Security

Correlation, confidence scoring, and conflict resolution across all tech-stack signals.

transilienceai/communitytools

Infrastructure tech-stack identification — cloud providers, CDN/WAF, DNS services, TLS/CT, DevOps tooling, plus asset discovery (domains, subdomains, IPs).

transilienceai/communitytools

OSINT-side tech-stack identification — public repositories (GitHub/GitLab), job postings & ATS, and Wayback Machine historical snapshots.

transilienceai/communitytools

Security-posture and third-party SaaS identification — security headers, CSP, HSTS, email auth, security.txt, plus payments/analytics/auth/CRM/support integrations.

transilienceai/communitytools

Defensive security engineering judgment, distilled from a stronger model - invoke when THREAT MODELING a system or feature; making security-relevant design decisions (auth, crypto, trust boundaries…

telagod/code-abyss

Scan project dependencies for vulnerabilities, license issues, and upgrade opportunities across Python, Node.js, Go, and Rust.

borghei/Claude-Skills

NIS2 Directive (EU 2022/2555) compliance for critical infrastructure entities, covering the 10 minimum security measures.

borghei/Claude-Skills

Audit PDF files for metadata leakage, page count, encryption, JavaScript, embedded files, and version.

borghei/Claude-Skills

Solutions architecture for technical pre-sales. An agent skill from borghei/Claude-Skills.

borghei/Claude-Skills

Layer 2 synthesis methodology. An agent skill from prime-radiant-inc/greenfield.

prime-radiant-inc/greenfield

Code review using Codex exec. An agent skill from sd0xdev/sd0x-harness.

sd0xdev/sd0x-harness

Use this skill as THE specialized Lightning Web Security (LWS) validator for a Lightning Web Component bundle (.js, .ts, .html, .css, .js-meta.xml) — the canonical LWS/Product-Security review for…

forcedotcom/sf-skills

Activate an Enhanced MessagingChannel (WhatsApp/Apple/Facebook/SMS/RCS) by PATCHing MessagingChannelUsage.DeploymentStatus from Disabled to Provisioning via the REST sobject endpoint.

forcedotcom/sf-skills

信息安全分析师与软件开发工程师在搭建文档处理流水线时，当需要拦截违规文件或外部URL，请挂载此技能作为强制前置安检，自动输出 pass/reject 判定与详细合规扫描报告，一键守住零信任安全底线。

anbeime/skill

对进入系统的文件或 URL 执行安全与合规扫描，输出 pass/reject 判定与扫描报告，作为所有文档处理的强制前置关卡。

anbeime/skill

Security review checklist for web applications. An agent skill from cohen-liel/hivemind.

cohen-liel/hivemind

Implements, registers, and verifies fuzz tests in Chromium. An agent skill from nwjs/chromium.src.

nwjs/chromium.src

A skill your agent uses when writing code that processes user input, manages authentication or authorization, constructs database queries, handles file operations, interacts with external data…

NoobyGains/godmode

Bug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi — report templates, human tone guidelines, impact-first writing, CVSS 3.1 scoring, title formula, impact statement formula, severity…

elementalsouls/Claude-BugHunter

对前端代码进行安全审计，检测 XSS、CSRF 等漏洞。当用户请求代码审查或询问代码安全性时使用. An agent skill from TencentBlueKing/bk-bcs.

TencentBlueKing/bk-bcs

Review owned source, configuration and dependency metadata for supported security findings with precise evidence and remediation.

WrongStack/WrongStack

Application security covering input validation, auth, headers, secrets management, and dependency auditing

rohitg00/awesome-claude-code-toolkit

Create a read-only permission and sharing access review report as a self-contained HTML file saved to SharePoint.

pnp/sharepoint-skills

Generate targeted test inputs to reach specific code paths and hard-to-reach behaviors in Python code.

ArabelaTso/Skills-4-SE

Scan repositories for newly disclosed CVEs in dependencies after a specific cutoff date.

ArabelaTso/Skills-4-SE

Writing Windows-safe Infinite code from macOS: keep WIN32 out of nodes, three-sided Platform:: obligation, Windows trap catalogue (WASAPI, WinMM, GDI glyphs, Media Foundation stride, wide paths…

n1m21n/Infinite

A skill your agent uses when auditing project dependencies for known vulnerabilities, supply chain risk, or provenance issues — covers Go modules, Maven/JVM, and CI integration for automated scanning

Habitat-Thinking/ai-literacy-superpowers

A skill your agent uses when auditing Docker images in this project for CVEs, base image staleness, or remediation recommendations — covers all four TUI images (Go, Python, Kotlin, C)

Habitat-Thinking/ai-literacy-superpowers

A skill your agent uses when auditing a project for secrets committed to source control, setting up gitleaks, or hardening the "No secrets in source" harness constraint — covers scanning…

Habitat-Thinking/ai-literacy-superpowers

WordPress security code review and vulnerability detection. An agent skill from jorgerosal/wordpress-skills.

jorgerosal/wordpress-skills

Scaffold and validate new toolkit skills with the standard file layout, metadata, output contract, and orchestrator registration checklist.

ptn1411/skill

Audit dependency manifests and lockfiles for SBOM extraction, risky install scripts, unpinned versions, remote/git dependency sources, dependency-confusion and typosquat/known-malicious package…

ptn1411/skill

Detect transcription factor binding sites through footprinting analysis in ATAC-seq data using TOBIAS.

FreedomIntelligence/OpenClaw-Medical-Skills

Usar antes de aceptar una dependencia nueva. An agent skill from 686f6c61/alfred-dev.

686f6c61/alfred-dev

A skill your agent uses when closing a patch cycle with rigorous stress LAST on the Railway hub, bensbench x86 fieldbus → MQTTS, CSV/synth59/Creekside/gate 19, B100 Railway-only, light OWASP ZAP…

bbartling/open-fdd

Guide for using Repomix - a powerful tool that packs entire repositories into single, AI-friendly files.

einverne/dotfiles

Inspect Go module dependencies, detect outdated or vulnerable modules, and recommend safe updates or pinning strategies.

pilinux/gorest

Run CI-aligned static analysis (vet, gosec, govulncheck) and convert findings into prioritized remediation steps.

pilinux/gorest

Cloudflare Workers security with authentication, CORS, rate limiting, input validation.

secondsky/claude-skills

NIS2 Compliance Navigator — scope classification, Art. An agent skill from lawve-ai/awesome-legal-skills.

lawve-ai/awesome-legal-skills

Review an MCP server for common security gaps: LLM-facing surfaces as injection vector (tools, resources, prompts, descriptions), scope blast radius, destructive ops without consent, upstream auth…

cyanheads/pubmed-mcp-server

This skill should be used when preserving or producing a legacy CPAMI permit-package data.txt interchange file without treating reverse-engineering evidence as official procedure.

h30190/HJPLUS_Taiwan_Architect_KB

Web application security testing workflow and checklist generation.

SpecterOps/skills

Residual re-identification RISK CHECK on text you have ALREADY redacted (defensive, dual-use).

glebis/claude-skills

Web fuzzing with ffuf

sickn33/agentic-awesome-skills

Hunt ASP.NET-specific surface

sickn33/agentic-awesome-skills

Hunting skill for csrf vulnerabilities.

sickn33/agentic-awesome-skills

Hunt Session Management vulnerabilities

sickn33/agentic-awesome-skills