Best security review skills, page 9

Run semgrep's p/security-audit and p/secrets rulesets and map hits into the findings shape.

alpha-omega-security/scrutineer

RLS validation, security audits, OWASP compliance, and vulnerability scanning.

bybren-llc/safe-agentic-workflow

Release preparation workflow - security audit → E2E tests → review → changelog → docs

parcadei/Continuous-Claude-v3

Multi-agent adversarial-verification orchestration for high-confidence conclusions.

telagod/code-abyss

Run full security scans on the codebase using Ruflo security tools.

ruvnet/ruflo

Initialize a multi-agent swarm with anti-drift configuration.

ruvnet/ruflo

The non-obvious invariants of the proactive nightly Claude audit workflow (.github/workflows/claude-nightly-audit.yml): the day-of-week mode selector, the two-key dedup scheme (clusterkey per…

amd/gaia

Complete a security review of the pending changes on the current branch

asgeirtj/system_prompts_leaks

Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.

aiskillstore/marketplace

Default code-quality route for broad code review, PR review, maintainability, correctness, and regression-risk checks.

foryourhealth111-pixel/Vibe-Skills

Wireless / 802.11 attack methodology for red team engagements and wireless security assessments.

SnailSploit/Claude-Red

A skill your agent uses for OpenIAP monorepo work that should follow the repository's shared agent workflows, including review-pr, audit-code, audit-security, audit-iapkit, compile-knowledge…

hyodotdev/openiap

Assists in designing and implementing secure n-tier serverless web applications and microservices on Google Cloud.

google/skills

Turn vulnerability notes, disclosure reports, PoCs, source code, or Codex Security findings into self-contained, sceptically validated, natural-sounding vulnerability reports.

vlinx-io/VelaTerm

Use before committing changes to auth, workspace scoping, channel webhooks, AI tools/MCP, permission settings, or anything handling untrusted channel content in ChatbotX.

ChatbotXIO/ChatbotX

Static security scan of a harness's declared MCP surface via harness mcp-scan <path.

ruvnet/ruflo

When the user needs a security assessment — threat modeling, vulnerability review, auth flow audit, dependency scanning, or says "is this secure", "review for vulnerabilities", "threat model"…

shawnpang/startup-founder-skills

When the user needs to prepare for SOC 2, build a compliance roadmap, assess security posture, quantify security risk, or says "we need SOC 2", "security audit", "compliance", "enterprise customer…

shawnpang/startup-founder-skills

Audit application source code against the OWASP Top 10 (2021) vulnerability categories — broken access control, cryptographic failures, injection, insecure design, security misconfiguration…

briiirussell/cybersecurity-skills

Defense-in-depth security across Rust, TypeScript, and Bash for the Pump SDK — cryptographic key handling, memory zeroization, secure file I/O, input validation, privilege management, dependency…

nirholas/pump-fun-sdk

Operates this repository as a solo maintainer across PR triage, issue handling, release work, deploys, ops checks, cost checks, security review, and docs drift.

serithemage/serverless-openclaw

Comprehensive infrastructure security audit framework for IaC, Docker, Kubernetes, and cloud configurations.

forefy/.context

Review the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline — authentication, sessions, rate limiting, input-schema…

github/awesome-copilot

A skill your agent uses when the user says 'OWASP audit', 'OWASP top 10', 'security audit', 'vulnerability assessment', 'full security check', or needs a comprehensive web application security…

cwinvestments/memstack

A skill your agent uses when the user says 'check RLS', 'audit RLS', 'RLS policies', 'row level security', 'Supabase security audit', or needs to verify table-level access control.

cwinvestments/memstack

Security: review git changes for vulnerabilities, threat-model a system's attack surface, audit supply-chain risks.

notque/vexjoy-agent

Reviews a local diff, branch diff, or PR with file:line findings in confirmed and plausible tiers, gates any test the diff adds or changes, and in apply mode lands the fixes and diff-scoped…

mblode/agent-skills

Comprehensive AWS security posture assessment using AWS CLI and security best practices

aiskillstore/marketplace

Security auditor for Laravel applications. An agent skill from aiskillstore/marketplace.

aiskillstore/marketplace

Dependabot-aware dependency updates with security audit, real-CI validation, and a unified PR.

joshukraine/dotfiles

A skill your agent uses for a standard, single-pass security audit of an entire repository or a scoped path, package, folder, or submodule with no diff to review.

vlinx-io/VelaTerm

OWASP Top 10 security checklist, authentication patterns, input validation, and HTTP security headers reference.

modu-ai/moai-adk

Periodic dependency review for Node.js/pnpm projects — outdated package triage, security audit, update batching strategy (patch/minor/major), validation checklist.

mizchi/skills

A skill your agent uses when conducting a frontend security review — static analysis (risky HTML patterns, env var exposure), authentication/authorization audit (token storage, route guards…

mizchi/skills

Scan the ClawHunter agent bounty marketplace for opportunities that genuinely match this agent's real capabilities (code, security research, writing) and surface only real matches — never a raw…

aeonfun/aeon

Structured, adversarial, multi-phase security audit of a codebase — recon → coverage-led hunting → finder≠validator validation → machine-readable findings → target-neutral report

alinaqi/maggy

Analyzes changed security boundaries against applicable OWASP risks and project contracts.

pavel-molyanov/molyanov-ai-dev

Analyze session management implementations to identify security vulnerabilities in web applications.

jeremylongshore/tons-of-skills-marketplace

Generate comprehensive security audit reports for applications and systems.

jeremylongshore/tons-of-skills-marketplace

Analyze code, infrastructure, and configurations by conducting comprehensive security audits.

jeremylongshore/tons-of-skills-marketplace

Audit automatically audits AI assistant code plugins for security vulnerabilities, best practices, AI assistant.md compliance, and quality standards when user mentions audit plugin, security review…

jeremylongshore/tons-of-skills-marketplace

Review Vite security audit patterns for SPA and dev server security.

IgorWarzocha/Opencode-Workflows

Harden code against vulnerabilities. An agent skill from BlackBeltTechnology/pi-agent-dashboard.

BlackBeltTechnology/pi-agent-dashboard

Run an ApexGuru performance scan on a Salesforce Apex project via the ApexGuru SFAP Scan API.

forcedotcom/sf-skills

A skill your agent uses to review a Lightning Web Component (.html, .js, .css files) for right-to-left (RTL) internationalization correctness, producing a finding list with code-level fixes covering…

forcedotcom/sf-skills

Pre-deployment security audit organized by OWASP Top 10. An agent skill from jamditis/claude-skills-journalism.

jamditis/claude-skills-journalism

ANALYSIS SKILL — Find the right Azure RBAC role for an identity with least-privilege access; generate CLI, Bicep, and Terraform code to assign it.

jonathan-vella/apex

Authorized security assessment of LLM applications and AI agents: prompt injection, tool abuse, RAG exposure, memory poisoning, system-prompt extraction, and agent-compliance engineering per OWASP…

sickn33/agentic-awesome-skills