security-audit
Use when conducting security assessments — OWASP Top 10 / API / LLM, CWE Top 25, CVSS scoring — auditing PHP/TYPO3, APIs, frontend, Terraform/K8s/Docker IaC,…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-14 00:01
Security & auditing
3,296 results
cloud-security
Use when assessing cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, or IaC…
threat-detection
Use when hunting for threats in an environment, analyzing IOCs, or detecting behavioral anomalies in telemetry. Covers hypothesis-driven threat hunting, IOC…
incident-response
Use when a security incident has been detected or declared and needs classification, triage, escalation path determination, and forensic evidence collection.…
ciso-advisor
Security leadership for growth-stage companies. Risk quantification in dollars, compliance roadmap (SOC 2/ISO 27001/HIPAA/GDPR), security architecture…
performing-web-application-penetration-test
Performs systematic security testing of web applications following the OWASP Web Security Testing Guide (WSTG) methodology to identify vulnerabilities in…
threat-intelligence
The introduction is being prepared. Please check back soon.
vulnerability-scanning
Automated vulnerability detection using OWASP tools, CVE databases, and security scanners. Use when performing security audits, compliance checks, or…
web-security-scanner-pro
Advanced Python web security scanner with 49 modules, evasion engine, CVE database, and WAF bypass for penetration testing
owasp-top-10
OWASP Top 10 for Web Applications (2025) knowledge base for identifying, assessing, and remediating web application security risks.
security-triage
The introduction is being prepared. Please check back soon.
oauth2-authentication
Comprehensive OAuth2 authentication skill covering authorization flows, token management, PKCE, OpenID Connect, and security best practices for modern…
testing-for-xss-vulnerabilities
Tests web applications for reflected, stored, and DOM-based Cross-Site Scripting by injecting JavaScript payloads with Burp Suite (XSS extensions, Active…
security-testing
Identify security vulnerabilities through SAST, DAST, penetration testing, and dependency scanning. Use for security test, vulnerability scanning, OWASP, SQL…
Skills-Security-Check
The introduction is being prepared. Please check back soon.
spatie-security
Apply Spatie's security guidelines when configuring applications, databases, servers, credentials, or signed Git commits, or when reviewing code for security…
mobile-security-coder
The introduction is being prepared. Please check back soon.
rc-security
The introduction is being prepared. Please check back soon.
recipe-triage-security-alerts
The introduction is being prepared. Please check back soon.
gws-alertcenter
Google Workspace Alert Center: Manage Workspace security alerts.
bluehammer-vulnerability-poc
Skill for working with the BlueHammer vulnerability proof-of-concept repository, covering build, usage, and code patterns.
auditing-security
Perform a systematic security audit of a codebase, checking for OWASP Top 10 vulnerabilities, secrets exposure, and insecure patterns.
security-audit-logging
Implement comprehensive security audit logging for compliance, forensics, and SIEM integration. Use when building audit trails, compliance logging, or security…
security-guidance
PreToolUse security-anti-pattern hook for Claude Code. Catches 12 common security risks (command injection, XSS, SQL injection, unsafe deserialization, GitHub…