Security skills

18,920 tagged Security, measured the same way as everything else here.

Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63

faasjs-best-practices

241

faasjs/faasjs

Skill Claude CodeCodex

Use when working in any FaasJS repo and no narrower FaasJS skill is already selected, or when a task spans project conventions, validation gates, security boundaries, and multiple FaasJS subsystems. For focused work, also load the relevant FaasJS skill: faasjs-project-workflow, faasjs-react-ant-design…

not rated 120 2mo ago A Socket: passSnyk: pass 110 tokens original MIT archived

dvalin-security-scan

242

arthurpanhku/dvalincode

Skill Claude CodeCodex

Scan code for injection, hardcoded secrets, XSS, dynamic code execution, and unsafe shell use. Use after writing or modifying code that handles user input, builds queries or commands, touches authentication, or adds a dependency — and whenever the user asks for a security check, audit, or review. Runs locally with no…

not rated 119 +1 changed 2mo ago A SkillSpector: warn 77 tokens original MIT

security-audit

243

hardness1020/Leeway

Skill Claude CodeCodex

Security vulnerability audit — check for OWASP top risks, hardcoded secrets, injection points, and dependency CVEs. Use when auditing code for security vulnerabilities, reviewing authentication/authorization logic, or checking for secrets leakage before merge.

not rated 117 5mo ago A 49 tokens original MIT

chaitin-cli

244

chaitin/chaitin-cli

Skill Claude CodeCodex

Use when running chaitin-cli commands to manage Chaitin security products: SafeLine WAF (site management, IP blocking, ACL, policy rules, attack logs), X-Ray vulnerability scanner (scan tasks, results, assets), CodeInsight (projects, repository configs, scan tasks, reports), CodeForce (projects, AI tasks, denoise…

not rated 117 7d ago A 112 tokens GPL-3.0

ai-security

245

ricneves-ai/flowgrammers-skills

Skill Claude CodeCodex needs its repo

Use ao avaliar sistemas de IA/ML para injeção de prompt, vulnerabilidades de jailbreak, risco de inversão de modelo, exposição a envenenamento de dados ou abuso de ferramentas por agents. Cobre mapeamento de técnicas MITRE ATLAS, detecção de assinaturas de injeção e pontuação de robustez adversarial.

not rated 117 1mo ago A 75 tokens original MIT

finding-triage

246

HacktronAI/skills

Skill Claude Code

Interactively validate and triage Hacktron findings against the actual source code and (optionally) a live deployment, separate true positives from false positives, adjust severity, then either propose fixes and commit them or set the finding's state in Hacktron (truepositive, falsepositive, acceptedrisk, resolved).…

not rated 116 +1 5mo ago A 120 tokens original MIT

cls-certify

247

CatREFuse/cls-certify

Skill Claude CodeCodex

A security-review skill for examining agent skills across code, runtime behaviour, dependencies, network traffic, privacy, and threat intelligence.

not rated 114 7mo ago A ✓ AI review 106 tokens

nit

248

newtype-ai/nit

Skill Claude CodeCodex

Git for agent identity — one identity, any apps.

not rated 113 5mo ago A 12 tokens original MIT

grisuno/estorides

Skill Claude Code

Create, feed, modify, improve, and maintain Estorides source and tool YAMLs (HTTP APIs, systemapp Kali tools, LAN discovery tools). Use when adding a new OSINT origin, wiring a Kali binary, changing contact class, parser, appliesto, or category.

not rated 111 5d ago A 62 tokens AGPL-3.0

scv-scan

250

kadenzipfel/scv-scan

Skill Claude CodeCodex

Systematically audit Solidity smart contract codebases for security vulnerabilities using a 4-phase approach - load a vulnerability cheatsheet, sweep code with grep and semantic analysis, deep-validate candidates against reference files, and output a severity-ranked findings.

not rated 110 +1 7mo ago A 51 tokens

singula-ai/alego

Skill Claude CodeCodex

Use on Windows for unexpected ALEGO sandbox access denials: workspace writes or listing fail, or an ordinarily readable path cannot be read. One bundled command inspects the path and every ancestor and repairs the ACL problems it proves in that same run. Expected confinement denials need no ACL repair.

not rated 110 +1 14d ago A 67 tokens original MIT

wpegpt-analyzer

252

WPeace-HcH/WPeGPT-Analyzer

Skill Claude CodeCodex

A skill for using IDA and the WPeGPT plugin to analyse executable files in PE or ELF formats. It produces a structured report about the program, network indicators, suspicious functions, and possible vulnerabilities.

not rated 109 5mo ago A 58 tokens

android-pentest

254

hardw00t/ai-security-arsenal

Skill Claude CodeCodex

Comprehensive Android mobile application penetration testing with rooted-device ADB and Frida-based MCP tooling. Covers OWASP MASTG full methodology: recon, static + dynamic analysis, SSL/root bypass, IPC fuzzing, data exfiltration, crypto audit, and reporting. Triggers on requests to pentest Android apps, analyze…

not rated 108 +1 6mo ago A 87 tokens

tenuo-denial-triage

255

tenuo-ai/tenuo

Skill Claude CodeCodex

Diagnose a denied Tenuo call and make the legitimate call work with the smallest change to authority. Use when a call, test, or agent step fails with a Tenuo denial, monotonicity, proof-of-possession, chain, expiry, approval, or unknown-argument error. Do not use to design new authority from scratch (use…

not rated 105 +2 today A 111 tokens original Apache-2.0

gum-hasp

256

ehmo/gum

Skill Codex

Use when a gum workflow needs local secrets protected by HASP.

not rated 104 +12 changed 1mo ago A SkillSpector: pass 16 tokens original MIT

cosai-oasis/secure-ai-tooling

Skill Claude CodeCodex

Audit framework mappings — an existing entity's mappings, the whole corpus, or a candidate value proposed for an entity not yet in the corpus — against the framework mappings style guide. Use when reviewing, auditing, or pre-PR authoring mapping changes for risks.yaml, controls.yaml, or personas.yaml.

not rated 102 changed 13d ago A SkillSpector: pass 65 tokens original Apache-2.0

smart-contract-audit

258

greatpie/smart-contract-audit-skill

Skill Claude CodeCodex

Script-backed, out-of-box auditing workflow for Solidity/EVM repositories based on EVMbench detect/patch/exploit methodology. Use when asked to audit a smart contract repo from a URL or local path, auto-prepare the environment, find high-severity loss-of-funds vulnerabilities, validate exploitability, propose safe…

not rated 100 8mo ago A 80 tokens

markdown-preview

259

secutils-dev/secutils

Skill Claude CodeCodex

Render and read Markdown in the browser with the Secutils.dev Markdown Preview tool. Reading-first: the rendered preview is the default full-width view, with on-demand source editing, threaded review comments stored in the Markdown, and self-contained HTML/PDF export. Supports GitHub-flavored Markdown, Mermaid…

not rated 100 changed today A 204 tokens AGPL-3.0

envlatch

260

Raylinkh/envlatch

Skill Codex

Run local commands with API keys stored in EnvLatch instead of copying credentials between .env files or shell profiles. Use when an agent, CLI, script, SDK, test, or build needs a saved credential environment variable on macOS.

not rated 99 changed 28d ago A SkillSpector: warn 51 tokens original MIT

resemble-detect

261

resemble-ai/detect-skill

Skill Claude CodeCodex

Deepfake detection and media safety — detect AI-generated audio, images, video, and text, trace synthesis sources, analyze media intelligence, and tell people from AI agents on a website (Agent Detection) using direct Resemble AI API calls.

not rated 99 +3 changed 1mo ago A 53 tokens original Apache-2.0

security-review

262

AOSSIE-Org/Website

Skill Claude Code

Perform a security-focused code review of smart contracts, frontends, backends, and mobile apps. Use this skill for a security review, audit, vulnerability scan, or check of code for security issues, including reviewing a pull request, diff, or changed files, or asking "is this safe to merge or ship." Covers Solidity…

not rated 99 +1 2d ago A 201 tokens

orbit

263

simota/agent-skills

Skill Claude CodeCodex

Running autonomous loops for nexus-autoloop. Generates script sets from goals, designs operation contracts, audits live loops, and recovers state — runners that complete reliably.

not rated 98 +2 changed 15d ago A SkillSpector: warn 35 tokens original MIT

ai-data-privacy

264

UnitOneAI/SecuritySkills

Skill Claude Code

Reviews AI/ML systems for data privacy and governance risks including training data privacy, PII exposure in prompts and completions, data retention policies, model memorization risks, and regulatory compliance. Auto-invoked when reviewing systems that process personal data through LLMs, train or fine-tune models on…

not rated 97 +2 4mo ago A 106 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: