cloud-security-engineer
Guides cloud security engineering on AWS, GCP, and Azure—org guardrails (SCPs, org policies), cloud IAM and federation, network segmentation and private…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-21 00:11
Security & auditing
7,267 results
cryptographer-specialist
This skill should be used when the user asks for a cryptographer, cryptography review, help to choose a cipher (AES-GCM, ChaCha20-Poly1305, ECDH, RSA…
defensive-security-analyst
Guides defensive security analysis—alert triage, log and SIEM investigation, threat hunting, detection engineering basics, MITRE ATT&CK mapping, incident…
enterprise-security-architect
Guides enterprise-wide security architecture—reference architectures and domains (identity, data, application, network, endpoint), zero-trust and segmentation,…
authentication
Specialized skill for working with NextAuth.js authentication including session management, JWT tokens, role-based access control, and protected routes. Use…
rails-security
Run a multi-agent security review of Rails application code. Use when the user asks for a Rails security review or audit, or raises a specific concern —…
cloudflare-security-audit
Audit authorized codebases for exploitable vulnerabilities using scoped reconnaissance, adversarial review, validation, and structured reporting.
enterprise-security-exception-review
Design and audit enterprise security exception workflows covering customer security requirements, compensating controls, risk acceptance, expiry, evidence,…
reversing-browser-extensions
Reverse engineer and security-review Chrome/Firefox browser extensions — unpacking the CRX/XPI, reading the manifest for over-broad permissions, and tracing…
cross-wave-delta-analysis
Compare recon waves to find NEW, REGRESSED, PERSISTENT findings.
flask-werkzeug-attack
Exploit Flask/Werkzeug debugger exposure for traceback and SECRET leaks.
performing-security-code-review
This skill provides automated assistance for security agent tasks Execute this skill enables AI assistant to conduct a security-focused code review using the…
dast-nuclei
Fast, template-based vulnerability scanning using ProjectDiscovery's Nuclei with extensive community templates covering CVEs, OWASP Top 10, misconfigurations,…
business-logic-testing
Professional skills and methodology for business logic vulnerability testing
container-security-testing
Professional skills and methodology for container security testing
security-awareness-training
Professional skills and methodologies for security awareness training
basercms-security-advisory
A procedure and scripts for handling baserCMS repository security advisories (including GHSA and triage) end-to-end, from listing retrieval → verification of findings → per-issue fixes → private fork/branch/PR creation → local verification. "Check security advisories" "Verify triage vulnerabilities" "Create a fork and PR for each advisory…
age-file-encryption
Encrypt and decrypt files or streams using age — a simple, modern, and secure encryption tool with small explicit keys, passphrase support, SSH key support,…
axiom-app-attest
Use when implementing app integrity verification, preventing fraud with DCAppAttestService, validating requests from legitimate app instances, using…
drupal-security-patterns
OWASP prevention patterns, access control, input sanitization, and XSS protection for Drupal 10/11. Use when reviewing code for security issues, implementing…
Physical Security
Home office security controls, equipment protection, and environmental security for remote operations
ios-pentest
iOS mobile application penetration testing with Frida and Objection on jailbroken or non-jailbroken devices. Use for static + dynamic analysis of IPAs, SSL…
checking-owasp-compliance
Check compliance with OWASP Top 10 security risks and best practices. Use when performing comprehensive security audits. Trigger with 'check OWASP compliance',…
creating-swot-analysis
Creates structured SWOT (Strengths, Weaknesses, Opportunities, Threats) analysis with strategic implications and action planning. Use when the user requests…