Security · For devops and sre engineers

Automated SAST + dependency vulnerability scan. An agent skill from jeremylongshore/tons-of-skills-marketplace.

jeremylongshore/tons-of-skills-marketplace

Produce a threat model — assets, ranked threats, mitigations, accepted risks.

jeremylongshore/tons-of-skills-marketplace

Configure AI interaction audit logging for compliance. An agent skill from jeremylongshore/tons-of-skills-marketplace.

jeremylongshore/tons-of-skills-marketplace

Configure with zero trust config helper operations. An agent skill from jeremylongshore/tons-of-skills-marketplace.

jeremylongshore/tons-of-skills-marketplace

Harden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks.

BagelHole/DevOps-Security-Agent-Skills

Owns execution: how work actually gets done across the organization, including process, program management, capacity, vendors, supply chain, and service delivery.

cbrock84/headcount

Operations excellence expertise for supply chain optimization, process improvement (Lean, Six Sigma), capacity planning, vendor management, quality assurance, and operational efficiency.

travisjneuman/.claude

AI security papers from top-4 security conferences. An agent skill from wentorai/research-plugins.

wentorai/research-plugins

Financial risk modeling including VaR, stress testing, and credit risk

wentorai/research-plugins

Reviewing a diff or feature for exploitable vulnerabilities before it ships.

Zfinix/aster

Check whether a running Cisco software version is affected by a published PSIRT security advisory - by OS version, CVE, or advisory ID, with severity and CVSS.

automateyournetwork/netclaw

CML packet capture — start, stop, download pcaps from CML lab links, integrate with Packet Buddy for analysis.

automateyournetwork/netclaw

GAIT session lifecycle management - branch creation, turn recording, audit logging for every NetClaw operation.

automateyournetwork/netclaw

Rapid ISE endpoint investigation and quarantine workflow - endpoint lookup, auth history, posture review, human-authorized quarantine, ServiceNow Security Incident.

automateyournetwork/netclaw

Review Kubernetes NetworkPolicies — what is actually permitted to reach a workload, and whether the answer can be trusted.

automateyournetwork/netclaw

Create interactive mind map visualizations from markdown - network inventory, OSPF areas, BGP topology, security audit results.

automateyournetwork/netclaw

Search the National Vulnerability Database for CVEs - find vulnerabilities by keyword or ID, get CVSS scores, weaknesses, affected configurations, and remediation references.

automateyournetwork/netclaw

Cisco ASA firewall operations via pyATS — VPN sessions, failover state, interfaces, routing, service policies, resource usage, AnyConnect monitoring.

automateyournetwork/netclaw

Network security audit - ACLs, AAA, control plane policing, management plane hardening, encryption, port security, and CIS benchmark checks.

automateyournetwork/netclaw

Deliver formatted network reports, audit results, topology diagrams, and compliance documentation to Slack channels with rich Block Kit formatting.

automateyournetwork/netclaw

Deliver formatted network reports, audit results, topology diagrams, and compliance documentation to WebEx spaces with Adaptive Cards and markdown formatting.

automateyournetwork/netclaw

Guide for resolving NullAway static analysis errors. An agent skill from nwjs/chromium.src.

nwjs/chromium.src

Supply chain mapping, supplier dependency analysis, customer concentration, geographic concentration, bottleneck identification, supply chain risk, logistics network, sourcing strategy, inventory…

agentii-ai/agentii-investment-intelligence

Reusable writing-style contract for agent outputs (reports, ARCH docs, verdicts, threat models).

avelikiy/great_cto

Security audit for Terraform codebases covering IAM, networking, encryption, secrets, access control, and compliance.

c0x12c/ai-toolkit

Generate abstract Control Flow Graph (CFG) representations of programs showing loops, branches, and function calls for static analysis or verification.

ArabelaTso/Skills-4-SE

Analyze CVE reachability in software repositories by examining how vulnerable dependencies are imported and used.

ArabelaTso/Skills-4-SE

Applies abstract interpretation using different abstract domains (intervals, octagons, polyhedra, sign, congruence) to statically analyze program variables and infer invariants, value ranges, and…

ArabelaTso/Skills-4-SE

Performs abstract interpretation over source code to infer possible program states, variable ranges, and data properties without executing the program.

ArabelaTso/Skills-4-SE

Automatically load this skill when investigating application outages, service degradation, or errors that could have security-related root causes — including unexplained downtime, authentication or…

aws/tools-for-devops-agent

Exact detection thresholds for identifying malicious network patterns including port scans, DoS attacks, and beaconing behavior.

benchflow-ai/skillsbench

Use Trivy vulnerability scanner in offline mode to discover security vulnerabilities in dependency files.

benchflow-ai/skillsbench

Subagent for figma-from-code Phase 0b. An agent skill from bitovi/ai-enablement-prompts.

bitovi/ai-enablement-prompts

Maintainer workflow for the pre-PR secure loop: code, build/test, SAST/CodeQL, dynamic sanitizer checks, fixes, and concise handoff.

InternationalColorConsortium/iccDEV

Ranked next offensive moves from engagement state. An agent skill from Encod3d-Sec/TORCH.

Encod3d-Sec/TORCH

Produce a repository-grounded application security threat model with assets, boundaries, abuse paths, priorities, and mitigations.

nightly-labs/openbot

Expert Australian Information Security Manual (ISM) advisor for government entities and their supply chains.

lawve-ai/awesome-legal-skills

Perform SCCM reconnaissance and takeover prerequisite validation, including site-role mapping, provider and AdminService checks, site database separation checks, and relay-path prechecks.

SpecterOps/skills

Perform a security-focused review of current git changes. An agent skill from SpecterOps/skills.

SpecterOps/skills

Go coding rules: style, patterns, security, testing. An agent skill from softspark/ai-toolkit.

softspark/ai-toolkit

Transform bounded HAR captures into deterministic HTTP evidence about methods, origins, paths, status classes, header presence, redirects, cookies, and body sizes without replaying traffic or…

cyberful/cyberful

Normalize and correlate bounded SARIF and Cyberful finding exports offline by rule, location, fingerprint, source, level, suppression, and evidence reference without treating scanner severity as…

cyberful/cyberful

Audit container runtime isolation across namespaces, capabilities, seccomp, mandatory access control, mounts, devices, daemon sockets, cgroups, identity, and host integration.

cyberful/cyberful

Find leaked API keys, tokens, and credentials in public GitHub repositories.

uphiago/recon-skills

Conduct systematic threat modeling using STRIDE framework, attack trees, and security architecture analysis for CIA platform

Hack23/cia

Fetch published GHSA and CVE advisories affecting any package this repository produces, via advisories.ecosyste.ms.

alpha-omega-security/scrutineer

Normalize an externally-produced security report in an arbitrary format into scrutineer findings.

alpha-omega-security/scrutineer

Fetch repository metadata (description, default branch, languages, license, stars, archived, icon) from repos.ecosyste.ms and save it on the repository row.

alpha-omega-security/scrutineer