Browse 182,820 skills across 14 categories.
Classifies inbound Telegram messages for telclaude as ALLOW/WARN/BLOCK with brief rationale.
Run authorization, privacy and prompt-injection test review for PromiseTwin Forge changes. Use before deployment or when...
Explain MotherDuck security, governance, and access-control patterns. Use when a security_compliance_owner, technical_ow...
Generate security group generator operations. Auto-activating skill for AWS Skills. Triggers on: security group generato...
Security Group Generator - Auto-activating skill for AWS Skills.Triggers on: security group generator, security group ge...
Security specialist - finds vulnerabilities and ensures best practices
Use when legacy prompts or older framework flows reference `security-guardian` and you need the modern runtime to resolv...
Comprehensive security implementation standards. Use when security guardrails guidance is required.
Adversarial defense layer for the mortgage plugin — protects against prompt injection, system prompt extraction, PII lea...
Security reminder hook that warns about potential security issues when editing files, including command injection, XSS,...
Comprehensive security best practices, vulnerability scanning, and security guidance for development workflows with auto...
PreToolUse security-anti-pattern hook for Claude Code. Catches 12 common security risks (command injection, XSS, SQL inj...
Security guidance and best practices for code development. Use when writing authentication code, handling sensitive data...
セキュアな開発・運用のための実装指針、機密情報管理、通信の確保、入力値検証、依存ライブラリ管理のガイドラインを定義する。セキュリティ実装時、認証・認可実装時、API開発時、またはユーザーがセキュリティ、機密情報、暗号化、XSS対策、SQL...
OWASP API Security Top 10 hardening, rate limiting, JWT validation, and input sanitization. Use when securing API endpoi...
Implement security headers, input validation, and CSRF protection. Use when hardening security, reviewing for vulnerabil...
AIDefence security layer with prompt injection blocking, input validation, sandboxed execution, output sanitization, and...
Reduces attack surface across OS, container, cloud, network, and database layers using CIS Benchmarks and zero-trust pri...
Review code for application-level security hardening issues beyond framework checklists. Focuses on abuse prevention, AP...
Use for auth, authorization, tenant/object access, sensitive data, uploads, secrets, provider keys, billing, destructive...
Applies OWASP Top 10, secrets management, and least-privilege principles before any code ships. Security is a build step...
Security best practices for web applications. Covers OWASP Top 10, authentication, authorization, input validation, CSP,...
Harden code against vulnerabilities as you build it. Use when handling untrusted input, authentication or authorization,...
Use this skill for auth boundaries, input validation, secrets, RLS, injection risks, destructive-action review. Trigger...
Use when writing code that crosses a trust boundary (user input reaching a query or a template, a file upload, a new end...
Audit OWASP Top 10, dependencies, secrets, and CVE exposure.
This skill should be used when the user requests to audit, check, or improve application security by analyzing security...
HTTPセキュリティヘッダー設定の専門スキル。 CSP、HSTS、X-Frame-Options、CSRF対策などの設計・実装・検証を体系的に提供する。 Next.js/Express/Nginx等の環境に対応した具体的な実装パターンを含む...
Verify and configure HTTP security headers (CSP, HSTS, CORS, X-Frame-Options, etc). Checks current configuration and gen...
Check HTTP security headers response
Configures HTTP security headers to protect against XSS, clickjacking, and MIME sniffing attacks. Use when hardening web...
Generate security headers generator operations. Auto-activating skill for Security Fundamentals. Triggers on: security h...
Turn a Security Hub or GuardDuty findings backlog into an owner-assigned next-actions list, offline from exports. A bund...
Orchestration entry point for the cybersecurity hunting ecosystem. Understands a security objective, verifies authorizat...
Security hygiene for GSD's self-modifying skill and agent system. Use this skill whenever: creating, editing, or deletin...
Use when IAM, OIDC, KMS, secrets, public access or privileged CI permissions change. Use infrastructure-quality for rout...
Companion overlay used only with `security` when explicitly security-focused review, threat model, or implementation cen...
Comprehensive security patterns for authentication, authorization, input validation, and common vulnerability prevention
Creates response procedures for security incidents with containment steps, communication templates, and evidence collect...
Define detection, containment, eradication, and recovery playbooks.
Handle vulnerability reports with coordinated disclosure, timely patches, and clear communication.
Run or document a security incident response — contain, eradicate, recover, and learn. Use when responding to a breach/c...
Use this agent when working with prompt injection detection integration tests, including running tests, debugging failur...
Apply security awareness during code review and implementation. Catches common vulnerabilities without requiring full se...
Audit a project's security against a 5-level scale, starting from a threat model of what is valuable and who would attac...
Security controls and structured logging implementation. Use when security logging guidance is required.
Use this skill whenever auditing, reviewing, or testing Python web applications (FastAPI or Flask) for OWASP A09:2025 —...
Triage and fix Dependabot alerts and CodeQL findings in the ai repository. Use when the user asks to address security vu...
Manage security policies and access controls for Protect surveillance. Monitor access to recordings and system settings...
Manage security policies, firewall zones, access control rules (ACLs), and guest network access. Perform comprehensive s...
Three-tier implementation roadmap — MVP you can ship today, practical best practices usable now, overkill gold standard...
This skill should be used when the user mentions "OWASP", "CWE", "CVE", "security compliance", "security scoring", "secu...
Detects insecure defaults, overly permissive CORS, exposed debug endpoints, and missing security headers. Use when writi...
Real-time security monitoring for Clawdbot. Detects intrusions, unusual API calls, credential usage patterns, and alerts...
Automate security monitoring, threat detection, incident response, and compliance workflows
Next.js security audit patterns. Load when reviewing Next.js apps (next.config.js present). Covers NEXT_PUBLIC_* exposur...
セキュリティ観測。認可漏れ、インジェクション、機密漏えい、暗号誤用、依存脆弱性を検出。Use when: 認証/認可実装、外部入力処理、依存更新、コミット前チェック、セキュリティレビューして、脅威分析が必要な時。
Build ServiceNow Security Operations — sn_si_incident with NIST-aligned state transitions, sn_vul_vulnerable_item with C...
Security Operations Center (SOC) practices, incident response, SIEM management, and threat hunting following NIST 800-61
Operational security guidance for deployment, monitoring, and maintenance. Use this skill when you need to understand wh...
Security audit orchestrator - parallel dependency, SAST and auth/config agents consolidated into an OWASP-mapped severit...
Use this skill when you need to perform comprehensive security vulnerability assessments on a codebase. This skill launc...
Monitor social platforms for security threats, vulnerability discussions, and breach intelligence using Xpoz. Use when a...
Secure coding guidelines grounded in the OWASP Top 10 and industry best practices. Covers access control, authentication...
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code...
Analyze git repositories to build a security ownership topology mapping people to files, compute bus factor and sensitiv...
Top password lists for authorized security testing: common passwords, darkweb leaks, worst passwords. Curated essentials...
Proposes secure remediation strategies for detected security vulnerabilities including buffer overflows, injection risks...
基於 OWASP Top 10 2025 的可重用安全程式碼模式，供跨專案參考
Implements authentication, authorization, encryption, secrets management, and security hardening patterns. Use when desi...
Use this skill when working on credentials, secrets, environment variables, Docker security, or any security-related con...
Security vulnerability patterns and prevention. Use when writing code that handles user input, authentication, API endpo...
Sensitive data patterns for security testing: API keys, credit cards, emails, SSNs, phone numbers, IPs, and more. Use fo...
Implement comprehensive security patterns to protect applications against OWASP Top 10 vulnerabilities including XSS, CS...
Security patterns for input validation, PII protection, and cryptographic operations
Essential exploitation payloads: anti-virus test files, file name exploits, malicious files. Curated for testing.
Use when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or...
Security Pentester Agent. 침투 테스트, 취약점 스캔, 보안 테스트를 담당합니다. 침투테스트(pentest), 스캔(scan), 보안테스트 관련 요청 시 사용됩니다.
Performs security and performance reviews for Laravel 12 + Blade + MySQL applications, covering authentication, authoriz...
Adaptateur Claude/Cline vers la sécurité et permissions HIVMeet.
Use this skill when a company needs its information security policy set written or rebuilt, or asks "write our security...
Security Policy Generator - Auto-activating skill for Security Advanced.Triggers on: security policy generator, security...
Creates repeatable security review checklist for PRs with required checks, common pitfalls, and automated gating. Use fo...
政府機關資通系統防護基準 Skill，涵蓋數位發展部資通安全署公告之 7 大安全構面、27 類控制措施類別、80 項控制措施。 使用時機：(1) SSDLC 各階段需要進行資安檢核時 (2) @init 初始化專案時選用資安防護等級（gen...
Security and privacy engineering
Route threat modeling, prompt-injection defense, and privacy review for trust, authority, and personal-data boundaries.
Privilege system reference for the HMIS project. Use when adding new privileges, implementing access control, working wi...
Project processkit security policy Artifacts into runtime policy files for Agent-IDS and Tetragon-style enforcement. Use...
Authentication and authorization prompt templates for RBAC implementation, permissions systems, ownership verification,...
Simple security prompt templates for quick implementations using existing Secure Vibe Coding OS utilities. Use for strai...
Comprehensive security prompt templates for implementing secure features with multiple security layers. Use for complex...
Security analysis and threat modeling prompt templates for STRIDE analysis, code review, OWASP compliance, and vulnerabi...
🛡️ Comprehensive security management for festivals including crowd control, threat assessment, emergency response, and...
Güvenlik QA rubric. Defense-only Security OS skill. Use for ASSESS-ONLY gap/control work.
Draft answers to a vendor security questionnaire (SIG, CAIQ, or a custom sheet) from your real controls — fast, consiste...
Draft answers to a customer or vendor security questionnaire only from your own evidence pack and policy folder, citing...
Scan code or configuration for common security issues. Use when a mid-level developer needs a quick security pass.
Use this skill when designing or reviewing systems where security is a concern - authentication, authorization, data pro...
Implement authentication, authorization, and security controls. Use for JWT handling, API key management, RBAC, OAuth in...