4,624 skills sorted by stars.
Use when designing or auditing ACM IMC measurements, covering representative vantage points, honest ground truth, longit...
Use when auditing an ACM IMC submission for HotCRP readiness, covering the paper-registration step, the acmart template...
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
This skill covers deploying AWS Security Hub as a centralized cloud security posture management platform that aggregates...
Deploy AWS Security Hub as a centralized CSPM platform, backed by AWS Config, aggregating findings from GuardDuty, Inspe...
This skill covers deploying and tuning Web Application Firewall rules on AWS WAF, Azure WAF, and Cloudflare to protect c...
Deploys and tunes Web Application Firewall rules on AWS WAF, Azure WAF, and Cloudflare, covering managed rule sets, cust...
Implements endpoint Data Loss Prevention (DLP) controls to detect and prevent sensitive data exfiltration through email,...
Before main skill execution, perform guardrail checks.
Improve existing test suites into minimal, high-signal behavior-focused harnesses with approval-before-mutation, conform...
This skill empowers Claude to guide you through the security incident response process, ensuring a structured and effect...
Look up 80 coded AI-agent security incidents from 2023 to 2026 (prompt injection, tool poisoning, exfiltration and more)...
Guided incident response workflow for security incidents
Use when a security incident has been detected or declared and needs classification, triage, escalation path determinati...
Incident response is a systematic approach to handling security breaches and incidents to minimize damage, reduce recove...
Handle security incidents with IR playbooks and procedures. Implement detection, containment, eradication, and recovery...
IR playbook — contain/eradicate/recover. Defense-only Security OS skill. Use for ASSESS-ONLY gap/control work.
Creates detailed incident response playbooks tailored to your cloud environment and team structure. Covers detection, co...
Review inference APIs for credential stuffing, rate limit bypass, quota exhaustion, account takeover, and systematic abu...
Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech co...
ISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies. Use when designing an I...
Act as an Information Security Engineer to conduct security assessments, threat modeling, vulnerability analysis, compli...
Audit cloud and infrastructure configurations for open security groups, missing encryption, excessive permissions, and m...
Generate, attack, revise, and reality-test non-obvious solutions to difficult problems through role-separated adversaria...
Validate all user inputs against expected formats, lengths, and character sets Use when implementing security best pract...
Validate and sanitize all API inputs. Zod schemas, error responses, security considerations.
Use when implementing input validation and output encoding to prevent injection attacks. Covers validation strategies, c...
Input-Validation standards for input validation in Security environments.
Input validation and sanitization patterns. Use when validating user input, preventing injection attacks, implementing a...
Validate input validation checker operations. Auto-activating skill for Security Fundamentals. Triggers on: input valida...
Validate and sanitize all user input using schema validation libraries. Activate whenever the user writes form handlers,...
Detect, analyze, and remediate OWASP A06:2025 Insecure Design vulnerabilities in Python web applications (FastAPI and Fl...
Detects LLM tool definitions without parameter validation, allowing prompt injection to escalate into file/shell/network...
Install, configure, repair, and certify the Emisar runner on a host end to end for customer onboarding. Use for first-ru...
Harden a ServiceNow instance — password complexity, session timeout, MFA enforcement, input sanitization for XSS/injecti...
Map, explain, and lint repository-scoped coding-agent instructions before changing code.
External API integrations with OAuth2, async HTTP, and proper error handling
Detects unsafe deserialization, unverified software updates, and tampered CI artifacts. Use when writing deserialization...
Use when the user asks about ISAC participation, TAXII feeds, MISP communities, FIRST, STIX-based sharing, or how to pub...
Reviews your work across multiple categories like UI, typography, layout, color, writing and accessibility and gives you...
Reviews a branch, pull request or uncommitted change for the interface problems it introduced or regressed, across acces...