appsec skills

473 tagged appsec, measured the same way as everything else here.

Browse within: ai-security 353llm-security 175cybersecurity 162devsecops 96claude-code-plugin 76compliance 70bug-bounty 57owasp 56agentskills 51DAST 50cis 50blue-team 44sast 42code audit 40

code-audit

25

Rootx202/appsec-skills

Skill Claude CodeCodex

Elite full-codebase security auditor for any language or stack (JavaScript, TypeScript, Python, Java, Kotlin, PHP, Go, Rust, C/C++, Ruby, C#). Trigger this whenever the user asks to review, audit, scan, harden, or "check the security" of any project, before deploying/shipping/launching a site or app, after adding…

not rated 2 1mo ago A 144 tokens

softwareasg-tools/information-security-for-vibecoded-apps

Skill Claude CodeCodex

Autonomous security auditor for AI-generated applications. Provide a codebase path and it will automatically detect the stack, execute a comprehensive 12-phase security scan, identify vulnerabilities, and provide a production decision.

not rated 2 changed yesterday A 50 tokens original MIT

TanKimGwan/linmas

Skill Claude CodeCodex

Detection rules engineering skill for SIEM logic, alert design, telemetry mapping, tuning, and false-positive reduction.

not rated 2 today A 31 tokens

report-writing

28

Mikacr1138/claude-bug-bounty

Skill Claude CodeCodex

Bug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi — report templates, human tone guidelines, impact-first writing, CVSS 3.1 scoring, title formula, impact statement formula, severity decision guide, downgrade counters, pre-submit checklist. Use after validating a finding and before submitting. Never use…

not rated 2 today A 82 tokens original MIT

mcpnuke-add-check

29

babywyrm/mcpnuke

Skill Claude CodeCodexCursor

Create a new mcpnuke security check module end-to-end: pattern file, check function, wire into runallchecks, add tests, update changelog. Use when adding a new security check to mcpnuke.

not rated 2 yesterday A 53 tokens original MIT

trycatch

30

GitRavz/TryCatch

Skill Claude CodeCodex

Use when asked to check, audit, or review a web application's security, authentication, permissions, access control, error handling, API/endpoint surface, or database management — including "is my app secure", "check my auth", "review my permissions", "find vulnerabilities", or a pre-launch/pre-handover review.

not rated 2 1mo ago A 68 tokens original MIT

biometric-auth

31

almasumdev/awesome-mobile-security-agent-skills

Skill Claude CodeCodex

Biometric authentication on mobile using BiometricPrompt and LAContext, with keys cryptographically gated by user biometry. Use when adding unlock, re-auth, or step-up auth flows.

not rated 2 4mo ago A 41 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: