Security review

Application security covering input validation, auth, headers, secrets management, and dependency auditing

rohitg00/awesome-claude-code-toolkit

Scan repositories for newly disclosed CVEs in dependencies after a specific cutoff date.

ArabelaTso/Skills-4-SE

WordPress security code review and vulnerability detection. An agent skill from jorgerosal/wordpress-skills.

jorgerosal/wordpress-skills

Guide for using Repomix - a powerful tool that packs entire repositories into single, AI-friendly files.

einverne/dotfiles

Review an MCP server for common security gaps: LLM-facing surfaces as injection vector (tools, resources, prompts, descriptions), scope blast radius, destructive ops without consent, upstream auth…

cyanheads/pubmed-mcp-server

Map distinct externally reachable input-processing subsystems into focus areas for the threat-model skill to carry into later security audits.

alpha-omega-security/scrutineer

Run a third-party / vendor security review and assign a risk tier with required controls.

mohitagw15856/pm-claude-skills

Comprehensive code security audit with AI-powered vulnerability detection.

LeoYeAI/openclaw-master-skills

OpenClaw 多模式安全巡检工具：默认本地离线扫描，可选联网威胁情报上报. An agent skill from LeoYeAI/openclaw-master-skills.

LeoYeAI/openclaw-master-skills

OpenClaw 安全巡检工具，一键执行系统安全扫描并生成通俗易懂的报告. An agent skill from LeoYeAI/openclaw-master-skills.

LeoYeAI/openclaw-master-skills

Perform a security review of a diff, branch, or pull request — assessing what the change introduces, weakens, or exposes, with a triage-first workflow and false-positive discipline.

trilwu/secskills

Record a vetted Hex package version in hexvet.exs after a security review — manages the audit ledger, not the scanner.

oliver-kriska/claude-elixir-phoenix

Record vetted Hex versions after security review. An agent skill from oliver-kriska/claude-elixir-phoenix.

oliver-kriska/claude-elixir-phoenix

Record a vetted Hex package version in hexvet.exs after a security review — manages the audit ledger, not the scanner.

oliver-kriska/claude-elixir-phoenix

结对编程搭档。当用户要求"边写边审"、"结对编程"、"写完自己 review 一遍"、"高可靠地实现"，或明确希望代码交付时附带自我审查意见时使用。交付代码的同时输出结构化审查（正确性/安全/性能/可读性/健壮性五维度），重点捕捉 AI 生成代码的特有缺陷。不用于：对已有 PR 的正式评审（用 code review 流程）、安全专项扫描（用 security-audit）、10…

staruhub/ClaudeSkills

解决方案架构师助手。当用户要设计新系统架构、评审现有架构、做技术选型决策、诊断性能/可扩展性/可用性问题、规划架构演进或重构时使用。覆盖微服务、事件驱动、云原生等架构模式，技术趋势通过实时搜索获取而非依赖内置知识。不用于：具体功能的代码实现、安全漏洞审计（用security-audit）、产品需求分析（用product-manager）、只需一句话回答的技术常识问题。

staruhub/ClaudeSkills

Create a prioritized security remediation plan from security assessment findings.

EmeaAppGbb/spec2cloud

Review Abridge deployment controls across data handling, identity, devices, EHR workflows, support, auditability, and incident response.

jeremylongshore/tons-of-skills-marketplace

Review a Bright Data integration for least privilege, public-data authorization, secret containment, and controlled use.

jeremylongshore/tons-of-skills-marketplace

Harden ClickUp credentials, OAuth callbacks, Workspace boundaries, webhooks, logging, and incident response with least-privilege controls.

jeremylongshore/tons-of-skills-marketplace

Configure and audit security review capabilities as one layer in a defense-in-depth pull-request program.

jeremylongshore/tons-of-skills-marketplace

Compliance and security auditing for Cursor IDE usage: SOC 2, GDPR, HIPAA assessment, evidence collection, and remediation.

jeremylongshore/tons-of-skills-marketplace

Apply Deepgram security best practices for API key management and data protection.

jeremylongshore/tons-of-skills-marketplace

Harden Fireflies bearer authentication, GraphQL selections, webhook signatures, logs, and privileged mutations against secret and meeting-data exposure.

jeremylongshore/tons-of-skills-marketplace

Analyze and harden Flexport credentials, tokens, webhook verification, data exposure, and mutation controls.

jeremylongshore/tons-of-skills-marketplace

Implement security best practices for Lindy agents and integrations.

jeremylongshore/tons-of-skills-marketplace

Threat-model a Navan integration across identity, travel, expense, payment, file, and downstream systems.

jeremylongshore/tons-of-skills-marketplace

Pre-production readiness checklist for OCI — backup policies, security audit, key rotation, encryption, and Cloud Guard.

jeremylongshore/tons-of-skills-marketplace

Harden Persona API keys, identity data, inquiry sessions, webhook verification, and destructive redaction.

jeremylongshore/tons-of-skills-marketplace

Establish least-privilege OAuth, secret, webhook, data, card, and financial-write controls for a Ramp integration.

jeremylongshore/tons-of-skills-marketplace

Review RemoFirst account, group, report, connector, and worker-data controls.

jeremylongshore/tons-of-skills-marketplace

Apply Shopify security best practices for API credentials, webhook HMAC validation, and access scope management.

jeremylongshore/tons-of-skills-marketplace

Threat-model a WebContainer or StackBlitz embed across host, runtime, user-code, filesystem, dependency, network, preview, secret, and persistence boundaries.

jeremylongshore/tons-of-skills-marketplace

Enforce organizational governance for Supabase projects: shared RLS policy library with reusable templates, table and column naming conventions, migration review process with CI checks, cost alert…

jeremylongshore/tons-of-skills-marketplace

Apply Supabase security best practices: anon vs servicerole key separation, RLS enforcement, policy patterns, JWT verification, and API hardening.

jeremylongshore/tons-of-skills-marketplace

Apply Vercel security best practices for secrets, headers, and access control.

jeremylongshore/tons-of-skills-marketplace

Audit MCP (Model Context Protocol) server configurations for security issues.

boshi-xixixi/TraeSkill

Identifies what could go wrong in a system before it is built or changed — the assets worth attacking, the entry points, the trust boundaries, and the controls that actually address the realistic…

cbrock84/headcount

Orchestrate multiple Antigravity skills through guided workflows for SaaS MVP delivery, security audits, AI agent builds, and browser QA.

aiskillstore/marketplace

Security audit workflow - vulnerability scan → verification. An agent skill from parcadei/Continuous-Claude-v3.

parcadei/Continuous-Claude-v3

Microsoft 365 tenant administration for Global Administrators.

borghei/Claude-Skills

SecOps for application security, vulnerability management, compliance, and secure development.

borghei/Claude-Skills

Audit or harden a defined application-security attack surface when the user explicitly requests a security audit, vulnerability investigation, or scoped security-hardening pass.

swyxio/skills

Entry P0 primary router and operating doctrine for HackSkills.

yaklang/hack-skills

A skill your agent uses when someone wants an Amazon EKS cluster graded against best practices.

aws/tools-for-devops-agent

Run defensive pre-release security tests for Python web applications.

aiskillstore/marketplace

Read-only audit of MCP definition language across an existing surface — tools, resources, prompts, server instructions.

cyanheads/pubmed-mcp-server

A skill your agent uses when automated scanners drive a security sweep of a repo or app — SAST, dependency/lockfile CVEs, secrets in the tree or git history, IaC misconfig — and the raw output has…

ericrisco/rsc-harness