Security · For devops and sre engineers

Comprehensive infrastructure security audit framework for IaC, Docker, Kubernetes, and cloud configurations.

forefy/.context

Plan and coordinate a model deployment to Amazon SageMaker, including serving stack and real-time versus async inference.

waybarrios/opencode-power-pack

Screen fetched web pages, tool results, emails and file contents for instructions aimed at the agent before they enter context, using a keyless multi-label classifier over chunks.

mrmps/classifier-dev

Rank a SIEM or EDR alert queue before a human opens it. An agent skill from mrmps/classifier-dev.

mrmps/classifier-dev

Ревью изменений с фокусом на безопасность по стандартам команды.

justxor/claude-code-pro-course

Pull REAL Snyk SAST findings from EPAM Jira (Data Center) via the search-export API using a Personal Access Token, and emit them as a stage-output.json artifact for a downstream triage stage.

epam/ai-dial-chat

A skill your agent uses when the user says 'CSP', 'Content-Security-Policy', 'security headers', 'HSTS', 'X-Frame-Options', 'clickjacking', 'unsafe-inline', 'unsafe-eval', or needs to audit…

cwinvestments/memstack

A skill your agent uses when the user says 'check RLS', 'audit RLS', 'RLS policies', 'row level security', 'Supabase security audit', or needs to verify table-level access control.

cwinvestments/memstack

[omh] Security event on the code already shipped -- a CVE in a dependency, a secret committed to the repo, a license question, an advisory: triage reachability and severity, contain in order, and…

rlaope/oh-my-hermes

[omh] Agent or automation safety risks: review prompt, tool, secret, dependency, destructive-action, and explicit local plugin risks before agent or code execution.

rlaope/oh-my-hermes

Detect package managers and CI action pins, then discover outdated or vulnerable dependencies.

tobihagemann/turbo

Security: review git changes for vulnerabilities, threat-model a system's attack surface, audit supply-chain risks.

notque/vexjoy-agent

IAM policy review, hardening, and least privilege implementation

aiskillstore/marketplace

Comprehensive AWS security posture assessment using AWS CLI and security best practices

aiskillstore/marketplace

Create OPA governance policies for Harness via MCP. An agent skill from harness/harness-skills.

harness/harness-skills

A skill your agent uses for a standard, single-pass security audit of an entire repository or a scoped path, package, folder, or submodule with no diff to review.

vlinx-io/VelaTerm

Web2 recon pipeline

sickn33/agentic-awesome-skills

Configure and execute authenticated (credentialed) vulnerability scans using OpenVAS/Greenbone Vulnerability Management (GVM) with SSH, SMB, or ESXi credentials to detect local vulnerabilities…

mukul975/Anthropic-Cybersecurity-Skills

Plan and run authenticated (credentialed) vulnerability scans with scanners such as Nessus, Qualys, OpenVAS, or Rapid7 InsightVM, using SSH, SMB, WinRM, or SNMPv3 credentials to inspect installed…

mukul975/Anthropic-Cybersecurity-Skills

Azure Key Vault SDK for Python. An agent skill from microsoft/skills.

microsoft/skills

CI/CD pipeline security, supply chain security, SLSA compliance, artifact signing, dependency scanning

Hack23/cia

A skill your agent uses when auditing an authorized website, SaaS, API, AI app, local code path, GitHub repo, staging URL, or owned runtime for security risks, vulnerability checklist scoring…

yaojingang/yao-open-skills

Software supply-chain defensive security reference: SBOM generation and verification (SPDX / CycloneDX), dependency-confusion defense, malicious-package triage playbook, SLSA provenance levels…

modu-ai/moai-adk

Provides expert guidance on Identity and Access Management (IAM) and authenticating and authorizing to Google Cloud services and APIs, covering human users, service identities, Application Default…

google/skills

A skill your agent uses when auditing dependency health — outdated packages, CVE triage with attack-vector weighting, deprecated/declining library detection (trend-watch).

mizchi/skills

Scan the ClawHunter agent bounty marketplace for opportunities that genuinely match this agent's real capabilities (code, security research, writing) and surface only real matches — never a raw…

aeonfun/aeon

Deep code property graph analysis with Joern CPG (AST+CFG+PDG) and CodeQL for control flow, data flow, taint analysis, and security auditing

alinaqi/maggy

Structured, adversarial, multi-phase security audit of a codebase — recon → coverage-led hunting → finder≠validator validation → machine-readable findings → target-neutral report

alinaqi/maggy

Debug a rule or approximation that behaves unexpectedly by tracing where taint is dropped.

seqra/opentaint

Run an OpenTaint scan on project and produces the SARIF report.

seqra/opentaint

Mark which of a project's dependency libraries could introduce taint sources.

seqra/opentaint

Analyze session management implementations to identify security vulnerabilities in web applications.

jeremylongshore/tons-of-skills-marketplace

Validate encryption implementations and cryptographic practices.

jeremylongshore/tons-of-skills-marketplace

Analyze code, infrastructure, and configurations by conducting comprehensive security audits.

jeremylongshore/tons-of-skills-marketplace

Audit automatically audits AI assistant code plugins for security vulnerabilities, best practices, AI assistant.md compliance, and quality standards when user mentions audit plugin, security review…

jeremylongshore/tons-of-skills-marketplace

Analyze and guide security incident response, investigation, and remediation processes.

jeremylongshore/tons-of-skills-marketplace

Execute use when you need to work with security and compliance.

jeremylongshore/tons-of-skills-marketplace

Execute this skill enables comprehensive vulnerability scanning using the vulnerability-scanner plugin.

jeremylongshore/tons-of-skills-marketplace

A skill your agent uses when reviewing, designing, or modifying Java enterprise products, services, libraries, agents, plugins, connected components, or platform modules that may qualify as products…

jabrena/plinth

Review Vite security audit patterns for SPA and dev server security.

IgorWarzocha/Opencode-Workflows

Retrieve CVE risk scores from NVD. An agent skill from transilienceai/communitytools.

transilienceai/communitytools

Risk-based prioritisation of confirmed attack paths. An agent skill from transilienceai/communitytools.

transilienceai/communitytools

Threat-intel signal ingest — converts a CVE + affected-asset + claim payload into a queued engagement-scope row for the validation pipeline.

transilienceai/communitytools

Run and inspect the local pieces of Guardana — the throwaway PostgreSQL for the collector, the collector itself, a fake OpenAI-compatible endpoint to probe, the documentation site served locally…

guardana/guardana

Hunt for credential access techniques like LSASS dumping or browser credential theft.

dandye/ai-runbooks

Symbolic execution and constraint solving with angr, Z3, Unicorn, and Qiling.

ptn1411/skill

Detects prompt injection using regex signature matching, heuristic scoring for structural anomalies, and DeBERTa-based transformer classification, flagging direct injections (system-prompt…

mukul975/Anthropic-Cybersecurity-Skills

Detect and defend against indirect prompt injection hidden in web pages, documents, and images consumed by an agent, via content extraction (HTML/PDF/OCR), normalization, and scanning with LLM…

mukul975/Anthropic-Cybersecurity-Skills