ai-runtime-security-sandbox
Demonstrate and test RAG chatbot security vulnerabilities (prompt injection, tool abuse, data leakage) with live attack scenarios and defensive controls
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-21 00:11
Security & auditing
7,265 results
doppler
Manage secrets with Doppler: CLI operations, project/config/environment management, secrets injection, CI/CD integrations, and security best practices.
V3 Security Overhaul
Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for…
security-reviewer
Multi-language security review for web apps, APIs, and CLIs. Use whenever code is added or modified — new endpoints, auth/RBAC changes, template or DOM…
crypt
Designing cryptographic architecture: algorithm selection, key management, E2EE, KMS integration, signature verification, TLS. Use when designing crypto…
spring-security-testing
Spring Security 7 changed method security defaults and CSRF handling — tests using hasRole() or csrf() may need updates. Read before testing authentication,…
cms-detection
Identify CMS, frameworks, and server technology stacks on live hosts.
google-dorks-catalog
High-precision Google dorks for exposed configs, secrets, and credentials -- real-world validated
code-audit
Run a comprehensive code audit on any codebase. Analyzes security vulnerabilities, hardcoded secrets, dependency CVEs, test coverage, code structure, and…
secure-vault
Secure encrypted secrets storage with local key file protection. Inspired by ZeroClaw's encrypted secrets with XOR + local key file.
security-scan
Use when you need comprehensive security scanning across applications, infrastructure, and dependencies with LLM-based analysis
testing-security
Test application security vulnerabilities
code-reviewer
Research-backed code review skill with OWASP Top 10 security checks, SAST tool integration (SonarQube, CodeQL, Snyk), performance pattern detection, and…
recon-nmap
Network reconnaissance and security auditing using Nmap for port scanning, service enumeration, and vulnerability detection. Use when: (1) Conducting…
security-scanner
Comprehensive security analysis to identify OWASP Top 10 vulnerabilities, detect hardcoded secrets, and review security configurations.
command-injection-testing
Professional skills and methodology for command injection vulnerability testing
security
Security best practices for web applications. Use when handling user input, authentication, or sensitive data. Covers XSS, SQL injection, CSRF, environment…
beforemerge-supabase-review
Comprehensive code review rules for Supabase applications including RLS security, auth patterns, query performance, migration workflows, and type safety. Use…
capacitor-ios-security-hardening
Audits and progressively hardens Xcode security build settings for a Capacitor iOS app (ios/App/App.xcodeproj, scheme App) and native plugin code…
oauth2
OAuth 2.0 authorization framework. Covers flows, tokens, and provider integration. Use for third-party authentication. USE WHEN: user mentions "OAuth",…
secure-code-review
Security-focused code review practices ensuring vulnerabilities are caught before deployment
security-review-process
Standardizes security review procedures for Ruby code mapped to OWASP Top 10: allowlist all input params before processing, forbid SQL interpolation (`#{}`),…
checking-session-security
Analyze session management implementations to identify security vulnerabilities in web applications. Use when you need to audit session handling, check for…
coderabbit-security-basics
Configure and audit security review capabilities as one layer in a defense-in-depth pull-request program. Use when this operator task needs a current,…