Security · For devops and sre engineers

Look up a vulnerability by ID or list all vulnerabilities for a package

davepoon/buildwithclaude

代码安全审计 - 漏洞扫描、依赖检查、安全最佳实践

laolaoshiren/claude-code-skills-zh

Captures redacted, provenance-aware cybersecurity observations with shared status fields, independent ground truth, and honest limitations.

HoangNguyen0403/agent-skills-standard

Adjudicates authorized exercise outcomes against independently held ground truth, redacted evidence, and explicit status boundaries.

HoangNguyen0403/agent-skills-standard

Diagnose and operate Spring AI projects with version-aware Maven or Gradle checks for ChatClient, advisors, retrieval, conversation memory, tool/MCP boundaries, streaming, configuration, and…

magnus919/agent-skills

Validate API consistency between two versions of Java libraries.

ArabelaTso/Skills-4-SE

Validate API consistency between two versions of Python libraries.

ArabelaTso/Skills-4-SE

Check for duplicate or similar cases. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Ask the user to confirm before taking a significant action. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Save investigation findings to a markdown report file. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Generate controlled vocabulary thesaurus for content domains.

dandye/ai-runbooks

A skill your agent uses when targeting Financial Cryptography and Data Security (FC) or deciding whether a computer-science manuscript fits this venue.

franklee16/academic-research-skills

A skill your agent uses when targeting IACR Conference on Cryptographic Hardware and Embedded Systems (CHES) or deciding whether a computer-science manuscript fits this venue.

franklee16/academic-research-skills

A skill your agent uses when targeting Journal of Operations Management (JOM) or deciding whether an empirical / survey-based / behavioral operations-and-supply-chain manuscript fits this venue.

franklee16/academic-research-skills

Implements technical breach detection capabilities including SIEM integration, DLP alert configuration, anomaly detection rules, and insider threat monitoring.

mukul975/Privacy-Data-Protection-Skills

Conduct LINDDUN privacy threat modeling across all seven categories: Linking, Identifying, Non-repudiation, Detecting, Data Disclosure, Unawareness, and Non-compliance.

mukul975/Privacy-Data-Protection-Skills

Fast workflow to inspect PCAPs and extract protocol-level details using tshark

benchflow-ai/skillsbench

Ingest a CVE writeup, blog post, advisory, or GitHub repo into the wiki - fetch, dedup via sources:, update the right technique/tool page(s), re-index.

Encod3d-Sec/TORCH

Generate an AI SBOM declaration for a PR description. An agent skill from openshift-eng/ai-helpers.

openshift-eng/ai-helpers

A skill your agent uses when resolving which GitHub repository to clone for CVE analysis from a container image name in a Jira ticket summary, pscomponent label, or Downstream Component Name field.

openshift-eng/ai-helpers

A skill your agent uses when /compliance:analyze-cve is invoked with --jira= or --jql= and needs the CVE ID, image name, branch, and enriched ticket context from a Jira issue.

openshift-eng/ai-helpers

Configure Go projects to use Go's native FIPS 140 module instead of openssl-based FIPS.

openshift-eng/ai-helpers

A skill your agent uses when posting a completed CVE analysis report or PR follow-up as a Jira comment on the source ticket from /compliance:analyze-cve.

openshift-eng/ai-helpers

Triage Go stdlib CVEs against an OpenShift release image to determine which CVEs are fixed by the Go version each component was built with.

openshift-eng/ai-helpers

Route broad AI-agent security reviews to focused Cyberful skills across risk, model supply chain, context and capabilities, prompt injection, tool authorization, and RAG isolation.

cyberful/cyberful

Coordinate a repository-wide white-box application security audit across architecture, source, configuration, dependencies, build, and deployment paths.

cyberful/cyberful

Coordinate an authorized software-supply-chain audit from dependency resolution through build, artifact, release, deployment, and runtime trust.

cyberful/cyberful

Operate Prowler, Cloudsplaining, cloud CLIs, policy documents, and resource evidence for advanced AWS, Azure, GCP, and Kubernetes-adjacent posture assessment.

cyberful/cyberful

Operate kubectl, kube-bench, Trivy, Prowler, and manifest/runtime evidence for advanced Kubernetes security assessment.

cyberful/cyberful

Coordinate testing of product invariants and multi-step workflows across money, entitlements, approvals, quotas, inventory, onboarding, and distributed state.

cyberful/cyberful

Assess sensitive-data lifecycle, secret handling, cryptographic design and implementation, key management, password storage, randomness, signing, encryption, transport protection, and side channels…

cyberful/cyberful

Reconstruct request and event causality across gateways, services, queues, workers, data stores, and external providers while preserving identity, tenant, authorization, retry, and side-effect…

cyberful/cyberful

Trace and test untrusted data through SQL, NoSQL, LDAP, XPath, XML, shell, process, template, expression-language, code-evaluation, log, spreadsheet, mail, header, and browser interpreters.

cyberful/cyberful

Security pattern matching for code audit and content inspection: grep strings for source auditing, malicious-string signatures, PHP magic hashes, error-message patterns.

Ch1nfo/RiftX

Run brief --json to produce a structured overview of the repository.

alpha-omega-security/scrutineer

Derive a project's security contract from its source and docs, then emit it as structured data other skills can cite.

alpha-omega-security/scrutineer

Re-run a finding's reproduction against current HEAD, test its attack tree, grade five fixed evidence criteria, and account for every matched design control.

alpha-omega-security/scrutineer

MCP server security registry and trust assessment — look up servers in the 427+ server security metadata registry, run pre-install marketplace checks, batch fleet risk scoring, assess skill file…

LeoYeAI/openclaw-master-skills

Open security platform for agentic infrastructure — checks packages for CVEs (OSV, NVD, EPSS, KEV), scans container images, verifies provenance, scans filesystems, and generates SBOMs.

LeoYeAI/openclaw-master-skills

Secure key management for AI agents. An agent skill from LeoYeAI/openclaw-master-skills.

LeoYeAI/openclaw-master-skills

A skill your agent uses when enforcing spend limits on AI agent wallets, validating transactions before signing, configuring allowlists or approval workflows, detecting prompt injection in agent…

LeoYeAI/openclaw-master-skills

Analyze packet captures and network telemetry for intrusion evidence — capture and handling, the Wireshark/tshark triage funnel, Zeek log mining, Suricata rule runs, beacon and DNS-tunnel detection…

trilwu/secskills

CI/CD pipeline security gate design guide. An agent skill from revfactory/harness-100.

revfactory/harness-100

Browse the nuclei-templates library, recommend a scoped template set for a given stack, target, or CVE, then run it against an authorized target and report findings.

forefy/.context

Provisions, scales, and operates Amazon EC2 virtual-machine workloads: instance-type selection (Graviton/Arm64, burstable T credits, GPU, instance store vs EBS), launch templates, Auto Scaling…

aws/agent-toolkit-for-aws

Installs, configures, and troubleshoots Network Flow Monitor agents on EC2 instances to monitor network path health.

aws/agent-toolkit-for-aws

AWS security service suitability, coverage and cost recommendations: WAF/origin overlap, AWS Network Firewall inspection coverage and policy review, VPC endpoint, Transit Gateway/Cloud WAN…

aws/agent-toolkit-for-aws

威胁情报查询与关联：VT/Any.run/hybrid-analysis、MISP. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills