security Skills

Comprehensive security reference for this project — not a checklist, a methodology. Covers how to threat-model new featu...

You are a security expert for the CodeCompress MCP server. This server indexes codebases and provides AI agents with com...

Expert in application security, vulnerability analysis, secure coding practices, and security auditing. Use for security...

This skill should be used when the user asks to "create an API endpoint", "add a view", "write a viewset", "create a ser...

Sécurité Flutter. Use when reviewing security, implementing auth, or hardening code.

Explicit-invocation scoped security review that establishes assets, trust boundaries, attacker prerequisites, and eviden...

Essential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability t...

Run authorization, privacy and prompt-injection test review for PromiseTwin Forge changes. Use before deployment or when...

Explain MotherDuck security, governance, and access-control patterns. Use when a security_compliance_owner, technical_ow...

Adversarial defense layer for the mortgage plugin — protects against prompt injection, system prompt extraction, PII lea...

Comprehensive security best practices, vulnerability scanning, and security guidance for development workflows with auto...

PreToolUse security-anti-pattern hook for Claude Code. Catches 12 common security risks (command injection, XSS, SQL inj...

Security guidance and best practices for code development. Use when writing authentication code, handling sensitive data...

Implement security headers, input validation, and CSRF protection. Use when hardening security, reviewing for vulnerabil...

AIDefence security layer with prompt injection blocking, input validation, sandboxed execution, output sanitization, and...

Reduces attack surface across OS, container, cloud, network, and database layers using CIS Benchmarks and zero-trust pri...

Review code for application-level security hardening issues beyond framework checklists. Focuses on abuse prevention, AP...

Use for auth, authorization, tenant/object access, sensitive data, uploads, secrets, provider keys, billing, destructive...

Applies OWASP Top 10, secrets management, and least-privilege principles before any code ships. Security is a build step...

Harden code against vulnerabilities as you build it. Use when handling untrusted input, authentication or authorization,...

Use when writing code that crosses a trust boundary (user input reaching a query or a template, a file upload, a new end...

HTTPセキュリティヘッダー設定の専門スキル。 CSP、HSTS、X-Frame-Options、CSRF対策などの設計・実装・検証を体系的に提供する。 Next.js/Express/Nginx等の環境に対応した具体的な実装パターンを含む...

Verify and configure HTTP security headers (CSP, HSTS, CORS, X-Frame-Options, etc). Checks current configuration and gen...

Generate security headers generator operations. Auto-activating skill for Security Fundamentals. Triggers on: security h...

Security hygiene for GSD's self-modifying skill and agent system. Use this skill whenever: creating, editing, or deletin...

Audit a project's security against a 5-level scale, starting from a threat model of what is valuable and who would attac...

Use this skill whenever auditing, reviewing, or testing Python web applications (FastAPI or Flask) for OWASP A09:2025 —...

Three-tier implementation roadmap — MVP you can ship today, practical best practices usable now, overkill gold standard...

This skill should be used when the user mentions "OWASP", "CWE", "CVE", "security compliance", "security scoring", "secu...

Detects insecure defaults, overly permissive CORS, exposed debug endpoints, and missing security headers. Use when writi...

Real-time security monitoring for Clawdbot. Detects intrusions, unusual API calls, credential usage patterns, and alerts...

Automate security monitoring, threat detection, incident response, and compliance workflows

Build ServiceNow Security Operations — sn_si_incident with NIST-aligned state transitions, sn_vul_vulnerable_item with C...

Security audit orchestrator - parallel dependency, SAST and auth/config agents consolidated into an OWASP-mapped severit...

Monitor social platforms for security threats, vulnerability discussions, and breach intelligence using Xpoz. Use when a...

Secure coding guidelines grounded in the OWASP Top 10 and industry best practices. Covers access control, authentication...

Analyze git repositories to build a security ownership topology mapping people to files, compute bus factor and sensitiv...

Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code...

Top password lists for authorized security testing: common passwords, darkweb leaks, worst passwords. Curated essentials...

Proposes secure remediation strategies for detected security vulnerabilities including buffer overflows, injection risks...

基於 OWASP Top 10 2025 的可重用安全程式碼模式，供跨專案參考

Implements authentication, authorization, encryption, secrets management, and security hardening patterns. Use when desi...

Use this skill when working on credentials, secrets, environment variables, Docker security, or any security-related con...

Security vulnerability patterns and prevention. Use when writing code that handles user input, authentication, API endpo...

Sensitive data patterns for security testing: API keys, credit cards, emails, SSNs, phone numbers, IPs, and more. Use fo...

Implement comprehensive security patterns to protect applications against OWASP Top 10 vulnerabilities including XSS, CS...

Security patterns for input validation, PII protection, and cryptographic operations

Essential exploitation payloads: anti-virus test files, file name exploits, malicious files. Curated for testing.