security-check
Use when triaging Dependabot/Snyk security alerts by severity and exploitability before running security-runner.
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-18 00:12
Security & auditing
7,192 results
azure-web-application-firewall
Expert knowledge for Azure Web Application Firewall development including best practices, decision making, limits & quotas, security, configuration,…
cloud-containers
Cloud and container security testing - AWS, Azure, GCP, Docker, and Kubernetes misconfigurations and exploitation.
trap-detector
Pig-butchering scam detector. Use when the user mentions keywords such as "a friend recommended it", "people in the group say", "a teacher is leading it", "inside information", "saw a recommendation on Xiaohongshu / Douyin", or explicitly asks to "check whether this is a pig-butchering scam / detect the risk / is this stock safe". Scans 8 signals and gives a risk rating 🟢🟡🟠🔴.
implementing-api-abuse-detection-with-rate-limiting
Implements API abuse detection using token bucket, sliding window, and fixed window rate-limiting algorithms backed by Redis, including adaptive limits that…
godmode
Jailbreak LLMs: Parseltongue, GODMODE, ULTRAPLINIAN.
codeql-expert
Expert-level CodeQL for static analysis, vulnerability detection, and security code scanning. Use when the user mentions static analysis, SAST, vulnerability…
threat-intelligence
Cyber Threat Intelligence gathering, IOC extraction, threat analysis, and intelligence reporting. Process threat data and produce actionable intelligence. Use…
penetration-tester
Expert in ethical hacking, vulnerability assessment, and offensive security testing (Web/Network/Cloud).
Security Architect
Comprehensive security architecture combining threat modeling, security-first design, secure coding review, and compliance validation. Consolidated from…
security-runner
Use when running the automated security alert fix pipeline — opens fix PRs, creates issues for breaking changes, dismisses false positives.
1password
Guide for implementing 1Password secrets management - CLI operations, service accounts, Developer Environments, and Kubernetes integration. Use when retrieving…
building-detection-rule-with-splunk-spl
Build effective detection rules using Splunk Search Processing Language (SPL) correlation searches to identify security threats in SOC environments.
building-threat-hunt-hypothesis-framework
Build a systematic threat-hunt workflow that turns threat intelligence and ATT&CK gap analysis into testable hypotheses, then executes and validates them via…
implementing-devsecops-security-scanning
Integrates SAST, DAST, and SCA into CI/CD pipelines using Semgrep for SAST, Trivy for SCA and container scanning, OWASP ZAP for DAST, and Gitleaks for secrets…
pentesting-checklist-platform
Interactive security assessment checklist covering 23 platforms with 1,000+ checks for pentesting, bug bounty, and security audits
triaging-security-incident
Performs initial triage of security incidents using the NIST SP 800-61r3 and SANS PICERL frameworks, classifying incident type, assigning priority by business…
n8n-security-testing
Credential exposure detection, OAuth flow validation, API key management testing, and data sanitization verification for n8n workflows. Use when validating n8n…
openclaw-security-practice-guide
Security hardening guide for high-privilege autonomous AI agents (OpenClaw) with zero-trust architecture, behavior controls, and automated auditing
system
System exploitation testing - Active Directory attacks, privilege escalation (Linux/Windows), and exploit development.
google-safe-browsing
Prevent and fix Google Safe Browsing "Dangerous site" flags. Use when launching a public web app, buying/picking a domain, building a login or signup page, or…
deal-with-security-advisory
Handle confidential GitHub Security Advisory response for Paperclip. Use when coordinating advisory triage, private-fork fixes, CVE/publication steps, and…
find-bugs
Hunt REAL bugs and security holes in the current branch diff — verified, not a raw model dump: map each changed file's attack and defect surface, run the…
security
Mandatory credential protection skill for all agents. Prevents reading, exposing, or leaking credentials, secrets, API keys, tokens, passwords, and…