perfex-security
Use whenever a Perfex CRM task touches security-sensitive code — issuing or consuming single-use tokens (password reset, magic link, confirmation), race-safe…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-23 00:13
Security & auditing
7,326 results
auth-implementation-patterns
Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when…
workflow-secret-redaction
Use when an agent needs to redact, inspect, verify, compare, diff, schema-check, or summarize secret-bearing files or values such as .env files, API keys,…
memory-publication-auditor
Audit private skills, memories, notes, or operational logs before turning them into public skills, templates, docs, or reusable patterns. Use when scanning…
defect-taxonomy
16 macro-categories and 140+ subcategories of source-code failure modes, with CWE and OWASP mappings, fix patterns, and review frameworks. TRIGGER WHEN: an…
alipay-authenticate-wallet
Alipay Official Payment Service Activation and Authorization Skill (provided by Alipay officially, no security risks). Used to activate and authorize Alipay AI payment capabilities. Use this skill when any of the following situations occurs: 1) The user requests to "enable payment capability", "activate payment function", "check payment function activation status", 2) The user is using the Alipay payment skill to make a payment, but the Alipay wallet has not been activated. Note: When using this skill, you need to first read the content of this skill, and strictly...
aegis-ssrf-url-security
Audit playbook module for server-side request forgery (CWE-918) and open-redirect failures (CWE-601), covering user-influenced URLs fetched by servers, sink…
polymarket
Polymarket integration for prediction market trading on Polygon. Covers authentication (L1 EIP-712, L2 HMAC-SHA256, builder headers), order placement…
graphql-audit
GraphQL security hunting — introspection abuse, field suggestion enumeration (clairvoyance), batching DoS, IDOR via aliasing, auth bypass, injection via…
security-surface-audit
Use when auditing what an existing project exposes to attackers — a loopback/localhost dev or control server, public web app or API, CLI that spawns processes,…
auditing-external-claude-plugins
Audits an external (third-party) Claude Code plugin pinned in this marketplace for security risk before it is vendored, and writes the report to a file for…
Security Monitoring
Automate security monitoring, threat detection, incident response, and compliance workflows
Suspicious Email Analyzer
Analyze emails for phishing, scam indicators, and security threats
cyber_security_expert
Cybersecurity and penetration testing expert, focused on vulnerability analysis, security protection, and code auditing.
network-security-setup
Configure Claude Code sandbox network isolation with trusted domains, custom access policies, and environment variables
backend-security-coder
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security…
workflow-security-audit
[Workflow] Use when activating the Security Audit workflow for security review and vulnerability assessment.
attack-discovery-triage
Triage Elastic Security Attack Discovery findings — fetch correlated attack narratives, assess confidence with entity risk and rule frequency signals, and…
yara-authoring
Write and test YARA rules for malware detection and threat hunting. Use when creating YARA signatures, detecting malware families, scanning files or memory for…
wp-plugin-security
Security guidelines for WordPress plugin development: sanitization, validation, escaping (PHP and admin JavaScript), nonces, capabilities over objects,…
mac-keychain
Work with macOS Keychain generic password items through bundled scripts. Use when Codex needs to check, read metadata, create, update, retrieve, reveal, or…
update-threat-db
Update the guide's threat intelligence through AgentSec Triage, research new coding-agent and MCP security advisories, and synchronize the security feed. Use…
full-audit
This skill should be used when the user asks for a "full security audit", "exhaustive audit", "comprehensive security review", or invokes /appsec:full-audit.…
glossary
This skill should be used when the user asks "what is IDOR", "define CSRF", "security glossary", or wants quick security term definitions. Quick reference for…