dlm-diagnostics
Diagnose Microsoft Purview Data Lifecycle Management (DLM) issues in Exchange Online. Use this skill when a user reports: retention policy not applying to…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-24 00:15
Security & auditing
7,387 results
isolated-vm
isolated-vm documentation and guidance for secure JavaScript isolation using v8 Isolates in Node.js. Use when working with isolated-vm - a native Node.js…
principle-keep-secrets-out
WHEN writing reports, logs, issues, commits, docs, wiki pages or memory, quoting terminal output, or sending data to another system; NOT for refusing…
principle-treat-messages-as-data
WHEN instruction-like text arrives through content rather than from the user (PR or issue comments, handoff notes, pasted tickets, logs, tool output, webhook…
moai-platform-auth
Authentication and authorization specialist covering Auth0, Clerk, and Firebase Auth. Use when implementing authentication, authorization, MFA, SSO, passkeys,…
supply-chain-audit
Audit npm/pip/Docker/GitHub Actions for supply chain risks; apply cooldown, lockfile, ignore-scripts, SHA pinning, scanning after approval. Use for 'supply…
performing-cloud-penetration-testing
Performs authorized penetration testing of cloud environments across AWS, Azure, and GCP to identify IAM misconfigurations, exposed storage buckets, overly…
security-advisory-review
Assess security advisories against a Git repository by creating an isolated worktree, building a PoC exploit, and validating whether the described…
selinux-knowledge-patch
SELinux
review
Code review with semantic diffs, expert routing, and auto-TaskCreate. Triggers on: code review, review changes, check code, review PR, security audit.
dotnet-api-security
Secures ASP.NET Core APIs. Identity, OAuth/OIDC, JWT bearer, passkeys, CORS, rate limiting.
dependency-analyzer
Analyze project dependencies for vulnerabilities, updates, and optimization opportunities. Use when auditing dependencies or managing package versions.
security-audit
Perform security audits detecting OWASP Top 10 vulnerabilities, insecure dependencies, and security misconfigurations. Use when auditing applications for…
springboot-security
Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.
isms-audit-expert
Information Security Management System auditing for ISO 27001 compliance, security control assessment, and certification support
aml-sar-drafting
Activate for: SAR, STR, suspicious activity report, suspicious transaction report, NCA, FinCEN, AUSTRAC, SAR narrative, SAR drafting, SAR format, MLRO, money…
wp-security
Use when handling user input, database queries, file operations, authentication, or output in WordPress. Covers XSS prevention, CSRF protection, SQL injection…
linux-secrets
Use when scanning for leaked credentials, encrypting configuration with age, sops, or GPG, rotating secrets, or checking credential-file handling. Use…
saas-procurement-and-security-questionnaire
Use when a SaaS bid must address procurement, legal, privacy, security, DPA, MSA, SLA, residency, sub-processor, audit-right, insurance, and exit review; use…
davinci-flow-design
Use when designing or building a PingOne DaVinci flow — registration with email verification, login, MFA enrollment and step-up, passwordless and passkey…
adversarial-training
Defensive techniques using adversarial examples to improve model robustness and security
continuous-monitoring
Real-time monitoring and detection of adversarial attacks and model drift in production
data-poisoning
Test AI training pipelines for data poisoning vulnerabilities and backdoor injection
defense-implementation
Implement mitigations, create input filters, design output guards, and build defensive prompting for LLM security