Security · For devops and sre engineers

Turn a development task into one work file in .work/ — goal, decisions, lanes with exact files and verification, done-criteria.

guardana/guardana

Classify game-cheat capabilities and their defensive implications across memory, injection, rendering, input, engines, kernels, DMA, and remote transports.

gmh5225/awesome-game-security

Analyze a range of local commits, and reorganize them to minimize latency and friction in the review and landing process.

SAP/project-foxhound

A skill your agent uses when choosing native or multi-LLM handling for init, review, or security requests

nyldn/claude-octopus

Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks.

trailofbits/skills

Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks.

trailofbits/skills

Runs full Trailmark structural analysis by building a graph, running preanalysis(), and reporting hotspots, taint, blast radius, privilege boundaries, attack surface, and version-gated Trailmark…

trailofbits/skills

Validates cryptographic implementations against Project Wycheproof's test vectors, which encode known attacks and edge cases across AES, RSA, ECDSA, ECDH, and more.

trailofbits/skills

Comprehensive SecOps skill for application security, vulnerability management, compliance, and secure development practices.

davila7/claude-code-templates

Conduct periodic access reviews and certifications. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Attack-surface crawling with the crawl tool — BFS link/form/hidden-field collection, JS-bundle API route extraction, and auth boundary mapping through the scoped browser.

Ch1nfo/RiftX

Secure key management for AI agents. An agent skill from profbernardoj/everclaw-community-branches.

profbernardoj/everclaw-community-branches

WordPress PHPStan review and setup guidance. An agent skill from jorgerosal/wordpress-skills.

jorgerosal/wordpress-skills

Use on passages a search just returned (memory, vault, session history, wiki, web) before reading them in.

kerpopule/hermes-jev-skills

Operate Syft, Grype, Trivy, Gitleaks, Retire.js, package-manager metadata, and build evidence for advanced software-supply-chain assessment.

cyberful/cyberful

Tool to get the callee of a function in the codebase by function name and file path.

opensage-agent/opensage-adk

Draft a security-audit scope from GitHub repos or API access, with a protocol narrative and a sizing table.

forefy/.context

Rust 服务审查：panic、SQL 注入、密钥、错误吞没、遗留标记

liuyanghejerry/Clausura

Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities.

trailofbits/skills

Expands one confirmed or suspected vulnerability into a Trailmark graph neighborhood of variant candidates by finding sibling functions, shared callers and callees, common sensitive sinks, common…

trailofbits/skills

Queries a local CodexQA symbol graph for change review, regression scope, test gaps, error location, and entry risk.

openqa-cn/codexqa

Configure code scanning in Harness pipelines using STO security scanners.

harness/harness-skills

Expertise in LLVM-based static analysis including dataflow analysis, pointer analysis, taint tracking, and program verification.

aftermathlabs/llvm-msvc

Detect data leakage, missing boundaries, or privilege mismatch in inter-agent communication.

Tencent/AI-Infra-Guard

Check the live status of the Strait of Hormuz from the Hormuz Strait Monitor dashboard: open, restricted, or closed status, tanker transits vs normal, stranded vessels, Brent price impact, war-risk…

himself65/finance-skills

AWS security best practices, VPC security, IAM, KMS, CloudTrail, GuardDuty for CIA platform deployment

Hack23/cia

Audit local and OpenClaw skill libraries for privacy theft, credential theft, stealthy exfiltration, unsafe execution chains, deceptive instructions, and persistence behavior, then generate a visual…

yaojingang/yao-open-skills

AD 域环境持久化技术。当已获取域管/本地管理员权限、需要建立持久访问以确保重启或密码更改后仍能回到目标环境时使用。覆盖主机级持久化（计划任务/注册表Run/COM劫持/WMI事件订阅/Windows服务/启动文件夹）、域级持久化（Golden Ticket/Silver Ticket/Skeleton…

wgpsec/AboutSecurity

Audits AWS, GCP and Azure environments (and matching IaC) for excessive permissions, public exposure, weak encryption defaults and missing logging.

criptogus/agent-evolve-network

Use astgrepscan, sourcesinkscan, and smtcheckreachability (mantisprogramanalysis MCP server) to move a candidate toward a proven-reachable finding

deonmenezes/mantishack

Agent skill for security-manager - invoke with $agent-security-manager

ruvnet/ruflo

Agent skill for v3-security-architect - invoke with $agent-v3-security-architect

ruvnet/ruflo

Rebuilds an app screen by screen from the recon map: app shell first, then the core flow as a vertical slice, then every screen with all its states, ticking off the feature matrix as it goes.

Jakeschincariol/replica-skill

Detect out-of-bounds memory accesses in CPU or GPU code using static interval analysis and runtime assertions/printfs.

ROCm/FlyDSL

Flag only new security issues introduced by this diff. An agent skill from different-ai/openwork.

different-ai/openwork

Classify project-used dependency members and record taint sources as rule-authoring units.

seqra/opentaint

Detect hardcoded sensitive data (API keys, access tokens, private keys, passwords, etc.) in publicly accessible code — frontend JavaScript, mobile apps, client-side bundles, and HTML templates.

utkusen/sast-skills

Measures timing side channels in cryptographic implementations by running them, using dudect for statistical analysis and Timecop over Valgrind for dynamic tracing.

trailofbits/skills

Usar para sincronizar la documentación viva del proyecto después de una fase.

686f6c61/alfred-dev

Implement centralized audit logging and SIEM integration. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Manage IAM users, roles, and policies. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Configure iptables, nftables, and cloud firewalls. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Generate, sign, and verify SBOMs and provenance attestations to secure the software supply chain.

sickn33/agentic-awesome-skills

Conduct threat modeling using STRIDE methodology. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Manage users, groups, and permissions on Linux systems. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

File a low-severity finding as an ordinary public GitHub issue after explicit analyst confirmation.

alpha-omega-security/scrutineer

威胁归因方法论：钻石模型、基础设施图谱、置信度分级与归因报告. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

Cryptography expert for TLS, symmetric/asymmetric encryption, hashing, and key management

RightNow-AI/openfang