security-reviewer
Use when conducting security audits, reviewing code for vulnerabilities, or analyzing infrastructure security. Invoke for SAST scans, penetration testing,…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-27 00:15
Security & auditing
7,492 results
skills-audit
Audit locally installed agent skills for security/policy issues using the SkillLens CLI (`skilllens scan`, `skilllens config`). Use when asked to scan a skills…
aircrack-ng
Audit Wi-Fi networks with the aircrack-ng suite. Use when a user asks to test their own wireless network, capture WPA2 handshakes, crack captured handshakes…
breach-data
Check for data breaches and credential leaks using HaveIBeenPwned API and other sources. Use when: checking if an email or domain is in a known breach,…
ccpa-compliance
California Consumer Privacy Act (CCPA) / CPRA compliance for businesses handling California resident data. Use when serving California users, building privacy…
censys
Censys search engine for internet-connected hosts, TLS certificates, and domains. Use when: certificate transparency monitoring, finding hosts by certificate…
gcp-waf-security
Apply the Google Cloud Well-Architected Framework's Security pillar — security by design, zero trust with IAP and BeyondCorp, shift-left scanning in…
ghidra
Ghidra is an open-source reverse engineering suite from the NSA that disassembles and decompiles compiled programs so their behaviour can be read and scripted.…
whatweb
Identify web technologies, frameworks, CMS platforms, and server configurations on target websites. Use when tasks involve web technology fingerprinting,…
1password
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or…
healthcheck
Host security hardening and risk-tolerance configuration for OpenClaw deployments. Use when a user asks for security audits, firewall/SSH/update hardening,…
agentsec-probe-suite
Add the AgentSec probe library (200+ adversarial probes — injection, PII exfil, refusal evasion, destructive-tool-intent) to CI for pre-prod red-teaming.…
form-captcha
Use when reviewing public HTML forms (no authentication required to reach them) for bot and abuse protection mechanisms.
x-content-type
Use when auditing HTTP response headers on any web server or CDN for security hardening.
policy-agent
Creates secure Pundit authorization policies with comprehensive RSpec tests and scope restrictions. Use when adding authorization, restricting access, defining…
1password
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or…
api-security
Audit APIs for OWASP top 10 vulnerabilities, test authentication flows, validate input handling, and check rate limiting.
aws-secrets-manager
Manage AWS Secrets Manager secrets -- retrieve, create, and rotate.
azure-key-vault
Manage Azure Key Vault secrets, keys, and certificates.
dependency-audit
Audit project dependencies for vulnerabilities, outdated packages, license compliance, and supply chain risks.
security-scanning
Static analysis, dependency vulnerability scanning, secret detection, and container image scanning using open-source tools.
skills-audit
Audit locally installed agent skills for security/policy issues using the SkillLens CLI (`skilllens scan`, `skilllens config`). Use when asked to scan a skills…
veil
Privacy and shielded transactions on Base via Veil Cash (veil.cash). Deposit ETH into a private pool, withdraw/transfer privately using ZK proofs. Manage Veil…
terraform-security-scan
Perform security scanning and compliance checking of Terraform configurations for Azure. Use this skill when scanning for security issues, checking CIS/Azure…