Best security review skills, page 5

Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets.

zebbern/claude-code-guide

Security review of an open-autonomy agent service — cryptographic key handling, dynamic code execution, ABCI authentication and replay, secret exposure, dependency supply chain, and deployment…

valory-xyz/open-autonomy

"보안 점검", "security check", "security audit", "취약점 분석", "vulnerability scan", "보안 감사", "시크릿 노출", "API 보안", "인증 점검", "rate limit" 등 보안 관련 코드 리뷰나 취약점 감사 시 사용하세요.

imgompanda/fireauto

Harden an application or service against common attack vectors.

agulli/atlas-agents

Classify Datapages findings by reach and severity and write review-.md reports.

romshark/datapages

Node.js development principles and decision-making. An agent skill from ever-works/ever-works.

ever-works/ever-works

Review code quality, security, and maintainability before committing.

Thank-you-Linus/Linus-Dashboard

Reviews a diff, module or network surface for exploitable defects, mapping trust boundaries and sinks, then reports only findings with a verified reachable path and a fix.

codewhale-hq/Codewhale

Audits code and infrastructure for vulnerabilities and produces a severity-rated report with locations and remediation, using SAST, dependency and secrets scans plus manual review.

Jeffallan/claude-skills

Chief Security Officer mode. An agent skill from no-session/pstack.

no-session/pstack

Review Convex security audit patterns for authentication and authorization.

IgorWarzocha/Opencode-Workflows

Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing.

davila7/claude-code-templates

Ghost Security - Software Composition Analysis (SCA) scanner.

ghostsecurity/skills

Dependabot and security analysis skill for HASTE. An agent skill from microsoft/haste.

microsoft/haste

使用AgentShield扫描您的Claude代码配置（.claude/目录），以发现安全漏洞、配置错误和注入风险。检查CLAUDE.md、settings.json、MCP服务器、钩子和代理定义。

affaan-m/ECC

在添加身份验证、处理用户输入、处理机密信息、创建API端点或实现支付/敏感功能时使用此技能。提供全面的安全检查清单和模式。

affaan-m/ECC

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities

davila7/claude-code-templates

A skill your agent uses when publishing, open-sourcing, exporting, sanitizing, or moving code, agent skills, prompts, templates, fixtures, datasets, workshop assets, or other artifacts from a…

serejaris/personal-corp-os

Runs a three-round self-challenge plus an arbiter over high-stakes findings, so false positives from reviews, audits and flaky-test verdicts do not become blockers.

avelikiy/great_cto

Reviews code for security, performance, quality and maintainability, then reports findings in a fixed template with a rating, severity levels and suggested fixes.

luongnv89/claude-howto

Use before merging security-relevant Rust changes. An agent skill from Jxck/sptth.

Jxck/sptth

生成安全审计 skill。两种模式：(1) 项目模式——根据项目文档生成定制化审计 skill；(2) 通用模式——仅指定语言+框架，从参考资料库生成通用审计 skill。当用户想创建安全审计 skill、生成审计规则、或提到"生成安全审计skill"、"创建code review skill"、"生成 Java 审计 skill"时使用。

xwtro0tk1t-cloud/harness

REST/GraphQL API design patterns, error handling conventions, and input validation reference for backend development.

modu-ai/moai-adk

Systematic false positive verification for security findings.

vibeeval/vibecosystem

Overlays SARIF results, weAudit annotations and binary-analysis exports onto a Trailmark code graph so each finding can be read next to blast radius and taint data.

trailofbits/skills

Turns a cryptographic protocol's source code, RFC, paper or ProVerif or Tamarin model into a Mermaid sequence diagram annotated with each cryptographic operation.

trailofbits/skills

Annotates a codebase with unit, dimension and decimal-scaling comments to expose mismatches and formula bugs in DeFi, financial and scientific arithmetic.

trailofbits/skills

Builds a code graph of functions, classes and calls across languages, then queries it for call paths, taint, blast radius, entry points and complexity hotspots.

trailofbits/skills

Compares before and after Trailmark graphs of a branch, pull request or release diff to flag new entry points, tainted paths, removed validation and other structural security regressions.

trailofbits/skills

Review a PR through the CodeReviewSecurityReview persona. An agent skill from eric-tramel/moraine.

eric-tramel/moraine

Run a focused STRIDE-based security review using Bug Hunter-native artifacts.

codexstar69/bug-hunter

AI-powered security vulnerability detection. An agent skill from selmakcby/claude-agents-skills.

selmakcby/claude-agents-skills

Proactive security audit: OWASP top 10, dependency vulnerabilities, secrets detection, input validation, auth patterns, and secure defaults.

Aedelon/claude-code-blueprint

Screens vulnerability reports, CVEs and automated findings against seven rules of thumb to accept, dismiss or ask for more information before any deep analysis.

trailofbits/skills

Analyze code changes for security vulnerabilities using LLM reasoning and threat model patterns.

Factory-AI/factory-plugins

Perform language and framework specific security best-practice reviews and suggest improvements.

trailofbits/skills-curated

AgentShield を使用して、Claude Code の設定（.claude/ ディレクトリ）のセキュリティ脆弱性、設定ミス、インジェクションリスクをスキャンします。CLAUDE.md、settings.json、MCP サーバー、フック、エージェント定義をチェックします。

affaan-m/ECC

認証の追加、ユーザー入力の処理、シークレットの操作、APIエンドポイントの作成、支払い/機密機能の実装時にこのスキルを使用します。包括的なセキュリティチェックリストとパターンを提供します。

affaan-m/ECC

인증 추가, 사용자 입력 처리, 시크릿 관리, API 엔드포인트 생성, 결제/민감한 기능 구현 시 이 스킬을 사용하세요.

affaan-m/ECC

A skill your agent uses when reviewing code for security vulnerabilities, hardening an application, or deriving security requirements from OWASP/ASVS guidance.

jellydn/my-ai-tools

End-to-end Solana development guide covering wallet connection, Anchor and Pinocchio programs, Codama clients, local testing, security checks and RPC lookups with curl.

internet-court/internet-court-skill

Audits MCP servers and their client configs for tool poisoning, prompt injection, over-privileged tools, injection bugs, secret leaks and missing approval gates.

awarexone/Agentic-Bug-Hunter

Scores a smart contract or blockchain codebase across 9 maturity categories with evidence, then delivers a scorecard and a priority-ordered improvement roadmap.

trailofbits/skills

Scans Cosmos SDK modules and CosmWasm contracts for consensus-critical flaws that can halt a chain, lose funds or diverge state, using parallel scanning agents.

trailofbits/skills

Reviews a pull request, commit or diff for security problems, using git history, caller counts and test coverage, and writes a markdown report.

trailofbits/skills

Parallel read-only multi-agent review of a current git diff or explicit file scope to find behavioral regressions, security or privacy risks, performance or reliability issues, and contract or test…

Dimillian/Skills

Security checklist for Solidity AMM contracts, liquidity pools, and swap flows.

affaan-m/ECC

Comprehensive SecOps skill for application security, vulnerability management, compliance, and secure development practices.

davila7/claude-code-templates