sbom-management
Software Bill of Materials management including generation, formats, vulnerability tracking, and supply chain security
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-23 00:13
Security & auditing
7,326 results
troubleshooting-authentication
Provides authentication troubleshooting for MSAL, JWT, and Entra ID. Use when debugging 401 errors, token issues, MSAL configuration problems, or credential…
aoothjs
Use when adding authentication or authorization to a Moost app — login, JWT/session tokens, password+MFA (TOTP), SMS OTP, RBAC roles/guards, magic links,…
conducting-mobile-application-penetration-test
Perform a mobile application penetration test on Android and iOS apps to identify insecure data storage, certificate pinning bypass, API vulnerabilities,…
operationalizing-misp-threat-feeds
Stand up MISP, enable and cache curated threat feeds (CIRCL, abuse.ch, Feodo Tracker), apply warninglists to suppress false positives, query indicators with…
mitre-attack
MITRE ATT&CK framework reference — tactics, techniques, and tool-to-TTP mappings for pentest documentation and detection rule writing
audit-only
Read-only investigation mode: answer and report findings first, change no code until told to go. Use when the user says audit, investigate, "don't touch code",…
ai-security
Use when securing an AI/LLM-powered feature against prompt injection, cross-tenant data leakage and tenant isolation failures, jailbreaks, and adversarial…
netlify-identity
Add authentication and user management to a Netlify site with @netlify/identity — signup/login/logout, OAuth social login (Google/GitHub/GitLab/Bitbucket),…
audit-actions
Audit a repository's GitHub Actions workflows for unsafe pull_request_target usage that can lead to supply chain compromise. Use when the user asks to audit…
scenario-roblox-networking
Use when securing a Roblox experience against exploiters or designing its networking: RemoteEvent, RemoteFunction or UnreliableRemoteEvent design, validating…
security-assessment
Comprehensive OWASP Top 10 2025 and ASVS Level 1 security assessment across a whole codebase, with cost budgeting, knowledge-graph linking and automated test…
threat-modeling
Automated STRIDE and DREAD threat modelling from code analysis. Extracts architecture, data flows, entry points and trust boundaries, then produces ranked…
security-auditor
Review code for vulnerabilities, implement secure authentication, and ensure OWASP compliance. Handles JWT, OAuth2, CORS, CSP, and encryption. Use PROACTIVELY…
security-review
Security code review for vulnerabilities. Use when asked to "security review", "find vulnerabilities", "check for security issues", "audit security", "OWASP…
licensing-tiers-data-governance
Implement subscription tiers with field-level access control, feature gating, rate limiting, and compliance tracking. Design data governance systems that…
skill-security-analyzer
Comprehensive security risk analysis for Claude skills. Use when asked to analyze security risks, review security stance, audit skills for vulnerabilities,…
security-audit
Comprehensive security audit of codebase using multiple security-auditor agents. Use before production deployments or after major features.
owasp-zap
OWASP ZAP (Zed Attack Proxy) is an open-source web application security scanner that crawls a site, passively inspects traffic and optionally attacks it to…
security-check
Assess token and address security via the GoPlus Security API.
cookie-consent
Use when reviewing a website for GDPR/CCPA compliance, specifically whether cookie consent is obtained before non-essential cookies are set.
forge-harden-security
Plan-time security review (CSO persona) covering OWASP Top 10, STRIDE threat modeling, secrets archaeology, dependency supply-chain risk, CI/CD pipeline…
eng-security-safety
Apply proactive threat modeling, least-privilege design, and safety guardrails before delivering any code or infrastructure change.
mega-audit
Run a smart contract source code through several agent skill-based auditing pipelines