4,624 skills sorted by stars.
Use whenever the user wants to find, shortlist, vet, or enrich US cybersecurity firms — pen-testing/red team, security a...
Resolve the right account owner for a lead using contact, company, and deal ownership evidence.
Find security vulnerabilities in a codebase or repository with Strix — a white-box AI security review that reads your so...
Always-on discovery gate. Every turn, decide in one line whether an outside search (skills, MCPs, plugins, libraries, to...
Use when about to record, claim, rate the severity of, or report any security finding — before marking anything [CONFIRM...
Use when Codex is already in the finding-discovery phase of a security scan or the user explicitly asks to discover cand...
Merge the independent A/B/C findings tables into one adjudicated ledger in `07-verification/documentation-verification-r...
Use to triage a single security finding — from a scanner (SAST/DAST/SCA), an audit, a pentest report, a bug bounty submi...
Independently verify a suspected Ouros security finding. Use after another agent reports a vulnerability or suspicious b...
Writes security findings that survive triage: reproducible, severity-justified, and fixable, in a fixed structure with a...
Fine-tune open-weight LLMs using LoRA, QLoRA, Hugging Face TRL, and custom instruction datasets.
Review CloudWatch Logs retention and deletion-candidate findings.
Review EBS snapshot retention, archive, and orphan-candidate findings.
Review cloud costs, budgets, rightsizing, reserved or committed usage, anomalies, showback or chargeback, and team cost...
Describe what this skill helps an agent do.
Build with Firebase Authentication - email/password, OAuth providers, phone auth, and custom tokens. Use when: setting u...
Implements Firebase Authentication with email, OAuth, phone auth, and custom tokens. Use when building apps with Firebas...
Reviews Firebase projects against security best practices, architecture patterns, and production readiness checklists. U...
Firebase security rules patterns for Firestore and Storage. Use when writing or reviewing security rules.
Firebase security expert to audit Security Rules (Firestore/Realtime Database/Storage), authentication, API keys, data l...
A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensur...
Any live-web task via the Firecrawl CLI — including ordinary web research: searching the web, reading or extracting page...
Execute FireCrawl primary workflow: Core Workflow A. Use when implementing primary use case, building main features, or...
Configure Fireflies.ai enterprise SSO, role-based access control, and organization management. Use when implementing SSO...
Complete Firefox/Camoufox/Stealthfox undetectable automation suite with proxy/OPSEC and Tor Browser hardening. Integrate...
Comprehensive Amazon Data Firehose (formerly Kinesis Data Firehose) review aligned with the AWS Well-Architected Framewo...
Configure iptables, nftables, and cloud firewalls. Implement network segmentation and traffic filtering. Use when securi...
Ağ/uygulama engel politikası iskeleti. Defense-only Security OS skill. Use for ASSESS-ONLY gap/control work.
Expert firmware analyst specializing in embedded systems, IoT security, and hardware reverse engineering. Masters firmwa...
Use when normalized firmware has a rootfs or extracted files but no ranked binary/service inventory.
Use when a same-session follow-up or candidate evidence bundle needs final duplicate check, report gating, or adjudicati...
Use when probing, runtime observation, or debugging produces a crash or suspicious controlled effect.
Use when firmware identity needs official model/version context or advisory context before duplicate checking.
Compare vulnerable and fixed firmware images to isolate security-relevant validation and authorization changes. Use for...
Use when there is a candidate, component identity, version, or advisory overlap question.
Use when root-cause or controlled-effect evidence exists and exploitability needs structured assessment.
Use when a raw firmware artifact or extraction directory needs normalized identity and provenance before analysis.
Use when auditing embedded firmware source, object files, or extracted rootfs content for risky C/web-backend patterns s...
Get fix intelligence for a vulnerability and propose concrete remediation for the current repository
Use when Google Drive reports sync errors, a symlink or generated directory exists under ~/My Drive, or a Google Docs po...
Verify that bug fixes correctly address reported vulnerabilities without introducing new issues. Use when reviewing prot...
Verifies that git commits address security audit findings without introducing bugs. This skill should be used when the u...
Verify fix commits address security findings without introducing new bugs or regressions. Analyzes diffs for anti-patter...
Checklist de protección de rutas y APIs para aplicaciones Next.js con auth basada en cookies.
Fix security vulnerabilities from pip-audit, npm audit, Snyk, and other security scanners. Use when security audit check...
Routes an explicitly requested security fix to the original native fix-finding skill with owner authorization and scope...
Fix security vulnerabilities and Dependabot alerts in project dependencies. Use when the user asks to address security i...