web-security-expert
Web application security expert. OWASP Top 10, XSS, SQLi, CSRF, SSRF, authentication bypass, IDOR. Use for web app security testing.
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-18 00:12
Security & auditing
7,210 results
813-regulations-iso-42001
Use when reviewing, designing, or modifying Java enterprise systems that use GenAI, LLMs, AI-assisted coding, RAG, AI agents, generated code, generated…
vendor-due-diligence-patrick-munro
Risk-based vendor assessment framework for IT service providers, technology vendors, and third-party partners under DORA, NIS2, GDPR. Provides three-phase…
security-incident-response
Use this skill when responding to security incidents, conducting forensic analysis, containing breaches, or writing incident reports. Triggers on security…
hardening-linux-endpoint-with-cis-benchmark
Hardens Linux endpoints using CIS Benchmark recommendations for Ubuntu, RHEL, and CentOS to reduce attack surface, enforce security baselines, and meet…
security
Security guidelines and OWASP Top 10. Use when reviewing security, implementing authentication or authorization, hardening code, or discussing vulnerabilities.
risk-management-specialist
Medical device risk management specialist implementing ISO 14971 throughout product lifecycle. Provides risk analysis, risk evaluation, risk control, and…
iam
AWS Identity and Access Management for users, roles, policies, and permissions. Use when creating IAM policies, configuring cross-account access, setting up…
1kosmos-blockid
1Kosmos BlockID integration. Manage data, records, and automate workflows. Use when the user wants to interact with 1Kosmos BlockID data.
mati
Mati integration. Manage data, records, and automate workflows. Use when the user wants to interact with Mati data.
llm-risk-assess
Comprehensive LLM security assessment against OWASP Top 10 for LLM Applications 2025. Use when reviewing LLM-integrated applications, RAG pipelines, chatbots,…
risk-prioritiser
Risk-based prioritisation of confirmed attack paths. Combines exploit feasibility, technical CVSS severity, and asset business impact into a single ranked list…
threat-model-generation
Generate a STRIDE-based security threat model for a repository. Use when setting up security monitoring, after architecture changes, or for security audits.
infisical-access-control
Guide for Infisical access control and governance — org and project roles, custom roles with subject/action permissions, granular secret permissions that…
web3-smart-contracts
Use this skill when writing, reviewing, auditing, or deploying Solidity smart contracts. Triggers on Solidity development, smart contract security auditing,…
duo-security
Duo Security integration. Manage data, records, and automate workflows. Use when the user wants to interact with Duo Security data.
triaging-vulnerabilities-with-ssvc-framework
Triages and prioritizes vulnerabilities with CISA's Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree, weighing exploitation status (via…
ida-mcp-headless-reverse-engineering
Headless IDA Pro MCP server for AI-powered binary analysis and reverse engineering
strix-fix-findings
Triage and remediate vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud), then re-run Strix to verify each fix. Use after a Strix…
authentication
Complete authentication system with Better Auth, email verification, password reset, protected routes, and account management.
reviewing-security-architecture
This skill should be used when the user asks to "review the security architecture", "check authentication patterns", "evaluate trust boundaries", "review…
offensive-bluetooth-classic
Bluetooth Classic (BR/EDR) attack methodology — device discovery, service enumeration via SDP, LMP/L2CAP layer attacks, legacy PIN cracking (BlueBorne / KNOB),…
sbom-analyzer
Software Bill of Materials (SBOM) security analysis for vulnerability assessment and third-party risk management. Validates SBOMs from vendors or generates…
solana-audit
TRIGGER when: user asks to audit, review, or security-check a Solana smart contract, OR codebase contains solana_program, anchor_lang, pinocchio, #[program],…