Security

Download raw sequencing reads from NCBI SRA using sra-tools (prefetch, fasterq-dump, vdb-validate) or the ENA mirror.

GPTomics/bioSkills

A skill your agent uses when asked to generate a vulnerability and exposure management report, assess security posture, or review CVEs, security configurations, and attack paths.

SCStelz/security-investigator

Audit JS/TS projects against NPM Security Guidelines covering project setup, dependency hygiene, CI/CD pipeline, Dependabot, and incident response.

c0x12c/ai-toolkit

Audit MCP (Model Context Protocol) server configurations for security issues.

github/awesome-copilot

Perform a focused security review of pending git changes to identify high-confidence security vulnerabilities with real exploitation potential.

waybarrios/opencode-power-pack

CVE lookup via MITRE + NVD: severity, CVSS, affected products, refs

taracodlabs/aiden

Enhance SEO (meta tags, semantic HTML) and security (vulnerability checks, hardening).

ww-w-ai/bkit-claude-code

Check code for the most common, high-risk security vulnerabilities (broken access control, tenant isolation, injection, secrets, SSRF, auth/session, unsafe file handling, mass assignment) before it…

trycompai/comp

Usar para generar Software Bill of Materials para cumplimiento del CRA.

686f6c61/alfred-dev

Azure Key Vault Keys SDK for Rust. An agent skill from aiskillstore/marketplace.

aiskillstore/marketplace

This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp ...

aiskillstore/marketplace

Server-Side Request Forgery detection→internal-access→proof for web apps.

s0ld13rr/pentestcode

Bugcrowd-specific reporting tactics complementing report-writing

sickn33/agentic-awesome-skills

Hunting skill for cache poison vulnerabilities. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Hunt Microsoft SharePoint Server (2013/2016/2019/Subscription Edition) on-prem farms

sickn33/agentic-awesome-skills

Finding validation before writing any report. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

This skill covers conducting comprehensive security assessments of Operational Technology (OT) networks including SCADA systems, DCS architectures, and industrial control system communication paths.

mukul975/Anthropic-Cybersecurity-Skills

Test native or language object reconstruction, polymorphic type selection, gadget reachability, schema bypass, mass object binding, and unsafe serializer configuration in authorized applications or…

cyberful/cyberful

Sensitive file scanning, path traversal bypass, vHost enum, .env extract, log mining, Varnish detect

uphiago/recon-skills

Expert malware analyst specializing in defensive malware research, threat intelligence, and incident response.

aiskillstore/marketplace

Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.

aiskillstore/marketplace

PHP Web 源码 CRLF/响应分割审计工具。识别用户输入进入 HTTP 响应头，分析换行/控制字符过滤与编码，输出分级、PoC 与修复建议（禁止省略）。

0xShe/PHP-Code-Audit-Skill

PHP Web 源码加密与密钥安全审计工具。识别弱哈希/弱加密/硬编码密钥/签名校验缺陷，输出分级、PoC 与修复建议（禁止省略）。

0xShe/PHP-Code-Audit-Skill

PHP Web 源码 CSRF 审计工具。识别状态变更接口是否受 CSRF 保护，追踪 token 生成、校验与绕过条件，输出可利用性分级、PoC 与修复建议（禁止省略）。

0xShe/PHP-Code-Audit-Skill

PHP Web 源码 XSS 审计工具。识别用户输入进入输出上下文（HTML/属性/JS/URL/模板），分析转义与防护策略，输出可利用性分级、PoC 与修复建议（禁止省略）。

0xShe/PHP-Code-Audit-Skill

PHP Web 源码 XXE 审计工具。识别 XML 解析点与实体处理配置，追踪 XML 输入来源与回显，输出可利用性分级、PoC 与修复建议（禁止省略）。

0xShe/PHP-Code-Audit-Skill

Configure single-project Cloud Logging on Google Cloud: regional log buckets, log sinks, log views, restricting or hiding sensitive logs in the default view (Default) filter, IAM permissions for…

google/skills

Verter codebase architecture: high-level module map, TypeScript packages, plugin system, CSS analysis, MCP server, static analysis types

pikax/verter

Create standardized report headers with metadata for all agent-generated reports.

maslennikov-ig/claude-code-orchestrator-kit

Play Yoink capture-the-flag game on Base - yoink the flag, check scores, compete for trophy

alsk1992/CloddsBot

Run an enterprise security review of a system design or existing code before it ships.

ooiyeefei/ccc

AWS security finding analysis: analyze findings, map to Atmos components/stacks, generate structured remediation with exact Terraform changes and deploy commands

cloudposse/atmos

Atmos SBOM provenance: CycloneDX and SPDX generation from vendor and Terraform evidence, coverage diagnostics, NTIA validation, and native CI workflow-artifact publication

cloudposse/atmos

在仓库中寻找可利用、值得赏金的安全问题。专注于远程可访问的漏洞，这些漏洞符合实际报告的条件，而不是嘈杂的仅本地发现. An agent skill from affaan-m/ECC.

affaan-m/ECC

Run osv-scanner via the mantisosvscanner MCP server for SCA (vulnerable dependency) findings

deonmenezes/mantishack

Extract structured data via stored browser-templates or one-shot DOM queries, with mandatory AIDefence PII + prompt-injection gates before content reaches the model

ruvnet/ruflo

Composite Phase-2 audit worker (ADR-150). An agent skill from ruvnet/ruflo.

ruvnet/ruflo

Passive recon of subdomains, SSL certs, WHOIS, and DNS. An agent skill from Luciole-Studio/Misaka-Agent.

Luciole-Studio/Misaka-Agent

Continuous security posture assessment. An agent skill from bolivian-peru/os-moda.

bolivian-peru/os-moda

Guide rapid triage and initial response to security incidents following NIST SP 800-61 methodology.

briiirussell/cybersecurity-skills

Gather and correlate open source intelligence from public sources for authorized investigations, threat intelligence, and attack surface assessment.

briiirussell/cybersecurity-skills

Perform structured reconnaissance and attack surface enumeration for authorized penetration tests, CTF challenges, and bug bounty programs.

briiirussell/cybersecurity-skills

Engineer and audit SIEM detection rules — log source coverage, Sigma / KQL / SPL / Elastic query authoring, MITRE ATT&CK mapping, false-positive tuning, and detection-as-code workflows.

briiirussell/cybersecurity-skills

Build, run, and improve a Security Operations Center — alert prioritization, runbook authoring, escalation criteria, on-call structure, alert tuning workflow, MTTD / MTTR / fidelity KPIs, analyst…

briiirussell/cybersecurity-skills

Conduct proactive, hypothesis-driven threat hunts — search SIEM / EDR / logs for adversaries who haven't tripped an alert yet.

briiirussell/cybersecurity-skills

Run a structured threat-modeling session for a new feature, system, or architecture — STRIDE, attack trees, data flow diagrams, abuse cases.

briiirussell/cybersecurity-skills

Apply Karpathy-style minimalism and anti-dependency principles to code and system design.

LearnPrompt/andrej-karpathy-skills

Discover hidden parameters, test values, and identify input handling anomalies

NeoTheCapt/RedteamAgent