variant-analysis
Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, analyzing…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-24 00:15
Security & auditing
7,370 results
framework-compliance-triage
Make a cloud account compliant with a security or industry framework using Prowler Cloud.
maui-authentication
A brief description of what this skill does
privacy-policy
Generate privacy policies, terms of service, and EULAs for Apple platform apps. Detects data collection patterns, third-party SDKs, and generates…
phoenix-ambiguity-hunter
Role 05 of the Phoenix Security spec pipeline. Red-teams normative requirements for Phoenix-specific failure modes: multi-tenant isolation gaps, vague…
phoenix-batch-planner
Role 09 of the Phoenix Security spec pipeline. Slices a Phoenix Security feature into safe, incremental batches sized for a 12-person team (1–3 engineer-days…
phoenix-constraint-distiller
Role 03 of the Phoenix Security spec pipeline. Distils SCOPE_DEFINITION into an ACTIVE_SET of 8–15 compact, testable constraints that govern all downstream…
phoenix-requirements-engineer
Role 04 of the Phoenix Security spec pipeline. Converts Phoenix Security feature intent into testable RFC 2119 requirements with structured IDs (R-FUNC, R-SEC,…
phoenix-scope-cutter
Role 02 of the Phoenix Security spec pipeline. Converts CLEAN_CONTEXT into an explicit, minimal SCOPE_DEFINITION — goals, non-goals, in/out boundaries,…
phoenix-security-engineer
Role 06 of the Phoenix Security spec pipeline. Produces a threat model and security requirements grounded in Phoenix Security's actual architecture: 6 trust…
phoenix-verification-matrix
Role 08 of the Phoenix Security spec pipeline. Maps every MUST/MUST NOT to a concrete proof method using Phoenix's proof type hierarchy: unit-test,…
production-readiness-review
Adversarial senior/staff-engineer review that verifies a real codebase against its PRD, plan, or implementation plan and decides whether it is genuinely…
codepatrol-sync-state
Reflect the status of pull requests that fix issues detected in security investigations on the triage page and investigation reports. Executed by a subagent launched by the codepatrol skill. It is not assumed that the user will call it directly.
dp-session-forensics-cloud
DeepWorks session forensics, one entry point manages both local and cloud. --source teams queries Agent Teams cloud sessions (the cloud API pulls the session list/message details, and the IAM token is automatically synced from the logged-in desktop client); --source local forwards to the local version to query the local opencode.db. When the user says "query cloud sessions", "agent teams…
agy-auto
Configure agy-auto PreToolUse security gate to run Antigravity CLI (agy) unattended with layered policy controls instead of --dangerously-skip-permissions.
ai-agent-security
Secure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls.
aws-compliance-checker
Automated compliance checking against CIS, PCI-DSS, HIPAA, and SOC 2 benchmarks
kinde-authorization
Kinde authorization: designs, provisions, assigns, enforces, refreshes, and verifies permission-first RBAC for organizations. Use when designing roles or…
configure-authentication
Use when setting up Speakeasy auth or troubleshooting auth errors. Triggers on "set up API key", "configure auth", "speakeasy auth login", "unauthorized…
offensive-security
Instruction-only autoresearch skill for offensive validation of defensive security findings. Use when the user asks to validate exploitability, run an…
sqlmap
Detect and exploit SQL injection with sqlmap. Use when a user asks to test for SQL injection, extract database contents, bypass authentication via SQLi,…
webhook-security
Secure webhook endpoints. Use when a user asks to verify webhook signatures, prevent replay attacks, handle webhook retries, or implement secure webhook…
xss-detection
Detect, exploit, and prevent Cross-Site Scripting (XSS) vulnerabilities in web applications. Use when tasks involve testing for reflected, stored, or DOM-based…
gog-safety
Build and deploy safety-profiled gogcli binaries with compile-time command removal. Use when setting up gog for an AI agent with restricted permissions —…