Security · Webhooks

Generates fuzz test scaffolding for parsers handling external input (YAML, JSON, config files, user input).

ash1794/vibe-engineering

Audit cryptography implementation — algorithm choice, key sizes, KDF parameters, IV/nonce handling, signature verification, randomness, TLS configuration, and key rotation.

briiirussell/cybersecurity-skills

Finds exploitable application security vulnerabilities in code changes.

getsentry/warden

Review Convex security audit patterns for authentication and authorization.

IgorWarzocha/Opencode-Workflows

A skill your agent uses when setting up an email inbox for an AI agent (Moltbot, Clawdbot, or similar) - configuring inbound email, webhooks, tunneling for local development, and implementing…

viclafouch/meme-studio

Signs and verifies container image provenance with Sigstore Cosign, covering key-based and keyless OIDC signing (Fulcio, Rekor transparency log), SLSA attestations, and enforcing signature…

mukul975/Anthropic-Cybersecurity-Skills

Audit a shipped repo for production-readiness gaps across RLS, webhooks, secrets, grants, Stripe idempotency, mobile UX, and deployment health.

sickn33/agentic-awesome-skills

Implements digital signatures using the Ed25519 algorithm (Curve25519), covering key-pair generation, signing, signature verification, and security tradeoffs versus RSA and ECDSA.

mukul975/Anthropic-Cybersecurity-Skills

Check code for the most common, high-risk security vulnerabilities (broken access control, tenant isolation, injection, secrets, SSRF, auth/session, unsafe file handling, mass assignment) before it…

trycompai/comp

Server-Side Request Forgery detection→internal-access→proof for web apps.

s0ld13rr/pentestcode

Security review checklist for Convex functions, auth logic, public queries, admin routes, webhooks, uploads, and AI-generated code.

waynesutton/markdown-site

Use before committing changes to auth, workspace scoping, channel webhooks, AI tools/MCP, permission settings, or anything handling untrusted channel content in ChatbotX.

ChatbotXIO/ChatbotX

Scan inputs for prompt injection, unsafe content, and adversarial attacks using AIDefence.

ruvnet/ruflo

Deploys canary tokens and honeytokens (fake AWS credentials, DNS canaries, document beacons, database records) that trigger alerts when accessed by attackers.

mukul975/Anthropic-Cybersecurity-Skills

Threat-model product features, APIs, data flows, secrets, permissions, supply-chain changes, auth boundaries, and risky code paths before or during implementation.

majiayu000/spellbook

Clerk auth with API Keys beta (Dec 2025), Next.js 16 proxy.ts (March 2025 CVE context), API version 2025-11-10 breaking changes, clerkMiddleware() options, webhooks, production considerations (GCP…

LeoYeAI/openclaw-master-skills

安全威胁建模专家 Owner — 当任务涉及权限、认证、授权、输入输出信任边界、密钥策略、审计、攻击面、Webhook/OAuth、敏感操作或用户要求安全专家视角时使用；要求识别滥用路径并绑定缓解验证。

devcodex-labs/devcodex

Harden ClickUp credentials, OAuth callbacks, Workspace boundaries, webhooks, logging, and incident response with least-privilege controls.

jeremylongshore/tons-of-skills-marketplace

Secure Firecrawl identities, targets, request options, webhooks, untrusted content, retention, logs, and self-hosted exposure.

jeremylongshore/tons-of-skills-marketplace

Analyze and harden Flexport credentials, tokens, webhook verification, data exposure, and mutation controls.

jeremylongshore/tons-of-skills-marketplace

Harden Instantly API v2 keys, scopes, tenant boundaries, logs, webhooks, and operational access.

jeremylongshore/tons-of-skills-marketplace

Harden Persona API keys, identity data, inquiry sessions, webhook verification, and destructive redaction.

jeremylongshore/tons-of-skills-marketplace

Establish least-privilege OAuth, secret, webhook, data, card, and financial-write controls for a Ramp integration.

jeremylongshore/tons-of-skills-marketplace

Assess server-side URL retrieval and network egress during authorized penetration tests or code audits.

cyberful/cyberful

Secure Fathom API keys and handle meeting data privacy. An agent skill from jeremylongshore/tons-of-skills-marketplace.

jeremylongshore/tons-of-skills-marketplace