skill-vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-27 00:15
Security & auditing
7,568 results
abel-auth
Use when Abel auth is missing, expired, invalid, or needs initialization.
secure-my-app
Find what a stranger can take from your app. Then close it and prove it closed. Every finding carries the command that shows the hole and the output it…
secure-dependencies
Harden dependency resolution and supply-chain policy in the current repository.
better-auth-best-practices
Skill for integrating Better Auth - the comprehensive TypeScript authentication framework. Use when working with better-auth / authentication related code.
web-security
Enforce web security and avoid security vulnerabilities. Use when handling user input, managing authentication/sessions, or other security-related tasks.
oci iam and identity management
Expert in Oracle Cloud Infrastructure Identity and Access Management (IAM), IDCS integration, policies, users, groups, dynamic groups, and authentication.…
oci vault and secrets management
Manage secrets, encryption keys, and certificates using Oracle Cloud Infrastructure Vault service. Complete CLI reference for secure credential storage and key…
oci-vault
Manage secrets in Oracle Cloud Infrastructure Vault via MCP. Provides 12 tools for complete secret lifecycle management including listing, searching, creating,…
x-twitter-viral-radar
Use when setting up, checking, tuning, troubleshooting, or removing X/Twitter Viral Radar - a local cron automation that scans the user's authenticated X…
redteam
Use when the user wants to test their LLM/agent application for safety and security vulnerabilities — jailbreaks, prompt injection, PII extraction, harmful…
signing-in-to-agent-relay-cloud
Sign a person in to Agent Relay Cloud from a running agent session through the OAuth device flow, with no API key or dashboard wizard - start the device grant,…
tango
Use when installing, configuring, upgrading, testing, or debugging Tango OAuth connections in Elixir/Phoenix, including refresh failures, tenant-scoped…
pya
Audits a codebase for security problems with parallel read-only specialist agents and a verifier pass. Covers code vulnerabilities, authorization, secrets,…
attack-tree-construction
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to…
find-bugs
Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit…
sast-configuration
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning,…
security-compliance
Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR,…
Security Scanning Tools
This skill should be used when the user asks to "perform vulnerability scanning", "scan networks for open ports", "assess web application security", "scan…
senior-security
Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security…
solidity-security
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts,…
file-security-toolkit
Encrypt/decrypt local files, redact sensitive information in documents, and validate password strength when handling private data or preparing files for…
waste-disposal-guide
Guide for disposing specific chemical wastes into the correct colored waste containers, with safety precautions and regulatory compliance notes.
binary-analysis
Analyze binary files (exe, dll, sys, bin, ocx, scr, cpl, drv) to assess if they are malicious, perform decompilation, extract strings/imports/exports, detect…