entra-id
Guidance for Microsoft Entra ID (formerly Azure AD) — cloud identity and access management and the control plane for Zero Trust. Covers tenant and identity…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-19 00:11
Security & auditing
7,217 results
entra-id-protection
Guidance for Microsoft Entra ID Protection — risk-based identity security that detects user and sign-in risk and automates remediation. Covers risk detections,…
dotnet-cryptography
Choosing crypto algorithms, hashing, encryption, or key derivation. AES-GCM, RSA, ECDSA, PQC.
inertia-rails-auth
Implement authentication and authorization in Inertia Rails applications. Use when setting up login, sessions, permissions, and access control with Devise,…
thermo-nuclear-review
Comprehensive security and correctness audit of a branch's changes. Use for thermo nuclear, thermonuclear, or deep review requests, or branch/PR diff audits…
purview-audit
Guidance for Microsoft Purview Audit (Standard and Premium) - logging and searching user/admin activity across Microsoft 365 for investigations and compliance.…
php-sql-audit
PHP Web source code SQL injection vulnerability audit tool. Identify all SQL execution points from the source code and analyze injection risks, outputting exploitability grading, PoC, and remediation recommendations (omission prohibited).
supply-chain-advisory
Audits dependency supply chains for bad versions, lockfile drift, and artifact integrity. Use when adding deps, handling incidents, or releasing a plugin.
octocode-roast
Use when code needs a blunt evidence-backed roast or memorable critique: smell inventory, debt ranking, hot-path autopsy, savage/diff review, security or…
security-review-openai
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best…
ln-621-security-boundary-auditor
Checks application security boundaries: secrets, injection, XSS, input validation, and sensitive env defaults. Use when auditing exploitable code paths.
cobalt-io
Cobalt integration. Manage data, records, and automate workflows. Use when the user wants to interact with Cobalt data.
performing-ios-app-security-assessment
Performs comprehensive iOS application security assessments using Frida for dynamic instrumentation, Objection for runtime exploration, SSL pinning bypass for…
nansen-wallet-migration
Migrate an existing nansen-cli wallet from insecure password storage (env files, .credentials) to the new secure keychain-backed flow.
review-security
Review code for security: injection, sensitive data, auth, dependencies, config, and crypto. Atomic skill; output is a findings list.
dsoftbus_safety_guard
OpenHarmony soft bus code security review expert - comprehensively checks C/C++ code security coding standards and logging standards. Covers 40+ security rules, including key areas such as pointer safety, memory management, lock management, and sensitive information protection. Provides cross-file call analysis and control flow analysis, and generates detailed code review reports. Only triggered when user input contains "软总线安全卫士". ⚠️…
sast-configuration
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning,…
solidity-security
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts,…
security-requirement-extraction
Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user…
defender-xdr
Guidance for Microsoft Defender XDR — the unified extended detection and response suite that correlates signals across endpoints, identities, email, and cloud…
security-copilot
Guidance for Microsoft Security Copilot - the generative-AI security platform that helps analysts investigate, hunt, summarise, and respond using natural…
security-advisor
Conversational security advisor that hunts for real, exploitable vulnerabilities in a codebase. Use this whenever the user asks for a security review,…
command_injection_test
Test skill for security scanning
prism-discover
Discover all possible analysis domains for an artifact. Finds obvious and non-obvious angles — architecture, security, but also marketing positioning, user…