security-compliance-compliance-check
You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards.…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-24 00:15
Security & auditing
7,384 results
web-security
Enforce web security and avoid security vulnerabilities
reverse-engineer
Use when reverse engineering binaries, firmware, mobile apps, JavaScript/Electron apps, .NET assemblies, network protocols, or malware samples; when…
mint
Intelligent Linux system assistant for Cinnamon-based desktops - directive-based workflows for security, updates, GPU, desktop customization, and…
security-best-practices
Implement security best practices for web applications and infrastructure. Use when securing APIs, preventing common vulnerabilities, or implementing security…
gh-repo-mirror
Scaffold a new GitHub repo that mirrors an existing reference repo's general settings, branch-protection rules, security flags, and (optionally) its GitHub…
arc-sf-jwt-bearer
Generates RSA keypairs and tests JWT bearer token flow against Salesforce orgs. Use when setting up server-to-server auth, creating Connected Apps with JWT, or…
role-info
Compact summary of 1C role rights from Rights.xml — objects, rights, RLS, restriction templates. Use it for rights auditing — which objects and actions are available,…
aegis-baas-platform
Audits Backend-as-a-Service and managed-platform configuration - Supabase RLS, Firebase security rules, connection-string databases, serverless host exposure,…
aegis-business-logic-races
Audit playbook module for business logic flaws and race conditions covering workflow and state-machine bypass, price and amount tampering, check-then-act…
aegis-email-sms
Audit playbook module for email and SMS/OTP flows, covering outbound spoofing protection evidence (SPF/DKIM/DMARC artifacts), sending-infrastructure and…
aegis-gaming-security
Audit playbook module for video-game and multiplayer-service backends, hunting client-trust violations in simulation authority, movement and action validation,…
evm-audit-defi-lending
CDP, lending market, liquidation, and borrowing vulnerabilities. Covers collateral handling, health factors, auction liquidations, bad debt, interest accrual,…
evm-audit-defi-staking
Liquid staking derivatives (stETH, rETH, cbETH, sfrxETH), LRTs, restaking, staking rewards, and yield farming vulnerabilities. Load when auditing staking…
evm-audit-dos
EVM smart contract audit checklist for denial-of-service and griefing attacks. Covers gas griefing, unbounded loops, returndata bombing, block stuffing, and…
evm-audit-proxies
Proxy and upgrade vulnerabilities including UUPS, transparent proxy, beacon proxy, storage collisions, metamorphic contracts, initializer issues, and function…
gtrace-ip-enrichment
IP address enrichment — ASN ownership lookup, geolocation (city/region/country/coordinates), and reverse DNS resolution. Use when identifying who owns an IP…
dn-privacy
Set WHOIS privacy for a domain using the dn CLI. Use when the user wants to enable, disable, or change the privacy/redaction settings for domain WHOIS records.…
dn-reset
Remove stored dn CLI configuration and credentials. Use when the user wants to clear their saved credentials, start fresh, or switch between authentication…
iam
Design and review AWS IAM configurations. Use when creating IAM policies, roles, permission boundaries, SCPs, configuring Identity Center (SSO), analyzing…
jis-accessibility
Use when auditing websites for Japanese accessibility compliance, checking JIS X 8341-3 conformance, or advising on Japan's Act for Eliminating Discrimination…
e2e-auth-flow
Write E2E tests for full auth flows (register, login, logout, reset, protected routes) with session reuse. Use when testing authentication, session handling,…
idor-fix
Identify and fix Insecure Direct Object Reference (IDOR) vulnerabilities. Use this skill when the user mentions IDOR, sequential IDs, guessable IDs, object…
rbac-implementation
Implement or audit role-based access control (RBAC). Use when the user asks about roles, permissions, admin restrictions, route protection, permission checks,…