security
Web application security best practices including OWASP Top 10, authentication, authorization, input validation, cryptography, and secure coding patterns. Use…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-24 00:15
Security & auditing
7,332 results
wp-security-review
WordPress security audit and vulnerability analysis. Use when reviewing WordPress code for security issues, auditing themes/plugins for vulnerabilities,…
sast-detekt
Run detekt static analysis on Kotlin code with security-focused rules. Detects hardcoded secrets, insecure crypto, and code quality issues affecting security.
sast-eslint-security
Run ESLint with security plugins on JavaScript/TypeScript code. Detects eval usage, non-literal RegExp, prototype pollution, and other JS/TS security…
security
Protect your SaaS app from common vulnerabilities. Use when building auth, handling user data, or deploying features. Covers authentication, data protection,…
convex-security
Security best practices for Convex functions including ConvexError handling, argument/return validation, authentication helpers, access control, rate limiting,…
binary-analysis-patterns
Master binary analysis patterns including disassembly, decompilation, control flow analysis, and code pattern recognition. Use when analyzing executables,…
cortx-reliability
Check whether an x402 payment endpoint is reliably delivering value before spending USDC on it. Returns paid delivery rate, active incidents, latency, and a…
input-validation-and-sanitization
Use this skill when implementing any endpoint, form handler, CLI tool, or function that accepts external input. Validate and sanitize all untrusted data before…
secrets-management
Use this skill when handling API keys, passwords, tokens, private keys, or any sensitive credential. Never hardcode secrets in source code — apply this…
security-audit
Structured, adversarial, multi-phase security audit of a codebase — recon → coverage-led hunting → finder≠validator validation → machine-readable findings →…
credit-related-party-detection
Corporate customer related-party transaction identification and related risk investigation skill. Through multi-dimensional identification of related parties via equity penetration, management positions, family relationships, transaction concentration, guarantee chains, etc., detect abnormal characteristics such as capital idling, transfer pricing, fictitious transactions, and profit shifting, assess the impact of related risks on credit security, and output a structured related-party graph and risk report. Used for pre-loan related-party investigation, in-loan related-party transaction monitoring, and post-loan risk warning. Trigger words include: "related relationship identification", "related trans...
radar-fraud-rules
Designs and audits Stripe Radar fraud rules — block prepaid, 3DS, risk levels, lists, and decline patterns. Use when the user mentions "Radar", "fraud rules",…
protect-route
Add security protection to a server-side route or endpoint — rate limiting, bot detection, email validation, and abuse prevention. Works across frameworks…
aegis-injection
Audit playbook module for detecting and remediating the full injection family (SQL, NoSQL, OS command, template, code/expression, LDAP, XPath, header/CRLF/log)…
external-gitcode-ascend-security-code-review
Multilingual Secure Code Review. Provides systematic security vulnerability detection and remediation guidance for Python, C++, Shell, and Markdown files. Covers OWASP Top 10, CWE Top 25, and CERT secure coding standards. When users mention the following, be sure to use this skill: security review, secure code review, security…
security-validation
Pre-merge security validation detecting secrets, user-specific paths, insecure SSH configurations, and security-weakening flags. Use before committing…
evm-audit-master
Master index for EVM smart contract security audit skills. Load this FIRST for every audit to determine which specialized skills to load. Contains routing…
ise-incident-response
Rapid ISE endpoint investigation and quarantine workflow - endpoint lookup, auth history, posture review, human-authorized quarantine, ServiceNow Security…
security-arsenal
Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table. Use when you need specific…
windows-diagnostics
360-degree Windows system health diagnostics — covers CPU, memory, disk, network, security, startup programs, services, system info, hardware, and installed…
journal-review
Use when reviewing JSON vulnerability journals for 1C-Bitrix Site Manager or boxed Marketplace modules, especially when scanner severity may ignore Bitrix…
journal-update
Use when updating and validating cumulative security-journal.json files for Bitrix module security runs from reviewed scan JSON outputs.
scan
Thoroughly scans a single Bitrix module (PHP) for security vulnerabilities and returns a JSON report. Call it with one argument — the path to the module folder (for example,…