semgrep
Run Semgrep static analysis for fast security scanning and pattern matching. Use when asked to scan code with Semgrep, write custom YAML rules, find…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-23 00:13
Security & auditing
7,326 results
compliance
Navigate privacy regulations (GDPR, CCPA), review DPAs, and handle data subject requests. Use when reviewing data processing agreements, responding to data…
jfrog access
Use when working with JFrog Access -- managing tokens, users, groups, permissions, projects, or authentication. Triggers on mentions of access token,…
titvo
Analyze generated code, identify vulnerabilities, and report them to the user.
awesome-privacy-audit
Read-only privacy audit of a codebase: what personal data it holds, where it flows, minimisation, retention and deletion, data-subject rights, consent gating,…
security-analysis-skills
Comprehensive security analysis framework teaching STRIDE threat modeling, OWASP Top 10 vulnerabilities, CVSS risk scoring, and secure coding patterns. Use…
code-security
Runs Semgrep security scans on the current project to detect vulnerabilities, secrets leakage, and OWASP Top 10 issues. Use when the user asks for security…
minesweep
Sweep a finished change for what it makes possible that nobody intended: security holes, breaking changes, slow paths, weakened checks.
ethics-compliance-reviewer
Reviews claims, privacy, credential exposure, platform rules, legal risk, bias, and reputation risk before publishing.
amazon-listing-optimization
Amazon seller listing builder and optimizer. Two modes: (A) Create — build a keyword-optimized listing from scratch using a keyword list + product features + AI copywriting, (B) Optimize — audit an existing listing, find keyword gaps, score across 8 dimensions, and rewrite using missing keywords. Integrates with amazon-keyword-research for keyword input. Suitable...
config-secrets-environments
Design, audit, and verify configuration, environment separation, secrets, BYOK flows, key rotation, config schema validation, and drift checks across local,…
security-threat-model
Threat-model product features, APIs, data flows, secrets, permissions, supply-chain changes, auth boundaries, and risky code paths before or during…
01-recon-osint
Passive and active reconnaissance, subdomain enumeration, DNS analysis, technology fingerprinting, and OSINT data correlation for authorized security…
03-exploit-development
Proof-of-concept development, payload crafting, shellcode analysis, and exploitation technique research for authorized security testing
05-malware-analysis
Static and dynamic malware analysis, YARA rule generation, sandbox configuration, behavioral profiling, and malware family classification
07-incident-response
IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL…
09-web-security
OWASP Top 10 testing, injection vulnerability detection, API security assessment, authentication testing, and web vulnerability reporting for authorized…
11-csoc-automation
SOC alert triage, incident playbook automation, escalation workflows, shift reporting, and SOC KPI tracking
12-log-analysis
Security log parsing, anomaly detection, SIEM query building, Sigma rule creation, and correlation rule development across Splunk, Elastic, QRadar, and…
14-red-team-ops
Authorized red team engagement planning, C2 architecture design, attack methodology, lateral movement strategy, OPSEC, and professional reporting
16-ai-llm-security
LLM and AI application security testing — prompt injection, jailbreak resistance, OWASP LLM Top 10 (2025), RAG and agent/tool-use security, model supply chain,…
18-ot-ics-security
Operational Technology and industrial control system security — Purdue model segmentation, industrial protocol analysis (Modbus, DNP3, S7, EtherNet/IP),…
security
Stack-specific security implementation guidance (backend, frontend, database, infrastructure, operations) with auto-detection from your changes. Use when…
pci-dss-compliance
PCI DSS compliance planning for payment card handling including scope reduction, SAQ selection, and security controls