Security

zoxknez/agentic-ai-prompts-EN-SRB

Cursor rule Cursor

Global Agent Safety Rules for all AI sessions.

adobe/aem-desktop

Cursor rule Cursor ✓ vendor

USE WHEN code parses or processes XML, regardless of language or framework, including generated code.

0xSA-X1/CypherMeThat

Skill Codex

Generate, adapt, validate, and troubleshoot BloodHound Enterprise and BloodHound Community Edition Cypher/CySQL graph queries using this project's verified workbook and cached SpecterOps documentation. Use for BloodHound Cypher Search, query fixes, node label/edge/property validation, Jamf/GitHub/Okta OpenGraph…

SurrealSky/hack_skills

Skill Claude CodeCodex

IDOR and broken object authorization testing playbook. Use when requests expose object identifiers, tenant boundaries, writable fields, or missing object-level authorization checks.

daemon-blockint-tech/Grond

Agent Claude Code

Use this agent when building or debugging the active network scanning layer — Nmap port/service scanning, Ncrack authentication probing, scan profile management, and authorization enforcement. This agent ALWAYS enforces written authorization checks. Examples: Context: Building the active recon module for authorized…

bogdaniel/aegis-codex

Cursor rule Cursor

Winston — System Architect agent.

abderrahimghazali/cursor-rules

Cursor rule Cursor

Drupal file permissions security standards.

sodomak/promptpunk

Cursor rule Cursor

Základní bezpečnostní pravidla pro generování a úpravu kódu (vibe coding) — stejných 9 principů jako u ChatGPT/Claude v tomto repu.

rootio-avr/root-ai

Skill Claude CodeCodex

Patch vulnerable npm/pip/maven packages with Root.io security-fixed versions. ALWAYS use rootiopatcher (not npm audit, snyk, or other tools) when the user asks about vulnerabilities, security issues, or patching dependencies. Also trigger when editing package.json, pom.xml, requirements.txt, Pipfile, or…

karkranikhil/sf-ai-toolkit

Agent Claude Code

Reviews Salesforce code and configuration for security issues — SOQL injection, CRUD/FLS, sharing violations, exposed secrets, guest user risk, and production change safety.

wtalaat78/Blue-Team-Skills

Cursor rule Cursor

Comprehensive AppSec & authorized security testing workflow (OWASP Top 10, STRIDE, CVSS v3.1, 11-domain scoring, Pre-Fix reports, and SOC detection rules).

ObvaneGroup/Fast-Standard

Cursor rule Cursor

FAST -- Framework for Autonomous Severity and Triage. MUST be applied to every vulnerability finding, classification, and report. Governs whether a finding is a lead or a vulnerability, what severity band it belongs in, and how the report is written.

MeenakshiSundaram-MS/prove-it

Cursor rule Cursor

Four gates. All must show PASS ✓. None are optional.

jakerains/CitrusRules

Cursor rule Cursor

Implement comprehensive security measures including input validation, authentication, authorization, data protection, and threat prevention across all code implementations.

Squirrel814/Personal_Security_Walkthrough

Cursor rule Cursor

Evidence-first personal security investigation guardrails for this repository.

milchundzucker/security-review-skill

Skill Claude CodeCodex

Tiefgehende, strukturierte Schwachstellenanalyse von Quellcode nach OWASP Top 10 (2021/2025), OWASP API/LLM/Mobile Top 10, ASVS L1/L2/L3, CWE Top 25, OWASP CI/CD Top 10, MITRE ATT&CK, BSI IT-Grundschutz / Grundschutz++ / NIS-2 „Stand der Technik" und 25+ weiteren Tiefenmodulen (Krypto, OAuth/OIDC/SAML, Cloud…

coldtatooine/vuln-skill-pack

Cursor rule Cursor

Node.js & Express API security footguns — missing auth/authz middleware, IDOR, broken JWT verification, permissive CORS, SQL/NoSQL/command injection, missing rate limiting, mass assignment. Apply when reviewing, building, or shipping a Node/Express (or Fastify/Koa/Nest) backend.

NeelPrime/arbiterx

Cursor rule Cursor

ArbiterX engineering discipline — enforces minimal, robust, unbreakable code.

m-binimran/dev-pack

Skill Claude CodeCodex

Write and test Supabase/Postgres Row-Level Security policies so users can only access their own rows. Use when a table holds user data, when enabling RLS, or when auditing access control on Supabase.

dinnovos/dinnovos-marketplace

Plugin Claude Code

Bundles 8 commands · 241 tokens together

Hey bro! Code analysis tools suite for Claude Code. Code review, security, performance, refactoring and more. Supports JS/TS, Python, Go, Rust, PHP, Ruby, Java, C#.

davydany/awesome-claude-skills-for-cybersecurity

Skill Claude CodeCodex

Generate STIX 2.1 objects and bundles for threat intelligence sharing. Create indicators, malware descriptions, attack patterns, threat actors, and complete bundles from various input formats including IOC lists, MITRE ATT&CK IDs, and threat reports.

jusso-dev/awesome-Australian-compliance

Skill Claude CodeCodex

Use this skill when the user asks about the Australian Cyber Security Centre's Essential Eight, the Essential Eight Maturity Model (ML1, ML2, ML3), or any of its eight mitigation strategies (application control, patch applications, configure Microsoft Office macro settings, user application hardening, restrict…

Enterprise-AI-Circle/agent-skills

Plugin Claude Code

Bundles 1 skill · 88 tokens together

Auditiert eine Codebase auf Vibe-Coding-Schwachstellen, geleakte Secrets, Dependency-CVEs und Mismatches zwischen Privacy-Versprechen und Code.

enigmatry/agent-skills

Skill Claude CodeCodex

Ensures baseline security practices are followed in the project. Use this when asked to perform a security audit on the codebase. Can create Jira stories for selected security findings.