Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
humaisali Skill Gha Security ReviewFind exploitable vulnerabilities in GitHub Actions workflows. Every finding MUST include a concrete exploitation scenario — if you can't build the attack, don't report it.
- humaisali Skill Claude Settings Audit
Analyze a repository to generate recommended Claude Code settings.json permissions. Use when setting up a new project, auditing existing settings, or determining which read-only bash commands to allow. Detects tech stack, build tools, and monorepo structure.
- humaisali Skill Code Review Checklist
Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability
- humaisali Skill Production Code Audit
Autonomously deep-scan entire codebase line-by-line, understand architecture and patterns, then systematically transform it to production-grade, corporate-level professional quality with optimizations
- humaisali Bundle Fsi Compliance Checker
Maps code, architecture, and infrastructure changes to specific control IDs in PCI-DSS v4.0 and MAS TRM (Singapore financial regulator), producing an audit-traceable findings report with per-control remediation.
- humaisali Skill Threat Modeling Expert
Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction. Use PROACTIVELY for security architecture reviews, threat identification, or building secure-by-design systems.
- humaisali Skill Codebase Audit Pre Push
Deep audit before GitHub push: removes junk files, dead code, security holes, and optimization issues. Checks every file line-by-line for production readiness.
- humaisali Skill Deployment Validation Config Validate
You are a configuration management expert specializing in validating, testing, and ensuring the correctness of application configurations. Create comprehensive validation schemas, implement configurat
- humaisali Skill Event Sourcing Architect
Expert in event sourcing, CQRS, and event-driven architecture patterns. Masters event store design, projection building, saga orchestration, and eventual consistency patterns. Use PROACTIVELY for event-sourced systems, audit trail requirements, or complex domain modeling with temporal queries.
- humaisali Bundle Swiftui Performance Audit
Audit SwiftUI performance issues from code review and profiling evidence.
- humaisali Bundle Openclaw Github Repo Commander
7-stage super workflow for GitHub repo audit, cleanup, PR review, and competitor analysis
-
diegosouzapw Bundle Malware Analyst 2File identification workflow skill. Use this skill when the user needs Expert malware analyst specializing in defensive malware research, threat intelligence, and incident response. Masters sandbox analysis, behavioral analysis, and malware family identification and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54 - humaisali Bundle Security Compliance Compliance Check
You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform comprehensive compliance audits and provide implementation guidance for achieving and maintaining compliance.
- diegosouzapw Bundle Find Bugs 3
Find Bugs workflow skill. Use this skill when the user needs Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54 - diegosouzapw Bundle Network 101 2
Network 101 workflow skill. Use this skill when the user needs Configure and test common network services (HTTP, HTTPS, SNMP, SMB) for penetration testing lab environments. Enable hands-on practice with service enumeration, log analysis, and security testing against properly configured target systems and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54 - humaisali Skill Security Audit
Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening.
- humaisali Skill Fda Food Safety Auditor
Expert AI auditor for FDA Food Safety (FSMA), HACCP, and PCQI compliance. Reviews food facility records and preventive controls.
- humaisali Skill Spec To Code Compliance
Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whitepapers, finding gaps between specs and implementation, or performing compliance checks for protocol implementations.
- humaisali Skill Ssh Penetration Testing
Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security.
- humaisali Skill Audit Skills
Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads across Windows, macOS, Linux/Unix, and Mobile (Android/iOS).
- humaisali Skill Doubt Driven Development
Subjects every non-trivial decision to a fresh-context adversarial review before it stands. Use when correctness matters more than speed, when working in unfamiliar code, when stakes are high (production, security-sensitive logic, irreversible operations), or any time a confident...
- humaisali Skill Smtp Penetration Testing
Conduct comprehensive security assessments of SMTP (Simple Mail Transfer Protocol) servers to identify vulnerabilities including open relays, user enumeration, weak authentication, and misconfiguration.
- humaisali Skill Pentest Commands
Provide a comprehensive command reference for penetration testing tools including network scanning, exploitation, password cracking, and web application testing. Enable quick command lookup during security assessments.
- diegosouzapw Bundle API Endpoint Builder 3
API Endpoint Builder workflow skill. Use this skill when the user needs Builds production-ready REST API endpoints with validation, error handling, authentication, and documentation. Follows best practices for security and scalability and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54 - diegosouzapw Bundle Metasploit Framework 2
Metasploit Framework workflow skill. Use this skill when the user needs ⚠️ AUTHORIZED USE ONLY > This skill is for educational purposes or authorized security assessments only. > You must have explicit, written permission from the system owner before using this tool. > Misuse of this tool is illegal and strictly prohibited and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54 - diegosouzapw Bundle Zeroize Audit V2 2
zeroize-audit \u2014 Claude Skill workflow skill. Use this skill when the user needs Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54 - diegosouzapw Bundle Broken Authentication 3
Broken Authentication Testing workflow skill. Use this skill when the user needs Identify and exploit authentication and session management vulnerabilities in web applications. Broken authentication consistently ranks in the OWASP Top 10 and can lead to account takeover, identity theft, and unauthorized access to sensitive systems and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54 - diegosouzapw Bundle Firmware Analyst 3
Download from vendor workflow skill. Use this skill when the user needs Expert firmware analyst specializing in embedded systems, IoT security, and hardware reverse engineering and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54 - diegosouzapw Bundle Find Bugs V2 2
Find Bugs workflow skill. Use this skill when the user needs Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54 - diegosouzapw Bundle Wordpress V2 2
WordPress Development Workflow Bundle workflow skill. Use this skill when the user needs Complete WordPress development workflow covering theme development, plugin creation, WooCommerce integration, performance optimization, and security hardening. Includes WordPress 7.0 features: Real-Time Collaboration, AI Connectors, Abilities API, DataViews, and PHP-only blocks and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54 - diegosouzapw Bundle Vibe Code Auditor 2
Vibe Code Auditor workflow skill. Use this skill when the user needs Audit rapidly generated or AI-produced code for structural flaws, fragility, and production risks and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54 - diegosouzapw Bundle Fix Review V2 2
Fix Review workflow skill. Use this skill when the user needs Verify fix commits address audit findings without new bugs and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54 - diegosouzapw Bundle Burp Suite Testing 3
Burp Suite Web Application Testing workflow skill. Use this skill when the user needs Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54 - diegosouzapw Bundle Pci Compliance V3 2
PCI Compliance workflow skill. Use this skill when the user needs Master PCI DSS (Payment Card Industry Data Security Standard) compliance for secure payment processing and handling of cardholder data and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54 - diegosouzapw Bundle Backend Security Coder 3
backend-security-coder workflow skill. Use this skill when the user needs Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54 - diegosouzapw Bundle Threat Modeling Expert 2
Threat Modeling Expert workflow skill. Use this skill when the user needs Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction. Use PROACTIVELY for security architecture reviews, threat identification, or building secure-by-design systems and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include gha-security-review, claude-settings-audit, code-review-checklist. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.