Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
gabrielmoreira Skill ContributeRead-only OSS contribution audit and routing skill. Inspects public GitHub issues, pull requests, repository policy, duplicate work, and contribution readiness without creating files or changing GitHub state. Use when a user asks what is in flight, whether an issue is suitable, or wants a safe first look before preparing or publishing a contribution. Trigger with "/contribute", "audit my contributions", or "qualify this issue".
17 -
gabrielmoreira Bundle Vulnerability ScannerAdvanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
17 -
gabrielmoreira Skill Nodejs Best PracticesNode.js development principles and decision-making. Framework selection, async patterns, security, and architecture. Teaches thinking, not copying.
17 -
gabrielmoreira Skill Code Review Checklist 3Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability
17 -
gabrielmoreira Bundle API Endpoint BuilderBuilds production-ready REST API endpoints with validation, error handling, authentication, and documentation. Follows best practices for security and scalability.
17 -
gabrielmoreira Skill Review Pr 7Reviews an open pull request against coding standards, security, and test coverage, then posts a structured review comment and either approves or requests changes. Use when the user says review this PR, check the PR, look at PR
17 -
gabrielmoreira Skill Revoke And Rotate CertificateSkill helps user to revoke and rotate certificate in case of exposed secrets
17 -
tools-only Bundle 028 Agents 22bd7814Security Testing Knowledge Base
7 -
tools-only Bundle 030 Claude 0c6f3f58Community Security Tools Repository
7 -
gabrielmoreira Skill Django Verification 3Verification loop for Django projects: migrations, linting, tests with coverage, security scans, and deployment readiness checks before release or PR.
17 -
gabrielmoreira Skill Springboot Security 2Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.
17 -
gabrielmoreira Skill Postgres Patterns 3PostgreSQL database patterns for query optimization, schema design, indexing, and security. Based on Supabase best practices.
17 -
gabrielmoreira Skill Springboot Verification 3Verification loop for Spring Boot projects: build, static analysis, tests with coverage, security scans, and diff review before release or PR.
17 -
demerzels-lab Bundle Signl4 2Send and close SIGNL4 alerts using the SIGNL4 inbound webhook (team secret in URL).
10 -
demerzels-lab Bundle Clawaudit 2Official repo for clawaudit, coming soon as an automated security checker for repositories.
10 -
demerzels-lab Bundle Skillpub 2Create, validate, security-scan, and publish skills to ClawHub.
10 -
demerzels-lab Bundle 1sec Security 2Install, configure, and manage 1-SEC — an open-source, all-in-one cybersecurity platform (16 modules, single binary)
10 -
demerzels-lab Bundle Vault0 2Security suite for OpenClaw agents.
10 -
demerzels-lab Bundle Secucheck 2Comprehensive security audit for OpenClaw.
10 -
demerzels-lab Bundle Dep Audit 2Audit project dependencies for known vulnerabilities (CVEs)
10 -
demerzels-lab Bundle Feed Diet 2Audit your information diet across HN and RSS feeds — beautiful reports with category breakdowns, ASCII charts.
10 -
demerzels-lab Bundle Reefwatch 2Continuous local security monitoring daemon for Linux and macOS.
10 -
demerzels-lab Bundle Skill Refiner 2Audit and fix all skills in the workspace for compliance with skill-creator requirements.
10 -
demerzels-lab Bundle Code Qc 2Run a structured quality control audit on any codebase.
10 -
demerzels-lab Bundle Depguard 2Dependency audit, vulnerability scanning, and license compliance.
10 -
demerzels-lab Bundle Vibe Check 2Audit code for "vibe coding sins" — patterns that indicate AI-generated code was accepted without proper review.
10 -
demerzels-lab Bundle Crabukit 2Security scanner for OpenClaw skills with Clawdex integration.
10 -
demerzels-lab Bundle Solo Audit 2Health check knowledge base for broken links, missing frontmatter, tag inconsistencies, and coverage gaps.
10 -
demerzels-lab Bundle Secops By Joes 2Security Joes AI Analyst
10 -
demerzels-lab Bundle Csp Gen 2Generate Content Security Policy headers for your site. Use when you need to add CSP headers without spending hours reading the spec.
10 -
demerzels-lab Bundle Security 3Security
10 -
demerzels-lab Bundle Redshift 2Manage application secrets with the Redshift CLI (https://redshiftapp.com) — decentralized, encrypted secret.
10 -
demerzels-lab Bundle Ipwebcam 2Transform an Android phone with IP Webcam into an intelligent Edge AI security system with OpenClaw.
10 -
demerzels-lab Bundle Tarkov API 2Security-focused Tarkov.dev + optional EFT Wiki operations for hardcore Escape from Tarkov players.
10 -
demerzels-lab Bundle Bug Audit 2Dynamic bug hunting for Node.js projects — profiles each project, then selects from 9 audit modules. 200+ real-world pitfalls.
10 -
demerzels-lab Bundle Skill Vettr 2Static analysis security scanner for third-party OpenClaw skills.
10
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include contribute, vulnerability-scanner, nodejs-best-practices. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.