Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
majiayu000 Bundle Security RiskCombine security scanning and threat modeling for changes involving data handling, API interception, sync, storage, authentication, or encryption.
567 - majiayu000 Bundle Security Catchall
Security: audits, compliance, penetration testing, secure coding. Triggers: security audit, vulnerability, penetration test, compliance, gdpr, soc2, secure coding, owasp, authentication, authorization, encryption, security policy.
567 - majiayu000 Bundle Ops Compliance Runbook
Execute compliance audit workflows with evidence trails and approvals; use when asked to verify SOC2, HIPAA, or GDPR controls.
567 - majiayu000 Bundle Lore Link Audit
Audit touched files for missing links, missing origin fields, and add Lore Debt entries.
567 - majiayu000 Bundle Aoa Sanitized Share
aoa-sanitized-share
567 - majiayu000 Bundle Better Auth Profile 2
Add a complete account settings page with profile editing, password changes, email updates, session management, and account deletion.
567 - majiayu000 Bundle Better Auth Emails
Add email verification, password reset, and account management emails to Better Auth using Resend.
567 - majiayu000 Bundle Headless Vault CLI
Secure credential management with headless vault operations.
567 - majiayu000 Bundle Review Technical
Parallel multi-skill technical review of plans/specs/approaches for architecture, simplicity, security, and implementation rigor. Use when asked to "review the plan/spec," "technical review," or to sanity-check a proposed approach before implementation.
567 - majiayu000 Bundle Test Audit Skill
Test skill for audit workflow. Use when testing quality gates.
567 - majiayu000 Bundle Compliance Check Skill
Compliance Check Skill
567 - majiayu000 Bundle Data Sovereignty Skill
Data Sovereignty Skill
567 - majiayu000 Bundle Attachment Audit
Attachment Audit
567 - majiayu000 Bundle Antinet Security Scan
对进入系统的文件或 URL 执行安全与合规扫描，输出 pass/reject 判定与扫描报告，作为所有文档处理的强制前置关卡。
567 - majiayu000 Bundle Risk Assessment Skill
Risk Assessment Skill
567 - majiayu000 Bundle Security Review Skill
Security Review Skill
567 - majiayu000 Bundle Aoa Approval Gate Check
aoa-approval-gate-check
567 - majiayu000 Bundle API Credentials Hygiene
Audit and maintain API credential security and rotation schedules.
567 - majiayu000 Bundle Better Auth Protected Routes 2
Add server-side route protection to enforce authentication on specific pages while keeping others public.
567 - majiayu000 Bundle Open Source Licensing Skill
Open Source Licensing Skill
567 - majiayu000 Bundle Aoa Invariant Coverage Audit
aoa-invariant-coverage-audit
567 - majiayu000 Bundle Vulnerability Assessment Skill
Vulnerability Assessment Skill
567 - majiayu000 Bundle Security Anton Abyzov Specweave
Security engineer for vulnerability assessment, penetration testing guidance, and secure code review. Use for OWASP Top 10 checks, threat modeling, or security architecture review. Covers authentication flaws, injection vulnerabilities, access control, and compliance requirements.
567 - majiayu000 Bundle Hope 2
Cognitive operating system for structured thinking with confidence tracking. Use when starting complex tasks, making decisions, or needing verification. Triggers on "how confident", "verify this", "alternative approach", "what could go wrong", "think through", confidence questions, or multi-step reasoning tasks.
567 - majiayu000 Bundle Google Ads Audit 3
Google Ads account audit and business context setup. Run this first — it gathers business information, analyzes account health, and saves context that all other ads skills reuse. Trigger on "audit my ads", "ads audit", "set up my ads", "onboard", "account overview", "how's my account", "ads health check", "what should I fix in my ads", or when the user is new to NotFair and hasn't run an audit before. Also trigger proactively when other ads skills detect that business-context.json is missing.
567 - majiayu000 Bundle Blockchain Anton Abyzov Specweave
Blockchain and Web3 development with Solidity, Hardhat, Foundry, ethers.js, and smart contract security. Covers Ethereum, Layer 2 solutions, DeFi, NFTs, and decentralized storage. Activates for: blockchain, web3, solidity, smart contract, Ethereum, Hardhat, Foundry, ERC-20, ERC-721, NFT, DeFi, dapp, WalletConnect, IPFS, layer 2, gas optimization, reentrancy, OpenZeppelin.
567 - majiayu000 Bundle Secrets Davidroliverba Architectkb
Manage secrets via Bitwarden - retrieve credentials, set up environment variables
567 - majiayu000 Bundle Tasks Code Review 2
Use for QUICK PR reviews with structured checklists (architecture, patterns, security, performance). Provides step-by-step review process, git diff commands, and review report templates. Best for pull request reviews and pre-commit checks. NOT for deep refactoring analysis (use code-review instead).
567 - majiayu000 Bundle Analyze Spec 2
Analyze an existing spec for inconsistencies, missing information, ambiguities, and structure issues. Use when user says "analyze spec", "review spec", "spec quality check", "validate requirements", "audit spec", or "check spec quality".
567 - majiayu000 Bundle Context Check 2
Optional manual drift audit — report stale provenance-tracked docs (via _provenancelib drift detection across .codearbiter/.provenance/), then per stale doc offer re-scout / re-baseline / defer. Not the daily loop; commit-gate auto-heal owns routine maintenance.
567 - majiayu000 Bundle Pci Compliance Anton Abyzov Specweave
PCI DSS compliance expert for secure payment card handling and audit preparation. Use when implementing card tokenization, encrypting payment data, or preparing for PCI compliance audits. Covers SAQ levels, data minimization, access control, and audit logging requirements.
567 - majiayu000 Bundle Bug Review 2
Systematically uncover and fix bugs using language-specific expertise and reproducible evidence. Triggers: bug hunting, defect detection, debugging, fix verification, bug fix, regression check, error investigation, defect documentation Use when: deep bug hunting needed, documenting defects, verifying fixes, systematic debugging required DO NOT use when: test coverage audit - use test-review instead. DO NOT use when: architecture issues - use architecture-review. Use this skill for systematic bug hunting with evidence trails.
567 - majiayu000 Bundle Java Spring Anton Abyzov Specweave
Java/Spring Boot backend developer for building enterprise APIs and microservices. Use when building Java backends with Spring Boot 3.x, REST/gRPC APIs, Spring Data JPA, Spring Security 6, reactive WebFlux, or microservice architectures.
567 - majiayu000 Bundle Issue Triage Florianbruniaux Ccboard
Issue triage: audit open issues, categorize, detect duplicates, cross-ref PRs, risk assessment, post comments. Args: "all" for deep analysis of all, issue numbers to focus (e.g. "42 57"), "en"/"fr" for language, no arg = audit only in French.
567 - majiayu000 Bundle Code Review Oprogramadorreal Optimus Claude
Reviews local changes, an open PR/MR, or a branch diff against the project's own coding guidelines through the review lenses — bugs, security, guidelines, architecture, simplification, plus test coverage and API contracts when relevant — inline on a small diff, in parallel agents on a larger one. Excludes style and linter-catchable issues. Read-only: applies fixes or posts PR/MR comments only on explicit approval. For an iterative auto-fix loop, use /optimus:deep review.
567 - majiayu000 Bundle Security And Vulnerability Management
______________________________________________________________________
567
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include security-risk, security-catchall, ops-compliance-runbook. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.