security-headers-audit
Use when reviewing HTTP security headers, checking a Content-Security-Policy, auditing CORS or HSTS configuration, evaluating X-Frame-Options or…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-21 00:11
Security & auditing
7,279 results
qa-tester
Use when planning tests, creating test cases, reporting bugs, or executing Unit/E2E/Security/Performance tests.
lgpd-md
The English introduction is being prepared.
implementing-beyondcorp-zero-trust-access-model
Implement Google's BeyondCorp zero trust access model using Cloud IAP, Access Context Manager, Endpoint Verification, Chrome Enterprise Premium, and BeyondCorp…
implementing-disk-encryption-with-bitlocker
Implements full disk encryption using Microsoft BitLocker on Windows endpoints to protect data at rest from unauthorized access in case of device loss or…
implementing-iec-62443-security-zones
Designs security zones and conduits for industrial control systems (IACS) per IEC 62443-3-2 — risk-based zone partitioning, Security Level target (SL-T)…
implementing-just-in-time-access-provisioning
Implements Just-In-Time (JIT) access provisioning to eliminate standing privileges by granting temporary, time-bound access, covering approval workflows,…
performing-insider-threat-investigation
Investigates insider threat incidents involving employees, contractors, or trusted partners who misuse authorized access to steal data, sabotage systems, or…
deep-security-scan
Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide or scoped-path Codex Security scan. Run repeated complete…
validation
Use when Codex is already in the validation phase of a security scan or the user explicitly asks to determine whether one or more candidate security findings…
dependency-audit
Audit project dependencies for risk — known-vulnerable versions, unpinned ranges, abandoned packages, and badly outdated majors. Reads package.json,…
financial-intelligence-unit
This skill should be used when the user asks about FIU, financial intelligence unit, AML FIU, case analysis, alert triage, suspicious activity analysis,…
security-sentinel
Use this agent when you need to perform security audits, vulnerability assessments, or security reviews of code. This includes checking for common security…
x-report
Report X (Twitter) posts via chrome-devtools MCP. When given the profile URL of a spam bot or defamatory account, it explores and analyzes replies; when given an individual post URL, it reports it directly. Use for requests such as "Report on X", "Report this post", "Report spam", "Report defamation", etc.
enterprise-role-lifecycle-review
Design and audit enterprise role lifecycle controls covering role taxonomy, RBAC/ABAC, joiner-mover-leaver events, SCIM/SSO sync, privileged access, approvals,…
stacksmith-safety
Safety controls for any software project. Subcommands: careful on (enable confirmation gates before risky actions), freeze (lock file or scope boundaries),…
privilege-escalation-web
Web application layer privilege escalation. Use when a web application has user registration/login, role permission management, or API parameters that transmit user identity information. Covers Mass Assignment attacks, role/permission field injection, HTTP method/Header bypass, and Cookie/Session tampering. Immediately after registration, check whether a regular user can gain unauthorized access to admin functionality—this is the first priority
security-pass
Runs a context-aware security review of a software project — first understands what the system does and who could attack it, then adapts the analysis instead…
api-auth-clerk
Clerk managed authentication - ClerkProvider, middleware, pre-built components, hooks, server-side auth, organizations, webhooks
audit-xcode-security-settings
Audit and enable security-oriented Xcode build settings. Progressively enables compiler warnings, static analyzer checkers, and Enhanced Security features. Use…
obfuscation_test
Test skill for security scanning
auth-flow-validation
Authentication flow validation between frontend and backend. Covers JWT, OAuth2, token refresh, and session management sync. USE WHEN: user asks about "auth…
osint-recon
Gather and correlate open source intelligence from public sources for authorized investigations, threat intelligence, and attack surface assessment. Use when…
dag-permission-validator
Validates permission inheritance between parent and child agents. Ensures child permissions are equal to or more restrictive than parent. Activate on 'validate…