gap-analysis
Run a full SOC 2 gap analysis against the connected AWS account and present findings with remediation guidance.
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-29 00:09
Security & auditing
7,617 results
iso27001
Run an ISO 27001:2022 Annex A gap analysis against your AWS environment.
questionnaire
Auto-fill security questionnaires (SIG Lite, CAIQ, Enterprise) using scan data and policy documents.
review-access
Run a periodic IAM access review — lists all users, permissions, activity, and flags issues. Required quarterly for SOC 2.
agent-auth-specialist
Specialist subagent: OAuth 2.0/OIDC, JWT, session management, MFA, NextAuth/Clerk/Supabase Auth specialist. Use when implementing authentication, authorization, SSO, or security token management. Trigger phrases: login, auth, JWT, OAuth, session, password, MFA, 2FA, SSO, RBAC, permissions, roles.
agent-compliance-engineer
Specialist subagent: SOC2, HIPAA, GDPR, PCI-DSS compliance implementation specialist. Use when implementing audit logging, data encryption, access controls, privacy by design, or preparing for compliance audits. Trigger phrases: SOC2, HIPAA, GDPR, PCI, compliance, audit log, data privacy, encryption, access control, DSAR, consent.
agent-devsecops-engineer
Specialist subagent: CI/CD security, SAST/DAST pipelines, supply chain security, container scanning, and security automation specialist. Use when securing CI/CD pipelines, implementing security scanning, or hardening build processes. Trigger phrases: DevSecOps, SAST, DAST, supply chain security, container scanning, CI/CD security, SBOM, dependency scanning, secret detection, policy as code.
guardrails
Configures content safety guardrails for TrueFoundry AI Gateway. Supports PII filtering, content moderation, prompt injection detection, and custom rules. Use…
gravitas-security
Deep security review mode for GRAVITAS. Adds threat modeling, OWASP Top 10 checks, injection prevention patterns, auth/session security, and security-specific…
security-sentinel
Performs security audits for vulnerabilities, input validation, auth/authz, hardcoded secrets, and OWASP compliance. Use when reviewing code for security…
security-lens-reviewer
Evaluates planning documents for security gaps at the plan level -- auth/authz assumptions, data exposure risks, API surface vulnerabilities, and missing…
security-reviewer
Conditional code-review persona, selected when the diff touches auth middleware, public endpoints, user input handling, or permission checks. Reviews code for…
security-suite
Composable security suite for binary and prompt-surface assurance, static analysis, dynamic tracing, repo-native redteam scans, contract capture, baseline…
offensive-osint
Operational arsenal for external red-team and bug-bounty reconnaissance. Concrete wordlists (28 Swagger paths, 13 GraphQL paths, 35 high-risk ports, 6…
security
VeChain smart contract security checklist covering reentrancy, access control, integer overflow, front-running, proxy vulnerabilities, DoS, oracle…
ncurran-namespace-canary-20260904-a7f3
Inert Vercel security research namespace-integrity canary.
security-auditor
Audit local-agent systems, specs, and code for security weaknesses and hardening priorities. Use when reviewing Spark Intelligence features, security-sensitive…
shodan
Query the Shodan APIs for host intelligence, exposure research, search and facets, DNS, on-demand scans, network alerts and notifiers, bulk datasets,…
blackwall
Run, configure, and debug blackwall, the sandbox for claude, codex, and other dev commands (srt: Seatbelt on macOS, bubblewrap on Linux). Use when the user…
validation-scoring
Apply the s11 fix-validation scoring matrix, adversarial-review rules, and structured-output contract when validating remediated findings.
claude-code-account-risk
Anti-Ban.skill — Account risk checkup dedicated to Claude Code. Triggered when the user says "test the likelihood of my current account being banned", "check Claude Code ban risk", "my account was banned, help me appeal", "check the api.anthropic.com route", or "anti-ban". Automatically and comprehensively assesses IP/network egress, Claude API…
1c-bitrix-cms-security
Security of sites on "1C-Bitrix: Site Management" — the "Proactive Protection" module (proactive filter/WAF, web antivirus, security panel,…
triage-vulnerabilities
Triage and remediate security vulnerabilities across Warp infrastructure. Checks Dependabot alerts (GitHub), GCP Artifact Registry container scanning, and…
orbitant-owasp-scan
Use when scanning a Node.js or Python repo for OWASP Top 10 vulnerabilities — hardcoded secrets, SQL injection patterns, weak cryptography, dangerous…