Browse 182,820 skills across 14 categories.
Use when triaging security advisories or vulnerability reports in Chinese OSS projects, including impact assessment, aff...
This skill enables Claude to conduct a security-focused code review using the security-agent plugin. It analyzes code fo...
Deep security analysis with high reasoning effort for threat detection
AI API key leakage review patterns. Use when code integrates AI providers (OpenAI, OpenRouter, Anthropic, Google/Gemini/...
Automatically triages security alerts from AWS GuardDuty, CloudTrail, and other cloud security services. Classifies each...
Perform static security review of modified code, identifying vulnerabilities and recommending mitigations
Security audit patterns including OWASP Top 10, secret scanning, and language-specific vulnerabilities.
Comprehensive security vulnerability analysis for codebases and infrastructure. Scans dependencies (npm, pip, gem, go, c...
Use when user mentions "security review", "compliance", "SOC 2", "GDPR", "PII", "threat model", when the system handles...
Use when reviewing or changing code that handles untrusted input, authentication, authorization, sensitive data, externa...
Use when the user explicitly requests a security audit, threat model, or hardening analysis, or when an active owner ide...
Review security or harden sensitive trust boundaries with abuse-case tests.
Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integratio...
Threat-models and hardens an application, API, data flow, dependency, or deployment against authentication and authoriza...
The security KNOWLEDGE and discipline skill — the rails a security pass gets WRONG by default — credential reach, provin...
Implements security and anti-exploit systems including sanity checks, exploit prevention, secure networking, and data pr...
Designs the security of an already-exposed servlet REST use case with Spring Security — who may call each endpoint (publ...
Designs the security of an already-exposed servlet REST or GraphQL use case with Spring Security — who may call each end...
Security architecture and threat modeling. OWASP Top 10 analysis, security pattern implementation, vulnerability assessm...
Optional, opt-in STRIDE threat pass for a sensitive feature — invoked deliberately via /threat-model, never forced on or...
Design security architectures with threat modeling and zero trust
Understand the defense-in-depth security architecture of Secure Vibe Coding OS. Use this skill when you need to understa...
Execute threat modeling, vulnerability scanning, and security control validation. Use when relevant to the task.
Vulnerability review, OWASP patterns, secure coding practices, and threat modeling approaches. Use when reviewing code s...
Comprehensive security auditing for Clawdbot deployments. Scans for exposed credentials, open ports, weak configs, and v...
Perform security audits on codebases for projects. Use when checking for vulnerabilities, security review, or when user...
Identify and fix security vulnerabilities in code and infrastructure
Automated security posture check of the AI Harness system. Checks credentials, tokens, file permissions, git hygiene, he...
Run a comprehensive security audit combining automated SAST scanning, STRIDE threat modeling, and attack tree analysis....
Review security of command execution, tool permissions, and API key handling. Use when user mentions "security review",...
Audits Move contracts for security vulnerabilities before deployment using 7-category checklist. Triggers on: 'audit con...
Security assessment workflow. Use when reviewing code for vulnerabilities, performing OWASP checks, auditing authenticat...
Runs a focused security hardening audit across API, auth, and dependency surfaces with actionable fixes
Security review checklist for code and infrastructure
Audit development-environment secrets, supply chains, macOS security controls, and Claude/Codex agent permissions. Use f...
Multi-agent source security audit with a coverage ledger, independently verified findings, and machine-checked records....
Use when the user asks for a security review, security audit, vulnerability scan, secret scan, dependency or CVE check,...
Deep security audit covering OWASP Top 10, authentication, authorization, data protection, dependency vulnerabilities, a...
Java security checklist covering OWASP Top 10, input validation, injection prevention, and secure coding. Works with Spr...
Security audit of the user's own codebase, two modes. FIND mode: adversary persona hunts every real security hole in sco...
Comprehensive security audit covering OWASP Top 10, secrets detection, supply chain security, threat modeling, and langu...
Security auditing and vulnerability assessment. TODO: Implement for devops. Invoked by: "security audit", "security scan...
Security Audit Engineer — Institutional capability and runbook for security-audit.
Security audit — vulnerability scan, pentest review, attack-surface sweep; explicit request only, not regular feature wo...
Use when reviewing code security, auditing dependencies for CVEs, checking configuration or secret security, assessing a...
Focused security review of a change. Finds HIGH-CONFIDENCE, concretely exploitable vulnerabilities in the staged diff (i...
Deep security audit of the codebase (Janet Moore's workflow)
Pre-deployment security audit for web projects, especially vibe-coded ones. Use this skill whenever the user asks to rev...
Identify vulnerabilities, exposed secrets, authorization flaws, unsafe dependencies, and cryptographic weaknesses.
Run a full security audit: OWASP Top 10, secrets detection, input validation, auth, dependency vulnerabilities.
Use this skill to perform a security audit, scan for vulnerabilities, check OWASP Top 10 issues, or review code for secu...
Inspect code and configuration for common security risks before deployment, after sensitive feature changes, before clie...
코드베이스의 보안 취약점을 점검합니다. 시크릿 유출, 인증 처리, API 보안, 로그 노출 등을 검사합니다.
Use when you want a thorough security review of the codebase, a specific file/directory, or a set of changes before ship...
代码安全审计 - 漏洞扫描、依赖检查、安全最佳实践
Comprehensive regulatory and architectural security review of the current repo matching Elite Security Architect standar...
Auditoria de segurança aplicada (AppSec). Varre código, dependências e configurações contra OWASP Top 10 / CWE Top 25, i...
Run OpenAlgo Desktop's periodic security review and write it up as a dated markdown report under docs/audit/<date>/. Use...
セキュリティスキャン+レポート生成を一括実行するオーケストレータ。Task()でsecurity-scan→attack-reportを委譲。「セキュリティ監査」「security audit」「脆弱性診断して」で起動。
Conduct authorized defensive security audits of codebases and web applications. Use for broad appsec review across OWASP...
Comprehensive security scanning and vulnerability detection. Includes input validation, path traversal prevention, CVE d...
Agent Skill: Security audit patterns for PHP/OWASP. Use when conducting security assessments, identifying vulnerabilitie...
Conduct a security-led audit of code, systems, APIs, infrastructure, dependencies, and AI workflows with threat modeling...
Detect security risks and possible secrets without exposing values. Use when the user requests security audit or invokes...
Run a security audit of a module or PR. Use when asked to check security or before merging sensitive changes.
Audit code for multi-tenant security vulnerabilities and data isolation issues
Independent security, privacy, and data-protection sweep of the repo and the live site: dependency and secret scans, API...
Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerabil...
Perform a broad, authorized security audit across application, infrastructure, identity, dependencies, and operations. U...
Comprehensive security audit workflow including dependency scanning, unsafe code detection, and secret management. Use w...
Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for sec...
全面的代码安全检查和服务器安全审计skill。适用于：(1) 代码漏洞扫描 - 检测SQL注入、XSS、SSRF等OWASP Top 10漏洞，(2) 依赖安全检查 - 识别过时或有漏洞的第三方库，结合实时搜索确认最新CVE，(3) 服务器...
Comprehensive security audit of codebase using multiple security-auditor agents. Use before production deployments or af...
Linux security audits — host security (fwupd HSI, TPM, Secure Boot, kernel taint, power management), system security (po...
Adversarial, authorized red-team / penetration-testing loop for a PHP backend you own — fans out one security-auditor su...
Audita segurança de um sistema ou superfície ampla com modelo de ameaças, rastreamento de fronteiras e evidências automa...
I'll perform a comprehensive security audit for: $ARGUMENTS
Use when asked to review code for security, find vulnerabilities, run an OWASP check, audit before a release, or answer...
Security, auth, permissions, CDD/consent auditor for ndestates-io. Use on /security-audit-agent , post-dep or form chang...
Performs comprehensive security audits of codebases, identifying vulnerabilities and security best practices
Procedure for analyzing code or dependencies for vulnerabilities
Generate security audit documentation following the SECURITY-AUDIT template. Use when performing security reviews, check...
Example security audit skill demonstrating how to audit code for security vulnerabilities. Use when the user asks to per...
专业安全审计专家，精通漏洞扫描、渗透测试、合规检查和安全代码审查。帮助企业识别和修复安全风险，确保系统和数据的安全性。
Build structured security audit logging with required events, schemas, retention, alerting, and SIEM/OTel export.
Audit code and dependencies for vulnerabilities — OWASP Top 10, npm audit/pip-audit, secret detection, XSS/CSRF, securit...
Security audit methodology and checklist for codebases. Use when performing security reviews, auditing a project for vul...
Use when auditing skills, commands, hooks, and MCP tools for security vulnerabilities. Triggers: 'security audit', 'scan...
Audit security with vulnerability scanning, input validation checks, and auth/authz review against OWASP Top 10. Use whe...
Assess system designs, data flows, and controls for security vulnerabilities and compliance. Use when performing threat...
Conducting interactive security audits using the Map & Probe methodology. Use when the user wants to perform a security...
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulne...
- Keywords: security, vulnerability, audit, OWASP, injection, XSS, CSRF
Security engineer focused on vulnerability detection, threat modeling, and secure coding practices. Use for security-foc...
Runs an evidence-backed security audit of a code repository (secrets, dependency advisories, commit history, then a Clau...
MASTER SECURITY: OWASP Top 10, SAST/DAST, PenTest, Auth/JWT Audit, Data Encryption, Incident Response. Use for Code Sec...
WordPress security auditing and hardening. Scan for vulnerabilities, manage security settings, monitor threats, and impl...