Security

Enforce output quality, evidence verification, and quality gates across security audits.

github/awesome-copilot

Connect the shared untrusted-data source group to new reusable OpenTaint sink groups.

seqra/opentaint

Weekly supply-chain hygiene scan (Perplexity Bumblebee). An agent skill from Szotasz/marveen.

Szotasz/marveen

Inventories project dependencies and runtimes across ecosystems and reports known CVEs, supply-chain risks and a prioritized upgrade plan.

criptogus/agent-evolve-network

Review secret detection patterns and scanning workflows. An agent skill from IgorWarzocha/Opencode-Workflows.

IgorWarzocha/Opencode-Workflows

Security review checklist for Convex functions, auth logic, public queries, admin routes, webhooks, uploads, and AI-generated code.

waynesutton/markdown-site

Review code for bugs, security vulnerabilities, API misuse, consistency issues, simplicity problems, or test coverage gaps and low-value tests by running internal reviews and a peer review in…

tobihagemann/turbo

Security review of MCP (Model Context Protocol) server implementations and configurations.

OWASP/secure-agent-playbook

A skill your agent uses when Codex is already in the finding-discovery phase of a security scan or the user explicitly asks to discover candidate security findings in a repository or code change.

vlinx-io/VelaTerm

A skill your agent uses when Codex is already in the threat-modeling phase of a security scan, the user explicitly invokes $threat-model, or the user explicitly asks to create, update, or persist a…

vlinx-io/VelaTerm

This skill covers detecting cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) systems including man-in-the-middle attacks on industrial protocols, unauthorized command…

mukul975/Anthropic-Cybersecurity-Skills

Detects and exploits MS17-010 (EternalBlue), a critical remote code execution flaw in Microsoft's SMBv1 implementation, using Nmap's ms-17-010 NSE script for detection and Metasploit's…

mukul975/Anthropic-Cybersecurity-Skills

Deploys and configures Wazuh SIEM/XDR for endpoint detection, covering agent authentication and management, custom decoder and rule XML creation, alert querying via the Wazuh REST API, rule testing…

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure Proofpoint Email Protection as a secure email gateway to detect and block phishing, malware, BEC, and spam before messages reach user inboxes.

mukul975/Anthropic-Cybersecurity-Skills

A cryptographic audit systematically reviews an application's use of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms, insecure modes, hardco

mukul975/Anthropic-Cybersecurity-Skills

Perform Kerberoasting, a post-exploitation technique that enumerates Active Directory service accounts with Service Principal Names (SPNs), requests their Kerberos TGS tickets, and cracks the…

mukul975/Anthropic-Cybersecurity-Skills

Audit service accounts across enterprise infrastructure to identify orphaned, over-privileged, and non-compliant accounts.

mukul975/Anthropic-Cybersecurity-Skills

Deploy AI and NLP-powered detection systems to identify business email compromise attacks by analyzing writing style, behavioral patterns, and contextual anomalies that evade traditional rule-based…

mukul975/Anthropic-Cybersecurity-Skills

A skill your agent uses when reviewing a project's security posture, setting up CI pipelines, or responding to a reported vulnerability in a dependency.

thedaviddias/Front-End-Checklist

PHP type juggling and weak comparison (==) bypass. An agent skill from langbyyi/CyberStrikeAI-SRC.

langbyyi/CyberStrikeAI-SRC

XSLT injection testing: processor fingerprinting, XXE and document() SSRF, EXSLT write primitives, PHP/Java/.NET extension RCE surfaces.

langbyyi/CyberStrikeAI-SRC

Run semgrep's p/security-audit and p/secrets rulesets and map hits into the findings shape.

alpha-omega-security/scrutineer

Streamlines the creation, modification, and management of IAM allow policies (v1) and deny policies (v2).

google/skills

Remediates Google Cloud Security Command Center findings, including IAM permission fixes, cloud resource misconfigurations, vulnerabilities, and Toxic Combinations.

google/skills

Comprehensive smart contract security audit framework with multi-expert analysis.

forefy/.context

Complete workflow for static structural analysis. An agent skill from Cai-aa/CAE-Agent-Hub.

Cai-aa/CAE-Agent-Hub

Define analysis steps and procedures. An agent skill from Cai-aa/CAE-Agent-Hub.

Cai-aa/CAE-Agent-Hub

Detect and exploit local and remote file inclusion vulnerabilities for sensitive data access and code execution

NeoTheCapt/RedteamAgent

RLS validation, security audits, OWASP compliance, and vulnerability scanning.

bybren-llc/safe-agentic-workflow

Turn smart-contract audit findings and source evidence into a submission-ready Markdown report with an issue index, ordered finding IDs, actor-based scenarios, self-contained unit-test proofs of…

aviggiano/security

Detect Remote Code Execution (RCE) vulnerabilities in a codebase using a three-phase approach: recon (find dangerous execution sinks), batched verify (trace user input to sinks in parallel…

utkusen/sast-skills

A skill your agent uses when analyzing owned or authorized software artifacts for source recovery, architecture mapping, security auditing, dependency review, and defensive remediation.

ptn1411/skill

A skill your agent uses when creating or editing a skill in this offensive-claude repo — for the SKILL.md conventions (trigger descriptions, technique map, runnable scripts, OPSEC/detection…

hypnguyen1209/offensive-claude

Release preparation workflow - security audit → E2E tests → review → changelog → docs

parcadei/Continuous-Claude-v3

蓝队与紫队工程：检测规则编写、SIEM/EDR 调优、事件响应、数字取证、威胁狩猎、ATT&CK 映射、紫队演练闭环。Use when writing Sigma/YARA detection rules, tuning SIEM noise, responding to security incidents, conducting forensic analysis, hunting…

telagod/code-abyss

Multi-agent adversarial-verification orchestration for high-confidence conclusions.

telagod/code-abyss

云原生与软件供应链安全防御。容器/K8s 加固、Service Mesh、CI/CD 安全、SLSA/SBOM/Sigstore、云 IAM、Secrets 管理、IaC 安全。Use when hardening Kubernetes clusters, auditing CI/CD pipelines, implementing supply chain security…

telagod/code-abyss

Analyze Android or iOS game-security trust boundaries, packages, native code, platform integrity, instrumentation, attestation, and signing.

gmh5225/awesome-game-security

Threat-model and harden AI agents, RAG systems, assistants, and tool-using workflows against direct, indirect, stored, cross-agent, and multimodal prompt injection.

seb1n/awesome-ai-agent-skills

Scan project dependencies for known vulnerabilities and CVEs.

ruvnet/ruflo

Run full security scans on the codebase using Ruflo security tools.

ruvnet/ruflo

Initialize a multi-agent swarm with anti-drift configuration.

ruvnet/ruflo

Gate any new hash, digest, checksum, signature, nonce, MAC, or content-addressed identifier.

tola-rs/tola-ssg

Design comprehensive security architectures using defense-in-depth, zero trust principles, threat modeling (STRIDE, PASTA), and control frameworks (NIST CSF, CIS Controls, ISO 27001).

ancoleman/ai-design-components

Guidance for Microsoft Entra Privileged Identity Management (PIM) — just-in-time, time-bound, approval-based, audited elevation for Entra roles, Azure resource roles, and privileged groups.

vinayaklatthe/microsoft-security-skills

Audits all guest and external user access on the current SharePoint site.

pnp/sharepoint-skills

Use in every Trail of Bits Skills workspace inside Harness, before any audit skill — the findings.json format the report pane is built from, which Trail of Bits skill serves which audit phase, and…

autonomous-ai/openharness

Investigate how a concept, code path, application, network flow, system, incident, document, or local artifact actually works, then deliver a two-depth visual HTML explainer with a dead-simple…

majiayu000/spellbook