Security skills

18,908 tagged Security, measured the same way as everything else here.

Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63

attack-tx-analysis

361

BradMoonUESTC/TxAnalyzer

Skill Claude CodeCodex

Analyze blockchain attack transactions end-to-end: pull chain-specific artifacts first (EVM: traces, contract source, opcodes, selectors; Solana: transaction/meta payloads, instructions, logs, accounts, invoked program metadata), then perform the full EVM-oriented 6-phase root cause analysis with deep trust boundary…

not rated 49 6mo ago C 130 tokens GPL-3.0

osa-security-patterns

363

opensecurityarchitecture/osa-data

Skill Claude CodeCodex

Look up Open Security Architecture (OSA) security patterns, the NIST SP 800-53 controls each one calls for, the threats each control mitigates, and the matching clauses in 95 compliance frameworks (ISO 27001, PCI DSS, IEC 62443, NIS2, DORA, the EU Cyber Resilience Act and others). Use when someone asks which security…

not rated 49 changed 2d ago A 116 tokens

TeamArtisanThrive/r03-anthropics-skills-security

Skill Claude CodeCodex

🔒 Security & Compliance skill suite derived from anthropics/skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.

not rated 48 6mo ago A 58 tokens

iac-iam

365

senaykt/iac-security-scan-skills

Skill Claude CodeCodex

Deep IAM and identity-layer security analysis for Infrastructure-as-Code. Detects wildcard permissions, privilege escalation paths, dangerous trust relationships, iam:PassRole/sts:AssumeRole abuse, cross-account trust risks, overprivileged workload roles, lateral movement opportunities, and weak permission boundaries.…

not rated 48 5mo ago A 102 tokens original MIT

apk-recon

367

abisheikM1/Tribunal

Skill Claude CodeCodex

First-pass recon net for an Android APK — hunt secrets, insecure storage, weak crypto, broken TLS, and risky configuration in one broad sweep. Fires on manifest signals (android:debuggable="true", android:allowBackup="true", android:usesCleartextTraffic="true", a networkSecurityConfig that trusts user CAs or permits…

not rated 48 3mo ago A 319 tokens

security-review

369

AOSSIE-Org/Resonate-Website

Skill Claude Code

Perform a security-focused code review of smart contracts, frontends, backends, and mobile apps. Use this skill for a security review, audit, vulnerability scan, or check of code for security issues, including reviewing a pull request, diff, or changed files, or asking "is this safe to merge or ship." Covers Solidity…

not rated 47 2d ago A 201 tokens

agent-passport-system

370

aeoess/agent-passport-system

Skill Claude CodeCodex

Enforcement and accountability layer for AI agents. Bring your own identity (did:key, did:web, SPIFFE, OAuth, did:aps). Gateway enforcement boundary, monotonic narrowing, cascade revocation, spending controls, data lifecycle, observation governance (telemetry scopes, derivation rights, behavioral memory). Use when…

not rated 46 changed 1mo ago A SkillSpector: warn 338 tokens original Apache-2.0

code-review

371

anthroos/claude-code-review-skill

Skill Claude CodeCodex

AI code review for PR or local changes. 280+ checks across security, architecture, performance, testing, and code quality. Posts findings as GitHub PR comments with confidence scores.

not rated 46 8mo ago A 40 tokens copy · 97% MIT

AshExplained/roblox-skills

Skill Claude CodeCodex

Audit Roblox Creator Store, Toolbox, inventory, group, universe, package, model, UI, gameplay, plugin-like, and other third-party imported assets for malicious or risky scripts. Use whenever Claude imports, inserts, reviews, or trusts Creator Store assets, especially assets with Scripts, LocalScripts, ModuleScripts…

not rated 47 +7 4mo ago A 93 tokens original MIT

workos-setup

373

workos/skills

Skill Claude CodeCodex

Set up WorkOS AuthKit sign-in in a project with npx workos@latest install, which needs no WorkOS account. Use when the user asks to add WorkOS or AuthKit authentication to an app, to scaffold a new app with WorkOS, or to claim the temporary WorkOS environment the installer created.

not rated 46 2d ago A 71 tokens original MIT

b01-gbrain--security

374

PulverizeDirector/b01-gbrain-security

Skill Claude CodeCodex

🔒 Threat Intelligence Brain — Self-wiring knowledge graph for threats, vulnerabilities and security incidents. Derived from gbrain (garrytan/gbrain). Security audits, vulnerability management, GDPR/SOC2.

not rated 45 6mo ago A 48 tokens

clawmoat

375

darfaz/clawmoat

Skill Claude CodeCodex

Real-time AI agent security scanner. Detects prompt injection, jailbreak attempts, credential/secret leaks, PII exposure, and dangerous tool calls. Activate when: (1) scanning inbound messages or tool outputs for prompt injection, (2) checking outbound content for credential leaks or PII, (3) auditing agent session…

not rated 45 2mo ago A SkillSpector: warn 107 tokens original MIT

Skills-Security-Check

376

Toolsai/Skills-Security-Check

Skill Claude CodeCodex

A security checker for coding-agent skills that uses fixed checks and AI review to find possible vulnerabilities and threats.

not rated 45 9mo ago A 73 tokens

diet-assess-risk

377

future-architect/uzomuzo-oss

Skill Claude Code

Deep-dive security risk analysis for a dependency flagged by uzomuzo diet.

not rated 45 changed 9d ago A SkillSpector: pass 20 tokens original Apache-2.0

YuDefine/nuxt-supabase-starter

Skill Claude Code

Configure rate limiting, manage auth secrets, set up CSRF protection, define trusted origins, secure sessions and cookies, encrypt OAuth tokens, track IP addresses, and implement audit logging for Better Auth. Use when users need to secure their auth setup, prevent brute force attacks, or harden a Better Auth…

not rated 44 yesterday A SkillSpector: pass 70 tokens original MIT

levelsio-vps-deploy

380

Avanderheyde/levelsio-vps-setup-skill

Skill Claude CodeCodex

Set up a web app on a single cheap, hardened VPS the "levels.io" way — one Hetzner/DigitalOcean box running Next.js (or any Node app) on SQLite + Caddy (auto-HTTPS) + systemd, secured with Tailscale, put behind a Cloudflare domain, and set up to charge money with Stripe. The whole "idea → app that makes money on a…

not rated 44 3mo ago D 356 tokens original MIT

access-control-review

381

Robotti-io/copilot-security-instructions

Skill Claude CodeCodex

Analyze repository-grounded identity, access control, and authorization design with evidence-first reporting and script-validated Mermaid diagrams.

not rated 43 5mo ago A 27 tokens original Apache-2.0

openclaw-plugin

383

christopherkarani/ryk

Skill Claude CodeCodex

Skill "openclaw-plugin" from christopherkarani/ryk, covering ryk, when to use ryk, how it works, prerequisites and example policy behavior.

not rated 42 2mo ago A ✓ AI review 0 tokens original Apache-2.0

pe-reverse-analyzer

384

DamonZS/PE-reverse-skill

Skill Claude CodeCodex

A general reverse-engineering toolkit for Windows programs, Android apps, iOS apps, web interfaces, and APIs. Reverse engineering means examining software to understand how it works and, where appropriate, how to modify and rebuild it.

not rated 42 +1 2mo ago A 90 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: