security-review
Use when auditing code for security vulnerabilities, OWASP flaws, and secret leaks
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-28 00:17
Security & auditing
7,578 results
git-safety-guardrails
Safeguard repositories against destructive, irreversible, or history-rewriting Git operations. Use when running force pushes, hard resets, branch deletions,…
tauri-impl-security
Use when hardening Tauri 2 app security, configuring CSP, reviewing permissions, or implementing isolation patterns. Prevents overly permissive CSP, disabled…
node-october-2026-security
Audits a Node.js repository against the October 2026 Security Release (CVE-2026-111497 Brotli out-of-bounds write/RCE, TLS hostname bypass, dns.resolve NUL,…
audit-xcode-security-settings
Audit and enable security-oriented Xcode build settings. Progressively enables compiler warnings, static analyzer checkers, and Enhanced Security features. Use…
security-secrets
Review secret detection patterns and scanning workflows. Use for identifying high-signal secrets like AWS keys, GitHub tokens, and DB passwords. Use…
apify-security-basics
Secure Apify API tokens, configure proxy access, and protect Actor data. Use when hardening API key management, setting up environment-specific…
appfolio-security-basics
Secure AppFolio API credentials and tenant data. Trigger: "appfolio security".
apple-notes-security-basics
Apply security best practices for Apple Notes automation scripts. Trigger: "apple notes security".
clickhouse-enterprise-rbac
Configure ClickHouse enterprise RBAC — SQL-based users, roles, row policies, column-level grants, and quota management. Use when setting up multi-user access…
composing-vulnerability-report
Read findings JSONL files from cluster 1-4 skills, deduplicate by fingerprint, group by severity, and compose a deliverable- grade markdown vulnerability…
coreweave-enterprise-rbac
Configure RBAC and namespace isolation for CoreWeave multi-team GPU access. Use when managing team permissions, isolating GPU quotas, or implementing…
coreweave-security-basics
Secure CoreWeave deployments with RBAC, network policies, and secrets management. Use when hardening GPU workloads, managing model access, or configuring…
fathom-security-basics
Secure Fathom API keys and handle meeting data privacy. Trigger with phrases like "fathom security", "fathom api key safety", "fathom privacy".
finta-security-basics
Secure Finta fundraising data and investor information. Trigger with phrases like "finta security", "finta data privacy".
fondo-security-basics
Apply security best practices for Fondo including OAuth token management, financial data protection, SOC 2 compliance, and access control. Trigger: "fondo…
glean-security-basics
Token security: Indexing tokens have write access -- never expose in frontend. Trigger: "glean security basics", "security-basics".
grammarly-security-basics
Security fundamentals for Grammarly API credential management. Use when setting up secure authentication and token handling for Grammarly integrations.
guidewire-security-and-rbac
Lock down a Guidewire Cloud API integration so it survives a SOC 2 audit, an NAIC Model Audit Rule review, and a real-world incident — least-privilege role…
hex-security-basics
Apply Hex security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Hex security…
hootsuite-security-basics
Apply Hootsuite security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Hootsuite…
hubspot-enterprise-rbac
Configure HubSpot enterprise access control with OAuth scopes and team permissions. Use when implementing role-based access, configuring per-team HubSpot…
hubspot-security-basics
Apply HubSpot security best practices for tokens, scopes, and webhook verification. Use when securing private app tokens, implementing least privilege…
intercom-data-handling
Implement Intercom data handling for GDPR, contact export, data retention, and PII. Use when handling sensitive Intercom contact data, fulfilling a data…