scan-composer
Marketplace pre-submission security-flow for a SINGLE Bitrix module — raw audit and BUS-aware severity review. Headless entry point of the automatic scanner…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-24 00:15
Security & auditing
7,332 results
security-guardian
Use when conducting a security audit of authentication, authorization, input handling, data writes, dependency configuration, secrets, logs, and external calls. It should trigger whenever the user mentions security, auth, permission, vulnerability, secret, injection, auditing login logic, or permission compliance.
chinese-legal-ai-governance
Use when the user needs Chinese legal work in the AI governance domain: AI application registration, algorithm security assessment, science and technology ethics review, generative AI compliance, AI supplier review, AI governance. This is a Codex adapter for…
chinese-legal-builder-hub
Use when the user needs Chinese legal work in the Legal Skills Operations domain: find legal skills, evaluate community skills, install legal skills, skill security review, legal workflow building, legal operations. This is a Codex adapter for…
chinese-legal-privacy
Use when the user needs Chinese legal work in the domain of data compliance and privacy: personal information protection impact assessments, PIPL, data processing agreements, DSARs, privacy policies, data compliance gaps, cross-border data transfers, and privacy compliance. This is a Codex adapter for…
mediapipe_face_mesh
The English introduction is being prepared.
chrome-auth-recorder
Records workflows in authenticated browser sessions and generates annotated GIF tutorials without handling credentials. Use when you need to document…
agent-security-review
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features.…
security-review
[Code Quality] Use when you need to perform a security review or audit on any scope — application code (OWASP Top 10 2025), secrets exposure,…
encryption
Encryption: HKDF, XChaCha20-Poly1305, blob formats, key hierarchy/rotation. Use for "encrypt this", "key management", crypto primitives, EncryptedBlob.
electron-dev
Build cross-platform desktop applications with Electron using best practices for security, performance, and user experience. Use this skill when developing…
security-best-practices
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best…
security-ownership-map
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for…
security-threat-model
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise…
ddd4j-auth
Use when choosing, integrating, or reviewing ddd4j authentication and authorization with Sa-Token, Apache Shiro, or Spring Security, including Subject mapping,…
ddd4j-boot-auth
Use when choosing or integrating Sa-Token, Apache Shiro, or Spring Security through ddd4j-boot auto-configuration, Subject mapping, exception handling, and…
ddd4j-cloud-tenant
Use when implementing or reviewing ddd4j-cloud tenant and system isolation, Tenant annotations, context holders, data scope, ignore rules, SQL filtering, or…
ddd4j-javalin-auth
Use when integrating Sa-Token, Apache Shiro, or OIDC and Keycloak authentication with ddd4j-javalin routes, Subject providers, authorization, errors, and…
ddd4j-quarkus-auth
Use when integrating JWT, OIDC, Shiro, or Sa-Token authentication with ddd4j-quarkus Subject providers, roles, permissions, request scope, and errors.…
ddd4j-quarkus-release
Use when validating, checking CI, publishing, or remotely consuming ddd4j-quarkus 3.3.x and 4.0.x with Maven 3 or 4, security status, module inventory, and…
burpsuite
Expert Burp Suite web penetration testing covering proxy interception, repeater, intruder fuzzing, and scan automation. Use when auditing web vulnerabilities,…
dependabot
Expert Dependabot automated dependency management covering daily/weekly vulnerability alerts, grouped updates, and PR automation. Use when configuring…
owasp-zap
Expert OWASP ZAP (Zed Attack Proxy) assistance covering automated vulnerability scanning, spidering, and DAST in CI/CD. Use when scanning web apps for OWASP…
trivy
Expert Trivy security scanner assistance covering container image scanning, filesystem CVEs, git repositories, and IaC misconfigs. Use when scanning Docker…