dual-auth-rbac
Dual authentication system (Session + JWT) with role-based access control (RBAC) for multi-tenant applications. Use when implementing secure authentication…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-22 00:14
Security & auditing
7,299 results
security-review
AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and…
sast-configuration
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning,…
op-session
Initialize 1Password CLI session for Claude Code. Use when: starting a session that needs 1Password secrets, op CLI keeps prompting biometric auth, setting up…
security-reviewer
Security vulnerability detection and remediation expert. Use proactively after writing code that handles user input, authentication, API endpoints, or sensitive data. Detect confidential data leaks, SSRF, injection attacks, insecure cryptography, and OWASP Top 10 vulnerabilities.
memory-forensics
Analyze volatile memory (RAM) dumps for forensic investigation. Use when investigating malware infections, rootkits, process injection, credential theft, or…
lightning-architecture-review
Review Bitcoin Lightning Network protocol designs, compare channel factory approaches, and analyze Layer 2 scaling tradeoffs. Covers trust models, on-chain…
skill-catalog-curator
Audit installed and source-controlled Codex skill catalogs for duplicates, drift, stale metadata, placeholder text, risky overlap, frontmatter quality, routing…
malware-scan-yara
Run YARA rules for pattern-based malware identification. Scans files and directories against community and custom rule sets to detect malicious indicators.
zerion-vaultsfyi-risk-monitor
Continuous risk monitoring for DeFi vault positions using vaults.fyi flags, incident tracking, score changes, benchmark deviations, and withdrawal constraints,…
asus-router-ops
ASUS router config and hardening: Asuswrt-Merlin, security hardening, encrypted DNS (DoT/DoH), VPN (WireGuard/OpenVPN), guest networks, VLAN/IoT isolation,…
supply-chain-defense
Behavioural-first defense against poisoned npm/PyPI/Composer/Cargo packages, malicious editor extensions and config-as-code repo poisoning, in the…
pci-compliance
Implement PCI DSS compliance requirements for secure handling of payment card data and payment systems. Use when securing payment processing, achieving PCI…
ac-security-sandbox
Security sandbox for autonomous coding. Use when validating commands, configuring permissions, managing allowlists, or ensuring safe execution.
secrets-1password
1Password Developer CLI skill for secure secrets management. This skill should be used when creating, reading, updating, or deleting secrets in 1Password…
web3-bug-classes
Complete reference for all 10 DeFi smart contract bug classes. Use this when hunting for specific vulnerability types, need attack patterns for accounting…
manage-bap-backup
This skill should be used when the user asks to "export BAP identity", "import BAP backup", "view BAP backup", "manage BAP backup", "backup BAP identity", or…
validate-bsv-script
This skill should be used when the user asks to "validate BSV script", "analyze locking script", "parse unlocking script", "check script opcodes", or needs to…
malicious_code_execution_test
Test skill for security scanning
security-dashboard
Triage Dependabot, code scanning and secret scanning alerts.
zitadel-identity
Zitadel identity provider setup, configuration, and OIDC integration. Use when: (1) Setting up Zitadel as OIDC/OAuth2 identity provider (2) Configuring Zitadel…
krt-security-sentinel
Review security-sensitive slices/work packages and diagnose repositories, systems, and agentic workflows for cybersecurity risk. Use for application security,…
epic-auth
Guide on authentication, sessions, OAuth, 2FA, and passkeys for Epic Stack
fix-security-vulnerability
Analyze and propose fixes for Dependabot security alerts