Secrets management

Security hardening and best practices for robotic systems, covering SROS2 DDS security, network segmentation, secrets management, secure boot, and the physical-cyber safety intersection.

arpitg1304/robotics-agent-skills

Python security vulnerability detection using Bandit SAST with CWE and OWASP mapping.

AgentSecOps/SecOpsAgentKit

Secure-by-default environment variable management for Claude Code sessions.

sickn33/agentic-awesome-skills

Execute mcloud variables commands to list, get, set, and delete environment variables for a Cloud environment.

medusajs/medusa-agent-skills

AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching…

github/awesome-copilot

Security best practices and vulnerability prevention for Golang — injection (SQL, command, XSS), cryptography, path traversal, SSRF and HTTP security headers, cookies, secrets management, memory…

unxed/f4

Deploy cloud-native deception across AWS, Azure, and GCP using decoy (honey) resources whose only purpose is to generate a high-fidelity alert the instant an attacker touches them: canary IAM access…

mukul975/Anthropic-Cybersecurity-Skills

Configures GitHub Advanced Security (code scanning with CodeQL, secret scanning, dependency review, and Dependabot alerts) to perform automated static analysis and vulnerability detection across…

mukul975/Anthropic-Cybersecurity-Skills

RLS validation, security audits, OWASP compliance, and vulnerability scanning.

bybren-llc/safe-agentic-workflow

Detect exposed secrets, API keys, credentials, and tokens in code.

alirezarezvani/claude-code-tresor

Audit a pull request diff for common security concerns (input validation, sanitization, authentication and authorization, secrets management, unsafe dependencies, and related risks) and fold…

warpdotdev/oz-for-oss

Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration.

microsoft/GitHub-Copilot-for-Azure

Request user-supplied credentials securely into a dotenv file without exposing their values to the agent.

get-bb/bb

Manage model API keys, default models and per-agent vault secrets with the penguin CLI.

Prism-Shadow/penguin-harness

Detect compromised cloud credentials across AWS, Azure, and GCP by analyzing anomalous API activity, impossible-travel patterns, and credential-stuffing indicators using GuardDuty, Microsoft…

mukul975/Anthropic-Cybersecurity-Skills

Enable Microsoft Defender for Cloud (CSPM + CWPP) across VMs, containers, SQL, storage, and Key Vault, using Azure Policy for evaluation, Log Analytics for telemetry, Azure Arc for hybrid coverage…

mukul975/Anthropic-Cybersecurity-Skills

Integrates SAST, DAST, and SCA into CI/CD pipelines using Semgrep for SAST, Trivy for SCA and container scanning, OWASP ZAP for DAST, and Gitleaks for secrets detection.

mukul975/Anthropic-Cybersecurity-Skills

Configures HashiCorp Vault dynamic secrets engines for database credentials, AWS IAM keys, and PKI certificates, with automatic generation, lease management, and rotation to eliminate static secrets…

mukul975/Anthropic-Cybersecurity-Skills

Deploy HashiCorp Vault for centralized secrets management, covering dynamic secret generation for databases and cloud providers, transit encryption, PKI certificate management, and Kubernetes…

mukul975/Anthropic-Cybersecurity-Skills

Hardens serverless compute platforms (AWS Lambda, Azure Functions, Google Cloud Functions): least-privilege IAM roles, dependency vulnerability scanning, secrets management integration, input…

mukul975/Anthropic-Cybersecurity-Skills

Python configuration management via environment variables and typed settings.

wshobson/agents

Manage environment-variable hygiene and secrets safety across local development and production.

alirezarezvani/claude-skills

Managing secrets (API keys, database credentials, certificates) with Vault, cloud providers, and Kubernetes.

ancoleman/ai-design-components

Configuration and environment variable conventions for the Playwright scaffold — env file layout (env/.env.), dotenv loading via playwright.config.ts and the ENVIRONMENT variable, config objects in…

idavidov13/agentic-playwright

Manages Medusa Cloud resources through the Cloud CLI (mcloud).

medusajs/medusa-agent-skills

This skill provides guidance for implementing security features that span across Better Auth, including rate limiting, CSRF protection, session security, trusted origins, secret management, OAuth…

viclafouch/meme-studio

Vercel environment variable expert guidance. An agent skill from vercel/vercel-plugin.

vercel/vercel-plugin

Establish a security baseline for a website or web app. An agent skill from rampstackco/claude-skills.

rampstackco/claude-skills

Guide for using MSBuild Server to improve CLI build performance.

microsoft/testfx

List the environment variables a codebase reads and flag ones missing from the example env file.

zhuyansen/agent-skills-hub

Working with Conductor (conductor.build), the parallel-agent app.

freekmurze/dotfiles

This skill covers implementing Gitleaks for detecting and preventing hardcoded secrets in git repositories.

mukul975/Anthropic-Cybersecurity-Skills

Review Next.js security audit patterns for App Router and Server Actions.

IgorWarzocha/Opencode-Workflows

Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security.

affaan-m/ECC

Generate patent-office-compliant figures via the PatentFig AI API — patent line art from text (PNG or SVG), vectorize drawings to SVG/DXF/vector PDF, AI-upscale images, and convert to filing-ready…

davila7/claude-code-templates

Phase 2 of building a Claude Managed Agent — turn a validated build sheet into exact API payloads and a resumable BYOK curl launch script, then launch (environment → agent → session → kickoff) using…

alirezarezvani/claude-skills

A skill your agent uses when writing Python code that integrates with Azure Blob Storage, AI Search, Document Intelligence, or Key Vault — or when configuring Managed Identity auth, designing a…

kid-sid/claude-spellbook

Run Azure compliance and security audits with azqr plus Key Vault expiration checks.

microsoft/GitHub-Copilot-for-Azure

A skill your agent uses when handling API keys, passwords, tokens, private keys, or any sensitive credential.

aiming-lab/MetaClaw

Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment

mukul975/Anthropic-Cybersecurity-Skills

Runs Trivy across every target type it supports - container images, filesystems, Git repositories, and Kubernetes clusters - for OS and dependency vulnerabilities, IaC misconfiguration, exposed…

mukul975/Anthropic-Cybersecurity-Skills

A skill your agent uses when reviewing client-side JavaScript, HTML source, or git history for exposed credentials, API keys, or tokens.

thedaviddias/Front-End-Checklist

Analyze JS bundles and source maps for hardcoded secrets, API keys, JWTs, and internal endpoints

uphiago/recon-skills

Automatically discover security skills when working with authentication, authorization, input validation, security headers, vulnerability assessment, or secrets management.

rand/cc-polymath

Audit MCP (Model Context Protocol) server configurations for security issues.

github/awesome-copilot

Deploy to production — CI/CD pipelines, environment config, deployment strategies.

ww-w-ai/bkit-claude-code

This skill should be used when user asks to "query Azure resources", "list storage accounts", "manage Key Vault secrets", "work with Cosmos DB", "check AKS clusters", "use Azure MCP", or interact…

fcakyon/claude-codex-settings

Find leaked secrets in source code, Git history, build artifacts, and infrastructure — and audit the secrets-management posture preventing future leaks.

briiirussell/cybersecurity-skills