Best security review skills, page 3

A skill your agent uses when the user needs to inspect, audit, or diagnose the safety of a Stata do-file.

SepineTam/mcp-for-stata

Secure GitHub Actions workflows against supply-chain, privilege, and shell-injection risks.

vechain/x-app-template

Skill to perform a thorough security audit of the codebase. An agent skill from fdhhhdjd/Class-AI-Agent.

fdhhhdjd/Class-AI-Agent

Review VotingPlugin pull requests, branch diffs, commits, and explicitly included local changes before publishing.

BenCodez/VotingPlugin

Socratic coding tutor powered by GitHub Copilot. An agent skill from timothywarner/chatgptclass.

timothywarner/chatgptclass

Infrastructure security audit for VPN server. An agent skill from Sergei-thinker/vpn-setup.

Sergei-thinker/vpn-setup

Helps users discover agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities.

burkeholland/max

使用 jar-analyzer-engine 从 JAR/WAR/Class 文件构建 SQLite 分析数据库。这是进行 Java 代码安全审计、方法调用分析的第一步。

jar-analyzer/jar-analyzer-claude

Statically audits GitHub Actions workflows that run AI coding agents, tracing attacker-controlled input to agent prompts and flagging unsafe sandbox, trigger and allowlist settings.

trailofbits/skills

Builds and formats security audit reports in Google Docs through the Docs API, with fixes for index drift, code styling and cross-reference links.

forefy/.context

Provides comprehensive code review guidance for React 19, Vue 3, Rust, TypeScript, Java, Python, and C/C++.

andrew-yangy/gru-ai

A skill your agent uses when performing a cybersecurity audit, security review, OWASP Top 10 compliance check, vulnerability assessment, or preparing for a penetration test on a…

LIDR-academy/AI4Devs-LTI-extended

Security audit checklist based on OWASP Top 10 and best practices.

unxed/f4

Audits an Azure API Management setup against the OWASP API Security Top 10 and Azure Security Benchmark, covering policies, network layout and identity.

thomast1906/github-copilot-agent-skills

Tests a security patch against the original bug, its variants and normal behavior, with reproducible baseline-versus-patched evidence before you merge or call it fixed.

trailofbits/skills

Scan code changes for security vulnerabilities using Bug Hunter-native artifacts and STRIDE context.

codexstar69/bug-hunter

Security hardening toolkit for OpenClaw. An agent skill from adversa-ai/secureclaw.

adversa-ai/secureclaw

A skill your agent uses when auditing Simple IoT for security issues, reviewing a change that touches authentication, authorization, enrollment, sync, or a network-facing parser, or checking whether…

simpleiot/simpleiot

Security review for Scalus/Cardano smart contracts. An agent skill from scalus3/scalus.

scalus3/scalus

Decomposes goals into team blueprints using evidence-based scaling laws, topology selection, and role design.

jdforsythe/forge

Host security hardening and risk-tolerance guidance for Understudy deployments.

understudy-ai/understudy

Ultimate AI-powered cybersecurity code review skill. An agent skill from AgriciDaniel/claude-cybersecurity.

AgriciDaniel/claude-cybersecurity

结构化代码审查工作流，适用于显式 quick/full/security review；不负责普通实现或 bug 修复流程。

doccker/cc-use-exp

Perform codebase analysis and architecture mapping as the first phase of a security assessment.

utkusen/sast-skills

Security code review for Tauri/Rust/TypeScript desktop apps and Hono/oRPC APIs.

deadlock-mod-manager/deadlock-mod-manager

Routes a review request to the right mode and reference file in the claude-code-harness project: code, plan or scope review, a quick closeout, a dual Claude-and-Codex opinion, or a security-only pass.

Chachamaru127/claude-code-harness

A skill your agent uses when the user wants to build, create, or develop anything — websites, apps, APIs, services, platforms.

nagisanzenin/production-grade

Review Hermes settings for security risks. An agent skill from OnlyTerp/hermes-optimization-guide.

OnlyTerp/hermes-optimization-guide

Runs trace-mcp security, quality-gate and antipattern checks before a commit or pull request, and builds a symbol-level diff for the PR description.

nikolai-vysotskyi/trace-mcp

对 jar-analyzer-engine 构建的 SQLite 数据库执行安全审计分析查询。支持方法调用搜索、调用链追踪、Spring 组件分析、字符串搜索、漏洞模式检测等。

jar-analyzer/jar-analyzer-claude

Use before shipping to production. An agent skill from garagon/nanostack.

garagon/nanostack

Audit source code for exploitable vulnerabilities using threat-model-driven review, taint tracing, invariant checking, and variant analysis.

trilwu/secskills

Audits the Safe multisig wallets of DeFi protocols for governance misconfigurations, scoring each against a finding library and producing a severity-ranked report.

forefy/.context

Perform post-implementation security review on recent code changes and produce prioritized hardening recommendations with file evidence and fix guidance.

Bald0Wang/DeepSeek-Oracle

Reviews APIs, configuration schemas and library interfaces for footguns, the designs where the easy path leads to insecure use, using a four-phase analysis.

trailofbits/skills

Plan, execute, document, and retest authorized security assessments of AI agents and multi-agent workflows using safe adversarial cases, synthetic identities, canaries, and evidence-based findings.

seb1n/awesome-ai-agent-skills

Finds sensitive data that C, C++ or Rust code never wipes from memory, including wipes the compiler optimizes away, using source, assembly and control-flow analysis.

trailofbits/skills

A skill your agent uses when 用户需要对代码进行安全审计、发现安全漏洞、上线前安全评估、检查代码是否存在安全风险时。触发场景：代码安全审计、安全审计、白盒审计、安全扫描、漏洞检测、漏洞挖掘、SQL注入、命令注入、XSS、SSRF、反序列化、认证绕过、越权、代码安全检查、security audit、code…

ProgrammerAnthony/Expert-Coding-Harness

Scans a repository's source for security vulnerabilities with the supercov CLI, pointing to the line of each finding and mapping it to CWE classes.

supercorp-ai/supercov

Perform a requested security review of a NemoClaw PR or a PR linked to an issue.

NVIDIA/NemoClaw

Parallel read-only multi-agent review of a current git diff or explicit file scope to find behavioral regressions, security or privacy risks, performance or reliability issues, and contract or test…

Dimillian/Skills

Vulnerability and security scan (defensive, your own repo): dependency CVEs plus risky code patterns (secrets, injection, weak authz), severity x reachability triaged and remediated without…

maddhruv/absolute

Security audit workflow for OPC code, providers, plugins, Electron surfaces, local HTTP bridges, filesystem access, and command execution.

LING71671/Open-ClaudeCode

Fix a CRITICAL Trivy finding that is failing CI in this repo (a vulnerability, misconfiguration, or secret from security-scan.yml or image-scan.yml), or add, review, or retire an entry in…

malloydata/publisher

A skill your agent uses when preparing for a security audit, performing reconnaissance on a new codebase, or creating a protocol overview.

ccashwell/evm-cortex

Runs a security health check on an OpenClaw environment and audits skills before or after installation for supply-chain and data-leak risks.

Tencent/AI-Infra-Guard

Full SEO/GEO/AEO/Citability/Content/Performance/Vertical/Security audit with auto-fix.

Houseofmvps/claude-rank

A skill your agent uses when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide or scoped-path Codex Security scan.

vlinx-io/VelaTerm