Security · For devops and sre engineers

Deploys canary tokens and honeytokens (fake AWS credentials, DNS canaries, document beacons, database records) that trigger alerts when accessed by attackers.

mukul975/Anthropic-Cybersecurity-Skills

Security engineering toolkit for threat modeling, vulnerability analysis, secure architecture, and penetration testing.

LeoYeAI/openclaw-master-skills

A skill your agent uses whenever the user asks about Wireshark, tcpdump, packet capture, pcap analysis, HTTP/DNS/TCP/DHCP/TLS capture interpretation, network lab reports, protocol fields observed in…

mingchen666/Reviva

Audit wallet security by analyzing token approvals, permissions, and transaction patterns.

jeremylongshore/tons-of-skills-marketplace

Audit a target's HTTP security headers — CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and the Cross-Origin trio (COOP, COEP, CORP).

jeremylongshore/tons-of-skills-marketplace

Probe a target for directories that return auto-generated index listings instead of denying or serving a specific file — exposes the full file tree under any reachable directory, including files the…

jeremylongshore/tons-of-skills-marketplace

Scan a source tree for weak cryptographic primitives: MD5 / SHA-1 used for security purposes, DES / 3DES / RC4 ciphers, ECB block mode, custom-built crypto (XOR loops, hand-rolled HMAC), hardcoded…

jeremylongshore/tons-of-skills-marketplace

Validate production readiness of Vertex AI Agent Engine deployments across security, monitoring, performance, compliance, and best practices.

jeremylongshore/tons-of-skills-marketplace

Interactive supply chain dashboard mapping suppliers, customers, and financial interdependencies

daloopa/investing

Dependency hygiene for the Rocky engine workspace — how to add/update deps via [workspace.dependencies], MSRV 1.88 policy, cargo-audit / cargo-deny / cargo-machete usage, and how the weekly security…

rocky-data/rocky

A skill your agent uses when about to record, claim, rate the severity of, or report any security finding — before marking anything [CONFIRMED] or writing it into the report

hypnguyen1209/offensive-claude

Data breach incident response with ENISA severity scoring, notification timelines, and compliance tracking.

borghei/Claude-Skills

This skill should be used when the user asks to "analyze logs for threats", "detect suspicious activity", "scan for brute force attempts", "identify injection attacks", or "audit access patterns for…

borghei/Claude-Skills

This skill should be used when the user asks to "scan AI systems for security threats", "check for prompt injection vulnerabilities", "assess model security posture", "detect data poisoning risks"…

borghei/Claude-Skills

Manage AWS accounts, organizations, IAM, and billing. An agent skill from hoodini/ai-agents-skills.

hoodini/ai-agents-skills

A skill your agent uses when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse.

alirezarezvani/claude-skills

Consolidate brain memory and mine user sessions since the last consolidation checkpoint (sleep-cycle style).

mikeyobrien/rho

Coordinate cross-domain Levyra work that spans multiple subsystems, or orient an agent when no single specialized Levyra skill is sufficient.

LUC4N3X/Levyra-deepsound

Re-audit every past GHSA/CVE advisory published against this repository, anchored on each advisory's fix commit, for four failure modes, a regression of the original bug, a bypass of the fix, an…

alpha-omega-security/scrutineer

Recommended starting point for new users and daily SOC operations.

SCStelz/security-investigator

Threat-model product features, APIs, data flows, secrets, permissions, supply-chain changes, auth boundaries, and risky code paths before or during implementation.

majiayu000/spellbook

Lattice-based cryptanalysis playbook. An agent skill from yaklang/hack-skills.

yaklang/hack-skills

Advanced prototype pollution playbook — server-side RCE, client-side gadgets, filter bypasses, and detection techniques.

yaklang/hack-skills

Traffic analysis and PCAP forensics playbook. An agent skill from yaklang/hack-skills.

yaklang/hack-skills

A skill your agent uses when the user says 'scan for secrets', 'check for leaked keys', 'secrets scanner', 'hardcoded credentials', 'API key leak', or needs to detect exposed secrets in source code.

cwinvestments/memstack

Automatically discover cryptography skills when working with encryption, TLS, certificates, PKI, and security

rand/cc-polymath

ANALYSIS SKILL — Azure compliance and security auditing: best practices, Key Vault expiration monitoring, resource validation.

jonathan-vella/apex

Wi-Fi reconnaissance methodology — adapter selection, monitor mode and packet injection setup, regulatory domain handling, multi-band airspace mapping, hidden SSID discovery…

SnailSploit/Claude-Red

Develop evidence-backed structural and architectural security hardening proposals from vulnerability disclosures, supplied findings, incident or assessment documents, source code, or a completed…

vlinx-io/VelaTerm

Hunt client-side DOM vulnerabilities

sickn33/agentic-awesome-skills

Hunt Host Header Injection

sickn33/agentic-awesome-skills

Hunt HTML Injection

sickn33/agentic-awesome-skills

Hunt LDAP Injection and XPath Injection

sickn33/agentic-awesome-skills

Hunt Open Redirect

sickn33/agentic-awesome-skills

Meme coin and token security audit

sickn33/agentic-awesome-skills

sharp-edges

sickn33/agentic-awesome-skills

Test authorized web-cache key construction, variation, partitioning, authenticated response handling, revalidation, poisoning, deception, purge, and TTL behavior.

cyberful/cyberful

Security audit of a codebase — web apps, APIs, services, CLI tools, libraries, daemons, and more.

shepherdjerred/monorepo

Perform a comprehensive read-only security audit of Clawdbot's own configuration.

sundial-org/awesome-openclaw-skills

The Contracts & Security review perspective for PostHog Review.

PostHog/posthog

A skill your agent uses when the user asks "who has access", "audit permissions", "check user roles", "list API keys", "review access controls", "rotate API keys", "create API key", "delete expired…

coralogix/cx-cli

Lay draft copy out as a table with three distinct rewrites per line and a top pick.

forefy/.context

Security scanner for code, addresses, and transactions. An agent skill from alsk1992/CloddsBot.

alsk1992/CloddsBot

Run an AWS Security Agent scan on the workspace — uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked, verified findings with code locations and…

aws/agent-toolkit-for-aws

Run an AWS Security Agent threat model review on spec/design documents.

aws/agent-toolkit-for-aws

Diagnoses and resolves Amazon EFS issues including mount failures, NFS timeouts, permission errors, throughput problems, and burst credit exhaustion.

aws/agent-toolkit-for-aws

Generates optimized, syntax-validated scripts on demand. An agent skill from transilienceai/communitytools.

transilienceai/communitytools

Audit Stella code, paths, or Git diffs for security defects affecting privileged legal data, tenant isolation, authentication, files, AI, and auditability.

stella/stella