ggshield-scanner
Detect 500+ types of hardcoded secrets (API keys, credentials, tokens) before they leak into git. Wraps GitGuardian's ggshield CLI.
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-29 00:09
Security & auditing
7,617 results
oauth-helper
Automate OAuth login flows with user confirmation via Telegram. Supports 7 providers: Google, Apple, Microsoft, GitHub, Discord, WeChat, QQ. Features: -…
security-audit-2
Fail-closed security auditing for OpenClaw/ClawHub skills & repos: trufflehog secrets scanning, semgrep SAST, prompt-injection/persistence signals, and…
security-suite
Orchestrate a full, read-only security audit across the repository by discovering attack surface, dispatching the relevant security skills, deduplicating…
cybersecurity-red-team-master
Red team penetration / offense-defense — the cognitive operating system for authorized red team operators + penetration test engineers + offensive security consultants (reconnaissance OSINT / external penetration / internal AD penetration BloodHound + Kerberoasting + ADCS exploitation + lateral movement / web application penetration OWASP WSTG / mobile OWASP MASTG…
roblox-networking
Server-authoritative networking, RemoteEvent validation, rate limiting, exploit prevention, security hardening.
harness-check
Generate nearly all security-relevant native OpenTelemetry activity from a real Claude Code or Codex harness with minimal user interaction. Use when testing…
hashcat
GPU-accelerated password hash recovery with hashcat. Use when a user asks to crack NTLM/bcrypt/MD5/SHA/WPA hashes, run mask or rule-based attacks, convert a…
iptables
Configure Linux firewall with iptables/nftables. Use when a user asks to set up a firewall, block ports, allow specific traffic, configure NAT, or secure a…
nikto
Scan web servers for vulnerabilities with Nikto. Use when a user asks to audit web server configuration, find outdated software, detect dangerous files, check…
opa
Expert guidance for OPA (Open Policy Agent), the CNCF policy engine for unified authorization across the stack. Helps developers write Rego policies for…
social-media-osint
Social media OSINT techniques and tools for gathering intelligence from public profiles across Twitter/X, LinkedIn, Instagram, and Facebook. Use when:…
spiderfoot
SpiderFoot automated OSINT framework with 200+ modules for comprehensive target profiling. Use when: running automated OSINT investigations on a target,…
unkey
You are an expert in Unkey, the open-source API key management platform. You help developers create, validate, and manage API keys with built-in rate limiting,…
tcc-grant-audit
Audit and clean macOS TCC privacy grants (Accessibility, Screen Recording, Camera, Microphone, Full Disk Access, AppleEvents, folder access) across ALL ~40…
security-hardening
Security audit and hardening for AI agents — credential hygiene, secret scanning, prompt injection defense, data leakage prevention, and privacy zones.
right-to-erasure
Use when auditing account settings pages, privacy dashboards, or API routes to verify that a complete data deletion path exists for users.
login form
Use when implementing user authentication and sign-in forms.
two-factor authentication
Use when implementing two-factor authentication setup and verification.
security-engineer
Elite Security Engineer skill with deep expertise in application security, cloud security architecture, penetration testing, Zero Trust implementation, threat…
rsigma
Use the rsigma CLI and MCP server: engine eval, engine daemon, rule lint, rule draft, rule tune, rule backtest, backend convert, mcp serve. Prefer MCP tools…
7zip
Use for tightly scoped archive creation, compression, and packaging during authorized pentests. Trigger on approved evidence packaging, transfer-size…
amass
Use for external asset discovery, subdomain mapping, and ownership-focused reconnaissance during authorized pentests. Trigger on internet-facing scope, domain…
az-cli
Use for Azure control-plane validation during authorized pentests. Trigger on credentialed Azure review, role and subscription checks, storage exposure review,…