security-test-planning
Plan security testing strategies including OWASP testing, penetration test scoping, SAST/DAST integration, and threat-based test case design.
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-23 00:13
Security & auditing
7,331 results
auth-implementation-patterns
Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when…
smart-contract-generator
Generates Solidity smart contracts with security best practices (ERC-20, ERC-721, ERC-1155, custom). Use when user asks to "create smart contract", "solidity…
security-governance
Explain MotherDuck security, governance, and access-control patterns. Use when a security_compliance_owner, technical_owner, or application_builder is asking…
keycloak-administration
Keycloak identity and access management (IAM) administration guidance — realm management, client configuration, authentication flows, authorization policies,…
codeprobe
Code review and audit system with specialized sub-skills covering SOLID principles, security, performance, architecture, error handling, testing, code smells,…
codeprobe-security
Scans code for security vulnerabilities — injection flaws, authentication gaps, XSS vectors, mass assignment, CSRF, insecure deserialization, sensitive data…
inth
Inth API for privacy-compliance infrastructure. Use when the user mentions Inth, privacy compliance, data subject requests, consent, or compliance automation.
silmaril
Silmaril API and SDK for AI application firewalls. Use when the user mentions Silmaril, AI security, prompt injection defense, or AI firewall workflows.
1k-auditing-pre-release-security
Audits security and supply-chain risk between two git refs with Codex cross-validation. Pre-release security audit (including Codex cross-validation). Use when performing pre-release security audits,…
linux-security-hardening
Use when hardening a Debian/Ubuntu server — user/group/sudo hardening, file permission audits, PAM password policy + MFA, AppArmor mandatory access control,…
aic-app-integration
Use when writing code that integrates an application with PingOne Advanced Identity Cloud (AIC) — Ping SDK Journey modules and the journey client for Android,…
ping-identity
Use this skill when an agent needs foundational understanding of the Ping Identity portfolio — platforms, products, solutions, deployment models, integrations,…
security-practices
Master secure development, OWASP top 10, testing, and compliance. Use when building secure systems, conducting security reviews, or implementing best practices.
debugging-table-access-denied
Debugs a TableAccessDeniedError from an error tracking issue, Slack alert, or user report. Use when investigating why HogQL denied a system or warehouse table…
multi-system-sso-authentication
Implement enterprise Single Sign-On (SSO) authentication supporting multiple identity providers with JWT RS256 tokens, backwards verification, session…
jwt-authentication
Configures JWT Bearer authentication for .NET APIs. Includes token generation, validation, refresh tokens, and user context extraction from claims.
vulnerability-scanner
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
astro-security
Security patterns for Astro lead generation websites on Cloudflare. Forms, headers, bot protection, GDPR. Use for any production lead gen site.
security-assessment
Master security assessments with vulnerability scanning, penetration testing, security testing, and security audits.
security-audit
Comprehensive code security inspection and server security audit skill. Applicable to: (1) Code vulnerability scanning - detect SQL injection, XSS, SSRF and other OWASP Top 10 vulnerabilities, (2) Dependency security checks - identify outdated or vulnerable third-party libraries, combined with real-time search to confirm the latest CVEs, (3) Server configuration audit - check SSH, firewall, permissions and other security configurations, (4) Sensitive information leakage detection -…
auth-tool-cloudbase
CloudBase auth provider configuration and login-readiness guide. This skill should be used when users need to inspect, enable, disable, or configure auth…
auth-patterns
ALWAYS trigger for ANY task involving authentication, authorization, login, signup, registration, NextAuth.js, Auth.js, Clerk, Firebase Auth, Supabase Auth,…
security
Validate wallet addresses and check token risk — honeypot detection, audit status, freeze authority, and other security signals. Use this before interacting…