security
Use before shipping to production. Performs OWASP Top 10 audit and STRIDE threat modeling against the codebase. Supports --quick, --standard, --thorough modes.…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-22 00:14
Security & auditing
7,301 results
security-architecture
Security architecture documentation requirements including threat models, security controls, and defense-in-depth patterns
iso-27001-controls
ISO 27001:2022 Annex A controls for static HTML/CSS websites on GitHub Pages
legal
Generate Privacy Policy, Terms of Service, and Cookie Policy pages. Use when setting up legal pages for a new project, when asked to "create privacy policy",…
your-skill-name
Use when [trigger conditions]. Performs [what it does] for [target language/framework].
zk
For custom ZK Solana programs and privacy-preserving applications to prevent double spending. Guide to integrate rent-free nullifier PDAs for double-spend…
owasp-checker
Verify compliance with OWASP Top 10 2021 security standards. Use when performing OWASP compliance checks and security certification.
security-frameworks
Security framework alignment including ISO 27001, SOC 2, NIST CSF 2.0, and CIS Controls mapping
auto-permissions-review-enable
Enable the auto permissions review hook for this session. Auto-approves read-only operations, sends ambiguous Bash to Haiku, and reviews edits only in…
eval-generator-gen-pages
Generate a three-layer eval suite (presence checks + unit tests + security analysis) for Power Apps Generative Pages in Model-Driven Apps. Generative pages are…
powercat-overpage
Reviews the Power Pages site(s) inside a Power Platform solution .zip against best practices across Security, Performance, Accessibility, Maintainability,…
skill-security-auditor
Audit a Claude/Agent SKILL.md (or any AI skill / system prompt) for safety before installing or merging it. Use when asked to review a skill for security,…
modeling-threats-with-opencti
Deploy OpenCTI (Filigran) via Docker Compose and use the pycti Python client to model threat actors, intrusion sets, campaigns, and indicators as a STIX 2.1…
pp-yeswehack
Every YesWeHack researcher feature, plus an offline SQLite-backed cockpit for scope cartography, drift detection,... Trigger phrases: `hunt on yeswehack`,…
settings-privacy
Manages X/Twitter account settings and privacy controls including protected tweets, muted words, content filtering, notification preferences, and account…
vibe-guard
Always-on security guardrails for AI-generated code. Catches the 20 things AI agents forget before you deploy.
deps-audit
Audit Hex deps for supply-chain security risk — bidi chars, compile-time exec, maintainer changes, typosquats, CVEs. Use after mix deps.update, when checking…
deps-vet
Record a vetted Hex package version in hex_vet.exs after a security review — manages the audit ledger, not the scanner. Use to approve a dep after…
Cosmian KMS
Expert guidance for Cosmian Key Management System including key generation, certificate management, encryption operations, access policies, and KMS CLI…
project-risks-and-changes
Risk & Change Management (Devil's Advocate): Identify risks, manage issues, and evaluate change requests. Use this skill to proactively detect threats, assess…
security-audit-codebase
Perform a security audit of a codebase checking for exposed secrets, vulnerable dependencies, injection vulnerabilities, insecure configurations, and OWASP Top…
acidrain-security-testing-toolkit
Use AcidRain's XSS analysis resources, JavaScript utilities, and PHP injection testing samples for authorized web security research and learning
adding-api-auth
Implements machine-to-machine authentication using Scalekit — either long-lived opaque API keys (org or user scoped) or OAuth 2.0 client credentials for…
adding-mcp-oauth
Guides users through adding OAuth 2.1 authorization to MCP servers using Scalekit — configures discovery endpoints, sets up token validation middleware, and…