security-scanning
Use when checking code for vulnerabilities, linting shell scripts, scanning containers or IaC for security issues, or managing encrypted secrets
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-28 00:17
Security & auditing
7,580 results
stackblitz-security-basics
Threat-model a WebContainer or StackBlitz embed across host, runtime, user-code, filesystem, dependency, network, preview, secret, and persistence boundaries.…
techsmith-security-basics
Harden Snagit and Camtasia automation around capture consent, license secrecy, local storage, share destinations, least privilege, and artifact review. Use…
together-security-basics
Secure Together AI integrations with project-scoped keys, environment isolation, prompt/output data controls, bounded model behavior, safe logging, rotation,…
tracing-transitive-vulnerabilities
Build a dependency-tree map of a project (npm or Python) and trace the path from each known-vulnerable transitive package back to one or more direct…
vercel-security-basics
Apply Vercel security best practices for secrets, headers, and access control. Use when securing API keys, configuring security headers, or auditing Vercel…
windsurf-audit-logging
Configure AI interaction audit logging for compliance. Activate when users mention "audit logging", "compliance logging", "ai interaction logs", "security…
windsurf-code-privacy
Configure code privacy and data retention policies. Activate when users mention "code privacy", "data retention", "privacy settings", "data governance", or…
windsurf-dependency-management
Analyze and update dependencies with vulnerability scanning. Activate when users mention "update dependencies", "security audit", "npm audit", "vulnerability…
windsurf-enterprise-sso
Configure enterprise SSO integration for Windsurf. Activate when users mention "sso configuration", "single sign-on", "enterprise authentication", "saml…
workhuman-security-basics
Define shared-responsibility security controls for Workhuman identity, workforce data, recognition, awards, Store, and integrations. Use when reviewing threats…
audit-skill
Comprehensive audit capabilities for security, code quality, module structure, compliance, and performance analysis. Use this skill when performing security…
security-audit
Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews,…
jwt-auth
JWT authentication with access/refresh tokens, RBAC, and multi-tenant support. Trigger: jwt, authentication, auth, token, rbac, authorization, login
reverse-engineering
Use when an answer depends on how compiled software actually works: decompiling or disassembling native, .NET, IL2CPP, Java, JavaScript, or ROM code; finding…
echidna
Echidna property-based fuzzer for Solidity — property mode, assertion mode, optimization mode, invariant writing, corpus management, config tuning, and Foundry…
hyperlane
Hyperlane permissionless interoperability — Mailbox messaging, Interchain Security Modules (ISM), Warp Routes for token bridging, hooks, interchain accounts,…
mythril
Mythril symbolic execution for Solidity — deep vulnerability detection via multi-transaction analysis, reentrancy, integer overflow, unchecked calls, and…
openzeppelin
OpenZeppelin Contracts v5 for building secure smart contracts. Covers ERC-20/721/1155 tokens, access control (Ownable, AccessControl, AccessManager), security…
polymarket
Polymarket CLOB prediction market integration — authentication (L1/L2 HMAC signing), order placement (limit, market, GTC, GTD, FOK), orderbook reading, market…
solidity-auditor
Security audit of Solidity code while you develop. Trigger on "audit", "check this contract", "review for security". Modes - default (full repo), DEEP (+…
solidity-security
Comprehensive Solidity security patterns, vulnerability prevention, and audit preparation. Covers reentrancy, access control, token decimals, oracle…
cyber-risk-assessment
Cybersecurity risk assessment engine using NIST CSF 2.0, ISO 27001, and CIS Controls v8. Produces maturity assessments, threat landscape analyses, control gap…
access-control-designer
Design application roles, a permission matrix, and permission-gated UI for the product you are building — Pundit policies on the Rails API, CASL gates for…