fix-review
Verify fix commits address audit findings without new bugs
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-18 00:12
Security & auditing
7,191 results
building-threat-intelligence-platform
Design and deploy a Threat Intelligence Platform (TIP) by integrating open-source CTI tools (MISP, OpenCTI, TheHive, Cortex) into a unified system with feed…
better-auth-emails
Add email verification, password reset, and account management emails to Better Auth using Resend.
payment-security-clerk-billing-stripe
Implement secure payments using Clerk Billing and Stripe without ever touching card data. Use this skill when you need to set up subscription payments, handle…
cognito
AWS Cognito user authentication and authorization service. Use when setting up user pools, configuring identity pools, implementing OAuth flows, managing user…
linkfox-maidalv-product-tro-detection
Use 卖大律 to detect whether a product has TRO (Temporary Restraining Order) and intellectual property (trademark/patent/copyright) infringement risks. Input the product main image (supports image URL or Base64 data URI), and optionally add reference images, reference text, and IP keywords. Returns the overall risk level, high-risk infringement items, and a low-risk IP list (including TRO plaintiffs, filing dates, court case numbers, case counts), a 0-10 numerical risk score, and…
alibabacloud-sas-incident-manage
Alibaba Cloud Security Center incident management skill. Query security incidents, threat trends, and incident details. Triggers: "Cloud Security Center", "security incident", "incident query",…
op-cli
Use when reading from 1Password, discovering vaults/items, rotating secrets, or piping credentials to other tools via op CLI.
specsfy-specialist-application-security
The English introduction is being prepared.
axiom-file-protection-ref
Use when asking about 'FileProtectionType', 'file encryption iOS', 'NSFileProtection', 'data protection', 'secure file storage', 'encrypt files at rest',…
building-red-team-c2-infrastructure-with-havoc
Deploy and configure the Havoc C2 framework (teamserver, HTTPS/HTTP/SMB listeners, Nginx redirectors, and Demon agents) with malleable traffic profiles and…
google-auth
Use when a server authenticates to Google in a Node.js or Python application — OAuth 2.0 flows, verifying Google ID tokens server-side, service account…
building-vulnerability-aging-and-sla-tracking
Implement a vulnerability aging dashboard and SLA tracking system that measures time-to-remediation against severity-based deadlines (e.g. 14 days critical, 30…
pentesting-checklist-guide
Interactive security assessment checklist covering 23 platforms with 1000+ checks for penetration testing, bug bounty, and security audits
building-soc-metrics-and-kpi-tracking
Builds SOC performance metrics and KPI tracking dashboards measuring Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), alert quality ratios, analyst…
performing-api-fuzzing-with-restler
Uses Microsoft RESTler to perform stateful REST API fuzzing: compiles an OpenAPI/Swagger spec into a RESTler grammar, configures authentication, and runs…
idor-testing
Provide systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications.
axiom-privacy-ux
Use when implementing privacy manifests, requesting permissions, App Tracking Transparency UX, or preparing Privacy Nutrition Labels - covers just-in-time…
awesome-game-security-overview
Guide for understanding and contributing to the awesome-game-security curated resource list. Use this skill when adding new resources, organizing categories,…
vulnerable-mcp-servers-lab
A collection of deliberately vulnerable MCP servers for learning pentesting and AI red teaming techniques
application-security
OWASP Top 10 with code examples, SAST/DAST tools, dependency scanning, CSP headers, and input validation patterns. Use when hardening applications, reviewing security posture, or implementing defensive coding practices.
conducting-wireless-network-penetration-test
Conducts authorized wireless network penetration tests to assess the security of WiFi infrastructure by testing for weak encryption protocols, captive portal…
pentesting-checklist-security-assessment
Interactive security assessment checklist covering 23 platforms with 1,000+ checks for penetration testing, bug bounty, and security audits.
security-hardening
Reduces attack surface across OS, container, cloud, network, and database layers using CIS Benchmarks and zero-trust principles. Use when hardening production…