Acceptable Use
Behavioral expectations, professional standards, and responsible technology use
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-22 00:14
Security & auditing
7,300 results
create-auth
Scaffold signin and signup authentication endpoints for a project. Use when the user wants to add authentication, create login/register flows, or set up auth…
security-best-practice
Audit and harden authentication code for security best practices. Use when the user wants to check their auth implementation for vulnerabilities, harden…
active-directory-attack
Use when attacking a Windows Active Directory domain — Kerberos roasting/delegation, coercion + NTLM/Kerberos relay (CVE-2025-33073), ADCS ESC1-16 (EKUwu),…
ai-security
Use when attacking an AI/ML system or model — prompt injection & jailbreaks (Crescendo, Skeleton Key, Best-of-N), RAG/vector poisoning, agentic/MCP…
cloud-security
Use when attacking AWS/Azure/GCP cloud — IAM/identity privilege escalation, IMDS/metadata SSRF, Entra device-code & PRT theft, GCP impersonation chains,…
initial-access
Use when gaining initial access to a target — phishing, payload delivery, HTML smuggling, ISO/IMG/MOTW bypass, supply-chain, credential stuffing,…
phoenix-liveview-auth
MANDATORY for ALL LiveView authentication work. Invoke before writing on_mount hooks, auth plugs for LiveViews, or session handling in LiveView modules. Covers…
guidewire-security-basics
Implement security best practices for Guidewire InsuranceSuite including OAuth2, JWT handling, API roles, secure Gosu coding, and data protection. Trigger with…
jfrog-package-curation
Check/download a package (npm, Maven, PyPI, Go...) via JFrog — safe, allowed, curated? Or: package op fails/blocked (ETARGET, 403, blocked by curation policy,…
llamaguard
Classifies LLM prompts and responses as safe or unsafe using Meta's LlamaGuard (7B v1, 8B v2 and v3) across six categories: violence and hate, sexual content,…
nemo-guardrails
Adds runtime safety rails to LLM applications with NVIDIA NeMo Guardrails, configured through Colang 2.0 flows. Covers jailbreak and prompt-injection…
prompt-guard
Classifies text with Meta's Prompt Guard, an 86M-parameter model loaded from HuggingFace, into BENIGN, INJECTION or JAILBREAK labels to detect prompt…
socket-sca
Use when scanning project dependencies for supply-chain risk, running Socket SCA on npm/pip/pypi packages, hunting typosquats or malicious packages, or…
security-scanner
Scan codebase for security vulnerabilities including secrets, insecure dependencies, and unsafe code patterns. Use when performing automated security scans.
gha-security-review
Use when adding, modifying, or auditing GitHub Actions workflows under .github/workflows/. Audits permissions, expression injection, unpinned actions, and…
security-ownership-map
Use before risky refactors, after incidents, when hiring for coverage gaps, or designing rotation/on-call. Maps people to files via git history to surface…
security-threat-model
Use when designing cross-boundary features, integrating third parties, refactoring auth, or expanding blast radius. Threat-models via trust boundaries,…
stack-security-coder
Use when writing or reviewing frontend, backend, or mobile code, or when audits reveal stack-layer gaps. Enforces per-stack checkpoints: XSS-CSP,…
agency-security-engineer
Practical application and platform security for threat modeling, authn and authz review, secret handling, hardening, CI/CD security gates, cloud and Kubernetes…
llm-security-audit
Comprehensive security auditing framework for LLM applications covering OWASP Top 10 for LLMs, threat modeling, penetration testing, and compliance with NIST…
vibe-security-skill
Use when designing or reviewing security for a web application, API, or multi-tenant SaaS — produces threat model, abuse case list, auth/authz matrix, and…
audit-dependency-versions
Audit project dependencies for version staleness, security vulnerabilities, and compatibility issues. Covers lock file analysis, upgrade path planning, and…
awareness
AI situational awareness — internal threat detection for hallucination risk, scope creep, and context degradation. Maps Cooper color codes to reasoning states…