review-pr
Review a Deno runtime pull request for correctness, tests, security, and conventions. Use when asked to review a PR or when a PR number/URL is provided for…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-24 00:15
Security & auditing
7,387 results
security
Security & Data Integrity (Architect Level)
enterprise-readiness
Use when evaluating projects for production or enterprise readiness, implementing supply chain security (SLSA, cosign, SBOMs, pnpm), hardening CI/CD pipelines,…
security-audit
Use when conducting security assessments — OWASP Top 10 / API / LLM, CWE Top 25, CVSS scoring — auditing PHP/TYPO3, APIs, frontend, Terraform/K8s/Docker IaC,…
security-incident-reporting
Builds security incident reports, DDoS post-mortems, timelines, IoC sections, CVE correlation, severity scoring, and blameless root cause analysis. Use when…
typo3-scheduler-jobs
Audits, plans, configures, groups, and verifies TYPO3 14.3 Scheduler tasks for a specific installation, including Core cache/table/privacy/FAL maintenance,…
api fuzzing for bug bounty
This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API…
skill-auditor
Use when the user wants to audit, vet, review, or security-check an agent skill before installing it — given a GitHub URL, an `owner/repo` shorthand, a raw…
encrypted-saved-objects
Encrypted Saved Objects (ESO) in Kibana — registration, AAD attribute choices, partial update safety, model version migrations with createModelVersion,…
security-burpsuite-project-parser
Parse and analyze Burp Suite project files, HTTP history, and scan results. Use when extracting findings from Burp Suite exports, analyzing intercepted HTTP…
security-constant-time-analysis
Analyze code for timing side-channel vulnerabilities and ensure constant-time operations for security-sensitive comparisons. Use when reviewing cryptographic…
semgrep-rule-creator
Create custom Semgrep rules for detecting security vulnerabilities and code patterns. Use when writing new Semgrep YAML rules, defining taint tracking…
semgrep-rule-variant-creator
Create variant Semgrep rules from existing detections to catch related vulnerability patterns. Use when extending a Semgrep rule to cover additional code…
fusion-dependency-review
Review dependency PRs with structured research, existing-PR-discussion capture, multi-lens analysis (security, code quality, impact), and a repeatable verdict…
oma-qa
Quality assurance specialist for security, performance, accessibility, comprehensive testing, and quality standard alignment. Use for test, review, security…
data-flows
This skill should be used when the user asks to "map data flows", "trace data through the system", "show how data moves", "identify trust boundaries", "find…
harden
This skill should be used when the user asks to "harden code", "security hardening", "improve security posture", "add security headers", "tighten security",…
regression
This skill should be used when the user asks to "check for regressions", "verify fixes still hold", "regression test security", "check for reintroduced…
run
This skill should be used when the user asks to "run security scan", "scan for vulnerabilities", "security check", "check security", or invokes /appsec:run.…
websocket
This skill should be used when the user asks to "check WebSocket security", "analyze WebSocket authentication", "find WebSocket vulnerabilities", "audit…
V3 Security Overhaul
Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for…
eval-oauth
Use for `/eval-oauth` requests and eval-oauth account connection or auth-flow test requests. You must run the eval identity check before answering anything…
better-auth
Implement authentication and authorization with Better Auth - a framework-agnostic TypeScript authentication framework. Features include email/password…
gcp-agent-model-armor-shield
Configures Model Armor security policies (Prompt Injection, Jailbreak, RAI filters).