Security skills

18,911 tagged Security, measured the same way as everything else here.

Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63

instancez

313

instancez/instancez

Skill Claude CodeCodex

Use when building, changing, or deploying an instancez backend - editing instancez.yaml (tables, RLS, auth, storage, rpc, functions), running the inz CLI, or debugging why a query is denied. instancez is a single-binary Supabase-compatible backend defined by one YAML file.

not rated 62 +4 changed today C 64 tokens original Apache-2.0

ctf-crypto

314

DekaPrayoga/AurixAgent

Skill Claude Code

Provides cryptography attack techniques for CTF challenges. Use when attacking encryption, hashing, signatures, ZKP, PRNG, or mathematical crypto problems involving RSA, AES, ECC, lattices, LWE, CVP, number theory, Coppersmith, Pollard, Wiener, padding oracle, GCM, key derivation, or stream/block cipher weaknesses.

not rated 62 3mo ago A 78 tokens

compliance-mapping

315

gensecaihq/Wazuh-Autopilot

Skill Claude Code

Map incidents, control checks and SCA results to ISO 27001:2022, PCI DSS v4.0.1, NIST SP 800-53r5 and CIS Controls v8.1 and write auditor-ready evidence statements; use for compliance checks, audit questions, or incidents on regulated assets.

not rated 62 +1 1mo ago A 69 tokens original MIT

yara-skill

316

YARAHQ/yara-rule-skill

Skill Claude CodeCodex

Expert YARA rule authoring, review, and optimization. Use when writing new YARA rules, reviewing existing rules for quality issues, optimizing rule performance, or converting detection logic to YARA syntax. Covers rule naming conventions, string selection, condition optimization, performance tuning, and automated…

not rated 60 8mo ago A 68 tokens

whoamihappyhacking/lazycat-skills

Skill Claude CodeCodex

A guide for connecting Lazycat MicroServer apps to its official sign-in and access-control systems. It covers OIDC single sign-on, user identity from HTTP headers, API tokens, and separate access rules for public paths.

not rated 60 +1 changed 26d ago A 42 tokens

caeruleus

319

praetorian-inc/caeruleus

Skill Claude Code

Use when performing BLE security testing on Linux/BlueZ - device scanning, GATT enumeration, read/write/notify interaction, fuzzing, and security assessment (unauthenticated read/write exposure, encryption enforcement, DFU entry, write-without-response abuse, connection parameters). Drives the single Go caeruleus…

not rated 60 1mo ago A SkillSpector: warn 82 tokens original Apache-2.0

univ4-hook-harbinger

320

zerocoolailabs/ZeroSkills

Skill Claude CodeCodex

Review Uniswap v4 hooks and integrations for permission-bit, callback-authentication, pool-identity, custom-accounting, delta, settlement, dynamic-fee, JIT-liquidity, shared-custody, and liveness bugs. Use when a Solidity system implements IHooks or BaseHook, returns hook deltas, or relies on a v4 hook for pricing…

not rated 60 2mo ago A 90 tokens

laravel-audit

321

MrPunyapal/laravel-auditor

Skill Claude CodeCodex

Perform a deep, structured, evidence-based audit of a Laravel application and produce actionable findings backed by concrete project evidence. Use when asked to audit, review, assess, or evaluate an existing Laravel codebase.

not rated 60 changed 1mo ago A SkillSpector: pass 46 tokens original MIT

bibavpn-setup

322

Eljaja/BibaVPN

Skill Claude CodeCodex

Set up, connect to, or troubleshoot BibaVPN clients and servers, including the local Docker lab, SOCKS5 connectivity, invitations, and per-user access. Use when a user asks to run or diagnose BibaVPN; consult the repository's own documentation for implementation changes.

not rated 60 4d ago A 62 tokens original MIT

clawseccheck

323

gl0di/clawseccheck

Skill Claude CodeCodex

Free, local, read-only security self-audit for your own OpenClaw agent. Reads your OpenClaw config, bootstrap files, logs, agent session logs, and installed skills, plus a bounded host-security scan. It changes no OpenClaw config, skill or bootstrap file; its own history and state stay under /.clawseccheck…

not rated 58 changed yesterday A 235 tokens original MIT

wrdn-gha-workflows

324

getsentry/warden-skills

Skill Claude Code needs its repo

Detects exploitable GitHub Actions workflow vulnerabilities, including pullrequesttarget pwn requests, unsafe PR checkout, expression injection in run steps and actions/github-script blocks, workflowdispatch and workflowcall input command injection, comment- and discussion-triggered commands, TOCTOU between approval…

not rated 58 +1 19d ago A SkillSpector: warn 151 tokens original MIT

3x-ui-setup

325

AndyShaman/3x-ui-skill

Skill Claude Code needs its repo

Complete VPN server setup from scratch — takes a fresh VPS (IP + root password from the hosting provider) through full server hardening and a 3x-ui (Xray) install with two VLESS+Reality inbounds (XHTTP for best DPI resistance, TCP+Vision for iOS), delivered as one subscription link and connected via the Happ client.…

not rated 58 3mo ago D 134 tokens original MIT

shannon

326

unicodeveloper/shannon

Skill Claude Code

Autonomous AI pentester for web apps and APIs. Run white-box security assessments with Shannon — analyzes source code, identifies attack vectors, and executes real exploits to prove vulnerabilities. Triggered by 'shannon', 'pentest', 'security audit', 'vuln scan'.

not rated 58 8mo ago A 59 tokens

symbiont

328

ThirdKeyAI/Symbiont

Skill Claude CodeCodex

AI-native agent runtime with typestate-enforced ORGA reasoning loop, Cedar policy authorization, CommunicationPolicyGate for inter-agent governance, ToolClad declarative tool contracts, knowledge bridge, zero-trust security, multi-tier sandboxing including a daemon-free Landlock tier, governed workflow improvements…

not rated 57 +1 changed 28d ago A 107 tokens original Apache-2.0

edgeone-clawscan-zh

329

L-LesterYu/OpenClaw-hot-skills-zh

Skill Claude CodeCodex

A security-checking workflow for OpenClaw, an environment for running AI agents, and for the skills installed in it.

not rated 57 7mo ago A 144 tokens original MIT

xuansenpa1/skillrevise

Skill Claude CodeCodex

Generate structured CSV security audit reports from vulnerability data with proper filtering and formatting. This skill covers CSV schema design for security reports, using Python csv.DictWriter, severity-based filtering, and field mapping from JSON to tabular format.

not rated 57 +1 2mo ago A SkillSpector: pass 52 tokens original MIT

java-audit-skill

331

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A security-audit workflow for Java, Kotlin, JavaScript, TypeScript, React, and Vue codebases. It is intended to find vulnerabilities and produce structured security findings.

not rated 55 +1 3mo ago A 184 tokens

rust-audit-prep

332

CDSecurity/cdsecurity-skills

Skill Claude CodeCodex

Prepare Solana/Rust projects for a security audit — test coverage analysis, Rust doc-comment checks, code hygiene sweeps, dependency health verification, compute-unit optimization tips, and best-practice enforcement. Supports both Anchor-based and native solanaprogram Rust programs. Generates a scored Audit Readiness…

not rated 55 7mo ago A 181 tokens original MIT

workflow-creator

333

accuknox/agentZ

Skill Claude CodeCodex

Create or update reusable workflow DAGs. Use when authoring or revising saved workflows. Must be mandatorily used before calling the createworkflow tool.

not rated 55 +1 yesterday A SkillSpector: pass 36 tokens original Apache-2.0

tayontech/SCOPE

Skill Claude CodeCodex

Use when formatting SCOPE controls detection candidates into detections.md, detections.json, dashboard-readable SPL sections, or controls-schema detection records.

not rated 54 4mo ago A 33 tokens original MIT

security_reporter

335

EastSword/dfyx_skills_lib

Skill Claude CodeCodex

A security report writing assistant for network vulnerabilities. Given a vulnerability identifier, name, or scanner report, it produces an analysis covering the issue, how it works, conditions for exploitation, and required fixes.

not rated 54 7mo ago A 96 tokens

net-route-mapper

336

RuoJi6/net-audit-skills

Skill Claude CodeCodex

A tool that maps HTTP routes and their parameters in .NET applications. It can inspect source code or decompiled files and save the results as a Markdown document.

not rated 54 5mo ago A 158 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: