Security

Runs NVIDIA garak probe suites (jailbreak, prompt injection, data leakage, toxicity, and more) against an LLM endpoint - Hugging Face models, OpenAI-compatible APIs, or Bedrock - then interprets the…

mukul975/Anthropic-Cybersecurity-Skills

Reviews code for quality, security, correctness. An agent skill from softspark/ai-toolkit.

softspark/ai-toolkit

Deploys Llama Guard 3 safety classification, NeMo Guardrails programmable dialogue rails, and LLM Guard input/output scanner pipelines as complementary runtime defenses that inspect and constrain…

mukul975/Anthropic-Cybersecurity-Skills

Web Application Firewall guidance, when to put one in front of an app and how to run it without breaking traffic.

TheDecipherist/claude-code-mastery-project-starter-kit

Runtime security guardian for OpenClaw agents. An agent skill from LeoYeAI/openclaw-master-skills.

LeoYeAI/openclaw-master-skills

Security engineering toolkit for threat modeling, vulnerability analysis, secure architecture, and penetration testing.

LeoYeAI/openclaw-master-skills

A skill your agent uses whenever the user asks about Wireshark, tcpdump, packet capture, pcap analysis, HTTP/DNS/TCP/DHCP/TLS capture interpretation, network lab reports, protocol fields observed in…

mingchen666/Reviva

Transform predictable story elements into fresh, original versions.

jwynia/agent-skills

Security rule for timing-safe secret comparison. An agent skill from paralleldrive/aidd.

paralleldrive/aidd

Audit a Node.js project's installed npm dependency tree for known CVEs by wrapping the npm audit JSON output and emitting findings in the canonical penetration-tester schema.

jeremylongshore/tons-of-skills-marketplace

Audit a Python project's installed dependencies for known CVEs by wrapping pip-audit (PyPA's official vulnerability auditor) and emitting findings in the canonical penetration-tester schema.

jeremylongshore/tons-of-skills-marketplace

Audit wallet security by analyzing token approvals, permissions, and transaction patterns.

jeremylongshore/tons-of-skills-marketplace

Audit a target's HTTP security headers — CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and the Cross-Origin trio (COOP, COEP, CORP).

jeremylongshore/tons-of-skills-marketplace

Read findings JSONL files from cluster 1-4 skills, deduplicate by fingerprint, group by severity, and compose a deliverable- grade markdown vulnerability report with per-finding sections (title…

jeremylongshore/tons-of-skills-marketplace

Probe a target for directories that return auto-generated index listings instead of denying or serving a specific file — exposes the full file tree under any reachable directory, including files the…

jeremylongshore/tons-of-skills-marketplace

Scan a source tree for SQL-injection vulnerable patterns: string concatenation into queries, f-string interpolation in SQL, string-format substitution into raw queries, deprecated cursor methods…

jeremylongshore/tons-of-skills-marketplace

Audit a target's TLS certificate beyond protocol/expiry — chain ordering, OCSP stapling, revocation status, Certificate Transparency presence, key-usage flags, and over-broad wildcards.

jeremylongshore/tons-of-skills-marketplace

Scan a source tree for weak cryptographic primitives: MD5 / SHA-1 used for security purposes, DES / 3DES / RC4 ciphers, ECB block mode, custom-built crypto (XOR loops, hand-rolled HMAC), hardcoded…

jeremylongshore/tons-of-skills-marketplace

Compose an exec-readable summary from a unified findings JSONL plus the OWASP coverage report.

jeremylongshore/tons-of-skills-marketplace

Annotate every pentest finding with its OWASP Top 10 (2021) category by applying a deterministic rule table keyed on source skill, finding category, detail keywords, and CWE identifier when present.

jeremylongshore/tons-of-skills-marketplace

Build a dependency-tree map of a project (npm or Python) and trace the path from each known-vulnerable transitive package back to one or more direct dependencies.

jeremylongshore/tons-of-skills-marketplace

Validate production readiness of Vertex AI Agent Engine deployments across security, monitoring, performance, compliance, and best practices.

jeremylongshore/tons-of-skills-marketplace

Perform static application security testing with tools like Semgrep, CodeQL, and SonarQube.

BagelHole/DevOps-Security-Agent-Skills

A skill your agent uses when you need to apply Java secure coding best practices — including validating untrusted inputs, defending against injection attacks with parameterized queries, minimizing…

jabrena/plinth

A skill your agent uses when you need to write or review programmatic JDBC with Spring — including JdbcClient (Spring Framework 7+) as the default API, JdbcTemplate only where batch/streaming APIs…

jabrena/plinth

Interactive supply chain dashboard mapping suppliers, customers, and financial interdependencies

daloopa/investing

Dependency hygiene for the Rocky engine workspace — how to add/update deps via [workspace.dependencies], MSRV 1.88 policy, cargo-audit / cargo-deny / cargo-machete usage, and how the weekly security…

rocky-data/rocky

Audit current changes, a path, or the full project for quality, security, performance, or test problems and record durable findings.

aiblueprinthq/ai-blueprint

A skill your agent uses when about to record, claim, rate the severity of, or report any security finding — before marking anything [CONFIRMED] or writing it into the report

hypnguyen1209/offensive-claude

A skill your agent uses when about to take any outward or offensive action (request, payload, persistence, lateral movement, exfil, or feeding captured traffic to the model) — to decide detection…

hypnguyen1209/offensive-claude

Security engineering router for penetration testing, code auditing, red/blue/purple team operations, threat intelligence, and vulnerability research.

telagod/code-abyss

Data breach incident response with ENISA severity scoring, notification timelines, and compliance tracking.

borghei/Claude-Skills

Cross-framework infrastructure security audit across cloud, network, and CI/CD.

borghei/Claude-Skills

This skill should be used when the user asks to "analyze logs for threats", "detect suspicious activity", "scan for brute force attempts", "identify injection attacks", or "audit access patterns for…

borghei/Claude-Skills

This skill should be used when the user asks to "scan AI systems for security threats", "check for prompt injection vulnerabilities", "assess model security posture", "detect data poisoning risks"…

borghei/Claude-Skills

Manage AWS accounts, organizations, IAM, and billing. An agent skill from hoodini/ai-agents-skills.

hoodini/ai-agents-skills

Feature verification (READ-ONLY, P0-P5). An agent skill from sd0xdev/sd0x-harness.

sd0xdev/sd0x-harness

Security review via Codex exec. An agent skill from sd0xdev/sd0x-harness.

sd0xdev/sd0x-harness

Secure coding practices for agent-native apps: input validation, SQL injection, XSS, secrets, data scoping, and auth.

BuilderIO/agent-native

A skill your agent uses when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse.

alirezarezvani/claude-skills

Consolidate brain memory and mine user sessions since the last consolidation checkpoint (sleep-cycle style).

mikeyobrien/rho

Coordinate cross-domain Levyra work that spans multiple subsystems, or orient an agent when no single specialized Levyra skill is sufficient.

LUC4N3X/Levyra-deepsound

Coordinate Levyra work through OpenClaw using a dedicated repository workspace, compact delegation, specialized review and CI agents, project-native skills, evidence collection, durable memory, and…

LUC4N3X/Levyra-deepsound

Perform an evidence-based Levyra security review and Codex Security workflow covering threat modeling, attack paths, validation, remediation, revalidation, secrets, provider URLs, redirects, SSRF…

LUC4N3X/Levyra-deepsound

Re-audit every past GHSA/CVE advisory published against this repository, anchored on each advisory's fix commit, for four failure modes, a regression of the original bug, a bypass of the fix, an…

alpha-omega-security/scrutineer

Triage ASM/recon output for ownership before testing — separate the target's real assets from namespace-collision noise.

elementalsouls/Claude-BugHunter

A skill your agent uses when asked to analyze, investigate, or report on honeypot server security.

SCStelz/security-investigator

A skill your agent uses when asked to investigate a security incident by ID from Microsoft Defender XDR or Microsoft Sentinel.

SCStelz/security-investigator