sbom_syft
The English introduction is being prepared.
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-24 00:15
Security & auditing
7,386 results
google-cloud-waf-security
Generates security-focused guidance for Google Cloud workloads based on the Google Cloud Well-Architected Framework (WAF). Use to evaluate a workload, identify…
security-monitor
Real-time security monitoring for Clawdbot. Detects intrusions, unusual API calls, credential usage patterns, and alerts on breaches.
fix-review
Verify fix commits address audit findings without new bugs
redis-security
Master Redis security - authentication, ACL, TLS encryption, network hardening, and production security best practices
security-check
Run automated security checks on codebases. Scan source code, configurations and dependencies for vulnerabilities with Semgrep, Trivy and Gitleaks.…
security-scan
Comprehensive security scanning for CVE vulnerabilities, OWASP Top 10 code patterns, and dependency audits. Use when the user wants to check code security,…
security scanning tools
This skill should be used when the user asks to "perform vulnerability scanning", "scan networks for open ports", "assess web application security", "scan…
typo3-security
Hardens TYPO3 v14 installations and extensions: secure configuration, trusted hosts, file permissions, locking down the Install Tool, backend user accounts and…
when-auditing-security-use-security-analyzer
Comprehensive security auditing across static analysis, dynamic testing, dependency vulnerabilities, secrets detection, and OWASP compliance
cc-time-zone-safety
Timezone safety check to prevent statistical disorder caused by timezone drift in production environments.
attack-tree-construction
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to…
ios-binary-size-reduction
Use when an iOS app binary/app package needs size reduction with risk-aware optimization, security-aware checks, and verifiable build/runtime evaluation so…
differential-review
Performs security-focused differential review of code changes (PRs, commits, diffs). Load for security audit, regression review, auth/crypto/access-control…
security-ask-questions-if-underspecified
Ensure thorough security analysis by identifying and asking clarifying questions when requirements, threat models, or context are underspecified. Use when a…
security-audit-context-building
Build comprehensive context before performing a security audit by mapping architecture, identifying trust boundaries, cataloging sensitive data flows, and…
security-building-secure-contracts
Guide secure smart contract development with best practices for Solidity, Rust (Solana/CosmWasm), and Move. Use when writing, reviewing, or hardening smart…
security-culture-index
Assess and improve an organization's security engineering culture by evaluating codebase practices, CI/CD security hygiene, dependency management, and security…
security-differential-review
Perform security-focused differential code review on changesets, pull requests, and commits. Use when reviewing diffs for security implications, assessing…
security-dwarf-expert
Analyze DWARF debug information in ELF binaries for security research. Use when parsing DWARF sections, recovering type information from binaries, analyzing…
security-entry-point-analyzer
Map and analyze application entry points for security assessment. Use when identifying attack surface, cataloging API endpoints, finding exposed interfaces,…
security-firebase-apk-scanner
Scan Android APKs for Firebase misconfigurations and exposed credentials. Use when analyzing Android applications for insecure Firebase configurations, leaked…
security-fix-review
Review security patches and fixes for completeness and correctness. Use when evaluating whether a security fix actually addresses the root cause, checking for…
security-insecure-defaults
Identify and fix insecure default configurations in applications, frameworks, and infrastructure. Use when auditing default settings, reviewing configuration…