Best security review skills, page 13

Security best practices for Micronaut/Kotlin backend including authentication, authorization, input validation, and OWASP prevention.

c0x12c/ai-toolkit

Security audit for Terraform codebases covering IAM, networking, encryption, secrets, access control, and compliance.

c0x12c/ai-toolkit

Statically analyze code to detect security vulnerabilities including buffer overflows, injection risks (SQL, command, XSS), insecure deserialization, improper authentication, hard-coded credentials…

ArabelaTso/Skills-4-SE

Generate structured CSV security audit reports from vulnerability data with proper filtering and formatting.

benchflow-ai/skillsbench

Security vulnerability scanner and OWASP compliance auditor for codebases.

curiositech/some_claude_skills

WordPress security code review for Codex. An agent skill from jorgerosal/wordpress-skills.

jorgerosal/wordpress-skills

Google Gemini CLI for second opinions, architectural advice, code reviews, security audits.

secondsky/claude-skills

REST API security hardening with authentication, rate limiting, input validation, security headers.

secondsky/claude-skills

Configures HTTP security headers to protect against XSS, clickjacking, and MIME sniffing attacks.

secondsky/claude-skills

Dedicated security-audit route for OWASP-style risks, secret leaks, auth flaws, injection, unsafe input handling, SSRF/XSS, and sensitive-data exposure.

foryourhealth111-pixel/Vibe-Skills

Perform a security-focused review of current git changes. An agent skill from SpecterOps/skills.

SpecterOps/skills

Review or write Python, JavaScript, TypeScript, or Go code using secure defaults.

nightly-labs/openbot

Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them.

sundial-org/awesome-openclaw-skills

Conduct comprehensive security code reviews using OWASP Top 10, SAST/DAST patterns, and Hack23 ISMS secure development policy

Hack23/cia

A skill your agent uses when asked 数据出境要申报吗, 数据出境安全评估还是标准合同, 个人信息出境标准合同怎么备案, 我们把数据传到海外总部合规吗, or decide how to transfer data out of mainland China lawfully.

mohitagw15856/pm-claude-skills

Review a design, PR, or feature for security issues before it ships.

mohitagw15856/pm-claude-skills

Simulate enterprise procurement and security review of your product before your first big deal meets it for real — the questionnaire, the gaps, the deal-slowing findings.

mohitagw15856/pm-claude-skills

Reverse engineer and security-review macOS applications and Mach-O binaries — thinning universal binaries, recovering Objective-C/Swift structure, reading code-signing entitlements and the hardened…

trilwu/secskills

Security review gate for MCP server installations. An agent skill from bobmatnyc/claude-mpm.

bobmatnyc/claude-mpm

Security review checklist with optional engagement scoping. An agent skill from hashgraph-online/awesome-codex-plugins.

hashgraph-online/awesome-codex-plugins

AWS Advisor workflow skill. An agent skill from diegosouzapw/awesome-omni-skills.

diegosouzapw/awesome-omni-skills

Security Ownership Map workflow skill. An agent skill from diegosouzapw/awesome-omni-skills.

diegosouzapw/awesome-omni-skills

Audit codebase for security vulnerabilities, insecure patterns, and compliance gaps.

EmeaAppGbb/spec2cloud

Package entire code repositories into single AI-friendly files using Repomix.

Microck/ordinary-claude-skills

Example security audit skill demonstrating how to audit code for security vulnerabilities.

Microck/ordinary-claude-skills

Vulnerability review, threat modeling, OWASP patterns, and secure coding assessment.

rsmdt/the-startup

AI-powered security analysis of code changes — traces data flow, detects injection, auth bypass, secrets exposure, and unsafe deserialization across files.

danielvm-git/bigpowers

Best practices for building an unauthenticated public Q&A chatbot widget.

swyxio/skills

Reviews package dependencies for security vulnerabilities, outdated versions, and license compliance.

aiskillstore/marketplace

Security auditing and vulnerability assessment specialist. An agent skill from aiskillstore/marketplace.

aiskillstore/marketplace

A skill your agent uses when optimizing performance or reviewing security.

MadAppGang/claude-code

Performs security review of arbitrary Go packages, including libraries, frameworks, CLIs, HTTP and gRPC services, and backend applications.

SpecterOps/skills

Route a cloud-native security audit across effective IAM, infrastructure as code, build and release paths, containers, Kubernetes, serverless workloads, secrets, event sources, and control-plane…

cyberful/cyberful

Fail-closed security auditing for OpenClaw/ClawHub skills & repos: trufflehog secrets scanning, semgrep SAST, prompt-injection/persistence signals, and supply-chain hygiene checks before enabling or…

sundial-org/awesome-openclaw-skills

For a batch of findings from a non-security audit tool (<audit-tool — ruff / flake8 / mypy / pylint / CodeQL / Apache Verum / Apache Caer / equivalent; full list in the body) against <upstream…

apache/magpie

Read-only GitHub Actions workflow security audit for one repository, a repository set, or a whole GitHub org.

apache/magpie

Applies NIST/CWE security hardening to Python and Rust code.

athola/claude-night-market

A skill your agent uses when writing skills, CLAUDE.md files, agent prompts, or any directives that involve shell commands, environment variables, API credentials, file creation, or git operations -…

ed3dai/ed3d-plugins

Review application and infrastructure changes for exploitable security risks by tracing assets, trust boundaries, attacker-controlled input, authorization, sensitive data, and dangerous sinks.

hashgraph-online/awesome-codex-plugins

セキュリティ観点の通常レビューエージェント. An agent skill from hashgraph-online/awesome-codex-plugins.

hashgraph-online/awesome-codex-plugins

Repository または subsystem を対象に、source-only で明示的なセキュリティ監査を行う entry skill。

hashgraph-online/awesome-codex-plugins

完成した差分・PR・検証証拠に残る Unknown（未確認の前提・調査されていない影響・ 不足している証拠）を横断合成する evidence-sufficiency のメタ観点。個別 defect の 検出は既存 skill へ委譲し、本 skill は「そのリスク種別を調査した証拠が残っているか」 の meta 評価のみを行う。通常は finding verification 後の…

hashgraph-online/awesome-codex-plugins

Security review checklist for construction software systems.

datadrivenconstruction/DDC_Skills_for_AI_Agents_in_Construction

Run security scans and vulnerability checks. An agent skill from enuno/unifi-mcp-server.

enuno/unifi-mcp-server

Rust security skill for supply chain safety and memory-safe development.

mohitmishra786/low-level-dev-skills

Deep architectural context building for security audits. An agent skill from sendaifun/skills.

sendaifun/skills

Perform a broad, authorized security audit across application, infrastructure, identity, dependencies, and operations.

seb1n/awesome-ai-agent-skills

OWASP LLM Top 10 (2025) audit checklist for AI applications, agent tools, RAG pipelines, and prompt construction.

HoangNguyen0403/agent-skills-standard