Security

Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.

ajbcoding Bundle

Moai Security API

Comprehensive API security for REST, GraphQL, and gRPC services with OAuth 2.1 authentication, JWT validation, rate limiting, and enterprise protection patterns.

Sep 17
ajbcoding Bundle

Moai Security Owasp

Enterprise Skill for advanced development

Sep 17
ajbcoding Bundle

Moai Security Secrets

Enterprise Skill for advanced development

Sep 17
ajbcoding Bundle

Moai Essentials Review

Enterprise comprehensive code review automation with AI-powered quality analysis, TRUST 5 enforcement, multi-language support, Context7 integration, security scanning, performance analysis, test coverage validation, and automated review feedback generation

Sep 17
itsimonfredlingjack-codex-dev-plugin Skill

Xss Scan

---

Sep 17
itsimonfredlingjack-codex-dev-plugin Skill

Deps Audit

---

Sep 17
frank-luongt Skill

Owasp Top10



Sep 17
frank-luongt Skill

Iam Security



Sep 17
frank-luongt Skill

Owasp API Top10



Sep 17
frank-luongt Skill

Security Auditor



Sep 17
frank-luongt Skill

API Security Best Practices



Sep 17
frank-luongt Skill

Security Scanning Security Sast



Sep 17
frank-luongt Skill

Security Compliance Compliance Check



Sep 17
frank-luongt Skill

Security Scanning Security Dependencies



Sep 17
frank-luongt Skill

Vulnerability Scanner 2



Sep 17
frank-luongt Skill

API Security Patterns 2



Sep 17
itsimonfredlingjack-codex-dev-plugin Skill

Security Sast

---

Sep 17
itsimonfredlingjack-codex-dev-plugin Skill

Security Hardening

---

Sep 17
itsimonfredlingjack-codex-dev-plugin Skill

Security Dependencies

---

Sep 17
itsimonfredlingjack-codex-dev-plugin Skill

Threat Modeling Expert

Threat Modeling Expert

Sep 17
frank-luongt Skill

Hipaa Security Rule



Sep 17
frank-luongt Skill

API Security Patterns



Sep 17
frank-luongt Skill

Mobile Security Coder



Sep 17
frank-luongt Skill

Backend Security Coder



Sep 17
frank-luongt Skill

Threat Modeling Expert



Sep 17
frank-luongt Skill

Container Security Guide



Sep 17
skullninja Skill

IOS Design

iOS UX design guidance for building premium SwiftUI interfaces. Triggers on: iOS UI/UX, layout, components, screen design, Liquid Glass, SwiftUI design, app design review, UI audit, view hierarchy, iOS design patterns.

Sep 17
laiye-adp Bundle

Agentic Doc Parse And Extract

Enables AI-powered parsing and key information extraction from high-frequency documents including invoices, orders, receipts, long texts, and common Chinese identity & credential documents. Supports reusable custom templates for non-standard business files. Features batch concurrent processing and human-in-the-loop review with customizable audit rules to automate document workflows for finance, administration, HR data entry and other departments.

Sep 17
soham407 Bundle

Tech Debt Audit

Thorough, user-invoked tech debt and architecture audit of the current codebase. Produces TECH_DEBT_AUDIT.md with file-cited findings, severity, effort estimates, and a required "looks bad but is actually fine" section. Use when the user asks for a debt audit, codebase health check, architecture review, or code quality assessment of an entire repo. Does not auto-invoke.

Sep 17
kesslernity Bundle

Ciso Reviewer

Reviews a proposal, business case, deck or plan in character as a Chief Information Security Officer archetype, producing a DRAFT review document with a verdict, findings cited to specific passages, security and compliance risks, and the five interrogation questions a real CISO would ask. Use when the user asks for a CISO review, a security or compliance pressure-test of a document, or help preparing for an executive review where security, privacy or third-party risk will be challenged.

Sep 17
otrf Bundle

Hunt Research System And Tradecraft

Research system internals and adversary tradecraft to ground a threat hunt in real system behavior and realistic abuse patterns. Use this skill at the start of hunt planning, when you are given a high-level hunt topic but lack a clear understanding of how the system normally operates or how adversaries are known to abuse it. This skill informs early hunt direction by producing candidate abuse patterns, key assumptions, and cited sources, and should be used before defining a concrete hunt hypothesis or selecting data sources.

Sep 17
spec-kitty Skill

Spec Kitty Program Orchestrate

Orchestrate a multi-repo, multi-mission Spec Kitty program end-to-end: run specify → plan → tasks → implement → review → merge → mission-review → post-merge fixes across several repositories in a defined dependency order, using background sub-agents for parallel work and a pulse-heartbeat safety net for long uninterrupted runs. Triggers: "ship this program across N repos", "orchestrate a cross-repo release", "run the full mission workflow on repos A/B/C in program order", "drive Decision Moment V1 across all repos", "multi-repo spec-kitty sprint". Does NOT handle: single-mission implement-review loop (use spec-kitty-implement-review), post-merge mission audit (use spec-kitty-mission-review), setup or repair (use spec-kitty-setup-doctor), per-WP review (use spec-kitty-runtime-review).

Sep 17
get-convex Skill

Sec Check 2

Security review checklist for Convex functions, auth logic, public queries, admin routes, webhooks, uploads, and AI-generated code. Use when reviewing code that touches user data, PII, or access control.

Sep 17
get-convex Bundle

Convex Return Validators

Guide for when to use and when not to use return validators in Convex functions. Use this skill whenever the user is writing Convex queries, mutations, or actions and needs guidance on return value validation. Also trigger when the user asks about Convex type safety, runtime validation, AI-generated Convex code, Convex AI rules, Convex security best practices, or when they're debugging return type issues in Convex functions. Trigger this skill when users mention "validators", "returns", "return type", or "exact types" in the context of Convex development. Also trigger when writing or reviewing Convex AI rules or prompts that instruct LLMs how to write Convex code.

Sep 17
huzengyun3268 Bundle

API Gateway

Connect to 100+ APIs (Google Workspace, Microsoft 365, GitHub, Notion, Slack, Airtable, HubSpot, etc.) with managed OAuth. Use this skill when users want to interact with external services. Security: The MATON_API_KEY authenticates with Maton.ai but grants NO access to third-party services by itself. Each service requires explicit OAuth authorization by the user through Maton's connect flow. Access is strictly scoped to connections the user has authorized. Provided by Maton (https://maton.ai).

Sep 17
panaversity Bundle

Logistics Brief

Activate for: logistics, carrier, freight, shipping, route, delivery, on-time delivery, OTD carrier, logistics performance, carrier review, freight cost, cost per kg, lane analysis, route optimisation, logistics brief, carrier scorecard, logistics KPI, shipping performance, freight audit, expedited freight, premium freight, mode of transport, logistics network, carbon emissions, Scope 3 logistics. NOT for: supply network facility placement (use network-design), vendor assessment (use vendor-assessment), spend category analysis (use spend-analysis).

Sep 17

Frequently asked questions

What are Security agent skills?

Which Security skills are most installed?

Popular Security skills on SkillMD right now include moai-security-secrets, api-security-patterns, threat-modeling-expert. Rankings shift as installs change; sort this page by "Most installs" for the live list.

Do Security skills work with Claude Code and Cursor?

Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.