ingest-cwe-taxonomies
Ingest the official MITRE CWE database and generate per-domain security audit taxonomies for PromptKit. Use this skill when the user wants to update CWE…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-25 00:14
Security & auditing
7,423 results
azure-identity-dotnet
Azure Identity library for .NET. Authentication library for Azure SDK clients using Microsoft Entra ID. Use for DefaultAzureCredential, managed identity,…
azure-rbac
Helps users find the right Azure RBAC role for an identity with least privilege access, then generate CLI commands and Bicep code to assign it. Also provides…
security-expert
Reviews Azure content for security vulnerabilities and best practice gaps. Use when asked to perform a security review of documentation.
security-auditor
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulnerability assessment, threat modeling,…
security-advisory
Take a privately reported vulnerability through this repo's security advisory flow: board it as a draft card, check whether the code is this repo's server or…
keycloak-principal-engineer
Principal/Senior-level Keycloak playbook for identity architecture, realms and clients, federation, authorization, operational security, and operating IAM…
nginx-ingress-principal-engineer
Principal/Senior-level NGINX Ingress playbook for traffic management, edge reliability, multi-tenant ingress governance, security controls, performance tuning,…
moai-platform-auth0
Auth0 security specialist covering attack protection, multi-factor authentication, token security, sender constraining, and compliance. Use when implementing…
moai-platform-clerk
Clerk modern authentication specialist covering WebAuthn, passkeys, passwordless, and beautiful UI components. Use when implementing modern auth with great UX.
moai-platform-firebase-auth
Firebase Authentication specialist covering Google ecosystem, social auth, phone auth, and mobile-first patterns. Use when building Firebase-backed or Google…
npm-upgrade
Upgrade npm/Node.js packages (including major versions), resolve warnings/errors, run security audit, extract CHANGELOGs, ensure Cloud Functions…
performing-transfer-impact-assessment
Guides the post-Schrems II Transfer Impact Assessment process following EDPB Recommendations 01/2020 six-step methodology. Covers assessment of third country…
pp-ashby
Printing Press CLI for Ashby. Unauthenticated, read-only access to currently published postings on a named Ashby job board.
document-privacy-audit
Perform full-text parsing, retrieval, and deep understanding of specified PDF or Office documents (.pdf/.docx/.xlsx/.pptx), identify and summarize private/sensitive information (PII, financial, health, account credentials, etc.), and output audit reports and risk alerts. Used for compliance review, data masking preparation, pre-release checks, or privacy scanning.
techdebt
Technical debt detection and remediation. Run at session end to find duplicated code, dead imports, security issues, and complexity hotspots. Triggers: 'find…
patent-risk-checker
Screen product patent/IP infringement risk by image/product context. Triggers: safe to sell, will I get sued, IP risk, FTO, patent clearance. Use for…
security-audit
Dispatch the security-auditor agent on the current branch diff with pre-gathered context. User-invocable only — does not auto-trigger on ambiguous phrasing.…
super-helper-tool
A helpful productivity tool
security-scan
Security scan: one comprehensive pass over a whole codebase — OWASP Top 10 detection (access control, crypto, injection, SSRF, logging), hardcoded secrets,…
dotnet-cryptography
Selects crypto algorithms and usage. Hashing, AES-GCM, RSA, ECDSA, PQC key derivation.
keyring-reference
Credential store terminology reference.
commit-security-scan
Analyze code changes (commits, PRs, diffs) for security vulnerabilities using STRIDE analysis and CWE mapping
security-scanning
Automated security scanning pipeline covering SAST (Semgrep), SCA (OWASP dependency-check), SBOM generation (Syft), vulnerability scanning (Grype), and secrets…