skill-intake-sandbox-gate
Intake gate for external AgentSkills/MCP tools. Use when reviewing, importing, or rewriting third-party skills (ClawHub/MCP Market/GitHub) into misskim-skills.…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-24 00:15
Security & auditing
7,384 results
triage-three
This skill should be used when the user asks for adversarial code review, security audit, bug triage, architecture review, or any deep analysis that benefits…
cra-vulnerability-obligations
Use when a user asks what the EU Cyber Resilience Act (CRA) means for their product, whether and when they must report a vulnerability or incident, or what a…
decision-ownership-audit-ignacio-adrian-lerer
Audits AI-assisted legal, compliance, governance, and institutional decisions before reliance to determine whether the responsible human or institution has…
dpdpa
Expert India Digital Personal Data Protection Act, 2023 (DPDPA) compliance advisor. Use this skill whenever a user asks about the DPDPA, DPDP Act, DPDP Rules…
indian-dpdp-act-consent-notice-siddhi-kudalkar
Draft or review a DPDPA-compliant consent notice under India's Digital Personal Data Protection Act, 2023 and DPDPA Rules, 2025. Provide basic details about…
ism
Expert Australian Information Security Manual (ISM) advisor for government entities and their supply chains. Use for ISM control selection, gap analysis,…
iso27001
Expert ISO 27001 compliance assistant for security and compliance teams. Use this skill whenever a user asks about ISO 27001 or ISO/IEC 27001, including any of…
iso27701
Expert ISO 27701 Privacy Information Management System (PIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 27701:2025, ISO/IEC…
nist-csf
Expert NIST Cybersecurity Framework (CSF) advisor covering CSF 2.0 and CSF 1.1. Use this skill whenever a user asks about NIST CSF, cybersecurity risk…
nzism
Expert New Zealand Information Security Manual (NZISM) advisor for NZ government agencies and their supply chains. Use for NZISM control guidance, gap…
pci-compliance
Expert PCI DSS compliance advisor covering PCI DSS v4.0.1 (current) and v4.0. Use this skill whenever a user asks about PCI DSS, payment card security,…
regulatory-threat-model
Use when an application or system — including one built quickly with AI coding agents — needs a security review with regulatory grounding: a STRIDE threat…
swift-csp
Expert SWIFT Customer Security Programme (CSP) advisor covering the Customer Security Controls Framework (CSCF v2026). Use this skill whenever a user asks…
tsa-compliance
Expert TSA cybersecurity compliance advisor for critical infrastructure owners and operators. Use this skill whenever a user asks about TSA Security Directives…
local-file-encrypt
Encrypt and decrypt local files using strong encryption. Protect sensitive documents with password-based AES-256 encryption, all processed locally.
privacy-auditor
Scan for privacy risks on the local system - exposed credentials, overly permissive files, tracking cookies, and sensitive data in public directories.
security-review
Perform a thorough security review of the project, starting from a randomly selected file. Use this skill when the user asks for a security review, security…
health
Holistic project audit across endpoints, versions, docs, security, quality, CI, and library dimensions. Use when checking overall project health or running a…
security-verify
Run security verification — SAST pattern scanning, DAST against a running app, OWASP Top 10 compliance, CVSS assessment, and adversarial code audit. Use before…
diagnosing-dependabot-alerts
Diagnoses GitHub Dependabot / security alerts in the Medusa monorepo and finds the least-invasive fix. Use when investigating a Dependabot alert, security…
forge-security
OWASP Top 10 security audit identifying authentication, injection, and data exposure risks.
bitcoin-auth-diagnostics
Diagnose and troubleshoot bitcoin-auth token generation and verification issues. This skill should be used when users encounter authentication failures,…
sast-configuration
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning,…