security-engineer
The English introduction is being prepared.
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-24 00:15
Security & auditing
7,383 results
codebase-cleanup-deps-audit
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for…
security
Rapid security assessment focused on OWASP Top 10 vulnerabilities
security-audit
Comprehensive security audit with scored posture assessment
security-check
Quick configuration security check against known threats database
bt-security-audit
Security audit expert for BT Panel-deployed servers: checks abnormal processes, SUID files, Webshells, SSH security, login logs, suspicious scheduled tasks, intrusion signs, password policies. Use this skill when the user wants to perform a security compliance check on a BT Panel server.
go-tooling-security
Use when setting up Go modules/workspaces, configuring golangci-lint v2, running govulncheck, or building a Go CI quality gate. Not for app logic or non-Go…
start-auth
Use when adding auth to a TanStack Start app — route protection, server-function authorization, sessions, CSRF. Do NOT use for generic route guards.
security-scanner
Comprehensive security scanner for vulnerabilities, hardcoded secrets, and OWASP Top 10 issues
security-review
Threat-model-driven security review of a change, feature, or subsystem. Runs a STRIDE-style pass (Spoofing, Tampering, Repudiation, Info disclosure, Denial of…
security-documentation
Maintain comprehensive security documentation including SECURITY_ARCHITECTURE.md, THREAT_MODEL.md per Hack23 ISMS standards
echidna
Property-based fuzzing and assertion testing for Ethereum smart contracts with Echidna.
flutter-security
Secure Flutter token/PII storage, build-time secrets, network trust, and release hardening using OWASP Mobile practices. Use for secure storage, secret…
iblai-api-agent-audit
Read an ibl.ai agent's audit log via the platform API — a who-changed-what trail filterable by action, actor email, and date range. Read-only. Use when…
axum-impl-auth-jwt
Use when adding stateless JWT authentication to an Axum service, when a login route must issue a bearer token, when handlers must require a valid token, or…
axum-impl-auth-session
Use when an Axum app must authenticate users with server-side sessions instead of self-contained tokens: a server-rendered web app with a login form, a flow…
axum-impl-authorization
Use when an Axum app must decide whether an already-authenticated user is allowed to reach a route: protecting an /admin section, gating an endpoint behind a…
security-review
Security-review a change by reasoning about what it does to the system's trust boundaries — not by grepping for scary strings — and report only reachable,…
analyze-dependencies
Audit project dependencies for risk when the user asks to check dependencies, audit packages, review dependency health, check for vulnerabilities, or assess…
performing-security-audits
Analyze code, infrastructure, and configurations by conducting comprehensive security audits. It leverages tools within the security-pro-pack plugin, including…
api-security
Guideline for designing, implementing, and verifying secure APIs following OWASP API Security Top 10 (2023) best practices. Use when the user wants to: (1)…
writeup-generator
Generate comprehensive CTF writeups as blog articles. Use when solving a challenge, documenting solutions, or when /writeup command is invoked.
blockchain-purple-team
Meta-security analysis that finds structural gaps missed by Black Team (historical patterns) and Red Team (novel techniques). Use when analyzing why audits…
blockchain-red-team
Offensive penetration testing of blockchain protocols using novel attack techniques beyond known historical incidents. Use when performing advanced security…