Security · For developers

On-demand security and code quality audit. An agent skill from MadAppGang/claude-code.

MadAppGang/claude-code

PHP-only security standards for database access, password handling, and input validation.

HoangNguyen0403/agent-skills-standard

Audit iOS and Android mobile applications against OWASP MASVS / MASTG — insecure storage, weak crypto, certificate pinning, deeplinks, IPC, jailbreak/root detection, reverse-engineering resistance.

briiirussell/cybersecurity-skills

Diagnose and operate Spring AI projects with version-aware Maven or Gradle checks for ChatClient, advisors, retrieval, conversation memory, tool/MCP boundaries, streaming, configuration, and…

magnus919/agent-skills

References Serverless OpenClaw security model. An agent skill from serithemage/serverless-openclaw.

serithemage/serverless-openclaw

服务上线前的 AI 安全审查，聚焦需要理解代码语义和业务逻辑的安全问题. An agent skill from 312362115/claude.

312362115/claude

Review the built app against OWASP Top 10:2025 as an attacker would, fix what is exploitable, prove it on the local stack, and write the report.

receptron/mulmoterminal

当涉及添加身份验证（Authentication）、处理用户输入、操作机密（Secrets）、创建 API 终端节点或实现支付/敏感功能时，请使用此技能。提供全面的安全检查清单和模式。

xu-xiang/everything-claude-code-zh

在添加身份验证、处理用户输入、操作机密信息（Secrets）、创建 API 端点以及实现支付/敏感功能时使用此技能。提供全面的安全检查清单和模式。

xu-xiang/everything-claude-code-zh

在添加身份验证、处理用户输入、操作机密信息、创建 API 接口或实现支付/敏感功能时使用此技能。提供全面的安全自查清单和模式。

xu-xiang/everything-claude-code-zh

使用 AgentShield 扫描 Claude Code 配置（.claude/ 目录）中的安全漏洞、配置错误和注入风险。检查 CLAUDE.md、settings.json、MCP 服务端、钩子（Hooks）和智能体（Agents）定义。

xu-xiang/everything-claude-code-zh

使用 AgentShield 扫描您的 Claude Code 配置（.claude/ 目录）是否存在安全漏洞、配置错误和注入风险。检查项包括 CLAUDE.md、settings.json、MCP 服务器、钩子（Hooks）以及智能体（Agent）定义。

xu-xiang/everything-claude-code-zh

Spring Boot 服务的 Spring Security 身份验证/授权、验证、CSRF、密钥、响应头、速率限制和依赖项安全最佳实践。

xu-xiang/everything-claude-code-zh

Spring Boot 服务的身份验证/授权、校验、CSRF、机密管理、响应头、速率限制及依赖安全的 Spring Security 最佳实践。

xu-xiang/everything-claude-code-zh

A skill your agent uses when targeting IACR Conference on Cryptographic Hardware and Embedded Systems (CHES) or deciding whether a computer-science manuscript fits this venue.

franklee16/academic-research-skills

Comprehensive security vulnerability analysis for codebases and infrastructure.

aiskillstore/marketplace

Remove AI-generated code slop from a branch: unnecessary comments, redundant defensive checks, boilerplate, style drift, and type casts.

foryourhealth111-pixel/Vibe-Skills

Patch a Go dependency to fix a CVE using the appropriate strategy based on Go version compatibility.

openshift-eng/ai-helpers

A skill your agent uses when resolving which GitHub repository to clone for CVE analysis from a container image name in a Jira ticket summary, pscomponent label, or Downstream Component Name field.

openshift-eng/ai-helpers

Perform evidence-driven security code reviews across application repositories, services, libraries, and pull requests.

SpecterOps/skills

Audit C, C++, unsafe Rust, native extensions, parsers, codecs, FFI boundaries, and systems code for memory corruption and low-level exploitation risk.

cyberful/cyberful

Operate Ghidra headless analysis, radare2, platform binary utilities, decompilers, and targeted dynamic evidence for advanced native and bytecode security review.

cyberful/cyberful

Operate Prowler, Cloudsplaining, cloud CLIs, policy documents, and resource evidence for advanced AWS, Azure, GCP, and Kubernetes-adjacent posture assessment.

cyberful/cyberful

Operate Cyberful's pinned Foundry toolchain and engagement-owned Anvil lab for authorized EVM smart-contract bug bounty work.

cyberful/cyberful

Operate kubectl, kube-bench, Trivy, Prowler, and manifest/runtime evidence for advanced Kubernetes security assessment.

cyberful/cyberful

Use sqlmap to confirm and characterize suspected SQL injection with faithful requests and bounded evidence.

cyberful/cyberful

Assess server-side URL retrieval and network egress during authorized penetration tests or code audits.

cyberful/cyberful

Webshell samples for detection and analysis webshell 样本: PHP, ASP, ASPX, JSP, Python, Perl shells.

Ch1nfo/RiftX

Focused security audit of code, calibrated to surface real exploitable bugs and suppress theoretical findings.

PostHog/posthog

Guide an OpenART agent or contributor through planning, running, extending, and debugging the framework.

AI45Lab/OpenART

Open security platform for agentic infrastructure — broad scanning plus MCP discovery, CVEs, blast radius, SBOMs, CIS benchmarks (AWS, Azure, GCP, Snowflake), OWASP/NIST/MITRE compliance, AISVS…

LeoYeAI/openclaw-master-skills

MCP server security registry and trust assessment — look up servers in the 427+ server security metadata registry, run pre-install marketplace checks, batch fleet risk scoring, assess skill file…

LeoYeAI/openclaw-master-skills

Automated vulnerability scanner for agent platforms. An agent skill from LeoYeAI/openclaw-master-skills.

LeoYeAI/openclaw-master-skills

Build AI agents with console.agent() - the jQuery of AI Agents.

LeoYeAI/openclaw-master-skills

Static ReDoS (Regular Expression Denial of Service) vulnerability scanner and regex quality auditor for codebases.

LeoYeAI/openclaw-master-skills

Investigate security incidents in Microsoft Azure (resource and subscription control plane) -- reconstruct attacker activity from the Azure Activity Log and resource/data-plane diagnostic logs…

trilwu/secskills

CI/CD pipeline security gate design guide. An agent skill from revfactory/harness-100.

revfactory/harness-100

Code vulnerability pattern database. An agent skill from revfactory/harness-100.

revfactory/harness-100

AWS security service suitability, coverage and cost recommendations: WAF/origin overlap, AWS Network Firewall inspection coverage and policy review, VPC endpoint, Transit Gateway/Cloud WAN…

aws/agent-toolkit-for-aws

ELF 格式解析：ehdr/phdr/shdr、GOT/PLT、initarray、符号恢复. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

函数式语言运行时逆向（Haskell/OCaml）：闭包/堆对象模型、调用约定、数据流优先策略. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

Frida 动态插桩（桌面+移动统一）. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

Frida 脚本生成方法论：目标特征 → 模板选择 → 改写 → 验证。独立于执行插桩（re-frida）. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

固件仿真：QEMU 用户态/全系统. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

硬件接口：JTAG/UART/flash 读取. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

lldb 调试（macOS/iOS）：attach、expr、image. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

Nim 编译产物逆向：运行时识别、NimString 结构、异常与 GC 路径. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

射频逆向：信号采集、频谱分析、解调、帧同步与协议恢复、重放. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills