ai-security skills

getaegis/aegis

Skill Claude Code

Route API calls through the Aegis credential proxy — keeps raw API keys out of the agent context.

FarzamHabibi/pre-production-checklist

Skill Claude CodeCodex

Review this codebase against the prodcheck pre-production checklists — security, performance, scale, integrations and post-launch readiness. Use when asked to check whether a project is ready to ship, to audit an area before launch, or to work through a specific checklist. Produces evidence with file:line citations…

MingyiSecLab/Mingyi-Atlas

Skill Claude Code

Nuclei CLI parameter reference and usage patterns - YAML-template vulnerability scanning, target input modes, template filters, output formats, rate limits, ProjectDiscovery dashboard upload, and common scan commands.

akasecurity/claude-tools

Skill Claude CodeCodex

Audit the shell startup chain (the rc file + every file it sources) for hardcoded credentials, persistence-suspicious patterns, duplicate or dangling aliases, and git-baseline drift. USE WHEN the user wants to review, secure, clean up, or maintain their shell aliases or startup files; check /.zshrc / /.bashrc for…

taoq-ai/ziran

Skill Claude CodeCodex

ZIRAN is an open-source security testing framework for AI agents. It discovers dangerous tool chain compositions via knowledge graph analysis, detects execution-level side effects (not just text output), and runs multi-phase trust exploitation campaigns that model real attacker behavior.

EresusSecurity/appsec-skills

Skill Claude CodeCodex

Elite manual security code review skill for deep, adversarial vulnerability hunting and exploit-chain discovery. Trigger when the user asks to: "do a deep security audit", "manual code review", "find exploit chains", "hunt for logic bugs", "red-team this codebase", "do an offensive security review", "review this like…

meghal86/promptsonar

Skill Claude CodeCodex

Use when: the user asks to run system maintenance. Capability: executes shell commands via shellexec. Route maintenance commands through the system shell and run them.

LoNebula/lluminai

Skill Claude CodeCodex

A development rule for a FastAPI and SQLite project that requires tests to run with `pytest -v`, then requires failures to be fixed and tests rerun until coverage reaches 100%. FastAPI is a Python web framework, and pytest is a Python testing tool.

vigilantshield/Claude-HunterKit

Skill Claude CodeCodex

Complete bug bounty workflow: recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload…

dfirs1car1o/sicario-spec

Skill Claude Code

Execute the implementation plan by processing and executing all tasks defined in tasks.md.

smartbrainactivity/smartbrain-skill-auditor

Skill Claude CodeCodex

A universal, dependency-free Node.js tool to statically audit AI Skills and local agents for malicious patterns.

chawdamrunal/assay

Skill Claude CodeCodex

Pre-install security advisor. Activate when the user mentions installing a Claude Code plugin, MCP server, or any third-party agent tool. Offer to run an Assay scan against the target before they install.

tjsdyy/clawheartv2

Skill Claude CodeCodex

A skill for using the local ClawHeart command-line tool to audit AI security, evaluate skills, and manage agent credentials.

ondrej-merkun/skill-audit

Skill Claude Code

Scan installed agent skills, plugins, and cross-agent instruction files for prompt injection, exfiltration, malicious code, and dependency risk. Use when the user asks to audit, check, review, inventory, or verify skills for Claude Code, Codex, Cursor, Copilot, Gemini, or AGENTS.md-style project instructions.

skillscake/use-skillscake

Skill Claude CodeCodex

Create or upgrade an agent skill with SkillsCake. Use when the user wants to improve a skill using SkillsCake, create a skill based on a completed workflow, or says "use SkillsCake".

Mikacr1138/claude-bug-bounty

Skill Claude CodeCodex

Bug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi — report templates, human tone guidelines, impact-first writing, CVSS 3.1 scoring, title formula, impact statement formula, severity decision guide, downgrade counters, pre-submit checklist. Use after validating a finding and before submitting. Never use…

JesusConwellpy/secagent-skills

Skill Claude CodeCodex needs its repo

Local LLM-Wiki knowledge system. Bootstrap a structured wiki, write entries using precise templates, full-text search, cross-agent knowledge sharing, cross-session inheritance.

alanqoudif/SkillRewind

Skill Claude CodeCodex

Deploys the service quickly over HTTP with a certificate-check fallback.

yhny1001/dsh-security-audit

Skill Claude CodeCodex

A read-only security audit for DeepSeek Harness extensions, settings, dependencies, and runtime exposure. It looks for risks such as exposed secrets, unsafe file mounts, data leaving the system, persistence, and malware indicators.

piyushptiwari1/mcpkernel

Skill Claude CodeCodex

AI agent security gateway — policy enforcement, taint tracking, tool poisoning detection, DLP chain analysis, and SARIF output for CI/CD.

runningoffcode/agent-wormhole

Skill Claude CodeCodex

Generates a changelog entry from recent commits.

huiyu9144/huiyu-safe-ai

Skill Claude Code

Lightweight AI security guard that intercepts risky install/download commands (npm, npx, pip, cargo, git clone) to block known malicious packages and scan for suspicious code. Invoke ONLY when user runs install/download/clone commands.

Zuga-Technologies/ZugaShield

Skill Claude CodeCodex needs its repo

7-layer AI security + ML detection for OpenClaw. Covers all 10 OWASP Agentic AI risks — prompt injection, tool misuse, memory poisoning, data exfiltration, and more — across ALL channels (Signal, Telegram, Discord, WhatsApp, web) simultaneously.

professor2k8/agent-security-lens

Skill Claude CodeCodex

Requires BROWSERAPIKEY in .env.