Security skills

18,782 tagged Security, measured the same way as everything else here.

Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63

lint-drupal-module

889

j4rk0r/claude-skills

Skill Claude Code

Lint review completo de un módulo Drupal 11 combinando 4 fuentes en paralelo — PHPStan level 5 + phpstan-drupal, PHPCS Drupal/DrupalPractice, agente drupal-qa (estándares) y agente drupal-security (OWASP). Dos modos — completo (todo el módulo) y diff (solo archivos cambiados vs develop). Genera informe markdown…

not rated 3 3mo ago A 225 tokens original MIT

code-audit

890

Rootx202/appsec-skills

Skill Claude CodeCodex

Elite full-codebase security auditor for any language or stack (JavaScript, TypeScript, Python, Java, Kotlin, PHP, Go, Rust, C/C++, Ruby, C#). Trigger this whenever the user asks to review, audit, scan, harden, or "check the security" of any project, before deploying/shipping/launching a site or app, after adding…

not rated 3 3mo ago A 144 tokens

report-writing

891

Mikacr1138/claude-bug-bounty

Skill Claude CodeCodex

Bug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi — report templates, human tone guidelines, impact-first writing, CVSS 3.1 scoring, title formula, impact statement formula, severity decision guide, downgrade counters, pre-submit checklist. Use after validating a finding and before submitting. Never use…

not rated 3 21d ago A 82 tokens original MIT

security-audit

892

Noorkhalel/saas-ai-skills

Skill Claude CodeCodex

Conduct a security-led audit of code, systems, APIs, infrastructure, dependencies, and AI workflows with threat modeling and exploitability-backed remediation. Use when security risk is the primary concern. Do not use for a generic code review, database design, or non-security debugging.

not rated 3 3mo ago A 58 tokens original MIT

ihme

893

lroolle/ihme-cli

Skill Claude CodeCodex

Manage iCloud Hide My Email addresses — list, create, edit, deactivate, export.

not rated 3 changed 6d ago B 20 tokens original MIT

fieldops-ctf-reverse

894

download4you/n2-fieldops

Skill Codex

Reverse engineering of compiled, packed, virtualized, or obfuscated targets for authorized CTF challenges. Use when the task is to understand, decompile, disassemble, or unpack an unknown executable across ELF, PE, Mach-O, APK, WASM, firmware, bytecode, or custom-VM targets.

not rated 3 2mo ago A 71 tokens original MIT

web

895

Shad0wMazt3r/The-Scaffolding

Skill Claude CodeCodex

Execute web-application assessment from setup and recon through injection, access control, auth/session issues, API, and SSRF chains.

not rated 3 2mo ago A 28 tokens GPL-3.0

securly

896

BghitCode/Securly

Skill Claude CodeCodex

Apply security guidelines when designing, building, or reviewing AI chatbots, LLM-powered apps, autonomous/tool-using agents, and mobile apps (React Native/Expo, Flutter) — covering agent controls (authorization checks, plan validation, execution limits, audit logging), LLM/prompt security (prompt injection, RAG…

not rated 3 3mo ago A 198 tokens original MIT

auth-implementation

897

sattva2020/skills

Skill Claude Code

Implement authentication and authorization in web applications. Use when adding login, signup, sessions, JWT tokens, OAuth, SSO, API key auth, role-based access control (RBAC), permissions, protected routes, middleware guards, password hashing, MFA/2FA, refresh token rotation, CSRF protection, or integrating auth…

not rated 3 3mo ago A 136 tokens

cors

898

CoderRahul01/unideploy

Skill Claude CodeCodex

Detect wildcard CORS origins, missing preflight handling, and insecure cross-origin configurations.

not rated 3 3d ago A 19 tokens

tendlyeu/SafeClaw

Skill Claude CodeCodex

SafeClaw validates every tool call, message, and agent action against OWL ontologies and SHACL constraints before execution. It acts as a governance gate between your AI agent and the tools it uses.

not rated 3 4mo ago A 0 tokens

roblox-exploit

901

mhdfa1z/roblox-exploit-skills

Skill Claude CodeCodex

Master-tier Roblox exploiter — standalone executor scripts only, no MCP. Remote spy via hookmetamethod, decompile hunt, recon, autofarm, teleport, dupe, quest skip, anti-cheat bypass, fuzz, kill aura, plan pivot A→B→C. Delivers complete copy-paste Luau for any executor. Use for: exploit, hack, vulnerability, autofarm…

not rated 3 3mo ago A 116 tokens

virustotal

902

vectra-ai-research/vectra-soc-agent-starter

Skill Claude CodeCodex

Enriches Vectra findings with VirusTotal threat intelligence — IOC reputation lookup for IPs, domains, URLs, and file hashes via the VirusTotal v3 API. Ships two paths — a standalone Bash CLI (scripts/vt-lookup.sh) for one-off lookups that needs only curl/jq, and a sourced framework adapter (scripts/virustotal.sh) for…

not rated 3 5d ago A 182 tokens original MIT

skills

903

serenashenn3-art/wechat-forensic-pro

Skill Claude CodeCodex

A skill guide for wechat-forensic-pro, covering its available skills, when to call them, and legal restrictions for forensic work on WeChat data.

not rated 3 2mo ago B 0 tokens

irap

904

jusso-dev/awesome-Australian-compliance

Skill Claude CodeCodex

Use this skill when the user asks about the Information Security Registered Assessors Program (IRAP), the IRAP Common Assessment Framework (CAF), an IRAP-registered assessor, an IRAP Security Assessment Report or Cloud Security Assessment Report, the Controls Matrix or Cloud Controls Matrix, the four CAF stages (Plan…

not rated 3 3mo ago A 361 tokens original MIT

lazarus-mode

905

kabudu/engineering-agent-skills

Skill Codex

Apply principal-engineer rigour to implementation, architecture, reviews, validation, and releases when the user requests expert engineering judgment, Lazarus/X mode, or staff/principal standards. Also use for rigorous security, performance, reliability, or scalability scrutiny.

not rated 3 changed 20d ago A 55 tokens original MIT

genai-governance

906

djimit/overheid-plugins

Skill Claude Code

Helpt bij het implementeren van technische governance-controls voor generatieve AI-systemen bij de Nederlandse overheid, conform de EU AI Act (hoog-risico), AVG en BIO2. Biedt model cards (Annex IV), conformiteitsbeoordeling (Art. 43), audit trails (Art. 12), menselijk toezicht (Art. 14), besluitregistratie, model…

not rated 3 28d ago A 292 tokens EUPL-1.2

burpsuite

908

nguyenthdat/burp-mcp

Skill Claude CodeCodex

Operate an already configured burp-mcp server for authorized web application security testing, penetration testing, vulnerability assessment, and Burp Suite automation: inspect Proxy HTTP/WebSocket history, scope, and site map; craft and replay requests in Repeater; run bounded parallel fuzzing, race condition jobs…

not rated 3 changed 1mo ago A 168 tokens original MIT

numpy

909

RudrenduPaul/skillguard

Skill Claude CodeCodex

A synthetic fixture skill bundled with SkillGuard for SG10 (marketplace typosquatting detection) end-to-end tests. Its declared name, "numpy", is an EXACT match against one of SG10's bundled well-known reference names -- standing in for that legitimate package's own official skill -- and must never be flagged: an…

not rated 3 today A 109 tokens original Apache-2.0

biometric-auth

910

almasumdev/awesome-mobile-security-agent-skills

Skill Claude CodeCodex

Biometric authentication on mobile using BiometricPrompt and LAContext, with keys cryptographically gated by user biometry. Use when adding unlock, re-auth, or step-up auth flows.

not rated 3 6mo ago A 41 tokens

cve-to-cme

912

stuwrtlttle/cme

Skill Claude CodeCodex

Map CVE IDs or OSIDB flaw IDs to applicable CME controls. Use when the user provides a CVE ID or flaw identifier and asks about mitigations.

not rated 3 7d ago A 39 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: