aikido-security
Aikido Security integration. Manage data, records, and automate workflows. Use when the user wants to interact with Aikido Security data.
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-19 00:11
Security & auditing
7,225 results
nightfallai
Nightfall.ai integration. Manage data, records, and automate workflows. Use when the user wants to interact with Nightfall.ai data.
implementing-cloud-vulnerability-posture-management
Implement multi-cloud CSPM to detect cloud-native misconfigurations and vulnerabilities (IAM over-permissions, exposed storage, unencrypted data, missing…
zklogin
zkLogin on Sui — architecture, protocol flow, integration, and security. Use when explaining how zkLogin works, integrating zkLogin into a Sui application,…
auditing-pre-release-security
Audits security and supply-chain risk between two git refs, pre-release security audit
azure-keyvault-secrets-ts
Manage secrets using Azure Key Vault Secrets SDK for JavaScript (@azure/keyvault-secrets). Use when storing and retrieving application secrets or configuration…
azure-security-keyvault-secrets-java
Azure Key Vault Secrets Java SDK for secret management. Use when storing, retrieving, or managing passwords, API keys, connection strings, or other sensitive…
sast-hardcodedsecrets
Detect hardcoded sensitive data (API keys, access tokens, private keys, passwords, etc.) in publicly accessible code — frontend JavaScript, mobile apps,…
sast-jwt
Detect insecure JWT (JSON Web Token) implementations in a codebase using a two-phase approach: first map all JWT issuance and verification sites to understand…
Security Scanning
This skill should be used when the user asks to "scan for vulnerabilities", "check for security issues", "find secrets in code", "audit dependencies", "detect…
ssrf
This skill should be used when the user asks to "check for SSRF", "analyze server-side request forgery", "find URL fetching vulnerabilities", "check for…
awesome-security-audit
Read-only security audit of code: injection, secrets, auth and authorization, dependency CVEs, CI/CD exposure, crypto misuse, with CWE-mapped fixes. Use for a…
bigid
BigID integration. Manage data, records, and automate workflows. Use when the user wants to interact with BigID data.
passcreator
Passcreator integration. Manage Users, Organizations. Use when the user wants to interact with Passcreator data.
clerk
Clerk authentication router. Use when user asks about adding authentication, setting up Clerk, custom sign-in flows, Swift or native iOS auth, native Android…
two-factor-authentication-best-practices
Configure TOTP authenticator apps, send OTP codes via email/SMS, manage backup codes, handle trusted devices, and implement 2FA sign-in flows using Better…
performing-log-analysis-for-forensic-investigation
Collect, parse, and correlate system, application, and security logs to reconstruct events and establish timelines during forensic investigations.
signing-entitlements
Inspect macOS signing, entitlements, and Gatekeeper issues. Use when diagnosing code signing, sandbox, hardened runtime, or trust failures.
prowler-attack-paths-query
Creates Prowler Attack Paths openCypher queries using the Cartography schema as the source of truth for node labels, properties, and relationships. Covers…
fastcopy-file-transfer-warning
Identifies and warns about potentially malicious file transfer tool repositories
java-sql-audit
Java Web source code SQL injection vulnerability audit tool. Locate all SQL execution entry points from the source code and detect injection vulnerabilities. Applicable to: (1) identifying SQL execution frameworks and implementation methods, (2) discovering SQL injection vulnerabilities, (3) checking parameterized query usage, (4) detecting dynamic SQL concatenation vulnerabilities. Supports JDBC, MyBatis, Hibernate…
sast-ssti
Detect Server-Side Template Injection (SSTI) vulnerabilities in a codebase using a three-phase approach: recon (find template rendering sites that use dynamic…
macos-security
XProtect, MRT, TCC privacy permissions, quarantine, code signing validation, security audit
dpia-assessment
GDPR Art. 35 Data Protection Impact Assessment with threshold checking, risk registers, and EDPB criteria scoring. Use for DPIA evaluations.