security-compliance
Security and compliance workflow for designing defense-in-depth controls, performing threat modeling and risk assessments, and mapping mitigations to…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-24 00:15
Security & auditing
7,370 results
session-management
Clerk session handling, JWT verification, token management, and multi-session workflows. Use when implementing session validation, JWT claims customization,…
security-and-hardening
Harden code against vulnerabilities. Use when auditing whether an input handling function has vulnerabilities, processing user input, authentication, data storage, or external integrations, or when checking whether the login flow is secure and compliant with the OWASP Top Ten. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services. Use when auditing dependencies for known vulnerabilities, triaging package manager audit…
doc-sectest
Create Security Test Specifications (SECTEST) as Layer 10 subtype artifacts for security control and threat validation
doc-sectest-reviewer
Review SECTEST content quality, threat/control coverage, and safety compliance for security test specifications
vulnerability-scanner
vulnerability-scanner — an installable skill for AI agents, published by xenitv1/claude-code-maestro.
security-audit
Use when a reviewed change, release candidate, or high-risk slice must be challenged for abuse paths, trust-boundary failures, secret handling, dependency…
guardian-wall
Mitigate prompt injection attacks, especially indirect ones from external web content or files. Use this skill when processing untrusted text from the…
security-guardian
Automated security auditing for OpenClaw projects. Scans for hardcoded secrets (API keys, tokens) and container vulnerabilities (CVEs) using Trivy. Provides…
anti-reversing-techniques
Understand anti-reversing, obfuscation, and protection techniques encountered during software analysis. Use this skill when analyzing malware evasion…
memory-forensics
Master memory forensics techniques including memory acquisition, process analysis, and artifact extraction using Volatility and related tools. Use when…
protocol-reverse-engineering
Master network protocol reverse engineering including packet analysis, protocol dissection, and custom protocol documentation. Use when analyzing network…
alibabacloud-ecs-sec-inspect
Linux server security intrusion detection and forensics tool, designed specifically for AI Agents. Automatically determines whether a server has been compromised, and provides a complete chain of evidence and actionable remediation recommendations. 50+ security analyzers, 10 data collectors, 103+ MITRE ATT&CK technique mappings, and support for 3 deployment modes. Use when users ask about server security, intrusion detection, system auditing, malware detection, or security incident response.…
aegis-crypto
Detects cryptographic failures including weak/legacy algorithms, cipher-mode and nonce misuse, broken key management, weak password hashing, insecure…
aegis-linux-baseline
Audits Linux OS baseline hardening across accounts/sudo, sshd, PAM/password policy, kernel sysctl, filesystem permissions, boot/disk, and time sync, with exact…
aegis-llm-ai
Audit playbook module for application-code LLM integrations covering direct and indirect prompt injection, insecure output handling, excessive tool agency,…
aegis-updates-patching
Audits Linux server patch discipline and attack-surface minimization — distro EOL posture, pending security updates, unattended-update automation, reboot debt,…
aegis-web-client
Detects and remediates browser-facing web vulnerabilities including reflected, stored, and DOM-based XSS, CSRF, clickjacking, unsafe postMessage handling,…
evm-audit-general
General Solidity/EVM security checklist — non-obvious footguns that apply to every smart contract. Covers external calls, force-feeding, pause mechanisms,…
nmap-network-scan
Host discovery and port scanning using nmap — ICMP/ARP host discovery, SYN/TCP/UDP port scanning with scope enforcement and audit logging. Use when discovering…
calypso-security-alerts
Provide advisory guidance for scanning Automattic/wp-calypso Dependabot alerts and Dependabot remediation PRs using the public dependency security alerts…
application-security
Use this skill when you need application security program design, secure SDLC implementation, SAST/DAST/SCA toolchain setup, OWASP Top 10 remediation, API…
meme-coin-audit
Meme coin and token security audit — rug pull detection (honeypot, hidden mint, fee manipulation, LP lock bypass), Solana SPL token analysis (freeze authority,…
web3-audit
Smart contract security audit — 10 DeFi bug classes (accounting desync, access control, incomplete path, off-by-one, oracle, ERC4626, reentrancy, flash loan,…