Best security review skills, page 12

Full security audit for public repositories across 12 attack surfaces: git history, secrets, CI/CD, containers, dependencies, licenses.

Mathews-Tom/armory

Connects an existing AWS Lambda function to Amazon API Gateway by creating a REST or HTTP API with resource/method setup, Lambda proxy integration, permissions, and deployment.

aws/agent-toolkit-for-aws

Provides Gemini CLI delegation workflows for large-context analysis and complex reasoning using Gemini 3.0 Flash and Gemini 3.0 Pro models, including English prompt formulation, execution flags, and…

giuseppe-trisciuoglio/developer-kit

Provides security review capability for TypeScript/Node.js applications, validates code against XSS, injection, CSRF, JWT/OAuth2 flaws, dependency CVEs, and secrets exposure.

giuseppe-trisciuoglio/developer-kit

On-demand security and code quality audit. An agent skill from MadAppGang/claude-code.

MadAppGang/claude-code

Deep security audit covering OWASP Top 10, authentication, authorization, data protection, dependency vulnerabilities, and secrets scanning.

davepoon/buildwithclaude

代码安全审计 - 漏洞扫描、依赖检查、安全最佳实践

laolaoshiren/claude-code-skills-zh

Captures redacted, provenance-aware cybersecurity observations with shared status fields, independent ground truth, and honest limitations.

HoangNguyen0403/agent-skills-standard

Adjudicates authorized exercise outcomes against independently held ground truth, redacted evidence, and explicit status boundaries.

HoangNguyen0403/agent-skills-standard

References Serverless OpenClaw security model. An agent skill from serithemage/serverless-openclaw.

serithemage/serverless-openclaw

发版自动化技能：CalVer 版本号 + 从 git log 生成 changelog + GitHub Releases。

312362115/claude

服务上线前的 AI 安全审查，聚焦需要理解代码语义和业务逻辑的安全问题. An agent skill from 312362115/claude.

312362115/claude

当涉及添加身份验证（Authentication）、处理用户输入、操作机密（Secrets）、创建 API 终端节点或实现支付/敏感功能时，请使用此技能。提供全面的安全检查清单和模式。

xu-xiang/everything-claude-code-zh

在添加身份验证、处理用户输入、操作机密信息（Secrets）、创建 API 端点以及实现支付/敏感功能时使用此技能。提供全面的安全检查清单和模式。

xu-xiang/everything-claude-code-zh

在添加身份验证、处理用户输入、操作机密信息、创建 API 接口或实现支付/敏感功能时使用此技能。提供全面的安全自查清单和模式。

xu-xiang/everything-claude-code-zh

使用 AgentShield 扫描 Claude Code 配置（.claude/ 目录）中的安全漏洞、配置错误和注入风险。检查 CLAUDE.md、settings.json、MCP 服务端、钩子（Hooks）和智能体（Agents）定义。

xu-xiang/everything-claude-code-zh

使用 AgentShield 扫描您的 Claude Code 配置（.claude/ 目录）是否存在安全漏洞、配置错误和注入风险。检查项包括 CLAUDE.md、settings.json、MCP 服务器、钩子（Hooks）以及智能体（Agent）定义。

xu-xiang/everything-claude-code-zh

Guides compliance with China's Personal Information Protection Law (PIPL, effective 1 November 2021).

mukul975/Privacy-Data-Protection-Skills

Comprehensive security vulnerability analysis for codebases and infrastructure.

aiskillstore/marketplace

Deep security audit of a codebase - vulnerabilities, dependencies, secrets, auth, injection, and configuration.

RedWoodOG/Hermes-Desktop

Remove AI-generated code slop from a branch: unnecessary comments, redundant defensive checks, boilerplate, style drift, and type casts.

foryourhealth111-pixel/Vibe-Skills

Coordinate a repository-wide white-box application security audit across architecture, source, configuration, dependencies, build, and deployment paths.

cyberful/cyberful

Operate kubectl, kube-bench, Trivy, Prowler, and manifest/runtime evidence for advanced Kubernetes security assessment.

cyberful/cyberful

Focused security audit of code, calibrated to surface real exploitable bugs and suppress theoretical findings.

PostHog/posthog

Code vulnerability pattern database. An agent skill from revfactory/harness-100.

revfactory/harness-100

RBAC configuration, row policies, quotas, network security, audit logging, and access control best practices.

chmonitor/chmonitor

Apply Anthropic Claude API security best practices for key management, input validation, and prompt injection defense.

jeremylongshore/tons-of-skills-marketplace

Apply security best practices for Apple Notes automation scripts.

jeremylongshore/tons-of-skills-marketplace

Apply Clay security best practices for API keys, webhook secrets, and data access control.

jeremylongshore/tons-of-skills-marketplace

A skill your agent uses whenever the user wants to find, shortlist, vet, or enrich US cybersecurity firms — pen-testing/red team, security audits, vCISO, SOC 2 readiness, incident response, managed…

jeremylongshore/tons-of-skills-marketplace

Apply security best practices for Fondo including OAuth token management, financial data protection, SOC 2 compliance, and access control.

jeremylongshore/tons-of-skills-marketplace

Apply Framer security best practices for secrets and access control.

jeremylongshore/tons-of-skills-marketplace

Implement security best practices for Gamma integration. An agent skill from jeremylongshore/tons-of-skills-marketplace.

jeremylongshore/tons-of-skills-marketplace

Apply Hex security best practices for secrets and access control.

jeremylongshore/tons-of-skills-marketplace

Apply Hootsuite security best practices for secrets and access control.

jeremylongshore/tons-of-skills-marketplace

Execute http header security audit operations. An agent skill from jeremylongshore/tons-of-skills-marketplace.

jeremylongshore/tons-of-skills-marketplace

Apply Juicebox security best practices. An agent skill from jeremylongshore/tons-of-skills-marketplace.

jeremylongshore/tons-of-skills-marketplace

Threat-model and harden a Mindtickle tenant and its identity, connector, API, content, and reporting integrations.

jeremylongshore/tons-of-skills-marketplace

Full security audit — secrets, dependencies, IAM, auth, injection, XSS, HTTPS, rate limiting, public storage.

jeremylongshore/tons-of-skills-marketplace

Security reconnaissance — full inventory of secrets management, IAM, dependencies, auth, encryption, audit logging, and compliance gaps.

jeremylongshore/tons-of-skills-marketplace

Automated SAST + dependency vulnerability scan. An agent skill from jeremylongshore/tons-of-skills-marketplace.

jeremylongshore/tons-of-skills-marketplace

Configure AI interaction audit logging for compliance. An agent skill from jeremylongshore/tons-of-skills-marketplace.

jeremylongshore/tons-of-skills-marketplace

A skill your agent uses when user asks to "build a Solana dapp", "write an Anchor program", "create a token", "debug Solana errors", "set up wallet connection", "test my Solana program", or "deploy…

elophanto/EloPhanto

Review Kubernetes NetworkPolicies — what is actually permitted to reach a workload, and whether the answer can be trusted.

automateyournetwork/netclaw

Create interactive mind map visualizations from markdown - network inventory, OSPF areas, BGP topology, security audit results.

automateyournetwork/netclaw

Deliver formatted network reports, audit results, topology diagrams, and compliance documentation to Slack channels with rich Block Kit formatting.

automateyournetwork/netclaw

Deliver formatted network reports, audit results, topology diagrams, and compliance documentation to WebEx spaces with Adaptive Cards and markdown formatting.

automateyournetwork/netclaw

Reviewing a diff or feature for exploitable vulnerabilities before it ships.

Zfinix/aster