application-security
Application security covering threat modeling (STRIDE), OWASP Top 10 (2025), OWASP API Security Top 10 (2023), secure coding review,…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-16 00:02
Security & auditing
6,138 results
PHP Security Patterns
Use when essential PHP security patterns including input validation, SQL injection prevention, XSS protection, CSRF tokens, password hashing, secure session…
websocket
Real-time bidirectional communication with security focus on CSWSH prevention, authentication, and message validation
exploiting-websocket-vulnerabilities
Testing WebSocket implementations for authentication bypass, cross-site hijacking, injection attacks, and insecure message handling during authorized security…
pentest-r1-autonomous-penetration-testing
Two-stage reinforcement learning framework for training LLMs to perform autonomous penetration testing and CTF challenges
kernel-security
Linux kernel security skill for LSM, hardening, and exploit mitigations. Use when writing SELinux/AppArmor policies, seccomp-bpf filters, configuring…
smart-contract-security
Master smart contract security with auditing, vulnerability detection, and incident response
alicloud-security-cloudfw
Manage Alibaba Cloud Cloud Firewall (Cloudfw) via OpenAPI/SDK. Use whenever the user requests firewall policy/resource operations, change management, status…
owasp-top-10
OWASP Top 10:2025 security vulnerabilities. Covers access control, injection, supply chain, cryptographic failures, and more. Use for security reviews. USE…
Ethical Hacking Methodology
This skill should be used when the user asks to "learn ethical hacking", "understand penetration testing lifecycle", "perform reconnaissance", "conduct…
alicloud-security-id-verification-cloudauth
Manage Alibaba Cloud ID Verification (Cloudauth) via OpenAPI/SDK. Use whenever the user is working on identity-verification resource operations, config…
google-cloud-scc-remediation
Remediates Google Cloud Security Command Center findings, including IAM permission fixes, cloud resource misconfigurations, vulnerabilities, and Toxic…
auditing-terraform-infrastructure-for-security
Auditing Terraform infrastructure-as-code for security misconfigurations using Checkov, tfsec, Terrascan, and OPA/Rego policies to detect overly permissive IAM…
alicloud-security-center-sas
Manage Alibaba Cloud Security Center (Sas) via OpenAPI/SDK. Use whenever the user needs Security Center resource operations, configuration updates, status…
Pentest Commands
This skill should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john",…
solana-security-standard
Use the SOL-0XX Solana security standard to scan, detect, and prevent 37 classes of Solana program vulnerabilities ($514M+ in real exploits) across AI tools,…
varlock
Secure environment variable management with Varlock. Use when handling secrets, API keys, credentials, or any sensitive configuration. Ensures secrets are…
auth0-php-api
Use when protecting PHP API endpoints with JWT Bearer token validation or scope checks. Integrates auth0/auth0-php in API mode for stateless APIs receiving…
didit-id-document-verification
Verifies identity documents and digital ID wallets through Didit's standalone APIs. Use when an agent needs to verify a passport, ID card, driver's license or…
auditing-kubernetes-cluster-rbac
Auditing Kubernetes cluster RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous ClusterRoleBindings, service account…
404-frameworks-quarkus-security
Use when you need to design, review, or improve security in Quarkus applications — including Quarkus Security with JWT/OIDC, basic auth, @RolesAllowed /…
pii-redaction-logging-policy-builder
Prevents logging sensitive user data with redaction rules, logging policies, and safe log formatting. Use for "PII redaction", "log privacy", "GDPR logging",…
jellyfin-security-plugin
Add native two-factor authentication, passkeys, SSO, brute-force protection, and audit logging to Jellyfin media servers via server-side plugin.
php-codeigniter-audit
CodeIgniter framework feature security audit tool. Performs white-box static auditing of CodeIgniter mechanisms such as CSRF, XSS output filtering, database query construction, routing and validator configuration, and session cookie security, and maps them to a general vulnerability type system (CSRF/AUTH/XSS/SQL/CFG/SESS, etc.).