Best security review skills, page 10

ANALYSIS SKILL — Find the right Azure RBAC role for an identity with least-privilege access; generate CLI, Bicep, and Terraform code to assign it.

jonathan-vella/apex

Authorized security assessment of LLM applications and AI agents: prompt injection, tool abuse, RAG exposure, memory poisoning, system-prompt extraction, and agent-compliance engineering per OWASP…

sickn33/agentic-awesome-skills

Reviews code for quality, security, correctness. An agent skill from softspark/ai-toolkit.

softspark/ai-toolkit

Security engineering toolkit for threat modeling, vulnerability analysis, secure architecture, and penetration testing.

LeoYeAI/openclaw-master-skills

Review or improve code — one skill, four modes: bug/security review (default), performance, clean-code audit, slop cleanup.

luongnv89/skills

Audit wallet security by analyzing token approvals, permissions, and transaction patterns.

jeremylongshore/tons-of-skills-marketplace

Probe a target for accidentally-public admin / debug / introspection endpoints — Spring Boot Actuator, Apache server-status, Prometheus metrics, GraphQL playground, Swagger UI, phpMyAdmin…

jeremylongshore/tons-of-skills-marketplace

Probe a target for directories that return auto-generated index listings instead of denying or serving a specific file — exposes the full file tree under any reachable directory, including files the…

jeremylongshore/tons-of-skills-marketplace

Preflight Snowflake Native App package releases from trusted, privacy-safe provider evidence without publishing, upgrading, altering, granting, or approving anything.

jeremylongshore/tons-of-skills-marketplace

Validate production readiness of Vertex AI Agent Engine deployments across security, monitoring, performance, compliance, and best practices.

jeremylongshore/tons-of-skills-marketplace

Dependency hygiene for the Rocky engine workspace — how to add/update deps via [workspace.dependencies], MSRV 1.88 policy, cargo-audit / cargo-deny / cargo-machete usage, and how the weekly security…

rocky-data/rocky

Audit current changes, a path, or the full project for quality, security, performance, or test problems and record durable findings.

aiblueprinthq/ai-blueprint

Cross-framework infrastructure security audit across cloud, network, and CI/CD.

borghei/Claude-Skills

Feature verification (READ-ONLY, P0-P5). An agent skill from sd0xdev/sd0x-harness.

sd0xdev/sd0x-harness

Security review via Codex exec. An agent skill from sd0xdev/sd0x-harness.

sd0xdev/sd0x-harness

Perform an evidence-based Levyra security review and Codex Security workflow covering threat modeling, attack paths, validation, remediation, revalidation, secrets, provider URLs, redirects, SSRF…

LUC4N3X/Levyra-deepsound

Recommended starting point for new users and daily SOC operations.

SCStelz/security-investigator

ANALYSIS SKILL — Azure compliance and security auditing: best practices, Key Vault expiration monitoring, resource validation.

jonathan-vella/apex

Apply security-conscious thinking when generating or modifying code.

techygarg/lattice

Develop evidence-backed structural and architectural security hardening proposals from vulnerability disclosures, supplied findings, incident or assessment documents, source code, or a completed…

vlinx-io/VelaTerm

Meme coin and token security audit

sickn33/agentic-awesome-skills

Security audit of a codebase — web apps, APIs, services, CLI tools, libraries, daemons, and more.

shepherdjerred/monorepo

Perform a comprehensive read-only security audit of Clawdbot's own configuration.

sundial-org/awesome-openclaw-skills

The Contracts & Security review perspective for PostHog Review.

PostHog/posthog

A skill your agent uses when preparing your agent for production — IAM scoping, inbound auth (JWT, SigV4), secrets management, cold start optimization, session lifecycle, rate limiting, input…

aws/agent-toolkit-for-aws

Have a fast, conversational analysis with the AWS DevOps Agent.

aws/agent-toolkit-for-aws

Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation.

aws/agent-toolkit-for-aws

Run an AWS Security Agent scan on the workspace — uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked, verified findings with code locations and…

aws/agent-toolkit-for-aws

This skill provides AWS cost optimization, monitoring, and operational best practices with integrated MCP servers for billing analysis, cost estimation, observability, and security assessment.

Microck/ordinary-claude-skills

Audit Stella code, paths, or Git diffs for security defects affecting privileged legal data, tenant isolation, authentication, files, AI, and auditability.

stella/stella

Review trust boundaries, auth, input handling, secrets, and dependency risk before release.

PacificStudio/openase

Comprehensive security auditing for Clawdbot deployments. An agent skill from aAAaqwq/AGI-Super-Team.

aAAaqwq/AGI-Super-Team

Runs a guided, end-to-end security review of a Power Pages site and consolidates every finding into one HTML report covering source code and dependencies, the live site, browser headers, firewall…

microsoft/power-platform-skills

Run security audit — dependency vulnerabilities, secret scanning, OWASP pattern detection, HTTP headers.

Houseofmvps/ultraship

Periodic security sweep of Atlas in four areas (MCP and CLI, the Tauri desktop shell, the web renderer and connectors, the supply chain and CI) that follows untrusted input to what it can reach…

wlsdks/ontology-atlas

Multi-agent swarm orchestration via RuFlo + Claude Code. An agent skill from LeoYeAI/openclaw-master-skills.

LeoYeAI/openclaw-master-skills

AI驱动的Java代码安全审计技能，实现系统化、高覆盖率的漏洞挖掘。使用场景： (1) 审计Java/Kotlin项目寻找安全漏洞（0day挖掘、代码审计、安全评估） (2) 企业级代码库的安全审计（支持大型项目） (3) 需要高质量、低幻觉率的安全审计报告 (4) CI/CD集成的前期漏洞发现 触发关键词：Java审计、代码审计、安全审计、漏洞挖掘、0day、安全评估、Java…

LeoYeAI/openclaw-master-skills

A skill your agent uses when an agent says a test, VM, proof, evaluator, or release gate is overloaded, too strict, blocking staging, or causing false positives; split checks by profile, measure the…

AnastasiyaW/codex-claude-code-config

A skill your agent uses when planning or reviewing tests for a code change, choosing between unit, focused regression, integration, contract, end-to-end, performance, security, property-based, or…

AnastasiyaW/codex-claude-code-config

Harden OpenClaw self-hosted environments with baseline host controls, auth tightening, secret handling, network segmentation, and safe update/rollback workflows.

BagelHole/DevOps-Security-Agent-Skills

Multi-dimensional LLM council review of an open PR (default) or a local feature branch (§ 8 branch mode, invoked via /gflow:branch-review).

ffroliva/gflow-cli

Audit PDF files for metadata leakage, page count, encryption, JavaScript, embedded files, and version.

borghei/Claude-Skills

Solutions architecture for technical pre-sales. An agent skill from borghei/Claude-Skills.

borghei/Claude-Skills

Code review using Codex exec. An agent skill from sd0xdev/sd0x-harness.

sd0xdev/sd0x-harness

Use this skill as THE specialized Lightning Web Security (LWS) validator for a Lightning Web Component bundle (.js, .ts, .html, .css, .js-meta.xml) — the canonical LWS/Product-Security review for…

forcedotcom/sf-skills

信息安全分析师与软件开发工程师在搭建文档处理流水线时，当需要拦截违规文件或外部URL，请挂载此技能作为强制前置安检，自动输出 pass/reject 判定与详细合规扫描报告，一键守住零信任安全底线。

anbeime/skill

对进入系统的文件或 URL 执行安全与合规扫描，输出 pass/reject 判定与扫描报告，作为所有文档处理的强制前置关卡。

anbeime/skill

Security review checklist for web applications. An agent skill from cohen-liel/hivemind.

cohen-liel/hivemind