xxd
xxd hex decode piped to bash (non-base64 decode-and-exec)
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-28 00:17
Security & auditing
7,583 results
assurance-review
Scan for protective over-engineering in designs, code and Agent instructions, and judge whether verification, handoff, error-proofing and execution gates are worth keeping, simplifying, relocating or deleting. Used to check for duplicate safeguards, acceptance mechanisms turned into product features, false blocking and overly strict Agent loops; does not replace correctness, security audits or general code cleanup.
sitexray
Review web application source code for security issues, or run a passive security scan of a public website through SiteXray. Use for website security checks,…
lov-npm-publisher
Set up a no-repeated-login automated publishing chain for new or existing npm packages, compatible with two peer methods: GitHub Actions OIDC (trusted publishing) and local granular NPM_TOKEN (bypass), handling first-time bootstrap, publish audit, and online read-back. Use when the user asks to automatically publish an npm…
link-based-auth
Personalized links without explicit login for authentication. Apply when implementing authentication flows that don't require traditional login.
security-checklist
Security rules for code generation including secret handling, credential storage, and environment files. Follow when generating code that handles secrets,…
cc-clean
Check and clean up old account residue, telemetry, and historical sensitive information of Claude Code according to the confirmed scope, suitable for account inaccessibility, logout, or environment switching. Provide a related inventory, read-only offline report, and recovery receipt; verify backups first, and preserve projects, Skills, plugins, MCP, and routing configuration.
whatsapp-web-decrypt
Decrypt WhatsApp Web messages via live crypto.subtle interception with Playwright. Captures AES-CBC encrypted messages, parses protobuf, extracts sender…
performance-security
Use when optimizing performance or reviewing security. Covers code-splitting, React Compiler patterns, asset optimization, a11y testing, and security hardening…
1password
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or…
competitive-intelligence
Porter's Five Forces, SWOT analysis, and competitive positioning matrix for strategic market analysis. Identifies threats, opportunities, and recommends…
erpnext-permissions
Complete guide for Frappe/ERPNext permission system - roles, user permissions, perm levels, data masking, and permission hooks
ffuf-web-fuzzing
Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto-calibration, and result analysis
gdpr-dsgvo-expert
Senior GDPR/DSGVO expert and internal/external auditor for data protection compliance. Provides EU GDPR and German DSGVO expertise, privacy impact assessments,…
internalaudit
Support IATF 16949 internal audit programme - QMS audits, process audits, product audits, and layered process audits. Covers audit planning, checklists,…
security
Protect your SaaS app from common vulnerabilities. Use when building auth, handling user data, or deploying features. Covers authentication, data protection,…
security specialist
Provides security audit, risk assessment, and compliance check capabilities. Use when security review, risk assessment, or compliance verification is needed.
stix2-generator
Generate STIX 2.1 objects and bundles for threat intelligence sharing. Create indicators, malware descriptions, attack patterns, threat actors, and complete…
auth-architecture
LiteLLM-RS Authentication Architecture. Covers JWT + API Key + RBAC multi-method auth, rate limiting with DashMap, middleware pipeline, and secure credential…
code-security
Security audit and vulnerability detection. Use when reviewing code for security issues, scanning dependencies, or addressing security concerns. Triggers on…
sota-skill-security
Security for AI agent skills, plugins and instruction bundles (2026) — the supply chain of things that tell an agent what to do. Use when installing,…
security-review
Security-focused code review checklist for identifying vulnerabilities
citadel-data-boundary
Use when deciding what Citadel data may be quoted, committed, or shared; when onboarding agents to Masumi Citadel; or when the user asks what is public vs…
secure-code-guardian
Use when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities — including custom security implementations…