Security skills

18,887 tagged Security, measured the same way as everything else here.

Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63

euzun/security-paper-writing

Skill Claude CodeCodex

Write publication-ready papers for top security, privacy, and cryptography venues (IEEE S&P, ACM CCS, USENIX Security, NDSS, PETS, CRYPTO, Eurocrypt, TCC). Use when drafting papers from research repos in these areas, structuring threat models and security claims, writing game-based or simulation-based proofs, or…

not rated 21 5mo ago A 94 tokens

cybersecurity-lab

482

handnewb/hermes-cybersec-lab

Skill Claude CodeCodex

Turnkey cybersecurity lab — 2,077 skills, 131+ tools, 28 frameworks, and evolving methodology for security research, pentesting, forensics, and threat intelligence. Includes one-step ecosystem cloner for 8 repositories.

not rated 21 +1 2mo ago A 54 tokens original MIT

sector-b79/Malware-And-Reverse-Engineering-Skill-for-AI-Agents

Skill Claude CodeCodex

Defensive malware analysis and reverse-engineering workflow. Use for authorized lab analysis of suspicious Windows executables, DLLs, shellcode, packed samples, malicious documents, indicators of compromise, static and dynamic triage, IDA/Ghidra/debugger reasoning, anti-analysis handling, unpacking, host/network…

not rated 21 5mo ago A 75 tokens

Baiyajing/HarnessRisk

Skill Claude CodeCodex needs its repo

Controlled mock service tools for OpenClaw safety evaluation. Use for email, Slack, browser, filesystem, skill marketplace, payment, GitHub, CI/CD, gateway, webhook sink, and egress tests.

not rated 21 +1 2mo ago A 49 tokens original MIT

zgbrenner/agentcounsel

Skill Claude CodeCodex

Use when a privacy or security incident is suspected or confirmed — unauthorized access, ransomware, a lost device, a misdirected disclosure, an exposed database, or a vendor-reported incident — and counsel needs the incident organized: an incident-facts intake, a reportability question set, a notification-obligation…

not rated 21 3mo ago A 83 tokens original MIT

vhir-tool-reference

486

AppliedIR/sift-mcp

Skill Claude CodeCodex

Which Valhuntir MCP tool or SIFT tool to use for a question, file, IOC or artifact, and the step-by-step workflows that combine them (IOC investigation, threat actor research, detection engineering, malware analysis, disk, memory, timeline and network). Use when choosing tools or planning a multi-step analysis.

not rated 21 +2 changed 18d ago A 69 tokens original MIT

audit-package

487

kju4q/q-claude-skills

Skill Claude CodeCodex

Before cloning or installing any package or repo, stop, inspect it, report what it is and what it does, give a verdict, and wait for the human.

not rated 21 6d ago A 36 tokens

mnvsk97/agentbreak

Skill Codex

Orchestrates end-to-end resilience testing for LLM agents with AgentBreak, including LLM infrastructure failures, prompt injection, agent skill supply-chain risk, guardrail verification, and MCP server/tool failures. Use when the user asks to "test my agent for resilience", "chaos test this agent", "find failure modes…

not rated 20 5mo ago A 97 tokens original MIT

convex-security-audit

489

igor9silva/meseeks

Skill Claude CodeCodex

Deep security review patterns for authorization logic, data access boundaries, action isolation, rate limiting, and protecting sensitive operations.

not rated 20 4mo ago A 28 tokens AGPL-3.0

yultyyev/better-auth-firebase-auth

Skill Claude CodeCodex

Add Firebase Authentication (Phone SMS OTP, Google Sign-In, Email/Password) to a Better Auth app using the better-auth-firebase-auth plugin. Use when adding phone authentication to Better Auth without Twilio, integrating Firebase Auth with Better Auth sessions, working with the better-auth-firebase-auth package, or…

not rated 20 yesterday A 82 tokens original MIT

jwt-validate

491

jsonwebtoken/jwt-skills

Skill Claude CodeCodex

Verify and validate JSON Web Tokens (JWTs) by checking signatures, expiration, claims, and structure. Use when the user wants to verify, validate, or check a JWT — e.g. "verify this token", "is this JWT valid", "check the signature", "validate this token against my JWKS", "is this token expired". Supports HMAC, RSA…

not rated 20 7mo ago A Socket: passSnyk: pass 95 tokens

sdlc-cross-review

492

Minh-Tam-Solution/SDLC-Enterprise-Framework

Skill Claude CodeCodex

Use when a change, or a spec or plan before code, needs an independent review — acting as the reviewer in a fresh context, or preparing the diff and criteria for a reviewer in another session, model or tool. Enforces reviewer independence (not the author's context, not the author's operator), checks data classes…

not rated 20 changed today A 91 tokens

theauth

493

glincker/theauth

Skill Claude CodeCodex

Install and use theAuth (@glinr/theauth), the TypeScript auth SDK for AI agents and humans. Use when adding agent identity, scoped permissions, delegation, audit logs, human sign-in plugins, or an MCP OAuth 2.1 authorization server to a Node, Bun, Deno or edge project.

not rated 20 changed 16d ago A 67 tokens original MIT

review

494

fall-out-bug/sdp

Skill Claude CodeCodex

Multi-agent quality review (QA + Security + DevOps + SRE + TechLead + Documentation + PromptOps).

not rated 19 4mo ago A 25 tokens original MIT

audit-code

495

Swader/agent-skills-audit

Skill Codex

For requested code audits or deep reviews, produce evidence-ranked findings across relevant risks.

not rated 19 changed 1mo ago A 19 tokens

okjpg/skill-checkup-openclaw

Skill Claude CodeCodex

Use when auditing OpenClaw agents, workspaces, or hosts for production readiness, safety, backup/GitHub, memory/recall, skills, heartbeat, crons, watchdog, security, access, runtime bloat, or course baseline fit.

not rated 19 6mo ago A 58 tokens

sanitize

497

agentward-ai/agentward

Skill Claude CodeCodex

Detect and redact PII from text files. Supports 15 categories including credit cards, SSNs, emails, API keys, addresses, and more — with zero dependencies.

not rated 19 3mo ago A 36 tokens

pin-guard

498

walidboulanouar/pin-guard

Skill Claude CodeCodex

Enforce exact, pinned package versions across a JavaScript/TypeScript repo and its agent tooling. Scans package.json dependencies, npm scripts, MCP server configs (.mcp.json, Claude/Cursor settings), and CI workflows for unpinned specs (^, , , latest, missing versions on npx). Pins everything to exact versions…

not rated 19 4mo ago A 156 tokens original MIT

code-reviewing

499

PacktPublishing/The-Claude-Code-Operating-Model

Skill Claude Code

Review code for security vulnerabilities, performance issues, and coding best practices. Activate when the user asks to review code, check code quality, give feedback on code changes, or audit a file.

not rated 20 2mo ago A 42 tokens original MIT

mapick

500

mapick-ai/mapick

Skill Claude CodeCodex

Mapick — Skill recommendation & privacy protection for OpenClaw. Scans your local skills, suggests what you're missing, and keeps other skills from seeing your sensitive data.

not rated 18 5mo ago C 37 tokens original MIT

privacy

501

gpdir16/tabyAgent

Skill Claude CodeCodex

Privacy tools and alternatives to mainstream services with verified details on licensing, ads, and pricing.

not rated 18 19d ago A 20 tokens AGPL-3.0

AgentConnect/awiki-agent-id-message

Skill Claude Code

Verifiable DID identity and end-to-end encrypted inbox for AI Agents. Built on ANP (Agent Network Protocol) and did:wba. Provides self-sovereign identity, Handle (short name) registration, content pages publishing, federated messaging, group communication, and HPKE-based E2EE — Web-based, not blockchain. Designed…

not rated 18 7mo ago A 155 tokens original Apache-2.0

cs-policy

503

3D-Tech-Solutions/code-scalpel

Skill Claude Code

Verify code compliance with policies and standards: HIPAA, SOC2, PCI-DSS, custom style guides. Validate policy file integrity with cryptographic verification.

not rated 18 4mo ago A 34 tokens

opengrep

504

opengrep/skills

Skill Claude CodeCodex

Run Opengrep for pattern-based code search and security scanning. Use when grep is insufficient for finding code patterns that require structural understanding (function calls, data flow, nested structures). Also use for security vulnerability detection with custom YAML rules.

not rated 18 8mo ago B 51 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: