Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
ferroxlabs Skill Digital Wellness Audit 2Comprehensive digital wellness assessment covering screen time patterns, social media impact, notification overload, digital boundaries, online behavior health, and producing a personalized digital wellness improvement plan. Use when the user asks about digital wellness audit, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of digital wellness audit or requires a different specialized skill.
37 -
ferroxlabs Skill Waste Reduction Planner 2Conducts a household waste audit and produces a zero-waste action plan organized by waste stream (trash, recycling, compost, hazardous). Gathers the user's current waste habits, housing situation, and local services to produce a prioritized reduction plan with estimated waste diversion percentages and cost savings. Use when the user asks about reducing household waste, starting a zero-waste journey, improving recycling habits, or conducting a waste audit. Do NOT use for commercial or industrial waste management, hazardous waste disposal procedures, composting setup details (use composting-starter-guide), or municipal waste policy analysis.
37 -
ferroxlabs Skill Authentication Patterns 2Guides expert-level authentication patterns implementation: security and web-development decision frameworks, production-ready patterns, and concrete templates for authentication patterns workflows. Use when the user asks about authentication patterns, authentication patterns configuration, or security best practices for authentication projects. Do NOT use when the user needs a different backend infrastructure capability -- check sibling skills in the backend infrastructure subcategory.
37 -
ferroxlabs Skill Musical Theater Performer 2Expert musical theater guidance covering audition preparation, triple threat training in singing/dancing/acting, repertoire building, rehearsal techniques, and performance excellence for stage musicals. Use when the user asks about musical theater performer, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of musical theater performer or requires a different specialized skill.
37 -
ferroxlabs Skill Digital Literacy Assessment 2Evaluate proficiency with digital tools, online security practices, digital communication effectiveness, and productivity technology to identify skill gaps and learning priorities Use when the user asks about digital literacy assessment, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of digital literacy assessment or requires a different specialized skill.
37 -
ferroxlabs Skill Wallet Security Advisor 2Cryptocurrency wallet security expertise covering cold storage setup, hardware wallet configuration, multisig wallet deployment, seed phrase management, recovery planning, phishing and social engineering prevention, transaction verification, approval hygiene, and operational security practices for protecting digital assets. Use when the user asks about wallet security advisor, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of wallet security advisor or requires a different specialized skill.
37 -
ferroxlabs Skill Home Security Planner 2Comprehensive guide to home security planning covering physical security assessment methodology, door and window reinforcement techniques, strategic lighting placement, camera and alarm system selection, smart lock options, safe room concepts, neighborhood watch participation, vacation security measures, and package theft prevention strategies. Use when the user asks about home security planner, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of home security planner or requires a different specialized skill.
37 -
ferroxlabs Skill Database Performance Audit 2Database performance assessment evaluating query efficiency, indexing strategy, connection management, configuration, and scaling readiness to produce an actionable performance scorecard. Use when the user asks about database performance audit, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of database performance audit or requires a different specialized skill.
37 -
ferroxlabs Skill Health Tech Developer 2Guide for developers building healthcare technology covering HIPAA compliance, HL7 and FHIR interoperability standards, EHR integration, patient data security, regulatory considerations, and navigating the unique technical challenges of healthcare software. Use when the user asks about health tech developer, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of health tech developer or requires a different specialized skill.
37 -
ferroxlabs Skill NPM Dependency Doctor 2Fix npm dependency conflicts, audit vulnerabilities, resolve lockfile issues, and plan upgrades - with exact commands for every common npm problem. Use when the user asks about npm dependency doctor, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of npm dependency doctor or requires a different specialized skill.
37 -
ferroxlabs Skill Customer Experience Audit 2Customer experience assessment evaluating journey touchpoints, satisfaction metrics, support quality, feedback loops, and experience design to produce an actionable CX scorecard. Use when the user asks about customer experience audit, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of customer experience audit or requires a different specialized skill.
37 -
ferroxlabs Skill Oss Security Responder 2Open source security response expertise covering CVE identification and reporting, security advisory creation, coordinated vulnerability disclosure, patch development and backporting, security policy implementation (SECURITY.md), and incident response workflows for open source maintainers. Use when the user asks about oss security responder, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of oss security responder or requires a different specialized skill.
37 -
ferroxlabs Skill Shell Scripting Master 2Advanced shell scripting expert covering shell and Zsh patterns, robust error handling (set -euo pipefail), argument parsing (getopts, manual), portability across shells and OS, testing shell scripts (bats, shellcheck), process management, text processing pipelines, and script security practices. Use when the user asks about shell scripting master, shell scripting master best practices, or needs guidance on shell scripting master implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.
37 -
ferroxlabs Skill Airport Navigation Guide 2Creates a terminal-to-gate workflow with check-in timelines, security preparation steps, connection procedures, and gate-area logistics. Gathers flight details, airport, traveler experience level, and special needs to produce a timed step-by-step airport navigation plan from arrival at the airport to boarding the plane. Use when the user asks about airport navigation, check-in procedures, how early to arrive at the airport, connecting flight logistics, or getting through security efficiently. Do NOT use for flight booking strategies (use travel logistics skills), travel itinerary building (use trip-itinerary-builder), or airport lounge access evaluation.
37 -
ferroxlabs Skill Wcag Compliance Auditor 2Audit digital products against WCAG 2.1/2.2 standards, determine conformance levels, identify failures, and produce actionable remediation plans with prioritized fixes. Use when the user asks about wcag compliance auditor, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of wcag compliance auditor or requires a different specialized skill.
37 -
ferroxlabs Skill Compliance Checklist Builder 2Builds a business compliance self-audit checklist organized by category (registration, tax, employment, industry-specific, data privacy, insurance) based on the user's business type, size, and location. Produces a prioritized checklist with deadlines, responsible parties, and resources for verification. Use when the user is starting a business and wants to know what compliance requirements apply, wants to audit their current compliance status, or needs to prepare for a compliance review. Do NOT use for tax preparation, regulatory filing, legal compliance certification, or industry-specific regulatory guidance requiring specialized expertise.
37 -
ferroxlabs Skill Developer Tools Builder 2Developer tools design and implementation covering CLI design patterns, SDK architecture, API design best practices, documentation strategy, developer experience optimization, plugin systems, error message design, versioning and changelog management, and developer onboarding flows. Includes code examples, DX audit checklists, and distribution patterns. Use when the user asks about developer tools builder, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of developer tools builder or requires a different specialized skill.
37 -
ferroxlabs Skill Mobile Security Engineer 2Mobile application security covering certificate pinning implementation, secure local storage patterns, jailbreak and root detection, code obfuscation and tamper detection, API security for mobile clients, biometric authentication, secure key management, network security, reverse engineering defense, and compliance with OWASP MASVS. Use when the user asks about mobile security engineer, mobile security engineer best practices, or needs guidance on mobile security engineer implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.
37 -
ferroxlabs Skill Video Production Quality Audit 2Comprehensive video production evaluation assessing technical quality, storytelling effectiveness, editing proficiency, and production value. Produces a scored audit with specific recommendations for improving video content across any platform or purpose. Use when the user asks about video production quality audit, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of video production quality audit or requires a different specialized skill.
37 -
ferroxlabs Skill Healthcare Compliance Navigator 2Navigate HIPAA fundamentals, healthcare regulations, audit preparation, and compliance training to maintain regulatory adherence in healthcare organizations. Use when the user asks about healthcare compliance navigator, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of healthcare compliance navigator or requires a different specialized skill.
37 -
nota-america Skill Devex Review 2Live developer experience audit. (gstack)
-
nota-america Skill IOS Design Review 3Visual design audit for iOS apps on real hardware. (gstack)
-
ferroxlabs Skill Blockchain Security Auditor 2Smart contract security auditing methodology covering vulnerability classification (reentrancy, flash loan attacks, oracle manipulation, access control), automated and manual review techniques, audit report writing, tool proficiency (Slither, Mythril, Echidna), and remediation guidance for EVM-compatible chains. Use when the user asks about blockchain security auditor, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of blockchain security auditor or requires a different specialized skill.
37 -
ferroxlabs Skill Architecture Review Checklist 2Systematic software architecture assessment evaluating scalability, maintainability, security, cost efficiency, and documentation quality to produce a structured architecture scorecard. Use when the user asks about architecture review checklist, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of architecture review checklist or requires a different specialized skill.
37 -
ferroxlabs Skill Relationship Communication Audit 2Provides a self-reflection framework for assessing personal communication patterns in relationships. Produces structured self-assessments with pattern identification, strength recognition, and specific improvement actions. This is a self-reflection tool, not a diagnostic instrument. Use when the user wants to reflect on their communication patterns, identify areas for improvement, or audit how they communicate in their relationships. Do NOT use for diagnosing communication disorders, assessing relationship health, or replacing couples therapy.
37 -
nota-america Bundle Cso 3Chief Security Officer mode. (gstack)
-
nota-america Skill Persona It Admin 2Administer IT — monitor security and configure Workspace.
-
nota-america Skill Gws Admin Reports 2Google Workspace Admin SDK: Audit logs and usage reports.
-
nota-america Bundle Audit Reference Originality 2Audit a website or digital experience against its supplied source references for originality and plagiarism risk. Use when Codex must compare current or historical site output with reference pages, capture packs, screenshots, copy, brands, numbers, images, assets, videos, layouts, motion, or code; raise evidence-backed red flags; distinguish common visual grammar from distinctive copying; and propose concrete fixes without making unsupported legal claims.
-
nota-america Bundle Audit Verify Explain Grade 5 2Audit work, verify claims with concrete evidence, and explain the result in simple grade-5 language. Use when the user asks to review, audit, check, verify, explain a change, explain a fix, summarize test results, validate whether something works, or translate technical findings into plain language for non-technical readers.
-
nota-america Bundle Security Best Practices 2Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
-
nota-america Bundle Operational Enterprise AI 2Create or redesign enterprise AI, automation, security, and operations product pages that explain system boundaries, approvals, auditability, exceptions, and rollback. Use for dark cinematic heroes, hairline grids, metric pauses, expandable solution rows, case-study evidence, security proof, and qualified demo or waitlist handoffs.
-
nota-america Bundle Build Game Changelog 2Design, implement, backfill, audit, and release in-game changelogs with contiguous versioning, deployment provenance, menu-state navigation, accessible toggle, close, and Escape behavior, and responsive release-ledger UI. Use when Codex needs to add or revise a changelog or version screen in a game, reconstruct release history from deployments and Git, define version-bump rules, keep displayed versions synchronized with live builds, or test changelog mechanics across desktop and mobile.
-
nota-america Bundle Build Game Map Editor 2Build, extend, or audit production-linked browser map editors for Three.js and isometric games. Use when Codex needs to create a private director view, derive a versioned editor document from authored placements, add outliner, layer, selection, drag, snap, inspector, or camera controls, expose enemy aggro, leash, or patrol overlays, implement local draft import, export, undo, and reset, secure an editor route with IP and password sessions, or validate and release a map editor without mutating live gameplay data.
-
nota-america Skill Brief 3Generate contextual briefings for legal work — daily summary, topic research, or incident response. Use when starting your day and need a scan of legal-relevant items across email, calendar, and contracts, when researching a specific legal question across internal sources, or when a developing situation (data breach, litigation threat, regulatory inquiry) needs rapid context.
-
nota-america Bundle Claude Md Improver 2Audit and improve CLAUDE.md files in repositories. Use when user asks to check, audit, update, improve, or fix CLAUDE.md files. Scans for all CLAUDE.md files, evaluates quality against templates, outputs quality report, then makes targeted updates. Also use when the user mentions "CLAUDE.md maintenance" or "project memory optimization".
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include digital-wellness-audit, waste-reduction-planner, authentication-patterns. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.