security-scan
⚠️ MANDATORY - Automatically invoked by safe-commit. Performs comprehensive security scanning before commits. Checks for secrets (API keys, passwords, tokens),…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-23 00:13
Security & auditing
7,330 results
network-security-setup
Configure Claude Code sandbox network isolation with trusted domains, custom access policies, and environment variables
path-safety
Server-side path safety and file access coding standards. Use when writing file download routes, Agent tools (file reading/directory listing), data connectors/Loaders, Workspace path operations, and sandbox configuration.
security-auditor
security-auditor skill Trigger terms: security audit, vulnerability scan, OWASP, security analysis, penetration testing, security review, threat modeling,…
auditing-code-security
Perform read-only security audits, vulnerability assessments, or threat-focused reviews of diffs, pull requests, code paths, or explicitly scoped repositories…
api-security-best-practices
Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
clerk-auth
Expert patterns for Clerk auth implementation, middleware, organizations, webhooks, and user syncUse when "adding authentication, clerk auth, user…
vulnerability-manager
Detect, triage, and remediate dependency vulnerabilities (the same supply-chain issues GitHub Dependabot reports) before they ship. Scans a project's…
cloud-findings
Read existing Codex Security Cloud findings, reports, recorded assignment and verification, and scan status from the connected account. Use for Cloud read…
bw-cli
Interact with Bitwarden password manager using the bw CLI. Covers authentication (login/unlock/logout/status), vault operations…
security-audit
Minimal helper to audit skill.md-style instructions for supply-chain risks.
linux-security-analysis
Use when performing a read-only, evidence-backed Linux security assessment across kernel, identity, network, services, storage, backups, and packages; use…
security-scan
Whole-codebase vulnerability analysis leveraging 1M context window. Loads entire project source, runs deep security analysis in a single pass. Opus 4.6 found…
think-swot
Runs a SWOT analysis (strengths, weaknesses, opportunities, threats) caveat-first. It leads with the weak evidence (Hill and Westbrook 1997 found real SWOT…
fihan
Serve one explicit local file, directory, or local web resource through private Tailscale Serve or an explicitly accepted encrypted Tailcat fallback, and…
qc-code
The English introduction is being prepared.
clawdbot-security
Security audit and hardening for Clawdbot/Moltbot installations. Detects exposed gateways, fixes permissions, enables authentication, and guides…
marketplace-trust-operations
Assess marketplace trust operations — policy, evidence, enforcement, appeals, risk queues, and trust economics. Use when the user asks to review marketplace…
pty-oauth-login
Complete an interactive CLI login/OAuth flow (MCP server auth like `claude mcp login <name>`, `claude auth login`, `gh auth login`, etc.) from a headless or…
dependency-audit
Use when reviewing a project's security posture, setting up CI pipelines, or responding to a reported vulnerability in a dependency.
threat-actor-profiling
Build structured threat actor profiles using the 5W1H framework and the Diamond Model. Use this skill whenever the user wants to profile a threat actor, create…
auth-implementation
Implement authentication, authorization, tenant isolation, sessions, and protected routes. Use when adding sign-in, identity sync, provider integration,…
security
Web application security best practices including OWASP Top 10, authentication, authorization, input validation, cryptography, and secure coding patterns. Use…
wp-security-review
WordPress security audit and vulnerability analysis. Use when reviewing WordPress code for security issues, auditing themes/plugins for vulnerabilities,…