authentication-patterns
Comprehensive authentication implementation guidance including JWT best practices, OAuth 2.0/OIDC flows, Passkeys/FIDO2/WebAuthn, MFA patterns, and secure…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-23 00:13
Security & auditing
7,324 results
audit-safety
Audit one feature of a web app (TanStack Start, Next.js, Convex or similar) across pages, loaders, server functions, API routes, webhooks, middleware, and data…
verasic-secbot
STRIDE security review on git diff with optional deterministic scanner. Use when the user asks to "security review", "review for security", "STRIDE review",…
privacy-policy-drafter
Draft a clear, plain-language privacy policy tailored to what a product actually collects and does with data. Use when asked to write a privacy policy, draft a…
building-cloud-security-posture-management
This skill guides security architects through designing and implementing a cloud security posture management program that continuously monitors infrastructure…
apply-native-policy-to-instance
Apply, list, or edit provider-native policies on API instances (Kong plugin, Apigee template, Azure policy, or MuleSoft/Anypoint) via the MuleSoft Platform MCP…
security-testing-en
Use this skill when you need to design security testing around OWASP risks, vulnerability scanning, and penetration scenarios; triggers include security…
export-control
Use when implementing ITAR/EAR compliance, ECCN classification, party screening, technology control plans, or deemed exports - covers US export control…
senior-security
Security engineering toolkit for threat modeling, vulnerability analysis, secure architecture, and penetration testing. Includes STRIDE analysis, OWASP…
skill-vetting
Vet ClawHub skills for security and utility before installation. Use when considering installing a ClawHub skill, evaluating third-party code, or assessing…
backlog
EXPERIMENTAL. Use when working the project-wide out-of-scope backlog at paad/code-reviews/backlog.md and paad/security/backlog.md — cleaning it of entries that…
cli-cast
Use for Foundry cast transaction actions: prepare, trace, simulate, sign, or broadcast; sign messages; or encode/decode ABI/calldata. Delegate every standalone…
safety-filter-bypass
Techniques to test and bypass AI safety filters, content moderation systems, and guardrails for security assessment
israeli-standards-import-checker
Not legal advice and not a filed customs declaration. Check whether a product needs Standards Institution of Israel (SII, Mechon HaTikanim) approval under an…
audit-security
Runs a deliberately small, hand-curated security sweep across a repo. Finds secrets committed to git, SQL/shell injection patterns, XSS sinks, path traversal,…
telnyx-oauth-javascript
Implement OAuth 2.0 authentication flows for Telnyx API access. This skill provides JavaScript SDK examples.
telnyx-verify-go
Look up phone number information (carrier, type, caller name) and verify users via SMS/voice OTP. Use for phone verification and data enrichment. This skill…
telnyx-verify-javascript
Look up phone number information (carrier, type, caller name) and verify users via SMS/voice OTP. Use for phone verification and data enrichment. This skill…
tenzir-create-ocsf-mapping
Create OCSF mapping operators for a Tenzir parser package. Use when the user wants to map parsed events to OCSF, normalize security data to OCSF, or says "map…
two-factor
Use when implementing two-factor authentication setup and verification.
authenticating
Authentication testing skill - automates signup, login, 2FA bypass, CAPTCHA solving, and bot detection evasion using Playwright MCP. Tests authentication…
security-posture-analyzer
Analyzes security headers, CSP, HSTS, WAF presence, and security.txt
osquery-query-helper
Help users write, validate, and troubleshoot osquery SQL queries using provided osquery table schemas as the authoritative source.
data-security-compliance-and-regulated-data
Guides agents through regulated-data security and compliance workflows for PII, PCI, HIPAA, PHI, and similar obligations. Use when data products handle…