Security skills

18,920 tagged Security, measured the same way as everything else here.

Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63

workflow-orchestrator

121

SHAdd0WTAka/Zen-Ai-Pentest

Skill Claude CodeCodex

Module Loop and Iteration Skill for orchestrating multi-phase penetration testing workflows. Use when coordinating sequential tool execution, managing dependencies between reconnaissance and vulnerability scanning modules, implementing adaptive fallback strategies, or managing workflow state across iterations.…

not rated 500 +1 yesterday A SkillSpector: pass 85 tokens original MIT

dependency-upgrade

122

secondsky/sap-skills

Skill Claude CodeCodex

Secure dependency upgrades with supply chain protection, cooldowns, and staged rollout. Use when upgrading deps, configuring security policies, or preventing supply chain attacks.

not rated 489 +9 yesterday A Socket: passSnyk: passSkillSpector: warn 34 tokens GPL-3.0

turnstile-testing

123

jumodada/Drissionpage-MCP-Server

Skill Claude CodeCodex

Use when testing an authorized Cloudflare Turnstile integration or operating an authorized production challenge with drissionpage-mcp. Covers official visible, invisible, pass, fail, and forced-interactive test keys; fresh iframe geometry; bounded coordinate interaction; refresh recovery; parent-page postconditions…

not rated 480 +5 4d ago A 69 tokens

prismor

124

PrismorSec/prismor

Skill Claude CodeCodex

Runtime security for AI coding agents. Use when about to install a package, paste a secret, run a destructive command, reach an unfamiliar host, govern MCP servers, pick a governance mode, set up a new workspace, respond to a changed-instruction-file notice, read a pasted Prismor session link, or recover from a…

not rated 474 +9 changed today C 73 tokens original Apache-2.0

evm-bytecode-analysis

125

cdump/evmole

Skill Codex

Analyze supplied deployed EVM runtime bytecode with EVMole or guide a separate application in integrating a published EVMole Rust, Go, Python, or JavaScript binding. Use for unverified-contract inspection, ABI reconstruction from runtime code, selector discovery, storage-access analysis, EVM control-flow inspection…

not rated 473 +2 3d ago A SkillSpector: warn 135 tokens original MIT

kubernetes-skill

126

LukasNiessen/kubernetes-skill

Skill Claude CodeCodex

Prevent Kubernetes hallucinations by diagnosing and fixing failure modes: insecure workload defaults, resource starvation, network exposure, privilege sprawl, fragile rollouts, and API drift. Use when generating, reviewing, refactoring, or migrating manifests, Helm charts, Kustomize overlays, cluster policies, and…

not rated 469 +1 1mo ago A 89 tokens original MIT

sponsio

127

SponsioLabs/Sponsio

Skill Claude CodeCodex

Install, observe, tune, and enforce Sponsio: a runtime contract layer for LLM agents that blocks unsafe tool calls and scores output quality against declared rules. Use when the user wants to set up / add / install Sponsio, add guardrails or runtime safety to an LLM agent, generate or refine a sponsio.yaml, audit tool…

not rated 454 +1 5d ago A SkillSpector: warn 0 tokens original Apache-2.0

ghtkn

128

suzuki-shunsuke/ghtkn

Skill Claude CodeCodex

Read ghtkn's documentation with ghtkn docs list and ghtkn docs show before answering. ghtkn is a CLI that creates short-lived (8h) GitHub user access tokens from GitHub Apps. Use for any question about ghtkn, GHTKN environment variables, ghtkn get / exec / auth / agent / revoke, the ghtkn git credential helper, or…

not rated 453 +16 yesterday A SkillSpector: warn 146 tokens original MIT

owasp-top-10

129

tomascupr/sandstorm

Skill Claude Code

Use this checklist when performing security audits. Check each category systematically against the codebase.

not rated 450 +1 6mo ago A 0 tokens original MIT

secknowledge-skill

130

Pa55w0rd/secknowledge-skill

Skill Claude CodeCodex

A Chinese-language knowledge base for practical security testing, including penetration testing, vulnerability research, security audits, CTFs, and AI or LLM security. It combines recorded vulnerability cases with security methods and risk frameworks.

not rated 441 +2 4mo ago A 426 tokens

beaconing-review

131

Vigil-SOC/vigil

Skill Claude CodeCodex

Grade a periodic outbound flow as c2, suspicious, or benign-periodic. Read this when rawdata shows a repeating connection and you must separate a beacon from NTP, an update check, a monitoring agent, or telemetry.

not rated 422 +15 today A 51 tokens original Apache-2.0

wxmini-security-audit

132

sssmmmwww/wxmini-security-audit

Skill Claude CodeCodex

A complete static security-audit workflow for WeChat Mini Programs, using several specialised agents and preliminary scripts.

not rated 415 +2 7mo ago A 95 tokens

DragonJAR/Android-Pentesting-Skill

Skill Claude Code

Comprehensive Android APK security audit with static analysis, dynamic instrumentation, source-to-sink tracing, IPC/component abuse analysis, and CVSS 4.0 reporting. Covers decompilation, manifest analysis, deep links and intent injection, secrets detection, crypto analysis, Frida/Objection integration, and APK…

not rated 414 +4 changed 1mo ago A 154 tokens original Apache-2.0

php-audit-pipeline

134

0xShe/PHP-Code-Audit-Skill

Skill Claude CodeCodex

A multi-file workflow for auditing PHP web applications for security issues. The description does not specify enough detail about its exact checks beyond coordinating other PHP audit tools.

not rated 413 +4 7mo ago A 71 tokens

aspectrr/deer

Skill Claude CodeCodex

Diagnose and resolve Elasticsearch security errors: 401/403 failures, TLS problems, expired API keys, role mapping mismatches, and Kibana login issues. Use when the user reports a security error.

not rated 406 +1 6mo ago A SkillSpector: warn 48 tokens original MIT

agentsh-policy-edit

136

canyonroad/agentsh

Skill Claude CodeCodex

Use when adding, removing, or updating rules in an existing AgentSH policy, modifying security permissions, HTTP service declarations, Postgres-family database rules, resource limits, or policy YAML files.

not rated 404 8d ago A SkillSpector: warn 42 tokens original Apache-2.0

ergrelet/windiff

Skill Codex

Generate and interpret security-research diffs between Windows versions or patch levels using this repo's WinDiff CLI and databases. Use when comparing Windows builds or binaries such as ntoskrnl.exe, ntdll.dll, win32k.sys, ci.dll, or cng.sys to find changed syscalls, symbols, types, mitigation flags, callbacks…

not rated 396 +1 3d ago A SkillSpector: pass 140 tokens GPL-3.0

llm-testing

138

Eyadkelleh/awesome-skills-security

Skill Claude CodeCodex

Comprehensive LLM security testing prompts for bias detection, data leakage, alignment testing, and adversarial prompt resistance.

not rated 394 +1 4mo ago A Socket: warnSnyk: fail 27 tokens

ghidra-rpc

139

cellebrite-labs/ghidra-rpc

Skill Claude CodeCodex

Reverse engineering assistant powered by Ghidra. Use for binary analysis, decompilation, vulnerability research, auditing compiled code, renaming symbols, annotating disassembly, cross-references, or any RE task - even without explicit mention of Ghidra.

not rated 394 changed yesterday A 58 tokens

1llu50ry/mcp-gamehacking

Skill Claude CodeCodex

This is an independent systems-security research project that documents a literature and architecture feasibility study for a vendor-agnostic Linux compatibility layer capable of hosting kernel anti-c.

not rated 392 7d ago A 38 tokens original MIT

break

141

JDArmy/BREAK

Skill Claude Code

A Chinese-language business-security knowledge base covering risks, defenses, attack tools, threat actors, terms, business areas, and documented cases.

not rated 388 +1 changed 12d ago A 50 tokens original Apache-2.0

depsguard

143

arnica/depsguard

Skill Claude CodeCodex

Install and run DepsGuard, a zero-dependency CLI that scans and fixes package manager configs (npm, pnpm, yarn, bun, uv) for supply chain security best practices.

not rated 383 2mo ago A SkillSpector: warn 41 tokens original MIT

humble-header-analyst

144

rfc-st/humble

Skill Claude CodeCodex

Expert-level parsing and remediation of 'humble' HTTP security header reports. Use this skill whenever the user provides a report generated by 'humble' (https://github.com/rfc-st/humble), mentions analyzing HTTP response headers, security header grades (A-E), or asks for remediation of findings such as missing…

not rated 382 changed 3d ago B SkillSpector: warn 107 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: