Security

Draw a testable attack surface from one authorized target URL or one application.

yaklang/hack-skills

Creates and manages secrets in AWS Secrets Manager following security best practices.

aws/agent-toolkit-for-aws

Use before committing changes to auth, workspace scoping, channel webhooks, AI tools/MCP, permission settings, or anything handling untrusted channel content in ChatbotX.

ChatbotXIO/ChatbotX

Windows net diag: ping, traceroute, DNS, port scan (PowerShell)

taracodlabs/aiden

HTTP security header audit (A+ to F) with fix recommendations

taracodlabs/aiden

Shodan lookups: internet-connected devices, ports, services. An agent skill from taracodlabs/aiden.

taracodlabs/aiden

Usar para modelar amenazas con metodología STRIDE. An agent skill from 686f6c61/alfred-dev.

686f6c61/alfred-dev

Blue-team release-gate analysis for smart contract deployment and upgrade readiness.

quillai-network/quillshield_skills

Expert security auditor for AI Skills and Bundles. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Defend AI systems against prompt injection and indirect prompt attacks using input controls, tool permissions, output validation, and isolation boundaries.

sickn33/agentic-awesome-skills

Scan inputs for prompt injection, unsafe content, and adversarial attacks using AIDefence.

ruvnet/ruflo

When the user needs a security assessment — threat modeling, vulnerability review, auth flow audit, dependency scanning, or says "is this secure", "review for vulnerabilities", "threat model"…

shawnpang/startup-founder-skills

Defense-in-depth security across Rust, TypeScript, and Bash for the Pump SDK — cryptographic key handling, memory zeroization, secure file I/O, input validation, privilege management, dependency…

nirholas/pump-fun-sdk

Audit application source code against the OWASP Top 10 (2021) vulnerability categories — broken access control, cryptographic failures, injection, insecure design, security misconfiguration…

briiirussell/cybersecurity-skills

Operates this repository as a solo maintainer across PR triage, issue handling, release work, deploys, ops checks, cost checks, security review, and docs drift.

serithemage/serverless-openclaw

Comprehensive infrastructure security audit framework for IaC, Docker, Kubernetes, and cloud configurations.

forefy/.context

Review the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline — authentication, sessions, rate limiting, input-schema…

github/awesome-copilot

Plan and coordinate a model deployment to Amazon SageMaker, including serving stack and real-time versus async inference.

waybarrios/opencode-power-pack

Screen fetched web pages, tool results, emails and file contents for instructions aimed at the agent before they enter context, using a keyless multi-label classifier over chunks.

mrmps/classifier-dev

Rank a SIEM or EDR alert queue before a human opens it. An agent skill from mrmps/classifier-dev.

mrmps/classifier-dev

Ревью изменений с фокусом на безопасность по стандартам команды.

justxor/claude-code-pro-course

Pull REAL Snyk SAST findings from EPAM Jira (Data Center) via the search-export API using a Personal Access Token, and emit them as a stage-output.json artifact for a downstream triage stage.

epam/ai-dial-chat

A skill your agent uses when the user says 'licensing', 'license audit', 'can I use this commercially', 'OSS license check', 'license compatibility', 'GPL', 'MIT', 'AGPL', 'copyleft'.

cwinvestments/memstack

A skill your agent uses when the user says 'CSP', 'Content-Security-Policy', 'security headers', 'HSTS', 'X-Frame-Options', 'clickjacking', 'unsafe-inline', 'unsafe-eval', or needs to audit…

cwinvestments/memstack

A skill your agent uses when the user says 'dependency audit', 'npm audit', 'pip audit', 'cargo audit', 'security vulnerabilities', 'outdated packages', 'supply chain', or needs to scan project…

cwinvestments/memstack

A skill your agent uses when the user says 'OWASP audit', 'OWASP top 10', 'security audit', 'vulnerability assessment', 'full security check', or needs a comprehensive web application security…

cwinvestments/memstack

A skill your agent uses when the user says 'check RLS', 'audit RLS', 'RLS policies', 'row level security', 'Supabase security audit', or needs to verify table-level access control.

cwinvestments/memstack

A skill your agent uses when an open-source developer tool, package, CLI, agent, or MCP server must be evaluated for legitimacy, supply-chain risk, telemetry, dangerous capabilities, claim accuracy…

asimons81/hermes-field-kit

[omh] Security event on the code already shipped -- a CVE in a dependency, a secret committed to the repo, a license question, an advisory: triage reachability and severity, contain in order, and…

rlaope/oh-my-hermes

[omh] Agent or automation safety risks: review prompt, tool, secret, dependency, destructive-action, and explicit local plugin risks before agent or code execution.

rlaope/oh-my-hermes

Vulnerability-research loop toward a novel CVE. An agent skill from Encod3d-Sec/TORCH.

Encod3d-Sec/TORCH

Capture a Burp Suite Repeater request/response as a PoC image (targets/<eng/poc/) by driving the Burp MCP + the Kali GUI.

Encod3d-Sec/TORCH

External recon and OSINT pipeline - subdomain enum, live host discovery, URL crawl, JS analysis, nuclei scan.

Encod3d-Sec/TORCH

Security patterns and OWASP guidelines. An agent skill from aiskillstore/marketplace.

aiskillstore/marketplace

Detect package managers and CI action pins, then discover outdated or vulnerable dependencies.

tobihagemann/turbo

Domain-specific: SAP Commerce, OpenSearch detection, WordPress validation, enterprise search.

notque/vexjoy-agent

Security: review git changes for vulnerabilities, threat-model a system's attack surface, audit supply-chain risks.

notque/vexjoy-agent

IAM policy review, hardening, and least privilege implementation

aiskillstore/marketplace

Comprehensive AWS security posture assessment using AWS CLI and security best practices

aiskillstore/marketplace

Security auditor for Laravel applications. An agent skill from aiskillstore/marketplace.

aiskillstore/marketplace

Reviews a local diff, branch diff, or PR with file:line findings in confirmed and plausible tiers, gates any test the diff adds or changes, and in apply mode lands the fixes and diff-scoped…

mblode/agent-skills

Handle CVE/vulnerability reports from security linters (trivy, osv-scanner, etc.).

hardisgroupcom/sfdx-hardis

Create OPA governance policies for Harness via MCP. An agent skill from harness/harness-skills.

harness/harness-skills

A skill your agent uses for a standard, single-pass security audit of an entire repository or a scoped path, package, folder, or submodule with no diff to review.

vlinx-io/VelaTerm

Complete bug bounty workflow

sickn33/agentic-awesome-skills

Web2 recon pipeline

sickn33/agentic-awesome-skills

Smart contract security audit

sickn33/agentic-awesome-skills

Dependabot-aware dependency updates with security audit, real-CI validation, and a unified PR.

joshukraine/dotfiles