audit skills

439 tagged audit, measured the same way as everything else here.

Browse within: compliance 100accessibility 67ai-coding 64cli 64enterprise 41claude-code-plugin 39LLM 36core-web-vitals 35crawler 35agentic-ai 33owasp 31cmmc 30code-quality 30fedramp 30

edgeone-clawscan

01

Tencent/AI-Infra-Guard

Skill Claude CodeCodex ✓ vendor

The first security skill to install after setting up OpenClaw — powered by Tencent Zhuque Lab. Works like an antivirus for your AI environment: audits installed skills, scans skills before installation, and performs a full OpenClaw security health check to prevent data leaks and privacy risks. Backed by Tencent Zhuque…

not rated 6.9k +79 yesterday A Snyk: passSkillSpector: warn 236 tokens original Apache-2.0

flounder

02

adshao/flounder

Skill Claude CodeCodex

Operates Flounder, an autonomous white-hat security auditor. Use when a user asks for a security audit, bug-bounty review, vulnerability investigation, or exploit proof for a public-source or authorized repository, source tree, package, smart contract, Solidity/EVM project, ZK or proof-system code, deployed address…

not rated 520 +2 changed 1mo ago A SkillSpector: warn 202 tokens AGPL-3.0

sssmmmwww/wxmini-security-audit

Skill Claude CodeCodex

A complete static security-audit workflow for WeChat Mini Programs, using several specialised agents and preliminary scripts.

not rated 408 +2 6mo ago A 95 tokens

lyrik

04

gebruder/wirken

Skill Claude Code

Security assessment of a codebase — minimal mode for runner validation.

not rated 190 yesterday A SkillSpector: warn 15 tokens original MIT

contribute-spec-fix

05

jentic/jentic-one

Skill Claude Code

Fix a broken OpenAPI spec in jentic-public-apis with an OpenAPI Overlay, validate it (spectral lint + idempotency check), and contribute it back via a PR to the community catalog. Falls back to applying the same overlay to the local Jentic registry if the user can't wait for maintainer approval, and closes the loop by…

not rated 186 +2 changed 8d ago A SkillSpector: warn 138 tokens original Apache-2.0

ipaship-audit

06

atharvnaik1/ipaship-audit

Skill Claude CodeCodex

Use when auditing iOS/Android app submissions for compliance with Apple App Store Review Guidelines or Google Play Developer Policies. Scan .ipa, .apk, or .zip files against official store policies, generate structured compliance reports, and identify violations with remediation steps.

not rated 108 4mo ago A 57 tokens original MIT

anti-lie

07

lc198707/anti-lie

Skill Claude CodeCodex

Use when audited OpenClaw conversations or outgoing Feishu/Slack/channel messages contain concrete business numbers such as revenue, percentages, stock prices, contract values, costs, market share, or funding and need evidence checks plus red/yellow/green audit stamps after sends.

not rated 87 +2 5mo ago A 57 tokens

dependency-audit

08

BARMPlus/locklens

Skill Codex

A security review of project dependencies managed by npm, Yarn, or pnpm. It can inspect a local project directory or a remote Git repository for known dependency risks.

not rated 78 4mo ago A 56 tokens original MIT

laravel-audit

09

MrPunyapal/laravel-auditor

Skill Claude CodeCodex

Perform a deep, structured, evidence-based audit of a Laravel application and produce actionable findings backed by concrete project evidence. Use when asked to audit, review, assess, or evaluate an existing Laravel codebase.

not rated 57 +3 changed 12d ago A SkillSpector: pass 46 tokens original MIT

No-Slop

10

Tariux/AI-Skills-Not-Awesome

Skill Claude CodeCodex

Writing engine that audits and rewrites prose for AI-resistance, fidelity, and mechanical tell removal.

not rated 48 +1 2mo ago A 24 tokens

daffy0208/ai-dev-standards

Skill Claude CodeCodex

Expert in data forensics, anomaly detection, audit trail analysis, fraud detection, and breach investigation.

not rated 38 +1 9mo ago A 25 tokens original MIT

zhouguoqing/QianYuan.AIAgenticFramework

Skill Claude CodeCodex

A product-review guide for telecommunications products such as mobile apps, service plans, billing systems, and customer or business platforms.

not rated 37 2mo ago A SkillSpector: pass 50 tokens original Apache-2.0

zubair-trabzada/ai-recruiter-claude

Skill Claude CodeCodex

Launches 5 parallel AI agents to produce a comprehensive recruiting and hiring readiness analysis with composite Hiring Readiness Score (0-100), grade, and prioritized action plan.

not rated 33 +1 4mo ago A 40 tokens original MIT

skill-navigator

15

GrubbyLee/skill-manager

Skill Claude CodeCodex needs its repo

A skill that recommends which already-installed local agent skill matches a described task. It uses the machine's skill catalogue and does not perform the task itself.

not rated 29 1mo ago A SkillSpector: pass 83 tokens original MIT

java-audit-skill

16

AuroraProudmoore/java-audit-skill

Skill Claude CodeCodex

A code-security auditing method for Java, Kotlin, JavaScript, and TypeScript projects, including Spring, React, Vue, and related frameworks. It scans code for common security weaknesses and produces audit findings.

not rated 27 5mo ago A 184 tokens original MIT

fuzzer

17

ZealynxSecurity/krait

Skill Claude Code needs its repo

This skill defines how to extract invariants from smart contracts and generate Foundry fuzz tests to verify them.

not rated 25 +2 16d ago A SkillSpector: pass 0 tokens original MIT

airblackbox/airblackbox

Skill Claude CodeCodex

AIR Blackbox's autonomous sales prospecting agent. Finds Python AI projects on GitHub that need EU AI Act compliance, identifies the right person to contact (CEO, CTO, lead maintainer), runs a free compliance scan, and drafts personalized outreach emails that convert to engagement. The sales flow: free scan as the…

not rated 24 +1 today A SkillSpector: pass 248 tokens original Apache-2.0

ifrs

19

ramyatrouny/ifrs-skill

Skill Claude CodeCodex

Use when answering questions about IFRS standards, IAS standards, IASB, financial reporting, revenue recognition, lease accounting, impairment, financial instruments, expected credit loss, ECL, hedge accounting, consolidation, business combinations, fair value measurement, first-time adoption, deferred tax, Pillar…

not rated 23 +1 1mo ago A 199 tokens original MIT

igor9silva/meseeks

Skill Claude CodeCodex

Deep security review patterns for authorization logic, data access boundaries, action isolation, rate limiting, and protecting sensitive operations.

not rated 20 3mo ago A 28 tokens AGPL-3.0

bahayonghang/my-ai-cli-toolkit

Skill Claude Code

Audit and improve the Claude Code context layer — CLAUDE.md guidance files, .claude/rules/ path-scoped rules, and companion codemap.md navigation maps — against Claude 5 context-engineering rules (judgement over rules, progressive disclosure, no cross-layer conflicts). Asks whether to optimize the current repository…

not rated 17 changed 1mo ago A SkillSpector: warn 173 tokens original MIT

rails-audit-skill

22

rubyroidlabs/rails-audit-skill

Skill Claude CodeCodex

Perform comprehensive technical reviews of Ruby on Rails applications. Runs automated analysis tools (RubyCritic, Brakeman, bundler-audit, Gitleaks, Debride, linters, SimpleCov, Rails stats, Rails ERD), analyzes code for architecture, security, authorization (Pundit/CanCanCan), dead code, and design issues, and…

not rated 16 2mo ago B 118 tokens original MIT

memory-graveyard

23

sfrangulov/skill-graveyard

Skill Claude CodeCodex

Audit which entries in your project's MEMORY.md Claude actually reads. Use when the user wants to find dead memory entries, broken pointers in MEMORY.md, orphan memory files, or surface entries that fall below the system-prompt truncation cutoff. Triggers on "audit MEMORY.md", "dead memory entries", "broken memory…

not rated 10 3mo ago A 103 tokens original MIT

tavily

24

Stahl-G/briefloop

Skill Claude CodeCodex

A research skill that uses Tavily to find public sources, retrieve their readable text, and pass source identifiers to another research worker. Tavily is a web-search service, and this tool is intended for approved research tasks in BriefLoop.

not rated 9 changed 1mo ago A 54 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: