janitor-security
Heuristic security scan of installed skills — prompt-injection phrases, hidden unicode instructions, credential-store access, network-pipe-to-shell and…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-21 00:11
Security & auditing
7,272 results
genesis-auth
Use when adding authentication to a project scaffolded with genesis — login, sessions, SSO, admin users. Asks for an auth tier (basic/standard/strict), derives…
codeql
Use the open-source CodeQL ecosystem for .NET security analysis. Use when a repo needs CodeQL query packs, CLI-based analysis on open source codebases, or…
safe-file-deletion
Enforces explicit user permission before any file deletion. Activates when you're about to use rm, unlink, fs.rm, or any operation that removes files from…
vex
OpenVEX v0.2.0 specification reference plus VEX management playbooks - Brought to you by microsoft/hve-core.
implementing-browser-isolation-for-zero-trust
Deploys remote browser isolation (RBI) as a core component of a Zero Trust architecture. Implements isolation policies with URL categorization and risk-based…
performing-file-carving-with-foremost
Recovers files from disk images and unallocated space using Foremost's header-footer signature carving, extracting evidence independent of the file system's…
new-tech-pia
Guides privacy impact assessment for emerging technologies including IoT, blockchain, AR/VR, quantum computing, and digital twins. Covers risk identification…
nist-pf-communicate
Implement the NIST Privacy Framework COMMUNICATE function covering CM.AW awareness raising and CM.PO communication policies. Provides transparency mechanisms,…
nist-privacy-identify
Guides implementation of the NIST Privacy Framework IDENTIFY function covering ID.BE business environment, ID.DA data actions, ID.IM improvement, and ID.RA…
api-security-testing
Use this skill when you need evidence-bounded api-security-testing analysis and validation preparation; triggers include API 安全测试 and api-security-testing.
ai-safety-alignment
Implement comprehensive safety guardrails for LLM applications including content moderation (OpenAI Moderation API), jailbreak prevention, prompt injection…
security-diff-scan
Review a pull request, commit, branch diff, or working-tree patch for security vulnerabilities.
triage-finding
Triage supplied or imported security findings against a repository using its security policy and static code evidence. Accepts scanner reports, advisories,…
ping-universal-services
Use when configuring or invoking a Ping shared service at the policy or service level — PingOne Protect (risk scoring), PingOne Verify (KYC/identity proofing),…
configure-nginx
Configure Nginx as a web server and reverse proxy. Covers static file serving, reverse proxy to upstream services, SSL/TLS termination with Let's Encrypt,…
reverse-engineering
Reverse Engineering Skill
secret-scan
Scan the working tree or git diff for hardcoded secrets — API keys, tokens, private keys, connection strings, cloud credentials — across common providers.…
security-headers-check
Check HTTP security headers on any URL. Grades CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. Produces an A-F…
sonar-dependency-risks
Search for software composition analysis (SCA) dependency risks in a SonarQube project (project key optional when MCP integration already defines the default…
tenzir-cef
Answer questions and produce mappings for ArcSight CEF (Common Event Format), the OpenText/Micro Focus SIEM interchange format, and the ArcSight ESM event…
hunt-nestjs
Hunt NestJS-specific vulnerabilities: guard bypass, decorator gaps, and microservice auth drift.
security
Guide the agent on securing Vaadin 25 applications with Spring Security. This skill should be used when the user asks to "add security", "add login", "create a…
inspect-security
Audit source code for threat exposure, authentication flaws, injection sinks, SSRF, concurrency races, and security debt.