reviewing-security
Use when reviewing code for security before merging or shipping, and when a change touches untrusted input, authentication, authorization, secrets, SQL,…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-18 00:12
Security & auditing
7,211 results
webfuzzer-hotpatch
Yakit Web Fuzzer Hot Patch (Hot Loading) topic. Use when the user needs to automatically encrypt/decrypt requests/responses with code when sending packets in a single Web Fuzzer Tab, inject signatures, smart retry, custom business failure determination, dynamically generate payloads with fuzztag, or extract parameters from responses for correlated testing. Covers beforeRequest /…
mitre-attack-framework
Apply the MITRE ATT&CK framework for threat intelligence and detection. Provides a universal taxonomy of adversary tactics, techniques, and procedures (TTPs).…
performing-container-security-scanning-with-trivy
Runs Trivy across every target type it supports - container images, filesystems, Git repositories, and Kubernetes clusters - for OS and dependency…
skillvet
Security scanner for ClawHub/community skills — detects malware, credential theft, exfiltration, prompt injection, obfuscation, homograph attacks, ANSI…
ai-security-verification
Comprehensive AI security verification using OWASP AI Security Verification Standard (AISVS) framework. Use when verifying an AI-driven application, ML…
game-cheat-detection-and-security-analysis
Analyze and detect game cheating tools, trainers, and malicious software targeting multiplayer games
k7-total-security-unlock-patch-detection
Detect and analyze potentially malicious security software crack/patch repositories
privilege-escalation-methods
This skill should be used when the user asks to "escalate privileges", "get root access", "become administrator", "privesc techniques", "abuse sudo", "exploit…
security-awareness
Teaches AI agents to recognize and avoid security threats during normal activity. Covers phishing detection, credential protection, domain verification, and…
security-checklist
Security best practices for Micronaut/Kotlin backend including authentication, authorization, input validation, and OWASP prevention. Use when implementing…
cyber-neo
Comprehensive cybersecurity analysis for any local project. Scans for dependency vulnerabilities (SCA), code security patterns (SAST), leaked secrets,…
1password
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or…
security-visual-testing
Security-first visual testing combining URL validation, PII detection, and visual regression with parallel viewport support. Use when testing web applications…
security-audit
Perform a broad, authorized security audit across application, infrastructure, identity, dependencies, and operations. Use when the user needs a scoped…
security-engineer
Expert in infrastructure security, DevSecOps pipelines, and zero-trust architecture design.
js-security-audit
Audit JS/TS projects against NPM Security Guidelines covering project setup, dependency hygiene, CI/CD pipeline, Dependabot, and incident response. Use when…
karpathy-supply-chain-hygiene
Apply rigorous supply chain security hygiene to software projects — audit dependencies, detect risks, minimize attack surface. Use this skill when the user…
frida-anti-instrumentation
Analyze and bypass anti-Frida, anti-debugging, root or jailbreak checks, emulator checks, ptrace, port scans, module scans, and integrity checks.
frida-native-hooks
Build Frida native hooks for C/C++/Objective-C functions, exports, imports, symbols, memory, Interceptor, NativeFunction, Stalker, and CModule.
syncfusion-aspnetcore-security
**CONTENT SECURITY POLICY (CSP) GUIDE** — Assist with configuring Syncfusion ASP.NET Core EJ2 components to work with strict Content Security Policy (CSP)…
go-security-audit
Security review for Go applications: input validation, SQL injection, authentication/authorization, secrets management, TLS, OWASP Top 10, and secure coding…
performing-authenticated-vulnerability-scan
Plan and run authenticated (credentialed) vulnerability scans with scanners such as Nessus, Qualys, OpenVAS, or Rapid7 InsightVM, using SSH, SMB, WinRM, or…
performing-osint-with-spiderfoot
Automate OSINT collection with the SpiderFoot REST API and CLI (sf.py/spiderfoot-cli) across 200+ modules, selecting scan modes (footprint, investigate,…