Security · For devops and sre engineers

Generate a PR-ready technique proposal when an attack step doesn't map to existing SITF techniques.

wiz-sec-public/SITF

Match identified threats to preventive, detective and corrective controls across network, application, data, endpoint and process layers to plan remediation.

wshobson/agents

Audit browser-engine changes that process untrusted content or cross native-memory, origin, network, storage, extension, decoder, sandbox, or operating-system boundaries.

nordstjernen-web/northstar-browser

分析 Code Scanning (CodeQL) 告警，评估安全风险并创建修复任务。当用户要求分析 Code Scanning 告警、CodeQL 告警时触发。参数为告警编号。

ModelEngine-Group/fit-framework

Run a Nuclei security scan against the target URL and report findings by severity.

MigoXLab/webqa-agent

Run an end-to-end OpenTaint application-security analysis while owning the long project build and scans and delegating each other pipeline stage.

seqra/opentaint

Signs and verifies CycloneDX BOMs using cdxgen's native JSON Signature Format (JSF) implementation via cdx-sign and cdx-verify, supporting granular component, service, and annotation signatures…

cdxgen/cdxgen

Run a Codex-CLI static-analysis parity review of the current diff against the local RPython/PyPy sources, then act on it — fix the regressions and new mismatches in-session, and file the rest as…

youknowone/pyre

Audit cloud infrastructure (AWS, GCP, Azure) for misconfigurations, excessive permissions, and security gaps.

briiirussell/cybersecurity-skills

Audit SkiaSharp's native dependencies for security vulnerabilities and CVEs, including Component Governance (CG) alerts from the combined skiasharp-package Azure DevOps pipeline.

mono/SkiaSharp

Check for existing SIEM alerts and case management entries related to IOCs.

dandye/ai-runbooks

Handle confidential GitHub Security Advisory response for Paperclip.

paperclipai/paperclip

A skill your agent uses when stitching kernels into a multi-launch ELF and the AIE compiler rejects the merged module (BD exhaustion, channel routing, herd shape conflict, IR validation error, DMA…

Xilinx/mlir-air

Host security hardening and risk-tolerance configuration for OpenClaw deployments.

trpc-group/trpc-agent-go

Prepare Solidity projects for a security audit — test coverage, test quality, NatSpec docs, code hygiene, dependency health, best-practice enforcement, deployment readiness, and project…

PlamenTSV/plamen

ONVIF device security scanner for testing authentication and brute-forcing credentials.

BrownFineSecurity/iothackbot

Run bandit against the Python source in the repository and map its hits into the findings shape.

alpha-omega-security/scrutineer

Audit Zhin.js changes for security, performance, lifecycle, and architecture regressions.

zhinjs/zhin

Apply STRIDE methodology to systematically identify threats.

sangrokjung/claude-forge

Expert workflow for reviewing Tauri 2 desktop app security. An agent skill from mukiwu/tempo-term.

mukiwu/tempo-term

Ingest the official MITRE CWE database and generate per-domain security audit taxonomies for PromptKit.

microsoft/PromptKit

Scans container images, filesystems and SBOMs with Grype for known vulnerabilities, ranks them by CVSS, EPSS and CISA KEV, and wires scans into CI/CD thresholds.

AgentSecOps/SecOpsAgentKit

Watch a pushed PR's checks with the Monitor tool, and act on the verdict.

parawanderer/OpenTagViewer

Single-pass codebase analysis leveraging a 1M-token context window for comprehensive security scanning, architecture review, and dependency auditing.

yonatangross/orchestkit

Check dependencies for known vulnerabilities using npm audit, pip-audit, etc.

alirezarezvani/claude-code-tresor

A skill your agent uses when asked to sweep, clean up, or revisit pnpm overrides and minimumReleaseAge exclusions in platform/pnpm-workspace.yaml — unwinding a matured temporary CVE pin once its fix…

archestra-ai/archestra

Run Claude programmatically against collections of files in the codebase.

imbue-ai/sculptor

关闭 Code Scanning (CodeQL) 告警，需提供合理理由。当用户要求关闭 Code Scanning 告警、dismiss CodeQL 告警时触发。参数为告警编号。

ModelEngine-Group/fit-framework

Run Warden security scans in this repo using Sentry's warden-skills.

UsefulSoftwareCo/executor

磁盘取证分析技术，涵盖 NTFS/FAT/ext 文件系统解析、文件恢复、时间线分析、日志挖掘等实战技能. An agent skill from MuWinds/BUUCTF_Agent.

MuWinds/BUUCTF_Agent

Switches on full safety by combining warnings before destructive commands with a block on edits outside one directory you choose, for work on production or live systems.

garrytan/gstack

Runs a security scan on a deployed Power Pages site, fetches the latest scan report, and produces a plain-language summary.

microsoft/power-platform-skills

Reviews a codebase's direct dependencies and designs lightweight, low-risk, zero-dependency custom replacements using cdxgen SBOM evidence, occurrence/callstack usage data, and license and…

cdxgen/cdxgen

Set up and run Deepsec vulnerability scans, triage, and CI gates.

first-fluke/fullstack-starter

Deep behavioral code analysis agent for Bug Hunter. An agent skill from codexstar69/bug-hunter.

codexstar69/bug-hunter

PHP Web 配置安全审计工具。识别 CORS/错误暴露/调试开关/安全头/危险运行时开关等，输出分级、可利用性分析、PoC 与修复建议（禁止省略）。

0xShe/PHP-Code-Audit-Skill

Perform exhaustive analysis of a critical IOC. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Scan AI agent skills, plugins, MCP servers, and agent tooling for prompt injection, unsafe commands, secret exposure, and supply-chain risks before installing or trusting them.

iflytek/skillhub

Python 遗留代码审查：bare except、SQL 注入、反序列化、密钥、调试输出. An agent skill from liuyanghejerry/Clausura.

liuyanghejerry/Clausura

Build a target project into an opentaint project model. An agent skill from seqra/opentaint.

seqra/opentaint

Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived upstreams, npm publisher concentration…

trailofbits/skills

Run a security vulnerability assessment based on KISA guidelines.

cdppcorp/KESE-KIT

Git workflow, CI/GitHub Actions, and supply-chain pinning rules for Mistral Vibe.

mistralai/mistral-vibe

Deep security review of a Convex app: authorization model, data access paths per table, HTTP action exposure, rate limiting, file storage access, scheduled function trust, and a written findings…

waynesutton/builder-skills

Audit the repository against the OpenSSF Baseline with darnit, resolve the controls darnit defers to LLM analysis or could not verify, and record per-control verdicts plus the attained Baseline level.

alpha-omega-security/scrutineer

A skill your agent uses for authorized source-code security review and SAST workflows including Semgrep, CodeQL patterns, dangerous API hunting, and fix verification.

zhaoxuya520/reverse-skill

A skill your agent uses for authorized email security review including phishing analysis, header authentication (SPF/DKIM/DMARC), BEC patterns, and mailbox token abuse research.

zhaoxuya520/reverse-skill

A skill your agent uses for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.

zhaoxuya520/reverse-skill