code-abyss

Multi-agent adversarial-verification orchestration for high-confidence conclusions.

telagod/code-abyss

云原生与软件供应链安全防御。容器/K8s 加固、Service Mesh、CI/CD 安全、SLSA/SBOM/Sigstore、云 IAM、Secrets 管理、IaC 安全。Use when hardening Kubernetes clusters, auditing CI/CD pipelines, implementing supply chain security…

telagod/code-abyss

Threat-model and harden AI agents, RAG systems, assistants, and tool-using workflows against direct, indirect, stored, cross-agent, and multimodal prompt injection.

seb1n/awesome-ai-agent-skills

Scan project dependencies for known vulnerabilities and CVEs.

ruvnet/ruflo

Run full security scans on the codebase using Ruflo security tools.

ruvnet/ruflo

Initialize a multi-agent swarm with anti-drift configuration.

ruvnet/ruflo

Gate any new hash, digest, checksum, signature, nonce, MAC, or content-addressed identifier.

tola-rs/tola-ssg

Design comprehensive security architectures using defense-in-depth, zero trust principles, threat modeling (STRIDE, PASTA), and control frameworks (NIST CSF, CIS Controls, ISO 27001).

ancoleman/ai-design-components

Use in every Trail of Bits Skills workspace inside Harness, before any audit skill — the findings.json format the report pane is built from, which Trail of Bits skill serves which audit phase, and…

autonomous-ai/openharness

The non-obvious invariants of the proactive nightly Claude audit workflow (.github/workflows/claude-nightly-audit.yml): the day-of-week mode selector, the two-key dedup scheme (clusterkey per…

amd/gaia

Validate Snyk SAST / Code findings against repo evidence; emits per-finding verdicts (CONFIRMED / FALSEPOSITIVE / NEEDSREVIEW / DUPLICATE / NOTAPPLICABLE).

epam/ai-dial-chat

Dump process memory and scan for secrets, license keys, decryption keys, tokens, and crypto artifacts.

ptn1411/skill

Blue-team CLI threat hunt over Windows Event Logs. An agent skill from ptn1411/skill.

ptn1411/skill

Audit CVE/vulnerability source coverage for a technology stack.

notque/vexjoy-agent

AUTHORIZED USE ONLY: This skill contains dual-use security techniques.

aiskillstore/marketplace

You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security.

aiskillstore/marketplace

Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.

aiskillstore/marketplace

Complete a security review of the pending changes on the current branch

asgeirtj/system_prompts_leaks

WPS (Wi-Fi Protected Setup) PIN attack methodology — Pixie Dust offline attack against vulnerable chipsets (Ralink, Realtek, Broadcom, MediaTek), online PIN brute-force with reaver/bully, lockout…

SnailSploit/Claude-Red

Turn vulnerability notes, disclosure reports, PoCs, source code, or Codex Security findings into self-contained, sceptically validated, natural-sounding vulnerability reports.

vlinx-io/VelaTerm

Parse Office 365 Unified Audit Logs via Microsoft Graph API to detect email forwarding rule creation, inbox delegation, suspicious OAuth app grants, and other indicators of account compromise.

mukul975/Anthropic-Cybersecurity-Skills

Scan Linux systems for persistence mechanisms including crontab/systemd entries, LDPRELOAD injection, shell profile modifications (.bashrc, .profile), and SSH authorizedkeys backdoors, then…

mukul975/Anthropic-Cybersecurity-Skills

Detect MITRE ATT&CK T1547.001 registry Run key persistence by analyzing Sysmon Event ID 13 logs and registry queries to identify malicious auto-start entries.

mukul975/Anthropic-Cybersecurity-Skills

A skill your agent uses when protected HTTP routes return 401 or 403.

uphiago/recon-skills

Map organization IP infrastructure via ASN, CIDR, TLD expansion, and reverse DNS.

uphiago/recon-skills

Exchange/OWA NTLM AD leak, spray attack when mail subdomain.

uphiago/recon-skills

High-precision Google dorks for exposed configs, secrets, and credentials -- real-world validated

uphiago/recon-skills

Discover origin IPs behind CDN/WAF via favicon hash, DNS history, and SSL certs.

uphiago/recon-skills

Mass scan for exposed env files, backups, and git configs. An agent skill from uphiago/recon-skills.

uphiago/recon-skills

Detect and verify subdomain takeover via dangling CNAME to unclaimed services.

uphiago/recon-skills

Draw a testable attack surface from one authorized target URL or one application.

yaklang/hack-skills

Creates and manages secrets in AWS Secrets Manager following security best practices.

aws/agent-toolkit-for-aws

Windows net diag: ping, traceroute, DNS, port scan (PowerShell)

taracodlabs/aiden

HTTP security header audit (A+ to F) with fix recommendations

taracodlabs/aiden

Usar para modelar amenazas con metodología STRIDE. An agent skill from 686f6c61/alfred-dev.

686f6c61/alfred-dev

Blue-team release-gate analysis for smart contract deployment and upgrade readiness.

quillai-network/quillshield_skills

Defend AI systems against prompt injection and indirect prompt attacks using input controls, tool permissions, output validation, and isolation boundaries.

sickn33/agentic-awesome-skills

Scan inputs for prompt injection, unsafe content, and adversarial attacks using AIDefence.

ruvnet/ruflo

When the user needs a security assessment — threat modeling, vulnerability review, auth flow audit, dependency scanning, or says "is this secure", "review for vulnerabilities", "threat model"…

shawnpang/startup-founder-skills

Operates this repository as a solo maintainer across PR triage, issue handling, release work, deploys, ops checks, cost checks, security review, and docs drift.

serithemage/serverless-openclaw