1password
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-23 00:13
Security & auditing
7,326 results
security-best-practices
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best…
explain
This skill should be used when the user asks to "explain security concept", "what is OWASP", "explain this finding", "what does this vulnerability mean",…
fix
This skill should be used when the user asks to "fix security finding", "fix vulnerability", "generate security fix", "appsec fix", "patch vulnerability",…
fuzz
This skill should be used when the user asks to "generate fuzz inputs", "create fuzz tests", "fuzz test generation", "generate test payloads", "create security…
graphql
This skill should be used when the user asks to "check GraphQL security", "analyze GraphQL endpoint", "find GraphQL vulnerabilities", "audit GraphQL schema",…
identifying
This skill should be used when the user asks to "check for identifiability", "analyze re-identification risks", "find privacy issues related to anonymization",…
learn
This skill should be used when the user asks to "learn about security", "teach me OWASP", "security tutorial", "learn threat modeling", or invokes…
linking
This skill should be used when the user asks to "check for linkability", "analyze cross-service tracking", "find privacy issues related to user correlation",…
logging
This skill should be used when the user asks to "check for logging issues", "analyze security logging", "find missing audit logs", "check for log injection",…
model
This skill should be used when the user asks to "create threat model", "threat model architecture", "map security architecture", "build threat model", "STRIDE…
non-repudiation-privacy
This skill should be used when the user asks to "check for non-repudiation privacy risks", "analyze excessive audit logging", "find privacy issues related to…
outdated-deps
This skill should be used when the user asks to "check for vulnerable dependencies", "audit dependencies", "find outdated packages", "scan for CVEs", "check…
owasp
This skill should be used when the user asks to "run OWASP analysis", "check OWASP Top 10", "OWASP scan", or invokes /appsec:owasp. Dispatches 10 category…
race-conditions
This skill should be used when the user asks to "check for race conditions", "find TOCTOU bugs", "analyze concurrency issues", "detect double-spend…
start
This skill should be used when the user asks to "start security analysis", "assess security", "which security tools should I use", "appsec start", "what should…
unawareness
This skill should be used when the user asks to "check for unawareness", "analyze consent mechanisms", "find privacy issues related to transparency", "check…
better-auth-integration
Must follow when Better Auth authentication system needs to be integrated into a project, covering the complete steps of installation and configuration, database integration, Provider setup, and authentication flow verification. Trigger words: integrate better-auth, configure authentication system, connect authentication.
npm
Expert npm package manager assistance covering package.json, lockfiles, workspaces (monorepos), scripts, and security audits. Use when managing…
incident-response
Security incident detection, analysis, containment, eradication, recovery, and lessons learned per NIST SP 800-61r2 and ISO 27035
strategic-communication-analysis
Narrative framing, media analysis, discourse analysis, influence assessment, information warfare detection for Swedish political intelligence
pentest
PTES-aligned adversarial security audit for backend, frontend, and mobile applications. Produces a CVSS-scored Hacker Report with verified PoCs and phased…
huawei-cloud-iam-diagnose
Invoke this skill to check whether a Huawei Cloud IAM user likely has permission to perform an action/resource — Huawei Cloud IAM Reference Permission Analysis/Diagnosis. Given a user name and a…
second-order-injection-anti-pattern
Security anti-pattern for second-order injection vulnerabilities (CWE-89 variant). Use when generating or reviewing code that retrieves data from databases,…