4,624 skills sorted by stars.
Score a documentation package against the ten-dimension weighted rubric in `references/scorecard-rubric.md` with a cited...
Use when firmware binary analysis, attack surface mapping, or endpoint discovery is needed for a target
Technical writing for formal security audit reports. Use when the user wants to write up a security finding, create a fo...
Audit third-party scripts on the storefront for performance and security impact
AIエージェント向けガードレール定義(guardrails.md)を生成。権限境界・承認ゲート・監査証跡・エラー処理ポリシーを含む。
STRIDE脅威モデリングに基づくthreat-model.mdを生成。保護対象資産・信頼境界・脅威・緩和策を定義し、セキュリティ要件を導出する。
Analyze and interrogate requirements for a TriStar feature. Asks structured questions across engineering and loyalty-dom...
Signpost (not a knowledge pack) for the systems-engineering standards landscape — ISO/IEC/IEEE 15288, 24748, 29148, 4201...
Print Peephole's security audit report for this project — current mode, binary integrity, the CWE-mapped decision tally,...
Perform a defensive, security-focused code audit covering injection, authorization, secrets, unsafe deserialization, and...
SEC 2025 compliance validation for investment recommendations. Use when generating, reviewing, or auditing stock recomme...
Explain and list Peephole sec-debt markers — deliberate, human-authorized security trade-offs recorded in code. Use when...
Draft, rewrite, or audit investor-facing financial and legal disclosure using an independently expressed interpretation...
Überführt vorhandene Funde (Scanner-Berichte, SARIF, GitHub Code Scanning, Dependabot, Tickets) in das findings.json-For...
Security automation - scripts, CI/CD security, cloud auditing
The secret-source gate. Routed to when changed code reads, writes, or passes a secret — API key, token, password, connec...
Secret tarama, redaksiyon, vault pattern. Defense-only Security OS skill. Use for ASSESS-ONLY gap/control work.
シークレット管理アーキテクチャの設計・実装スキル。 Vault/KMS/Secrets Manager統合、キーローテーション、アクセス制御マトリクスを体系的に設計する。 シークレット分類からライフサイクル管理まで、エンタープライズグレード...
Validate secret storage practices and rotation policies. Check for secrets in code, Vault usage, and rotation schedules.
Scan secret scanner operations. Auto-activating skill for Security Fundamentals. Triggers on: secret scanner, secret sca...
扫描代码、配置和日志文本中的私钥、签名令牌、云访问键、源码平台令牌、内联连接凭据和敏感字段赋值，适用于提交前与日志交付前的凭据泄露检查。
Focused micro-skill for secret management setup. Explains options, guides through Bitwarden installation/login/unlock, c...
Share secrets securely using zKettle — a zero-knowledge, self-destructing secret sharing tool. Create, read, revoke, gen...
Manage secrets via Bitwarden - retrieve credentials, set up environment variables
Secret management patterns for the Kubernetes homelab platform. Covers secret-generator, ExternalSecret, app-secrets mod...
用于检测代码库中的敏感信息泄露风险。当用户需要检查敏感信息、安全扫描、代码安全审计、检测密钥泄露时触发此skill。 触发场景： - "检查敏感信息"、"安全检查"、"检测密钥泄露" - "扫描代码中的敏感数据"、"查找密码泄露" - 提...
* **Depends on**: security * **Compatible with**: None * **Conflicts with**: None * **Related Skills**: authn, authz # S...
Secure token storage, VS Code SecretStorage API, credential management, environment variable migration
Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions....
Secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when h...
Never commit secrets (API keys, passwords, tokens) to version control Use when implementing security best practices. Sec...
Performs a structured secrets management review against OWASP Secrets Management Cheat Sheet and NIST SP 800-57 Part 1 R...
GitHub Actionsワークフローでの安全な秘密情報管理を実現する。リポジトリ/環境/組織/Dependabotの4種類のシークレット使い分け、OIDCによるクラウド認証、ローテーション、監査を包括的に提供する。Anchors:• W...
AWS Secrets Manager for secure secret storage and rotation. Use when storing credentials, configuring automatic rotation...
Scan text or a file for accidentally committed secrets (API keys, tokens)
Two-way secret synchronization between master vault and projects. Detects new secrets, namespaces by project, and handle...
Handle SOPS + Age secrets for ONE_SHOT projects. Manages encrypted secrets, decryption, and secret rotation. Use when us...
In-session, token-efficient LLM security scan of a repo (SAST triage). A lightweight, native Claude Code pipeline — surv...
Financial services cybersecurity for mid-2026 — EU DORA TLPT, PSD2 RTS-SCA, SWIFT CSCF v2026, NYDFS 23 NYCRR 500, FFIEC...
Security news aggregation from tldrsec, no.security, and other sources. USE WHEN security news, security updates, what's...
Shortcut for security review on current change set. Runs layered checks (secret-scan, dep-audit, semgrep, OWASP patterns...
Run a pre-ship security checklist for an LLM agent covering identity, least privilege, approvals, sandboxing, audit logg...
Secure authentication implementation patterns. Use when implementing user login, registration, password reset, session m...
Implement authentication securely — authentication vs authorization, password hashing (argon2id/bcrypt), sessions vs JWT...
Baseline security review for web apps and APIs using OWASP Top 10 and ASVS. Use when reviewing code, adding auth/handlin...
Review a repository, architecture, or local folder with a focus on secure-by-design principles. Use when Codex needs to...
Security and privacy review for a scoped mivia change. Check authz, secrets, SSRF, injection, path safety, prompt-inject...