Best security review skills, page 8

Harden OpenClaw self-hosted environments with baseline host controls, auth tightening, secret handling, network segmentation, and safe update/rollback workflows.

sickn33/agentic-awesome-skills

Reference document for monopoly security-checklist. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Cracks password hashes with Hashcat, covering hash-type identification, dictionary/brute-force/rule-based attack modes, custom rule creation, GPU benchmarking, and password-strength/compliance…

mukul975/Anthropic-Cybersecurity-Skills

Manages core GKE cluster provisioning, credentials, Autopilot vs Standard selection, and workload deployment.

google/skills

Scans your project for outdated npm, pip, Cargo, Go, or Ruby packages.

Varnan-Tech/opendirectory

Audit a product or tech spec pull request diff for high-level security concerns (threat surface, authentication and authorization model, trust boundaries, sensitive data handling, secrets and key…

warpdotdev/oz-for-oss

Code and product quality gates for shipping with confidence.

iamzifei/show-me-the-money

A skill your agent uses when reviewing code security, auditing dependencies for CVEs, checking configuration or secret security, assessing authentication and authorization patterns, identifying…

nicepkg/auto-company

Review Next.js security audit patterns for App Router and Server Actions.

IgorWarzocha/Opencode-Workflows

Usar este skill al agregar autenticación, manejar entradas de usuario, trabajar con secretos, crear endpoints de API o implementar funcionalidades de pago/sensibles.

affaan-m/ECC

Validate security findings for exploitability, reachability, and real-world impact using Bug Hunter-native findings artifacts.

codexstar69/bug-hunter

Run Azure compliance and security audits with azqr plus Key Vault expiration checks.

microsoft/GitHub-Copilot-for-Azure

A skill your agent uses when reviewing or writing code that handles user input, authentication, file I/O, network requests, or database queries.

aiming-lab/MetaClaw

Hardens LDAP directory services against credential harvesting, LDAP injection, anonymous binding, and channel-binding bypass by enforcing LDAPS, channel binding, and LDAP signing.

mukul975/Anthropic-Cybersecurity-Skills

Configures Microsoft Entra ID (Azure AD) Conditional Access policies for zero trust access control, covering signal-based policy design, device compliance requirements, risk-based authentication…

mukul975/Anthropic-Cybersecurity-Skills

Performs firmware image extraction and analysis using binwalk to identify embedded filesystems, compressed archives, bootloaders, kernel images, and cryptographic material.

mukul975/Anthropic-Cybersecurity-Skills

Performing comprehensive security assessments of Google Cloud Platform environments using Forseti Security, Security Command Center, and gcloud CLI to audit IAM policies, firewall rules, storage…

mukul975/Anthropic-Cybersecurity-Skills

Crafts and injects custom network packets using Scapy, hping3, and Nemesis during authorized security assessments to test firewall rules, IDS detection, protocol handling, and network stack…

mukul975/Anthropic-Cybersecurity-Skills

Performing security reviews of serverless functions across AWS Lambda, Azure Functions, and GCP Cloud Functions to identify overly permissive execution roles, insecure environment variables…

mukul975/Anthropic-Cybersecurity-Skills

Assess SSL/TLS server configurations using the sslyze Python scanning library to evaluate supported protocol versions, cipher suite strength, certificate chain validation, HSTS enforcement, OCSP…

mukul975/Anthropic-Cybersecurity-Skills

Conduct wireless network security assessments using Kismet to detect rogue access points, hidden SSIDs, weak encryption, and unauthorized clients through passive RF monitoring.

mukul975/Anthropic-Cybersecurity-Skills

A skill your agent uses when reviewing HTTP response headers for defense-in-depth security hardening on any web application.

thedaviddias/Front-End-Checklist

A skill your agent uses when auditing HTTP response headers on any web server or CDN for security hardening.

thedaviddias/Front-End-Checklist

Audit SillyTavern rolecard JSON, embedded HTML, regex replacements, Tavern Helper scripts, loaders, and related source for injection, dynamic execution, remote-code, wildcard messaging…

LiarMTTT/TavernWeave

CI-only Simplify & Harden workflow for pull requests using gh-aw (GitHub Agentic Workflows).

pskoett/pskoett-ai-skills

Automatically discover security skills when working with authentication, authorization, input validation, security headers, vulnerability assessment, or secrets management.

rand/cc-polymath

Audit architecture, dead code, duplication, type confusion, and code smells across a codebase.

pedronauck/skills

Security scanning and vulnerability detection. An agent skill from ruvnet/ruflo.

ruvnet/ruflo

A skill your agent uses for OpenIAP monorepo work that should follow the repository's slash-command workflows when the user asks in natural language instead of typing a slash command, including…

hyodotdev/openiap

PR review for DevOps changes — runs the generic /qv-pr-review flow then layers a structured GitHub Actions security audit (action pinning, permissions, OIDC, secrets handling).

tetherto/qvac

Audit raytsystem changes for prompt injection, provenance bypass, path/symlink/hardlink escape, secret leakage, stale fencing, partial promotion, unsafe parsing, and unapproved side effects.

romarayt/raytsystem-public-os

Audit JS/TS projects against NPM Security Guidelines covering project setup, dependency hygiene, CI/CD pipeline, Dependabot, and incident response.

c0x12c/ai-toolkit

Audit MCP (Model Context Protocol) server configurations for security issues.

github/awesome-copilot

Perform a focused security review of pending git changes to identify high-confidence security vulnerabilities with real exploitation potential.

waybarrios/opencode-power-pack

Check code for the most common, high-risk security vulnerabilities (broken access control, tenant isolation, injection, secrets, SSRF, auth/session, unsafe file handling, mass assignment) before it…

trycompai/comp

This skill covers conducting comprehensive security assessments of Operational Technology (OT) networks including SCADA systems, DCS architectures, and industrial control system communication paths.

mukul975/Anthropic-Cybersecurity-Skills

Test pyramid strategy, coverage targets, test patterns, and quality metrics reference.

modu-ai/moai-adk

Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.

aiskillstore/marketplace

Create standardized report headers with metadata for all agent-generated reports.

maslennikov-ig/claude-code-orchestrator-kit

Run an enterprise security review of a system design or existing code before it ships.

ooiyeefei/ccc

Continuous security posture assessment. An agent skill from bolivian-peru/os-moda.

bolivian-peru/os-moda

Enforce output quality, evidence verification, and quality gates across security audits.

github/awesome-copilot

Review web application code for bugs, security issues, performance problems, and stack-specific anti-patterns.

rampstackco/claude-skills

Review secret detection patterns and scanning workflows. An agent skill from IgorWarzocha/Opencode-Workflows.

IgorWarzocha/Opencode-Workflows

Security review checklist for Convex functions, auth logic, public queries, admin routes, webhooks, uploads, and AI-generated code.

waynesutton/markdown-site

Review code for bugs, security vulnerabilities, API misuse, consistency issues, simplicity problems, or test coverage gaps and low-value tests by running internal reviews and a peer review in…

tobihagemann/turbo

A skill your agent uses when Codex is already in the finding-discovery phase of a security scan or the user explicitly asks to discover candidate security findings in a repository or code change.

vlinx-io/VelaTerm

UI polish and interface-completion reference: the small visual details — concentric border radius, optical alignment, shadow-vs-border, motion easing, typography smoothing, tabular numbers, icon…

modu-ai/moai-adk