Security Agent Skills
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Security
1,976 skills
alirezarezvani Ship Gate
Scans a codebase for security, database, deployment, code quality, AI/LLM, dependency, frontend, and observability issues before deployment. Intercepts deploy commands and blocks until critical items pass.
20.4k · bundle
alirezarezvani Patent
Conducts patent prior-art searches and landscape intelligence across Google Patents, Espacenet, USPTO, and Lens.org, producing an editable Word document with verdict and ranked closest art.
20.4k · bundle
alirezarezvani Ra Qm Skills
Routes compliance requests to the appropriate regulatory and quality-management skill among 15 bundled options, covering ISO 13485, EU MDR, FDA submissions, ISO 14971, CAPA, document control, ISO 27001, ISO 42001, EU AI Act, GDPR, SOC 2, and auditing.
20.4k
alirezarezvani Aims Audit
Pressure-tests AI Management Systems against ISO 42001 with six forcing questions for certification readiness, internal audits, and new-system onboarding.
20.4k
alirezarezvani Dossier
Produces a decision-grade dossier on a specific company, person, nonprofit, or government org by testing the user's hypothesis rather than confirming it. Outputs an editable Word document with verdict, identity facts, 12-month activity timeline, network and reputation signals, and red flags.
20.4k · bundle
alirezarezvani Red Team
Plan and execute authorized red team engagements with structured attack path analysis, MITRE ATT&CK kill-chain planning, technique scoring, choke point identification, OPSEC risk assessment, and crown jewel targeting.
20.4k · bundle
alirezarezvani Soc2 Compliance
Prepare for SOC 2 audits by mapping Trust Service Criteria, building control matrices, collecting audit evidence, performing gap analysis, and assessing Type I vs Type II readiness.
20.4k · bundle
alirezarezvani Research
Routes research queries to specialist skills or runs a fallback search-and-synthesize workflow, with deterministic classification and transparent routing decisions.
20.4k · bundle
alirezarezvani Compliance Os
Orchestrates multi-framework compliance programs by selecting applicable frameworks, mapping control overlaps, simulating audits, and consolidating evidence checklists.
20.4k · bundle
alirezarezvani Qms Audit Expert
Provides ISO 13485 internal audit methodology for medical device quality management systems, covering audit planning, execution, nonconformity classification, and external audit preparation.
20.4k · bundle
alirezarezvani Ciso Advisor
Quantify security risks in dollars, build compliance roadmaps (SOC 2, ISO 27001, HIPAA, GDPR), and justify security budgets for growth-stage companies.
20.4k · bundle
alirezarezvani AI Security
Assess AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, and agent tool abuse, with MITRE ATLAS mapping and guardrail recommendations.
20.4k · bundle
alirezarezvani Pr Review Expert
Review GitHub PRs and GitLab MRs with structured analysis including blast radius, security scanning, test coverage delta, breaking change detection, and performance impact.
20.4k
alirezarezvani Gdpr Dsgvo Expert
Scans codebases for GDPR/DSGVO compliance issues, generates DPIA documentation, and tracks data subject rights requests with deadline management.
20.4k · bundle
alirezarezvani Isms Audit Expert
Guides internal and external ISMS audits for ISO 27001 compliance, including audit planning, control assessment, finding management, and certification support.
20.4k · bundle
alirezarezvani Gdpr Audit Prep
Pressure-tests GDPR compliance with six Article-cited questions covering RoPA, lawful basis, DPIA, DSARs, transfer impact assessments, and breach logging for audit readiness.
20.4k
alirezarezvani Soc2 Audit Prep
Guides SOC 2 Type II audit preparation with six forcing questions covering scope, control consistency, evidence tracking, and cross-walk to ISO 27001.
20.4k
alirezarezvani Mdr 745 Specialist
Classify medical devices under EU MDR 2017/745, build technical documentation, plan clinical evaluations, and manage post-market surveillance and EUDAMED integration.
20.4k · bundle
alirezarezvani AI Act Readiness
Guides AI system compliance with the EU AI Act through six article-cited questions covering prohibited practices, risk classification, conformity assessment, role obligations, transparency, and GPAI systemic risk.
20.4k
alirezarezvani Senior Secops
Run security audits, vulnerability scans, compliance checks, and incident response workflows for application security.
20.4k · bundle
alirezarezvani Dependency Auditor
Audit and manage dependencies across multi-language projects by scanning for vulnerabilities, license conflicts, and transitive dependency risks, with safe-upgrade planning.
20.4k · bundle
alirezarezvani Iso42001 Specialist
Conduct internal audits against ISO/IEC 42001:2023 by identifying AIMS gaps, building an AI risk register with Annex A control mappings, and generating a 12-month Clause 9.2 audit plan.
20.4k · bundle
alirezarezvani Cloud Security
Assess cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, and IaC security gaps across AWS, Azure, and GCP with MITRE ATT&CK mapping.
20.4k · bundle
alirezarezvani Senior Backend
Designs and implements backend systems including REST APIs, microservices, database architectures, authentication flows, and security hardening. Covers Node.js/Express/Fastify development, PostgreSQL optimization, API security, and backend architecture patterns.
20.4k · bundle
alirezarezvani Env Secrets Manager
Audit environment-variable hygiene and secrets safety across local development and production with practical scanning, drift awareness, and rotation readiness.
20.4k · bundle
alirezarezvani Eu AI Act Specialist
Classify AI systems under the EU AI Act, determine conformity assessment routes, and track per-role obligations using reference scripts and Article-cited guidance.
20.4k · bundle
alirezarezvani Fda Qsr Audit Prep
Prepares for FDA QSR audits by asking six forcing questions covering complaints, process validation, DHRs, CAPAs, labeling, and Form 483 history.
20.4k
alirezarezvani Senior Security
Routes security requests to specialist skills and performs STRIDE/DREAD threat modeling with a quick secret scan.
20.4k · bundle
alirezarezvani Knowledge Ops
Author, validate, and clean up company SOPs and internal runbooks with 5W2H completeness checks, cross-link validation, and KB hygiene reporting.
20.4k · bundle
alirezarezvani Iso13485 Audit Prep
Pressure-tests medical-device QMS work with six traceability-obsessed questions before internal audits, regulatory reviews, or product launches.
20.4k
alirezarezvani Iso27001 Audit Prep
Pressure-tests an ISMS with six sample-driven questions to prepare for ISO 27001 internal, certification, or surveillance audits.
20.4k
alirezarezvani Senior Fullstack
Scaffolds fullstack projects (Next.js, FastAPI, MERN, Django) and analyzes code quality with security and complexity scoring.
20.4k · bundle
alirezarezvani Threat Detection
Proactively hunt for threats by analyzing IOCs, detecting behavioral anomalies in telemetry, and prioritizing signals mapped to MITRE ATT&CK.
20.4k · bundle
alirezarezvani Secrets Vault Manager
Manage production secret infrastructure with HashiCorp Vault, cloud secret stores, automated rotation, and audit logging.
20.4k · bundle
alirezarezvani Compliance Readiness
Pressure-tests any compliance program with six forcing questions before adopting a new framework, planning an audit cycle, or signing off on certification readiness.
20.4k
alirezarezvani Incident Response
Classify, triage, and manage declared security incidents from initial triage through forensic evidence collection and escalation routing.
20.4k · bundle
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include ship-gate, patent, senior-backend. Rankings shift as installs change; sort this page by "Most downloaded" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds add <owner>/<name>, or copy the file into your agent's skills directory.