Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
gabrielmoreira Skill Security Review 6Security review for risky code changes
17 - gabrielmoreira Skill Code Reviewer 5
Code review specialist focused on patterns, bugs, security, and performance
17 - gabrielmoreira Skill Dependency Check 2
Scan project dependencies for known vulnerabilities and CVEs. Use when auditing third-party packages, before releases, after `npm install`/lockfile changes, or when investigating reported CVE advisories.
17 - gabrielmoreira Bundle Security Review 5
当涉及添加身份验证（Authentication）、处理用户输入、操作机密（Secrets）、创建 API 终端节点或实现支付/敏感功能时，请使用此技能。提供全面的安全检查清单和模式。
17 - gabrielmoreira Bundle Code Reviewer 6
Automatic code quality and best practices analysis. Use proactively when files are modified, saved, or committed. Analyzes code style, patterns, potential bugs, and security basics. Triggers on file changes, git diff, code edits, quality mentions.
17 - gabrielmoreira Bundle Offensive Crash Analysis
SKILL: Week 4: Crash Analysis and Exploitability Assessment
17 - gabrielmoreira Skill Security Audit 6
Security audit expert for OWASP Top 10, CVE analysis, code review, and penetration testing methodology
17 - gabrielmoreira Skill Security 3
Rapid security assessment focused on OWASP Top 10 vulnerabilities
17 - gabrielmoreira Bundle Security 4
Consolidated Galyarder Framework Security intelligence bundle.
17 - gabrielmoreira Skill Data Room
Due Diligence Data Room Specialist. Use to prepare, audit, and organize fundraising materials for investor diligence before or after a term sheet.
17 - gabrielmoreira Skill Security Review 8
Security Review
17 - gabrielmoreira Skill Code Review 16
Reviews code diffs and files for security vulnerabilities (OWASP Top 10), error handling, complexity, naming conventions, and performance issues. Use when the user asks to review a PR, pull request, diff, merge request, or code changes.
17 - gabrielmoreira Skill Skill Creator 34
Create, edit, improve, or audit AgentSkills. Use when creating a new skill from scratch or when asked to improve, review, audit, tidy up, or clean up an existing skill or SKILL.md file. Also use when editing or restructuring a skill directory (moving files to references/ or scripts/, removing stale content, validating against the AgentSkills spec). Triggers on phrases like "create a skill", "author a skill", "tidy up a skill", "improve this skill", "review the skill", "clean up the skill", "audit the skill".
17 - gabrielmoreira Skill Critique 3
Expertise in auditing and fixing repository scripts and GitHub Actions workflows to ensure technical robustness and security.
17 - gabrielmoreira Skill Code Review 17
Perform comprehensive code reviews focusing on best practices, security vulnerabilities, performance optimization, and maintainability
17 - gabrielmoreira Skill Security Review 7
在添加身份验证、处理用户输入、操作机密信息（Secrets）、创建 API 端点以及实现支付/敏感功能时使用此技能。提供全面的安全检查清单和模式。
17 - gabrielmoreira Skill Receiving Code Review 2
Review-feedback handling route for CodeRabbit, GitHub, PR, or human reviewer comments. Use before implementing suggestions to verify each finding. Do not use for a fresh code review, security audit, TDD, or final completion evidence.
17 - gabrielmoreira Skill Nlpm Audit
Audit SKILL.md, AGENTS.md, prompts, hooks, and plugin manifests for instruction conflicts, quality, broken references, and manifest-to-disk drift.
17 - gabrielmoreira Bundle Offensive Basic Exploitation
SKILL: Week 5: Basic Exploitation (Linux with Mitigations Disabled)
17 - gabrielmoreira Skill Offensive Exploit Dev Course
SKILL: Exploit Development
17 - gabrielmoreira Skill Review 7
Review Playwright tests for quality. Use when user says "review tests", "check test quality", "audit tests", "improve tests", "test code review", or "playwright best practices check".
17 - gabrielmoreira Skill I18N Expert
Implement or audit UI internationalization: translation keys, locale files, pluralization, formatting, hard-coded strings, and parity checks.
17 - gabrielmoreira Skill Offensive Exploit Development
SKILL: Exploit Development
17 - gabrielmoreira Skill Notes Humanizer 2
Strips AI writing patterns from text and rewrites it to sound genuinely human by removing statistical defaults and injecting the specific signals that human writers produce. Use when a draft reads as AI-generated, over-polished, or rhythmically uniform — including blog posts, emails, LinkedIn posts, or any prose that needs to sound like a real person wrote it. Produces a pattern audit, side-by-side comparison, itemised change log, and clean rewritten output ready to paste.
17 - gabrielmoreira Skill Open Code Review
Performs AI-powered code review on Git changes using the `ocr` CLI from alibaba/open-code-review. Use when the user asks to review code, review a pull request, review staged/unstaged changes, review a commit, or compare branches for code quality issues. Produces line-level review comments and can automatically apply fixes when requested. With appropriate review rules, can detect various types of issues including bugs, security vulnerabilities, performance problems, and code quality concerns.
17 - gabrielmoreira Skill Security Audit 8
Comprehensive security audit with scored posture assessment
17 - gabrielmoreira Bundle Offensive Windows Boundaries
SKILL: Week 7: Defeating Windows Security Boundaries
17 - gabrielmoreira Skill Security Review 9
Complete a security review of the pending changes on the current branch
17 - gabrielmoreira Skill Doc Maintenance
Audit top-level documentation (README, SPEC, PRODUCT) against recent git history to find drift shipped features missing from docs or features listed as upcoming that already landed. Proposes minimal edits, creates a branch, and opens a PR. Use when asked to review docs for accuracy, after major feature merges, or on a periodic schedule.
17 - gabrielmoreira Skill Reverse Skill Router 2
Use the reverse-skill repository from Codex for authorized reverse engineering, security analysis, CTF, and defensive testing tasks. Requires the reverse-skill repository to be available as the current workspace or an explicitly supplied local path.
17 - gabrielmoreira Skill Security Guardian 2
Use when legacy prompts or older framework flows reference `security-guardian` and you need the modern runtime to resolve that capability cleanly.
17 - gabrielmoreira Skill Security Reviewer 2
Use when legacy prompts or older framework flows reference `security-reviewer` and you need the modern runtime to resolve that capability cleanly.
17 - gabrielmoreira Skill Grocery Budget Audit 2
Summarise what Grocery Budget Audit does in one line. Use when asked to [trigger phrases the user would say]. Produces [the concrete artifact].
17 - gabrielmoreira Skill Sensory Audit 2
Summarise what Sensory Audit does in one line. Use when asked to [trigger phrases the user would say]. Produces [the concrete artifact].
17 - gabrielmoreira Skill Skill Creator 42
Create, edit, improve, or audit AgentSkills. Use when creating a new skill from scratch or when asked to improve, review, audit, tidy up, or clean up an existing skill or SKILL.md file. Also use when editing or restructuring a skill directory (moving files to references/ or scripts/, removing stale content, validating against the AgentSkills spec). Triggers on phrases like "create a skill", "author a skill", "tidy up a skill", "improve this skill", "review the skill", "clean up the skill", "audit the skill".
17 - gabrielmoreira Skill Mcpwn Cve 2026 33032
mcpwn-retry-exploit
17
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include security-review, code-reviewer, dependency-check. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.