Security · For devops and sre engineers

Scan code changes for security vulnerabilities using Bug Hunter-native artifacts and STRIDE context.

codexstar69/bug-hunter

This skill should be used when the user asks to "perform vulnerability scanning", "scan networks for open ports", "assess web application security", "scan wireless networks", "detect malware"…

zebbern/claude-code-guide

This skill should be used when the user asks to "analyze network traffic with Wireshark", "capture packets for troubleshooting", "filter PCAP files", "follow TCP/UDP streams", "detect network…

zebbern/claude-code-guide

PHP Web 源码鉴权机制审计工具。从源码中识别所有认证/鉴权实现并分析风险，输出路由-鉴权映射与漏洞分析（含 PoC 与修复建议）。

0xShe/PHP-Code-Audit-Skill

Run one stage of the OpenTaint pipeline by coordinating leaf subagents and deterministic joins.

seqra/opentaint

Audits outdated npm and Bun packages for supply chain integrity before bumping them, deferring risky ones and logging every decision.

backnotprop/plannotator

A skill your agent uses when auditing Simple IoT for security issues, reviewing a change that touches authentication, authorization, enrollment, sync, or a network-facing parser, or checking whether…

simpleiot/simpleiot

Gathers security findings from Dependabot, GCP container scanning, Docker Scout and Linear security issues, then triages and remediates them across Warp's repos and images.

warpdotdev/warp

A skill your agent uses when fixing compiler warnings, static analyzer findings (clang-tidy, etc.), or runtime errors/crashes in the libYSE codebase.

yvanvds/yse-soundengine

Commit and push a finished change the way this repo requires — explicit paths, one commit per logical change, no attribution, the five documentation places answered, the site checks before a push (a…

guardana/guardana

Standards-compliant lifecycle tool for agent knowledge and capabilities: author in .ai-rulez/, generate for 52 harnesses (Claude Code, Cursor, Codex, Copilot, Gemini CLI, OpenCode, Devin, and more)…

Goldziher/ai-rulez

Run Semgrep static analysis scans and create custom detection rules.

semgrep/skills

Host security hardening and risk-tolerance guidance for Understudy deployments.

understudy-ai/understudy

Secure dependency upgrades with supply chain protection, cooldowns, and staged rollout.

secondsky/sap-skills

보안 취약점 자동 수정 및 하드닝 스크립트를 생성합니다. An agent skill from cdppcorp/KESE-KIT.

cdppcorp/KESE-KIT

IoT network traffic analyzer for detecting IoT protocols and identifying security vulnerabilities in network communications.

BrownFineSecurity/iothackbot

Watch a Gradle instrumented-test run to a verdict without hand-writing greps.

parawanderer/OpenTagViewer

结构化代码审查工作流，适用于显式 quick/full/security review；不负责普通实现或 bug 修复流程。

doccker/cc-use-exp

Perform codebase analysis and architecture mapping as the first phase of a security assessment.

utkusen/sast-skills

Generate and manage Software Bill of Materials (SBOMs) for the OpenShell project.

NVIDIA/OpenShell

A skill your agent uses when the user wants to build, create, or develop anything — websites, apps, APIs, services, platforms.

nagisanzenin/production-grade

Review Hermes settings for security risks. An agent skill from OnlyTerp/hermes-optimization-guide.

OnlyTerp/hermes-optimization-guide

Add an entry to the UPDATING file at the repository root. An agent skill from MidnightBSD/src.

MidnightBSD/src

对 jar-analyzer-engine 构建的 SQLite 数据库执行安全审计分析查询。支持方法调用搜索、调用链追踪、Spring 组件分析、字符串搜索、漏洞模式检测等。

jar-analyzer/jar-analyzer-claude

Decrypt and recover obfuscated strings from binaries by analyzing encryption patterns and generating decryption scripts

P4nda0s/bin-deobf-skills

OpenClaw 安全检测工具，基于安全实践指南验证配置安全、权限隔离、网络策略、日志审计和运行时完整性. An agent skill from jd-opensource/JoySafeter.

jd-opensource/JoySafeter

Update copyright year references across the project at the beginning of each calendar year.

MichaelGrafnetter/DSInternals

Audit source code for exploitable vulnerabilities using threat-model-driven review, taint tracing, invariant checking, and variant analysis.

trilwu/secskills

Perform post-implementation security review on recent code changes and produce prioritized hardening recommendations with file evidence and fix guidance.

Bald0Wang/DeepSeek-Oracle

A skill your agent uses when an OpenClaw maintainer or owner is reviewing a ClawHub malicious-skill profile proposal PR: checking proposals/<GHSA-ID/clawscan.yml, reading the private vulnerability…

openclaw/clawscan

Mod a PC game the user owns, taking an idea to working in the real game and recorded.

rehan-remade/universal-modder

Explores and triages a CycloneDX BOM interactively with the cdxi REPL, using built-in commands for dependency trees, licenses, services, cryptographic assets, audit findings, evidence occurrences…

cdxgen/cdxgen

Audits, detects gaps, and remediates Android permissions and IPC component security vulnerabilities.

rosuH/EasyWatermark

Manage OpenClaw GitHub Actions and Blacksmith CI capacity, runner-registration budgets, fanout caps, main-push single-flight, shard sizing, hosted-runner offload, queue health, and safe…

openclaw/openclaw

Creates a new Earl HCL template for a specific API, database, or shell command.

mathematic-inc/earl

Learn from public breach disclosures — extract the audit question each one implies and check your own stack.

briiirussell/cybersecurity-skills

PHP Web 源码命令注入审计工具。识别命令执行 Sink（exec/system/shellexec 等），追踪用户输入进入命令拼接，输出可利用性分级、PoC 与修复建议（禁止省略）。

0xShe/PHP-Code-Audit-Skill

Generate prioritized CVE watchlists and actionable security recommendations for repositories.

ArabelaTso/Skills-4-SE

Vulnerability and security scan (defensive, your own repo): dependency CVEs plus risky code patterns (secrets, injection, weak authz), severity x reachability triaged and remediated without…

maddhruv/absolute

Triage a CVE / Dependabot alert in a JS/TS project and recommend the least-invasive fix.

getlago/lago-front

Security audit workflow for OPC code, providers, plugins, Electron surfaces, local HTTP bridges, filesystem access, and command execution.

LING71671/Open-ClaudeCode

A skill your agent uses when asked to generate a "no way to prevent this" / no-way-to-prevent-this satire post for a memory-safety CVE (out-of-bounds write/read, buffer/heap overflow…

Xe/site

Walks through mutual TLS between services in a zero-trust setup: certificate hierarchy, rotation, a gradual PERMISSIVE-to-STRICT rollout and handshake debugging.

wshobson/agents

Generate secure coding prompts and guides for AI tools (Claude, ChatGPT, Cursor, Copilot).

cdppcorp/KESE-KIT

C++ naming, formatting, static analysis, and RTTI rules for LuisaCompute.

LuisaGroup/LuisaCompute

Give a decisive, project-grounded verdict on an external input — judged against the current project, not in the abstract.

leo-kuang-ai/spec-first

A skill your agent uses when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide or scoped-path Codex Security scan.

vlinx-io/VelaTerm

Runs a security health check on an OpenClaw environment and audits skills before or after installation for supply-chain and data-leak risks.

Tencent/AI-Infra-Guard