access-control-designer
Design application roles, a permission matrix, and permission-gated UI for the product you are building — Pundit policies on the Rails API, CASL gates for…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-28 00:17
Security & auditing
7,581 results
security-auditor
Audit code for security vulnerabilities, OWASP Top 10 issues, exposed secrets, and compliance gaps. Use this skill whenever someone asks to check security,…
account-abstraction
Starknet account abstraction correctness and security guidance for validate/execute paths, nonces, signatures, and session policies.
frappe-tweaks-ac-rules-expert
Expert guidance for creating, implementing, and troubleshooting AC (Access Control) Rules in Frappe Tweaks - an advanced rule-based permission system. Use when…
security-audit
Web application security audit covering OWASP Top 10, authentication, and data protection. Use when reviewing vulnerabilities, auth flows, API security, or…
security-audit
Help users conduct comprehensive security audits of code and projects, covering the OWASP Top 10, dependency vulnerabilities, sensitive information leakage, authentication and authorization, etc. Trigger words: security audit, security check, vulnerability scan, security assessment, help me check security issues, is this code secure, security audit, OWASP, vulnerability scan, security…
netra-pii-and-input-guardrails
Configure PII detection and prompt-injection scanning using Netra detectors and scanners.
qa-tester
AI Quality Assurance Specialist for Test Planning, Test Cases, and Bug Reporting. Strictly follows project docs. Covers Unit, E2E, Security, Performance.
code-security
Runs Semgrep security scans on the current project to detect vulnerabilities, secrets leakage, and OWASP Top 10 issues. Use when the user asks for security…
security-review
Review code for security vulnerabilities. Use when the user says 'security review', 'security audit', 'check for vulnerabilities', 'pentest the code', 'OWASP…
security-review
Review code for security vulnerabilities. Use when the user says 'security review', 'security audit', 'check for vulnerabilities', 'pentest the code', 'OWASP…
fnox
Manage secrets with the fnox CLI - a secrets management tool that bridges encrypted secrets in git with remote cloud providers. Use this skill when the user…
pnpm-audit-fix
Audits pnpm dependencies for security vulnerabilities, generates a pre-fix report for moderate-and-above issues, and applies fixes only after user…
npm-vulnerability-analysis
Comprehensive vulnerability analysis for npm packages across different versions. Use when Claude needs to: (1) Analyze security vulnerabilities for specific…
kortix-cli
Drive Kortix itself from the terminal with the `kortix` CLI — preinstalled and pre-authenticated in every session sandbox. Use whenever a task means acting on…
codebase-cleanup-deps-audit
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for…
dependency-management-deps-audit
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for…
ffuf-web-fuzzing
Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto-calibration, and result analysis
network-101
This skill should be used when the user asks to "set up a web server", "configure HTTP or HTTPS", "perform SNMP enumeration", "configure SMB shares", "test…
security-audit
Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening.
security-requirement-extraction
Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user…
security-scanning-security-dependencies
You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across…
semgrep-rule-creator
Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static…
age
age file encryption tool: invoked when the user asks about age, file encryption, encrypt file, decrypt file, age encryption, GPG alternative, or modern…