Security

Configure and execute authenticated (credentialed) vulnerability scans using OpenVAS/Greenbone Vulnerability Management (GVM) with SSH, SMB, or ESXi credentials to detect local vulnerabilities…

mukul975/Anthropic-Cybersecurity-Skills

Plan and run authenticated (credentialed) vulnerability scans with scanners such as Nessus, Qualys, OpenVAS, or Rapid7 InsightVM, using SSH, SMB, WinRM, or SNMPv3 credentials to inspect installed…

mukul975/Anthropic-Cybersecurity-Skills

Performs runtime dynamic analysis of Android applications using Frida, Objection, and Android Debug Bridge to observe application behavior during execution, intercept function calls, modify runtime…

mukul975/Anthropic-Cybersecurity-Skills

Performs forensic analysis of SQLite databases by examining B-tree page structures, recovering deleted records from freelist pages and Write-Ahead Log (WAL) files, decoding encoded timestamps, and…

mukul975/Anthropic-Cybersecurity-Skills

Azure Key Vault SDK for Python. An agent skill from microsoft/skills.

microsoft/skills

CI/CD pipeline security, supply chain security, SLSA compliance, artifact signing, dependency scanning

Hack23/cia

A skill your agent uses when auditing an authorized website, SaaS, API, AI app, local code path, GitHub repo, staging URL, or owned runtime for security risks, vulnerability checklist scoring…

yaojingang/yao-open-skills

AI/LLM defensive security reference: prompt-injection defense, OWASP LLM Top 10 defensive mapping, MCP and agentic tool-call hardening, training-data poisoning detection, model-output validation and…

modu-ai/moai-adk

OWASP Top 10 security checklist, authentication patterns, input validation, and HTTP security headers reference.

modu-ai/moai-adk

DevSecOps, container, and API operational defensive security reference: CI/CD pipeline hardening, secret scanning, IaC misconfiguration detection, SAST/DAST integration, container image scanning…

modu-ai/moai-adk

Software supply-chain defensive security reference: SBOM generation and verification (SPDX / CycloneDX), dependency-confusion defense, malicious-package triage playbook, SLSA provenance levels…

modu-ai/moai-adk

Provides expert guidance on Identity and Access Management (IAM) and authenticating and authorizing to Google Cloud services and APIs, covering human users, service identities, Application Default…

google/skills

Automates the end-to-end detection engineering workflow in Google SecOps using MCP tools.

google/skills

Periodic dependency review for Node.js/pnpm projects — outdated package triage, security audit, update batching strategy (patch/minor/major), validation checklist.

mizchi/skills

A skill your agent uses when auditing dependency health — outdated packages, CVE triage with attack-vector weighting, deprecated/declining library detection (trend-watch).

mizchi/skills

A skill your agent uses when conducting a frontend security review — static analysis (risky HTML patterns, env var exposure), authentication/authorization audit (token storage, route guards…

mizchi/skills

SQL injection screening for host code (MoonBit / TS / Rust) plus secretlint setup notes.

mizchi/skills

Orchestrates the end-to-end bulk ATAC-seq pipeline from FASTQ to differential accessibility and TF footprints, chaining Nextera-aware fastp QC, Bowtie2 alignment, chrM removal, dedup, a single Tn5…

GPTomics/bioSkills

Discover open ports, running services, and their versions on a target

NeoTheCapt/RedteamAgent

Scan the ClawHunter agent bounty marketplace for opportunities that genuinely match this agent's real capabilities (code, security research, writing) and surface only real matches — never a raw…

aeonfun/aeon

Deep code property graph analysis with Joern CPG (AST+CFG+PDG) and CodeQL for control flow, data flow, taint analysis, and security auditing

alinaqi/maggy

Centralized API key management from Access.txt. An agent skill from alinaqi/maggy.

alinaqi/maggy

Structured, adversarial, multi-phase security audit of a codebase — recon → coverage-led hunting → finder≠validator validation → machine-readable findings → target-neutral report

alinaqi/maggy

Analyzes changed security boundaries against applicable OWASP risks and project contracts.

pavel-molyanov/molyanov-ai-dev

Debug a rule or approximation that behaves unexpectedly by tracing where taint is dropped.

seqra/opentaint

Run an OpenTaint scan on project and produces the SARIF report.

seqra/opentaint

Mark which of a project's dependency libraries could introduce taint sources.

seqra/opentaint

Conduct proactive, hypothesis-driven threat hunting. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Set up agent context for a project. An agent skill from unxed/f4.

unxed/f4

当目标为微信/支付宝/抖音/百度等小程序（含微信云开发/云函数）、需要小程序包获取与反编译、appid/appsecret/接口提取、微信登录链/支付/越权/WebView/rich-text 渲染/云开发漏洞挖掘时调用。负责小程序全生命周期深度挖掘：包还原 → 代码审计 → 接口与密钥提取 → 登录/支付/越权/渲染/云开发专项 → 验证要点。命中场景：openid 替换越权、code…

zhaji2333/CkSKILLS

Check compliance with OWASP Top 10 security risks and best practices.

jeremylongshore/tons-of-skills-marketplace

Analyze session management implementations to identify security vulnerabilities in web applications.

jeremylongshore/tons-of-skills-marketplace

Detect and analyze SQL injection vulnerabilities in application code and database queries.

jeremylongshore/tons-of-skills-marketplace

Validate encryption implementations and cryptographic practices.

jeremylongshore/tons-of-skills-marketplace

Configure perform API fuzzing to discover edge cases, crashes, and security vulnerabilities.

jeremylongshore/tons-of-skills-marketplace

Generate comprehensive security audit reports for applications and systems.

jeremylongshore/tons-of-skills-marketplace

Analyze code, infrastructure, and configurations by conducting comprehensive security audits.

jeremylongshore/tons-of-skills-marketplace

Audit automatically audits AI assistant code plugins for security vulnerabilities, best practices, AI assistant.md compliance, and quality standards when user mentions audit plugin, security review…

jeremylongshore/tons-of-skills-marketplace

Analyze and guide security incident response, investigation, and remediation processes.

jeremylongshore/tons-of-skills-marketplace

Execute use when you need to work with security and compliance.

jeremylongshore/tons-of-skills-marketplace

Process use when you need to work with security and compliance.

jeremylongshore/tons-of-skills-marketplace

Execute this skill enables comprehensive vulnerability scanning using the vulnerability-scanner plugin.

jeremylongshore/tons-of-skills-marketplace

Execute this skill enables AI assistant to automatically scan for xss (cross-site scripting) vulnerabilities in code.

jeremylongshore/tons-of-skills-marketplace

Scan for input validation vulnerabilities and injection risks.

jeremylongshore/tons-of-skills-marketplace

Validate CSRF protection implementations for security gaps. An agent skill from jeremylongshore/tons-of-skills-marketplace.

jeremylongshore/tons-of-skills-marketplace

A skill your agent uses when reviewing, designing, or modifying Java enterprise products, services, libraries, agents, plugins, connected components, or platform modules that may qualify as products…

jabrena/plinth

Review Vite security audit patterns for SPA and dev server security.

IgorWarzocha/Opencode-Workflows

Retrieve CVE risk scores from NVD. An agent skill from transilienceai/communitytools.

transilienceai/communitytools