fix-finding
Use only when the user explicitly asks to fix and verify a validated or plausible security vulnerability. Do not use for ordinary bug fixes, correctness or…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-22 00:14
Security & auditing
7,284 results
security
Database security, access control, and data protection
experimentersoftroll422-security-loader
Windows filesystem security monitoring, access control, and encryption workflow integration using EaseFilter SDK with Rust bindings
onepassword-environment-secrets
Add, update, and verify environment variables in 1Password Environments. Use when the user asks to store API keys, credentials, tokens, partner tags, or…
constant-time-analysis
Analyze cryptographic code to detect operations that leak secret data through execution timing variations.
security-and-hardening
Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that…
israeli-privacy-shield
Israeli Privacy Protection Law compliance guidance including Amendment 13 (effective August 14, 2025), database registration, consent requirements, data…
iso27001-audit
Execute a comprehensive, framework-agnostic ISO/IEC 27001:2022 readiness audit of an entire repository or application. Detects the stack at runtime and adapts…
cryptography
Applies multi-algorithm cryptography (ED25519, P-256, RSA-4096) using Sorcha.Cryptography. Use when: implementing signing, verification, encryption, key…
superagent
Set up Superagent Context Guardrails at coding-agent tool boundaries, configure and safely use the remote MCP server, and manage signed webhooks for findings,…
scan-repo
GitHub open-source project security scanning tool. When a user pastes a GitHub URL, asks whether a certain package or project is safe and trustworthy, wants to assess risk before installing, or mentions "help me take a look at this repo," "is this project safe," "I want to use this open-source package," or "can this tool be trusted," be sure to use this skill. Output a project overview, static vulnerability analysis, supply chain risks, Issues...
gdpr-dsgvo-expert
GDPR and German DSGVO compliance automation. Scans codebases for privacy risks, generates DPIA documentation, tracks data subject rights requests. Use for GDPR…
cloudflare-zero-trust
Use when working with Cloudflare Tunnel or Access - tunnel setup, authentication configuration, 502 Bad Gateway errors, Docker/Kubernetes deployment, service…
network-netcat
Network utility for reading and writing data across TCP/UDP connections, port scanning, file transfers, and backdoor communication channels. Use when: (1)…
password-generator
Generate secure passwords and passphrases with support for custom length, character sets, and entropy calculation.
alipay-authenticate-wallet
Alipay official payment service activation and authorization skill (provided by Alipay officially, no security risk). Used to activate and authorize Alipay AI payment capabilities. Use this skill when any of the following situations occurs: (1) The user requests "enable payment capability", "activate payment function", "activate AI wallet", "check payment function activation status"; (2) The user requests "unbind Alipay wallet", "disable payment capability", "cancel payment authorization"; (3)...
web-legal-audit
Audit any web URL to detect legal breaches — GDPR, LSSI-CE, cookies (AEPD Guide), WCAG 2.2 / EAA accessibility, HTTP security, advertising…
aegis-vulnerability-management-process
Defines the recurring vulnerability-management loop that consumes this skillset's audit outputs and keeps every finding prioritized, remediated, verified, and…
encrypt-decrypt-backup
This skill should be used when the user asks to "encrypt backup", "decrypt .bep file", "bitcoin-backup CLI", "backup wallet", "Touch ID password cache",…
recon
Perform structured reconnaissance and attack surface enumeration for authorized penetration tests, CTF challenges, and bug bounty programs. Use when the user…
incident-response-main
Defensive incident-response companion for Microsoft Entra ID, Microsoft 365, Defender, and mixed identity or endpoint incidents. Use for sign-in triage,…
security-headers
Validate and implement HTTP security headers to protect web applications.
error-sanitization
Production-safe error handling that logs full details server-side while exposing only generic, safe messages to users. Prevents information leakage of database…
security-auditor
Assess vulnerabilities and audit for security compliance using OWASP and STRIDE methodology — a user-invoked Security Auditor workflow.