Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
uygnoey Bundle Frontier Defense Partner EvaluationEvaluate and shortlist the Claude Opus-powered defensive cybersecurity partner offerings that Anthropic publicized on May 21, 2026. Use when a security buyer or CISO is choosing among the three families of offerings — continuous offensive testing at production scale, closing the find-to-fix gap, and getting AI into production with governance — and needs a structured comparison against the partners Anthropic explicitly named (Wiz, Palo Alto Networks/Unit 42, CrowdStrike, Accenture, TrendAI, Deloitte, PwC), plus an awareness flag for BCG, Infosys, and SentinelOne.
-
benjaminastera Skill Security AuditorYou are a security auditor specializing in DevSecOps, application security, and comprehensive cybersecurity practices.
- benjaminastera Skill Backend Security Coder
Use this skill when
- benjaminastera Skill Security Scanning Security Sast
SAST Security Plugin
-
kbarbel640-del Bundle BottubeSecurity and Permissions
1 -
eli-yu-first Bundle Security Scan AnalyzerAnalyze security scan results, prioritize vulnerabilities, and suggest remediation steps
6 -
rootcastleco Skill API Documenter> ⚠️ **AUTHORIZED USE ONLY** — This skill is intended for authorized security professionals only. Use only against systems you own or have explicit written permission to test. Unauthorized use may violate applicable laws.
6 - rootcastleco Skill M365 Agents TS
> ⚠️ **AUTHORIZED USE ONLY** — This skill is intended for authorized security professionals only. Use only against systems you own or have explicit written permission to test. Unauthorized use may violate applicable laws.
6 - rootcastleco Skill Mlops Engineer
> ⚠️ **AUTHORIZED USE ONLY** — This skill is intended for authorized security professionals only. Use only against systems you own or have explicit written permission to test. Unauthorized use may violate applicable laws.
6 - rootcastleco Skill Test Automator
> ⚠️ **AUTHORIZED USE ONLY** — This skill is intended for authorized security professionals only. Use only against systems you own or have explicit written permission to test. Unauthorized use may violate applicable laws.
6 - rootcastleco Skill Malware Analyst
> ⚠️ **AUTHORIZED USE ONLY** — This skill is intended for authorized security professionals only. Use only against systems you own or have explicit written permission to test. Unauthorized use may violate applicable laws.
6 - rootcastleco Skill Posix Shell Pro
> ⚠️ **AUTHORIZED USE ONLY** — This skill is intended for authorized security professionals only. Use only against systems you own or have explicit written permission to test. Unauthorized use may violate applicable laws.
6 - rootcastleco Skill Firmware Analyst
> ⚠️ **AUTHORIZED USE ONLY** — This skill is intended for authorized security professionals only. Use only against systems you own or have explicit written permission to test. Unauthorized use may violate applicable laws.
6 - rootcastleco Skill Database Architect
> ⚠️ **AUTHORIZED USE ONLY** — This skill is intended for authorized security professionals only. Use only against systems you own or have explicit written permission to test. Unauthorized use may violate applicable laws.
6 - rootcastleco Skill Incident Responder
> ⚠️ **AUTHORIZED USE ONLY** — This skill is intended for authorized security professionals only. Use only against systems you own or have explicit written permission to test. Unauthorized use may violate applicable laws.
6 - kbarbel640-del Bundle Change Order Manager
Manage construction change orders from request to approval. Track costs, schedule impacts, and maintain audit trail for dispute prevention.
1 -
galyarderlabs Bundle Security 2Consolidated Galyarder Framework Security intelligence bundle.
20 - galyarderlabs Skill Data Room 2
Due Diligence Data Room Specialist. Use to prepare, audit, and organize fundraising materials for investor diligence before or after a term sheet.
20 - rootcastleco Skill Payment Integration
> ⚠️ **AUTHORIZED USE ONLY** — This skill is intended for authorized security professionals only. Use only against systems you own or have explicit written permission to test. Unauthorized use may violate applicable laws.
6 - rootcastleco Skill Temporal Python Pro
> ⚠️ **AUTHORIZED USE ONLY** — This skill is intended for authorized security professionals only. Use only against systems you own or have explicit written permission to test. Unauthorized use may violate applicable laws.
6 - rootcastleco Skill Blockchain Developer
> ⚠️ **AUTHORIZED USE ONLY** — This skill is intended for authorized security professionals only. Use only against systems you own or have explicit written permission to test. Unauthorized use may violate applicable laws.
6 - rootcastleco Skill Devops Troubleshooter
> ⚠️ **AUTHORIZED USE ONLY** — This skill is intended for authorized security professionals only. Use only against systems you own or have explicit written permission to test. Unauthorized use may violate applicable laws.
6 - rootcastleco Skill Mobile Security Coder
> ⚠️ **AUTHORIZED USE ONLY** — This skill is intended for authorized security professionals only. Use only against systems you own or have explicit written permission to test. Unauthorized use may violate applicable laws.
6 - rootcastleco Skill Backend Security Coder
> ⚠️ **AUTHORIZED USE ONLY** — This skill is intended for authorized security professionals only. Use only against systems you own or have explicit written permission to test. Unauthorized use may violate applicable laws.
6 - rootcastleco Skill Security Scanning Security Sast
> ⚠️ **AUTHORIZED USE ONLY** — This skill is intended for authorized security professionals only. Use only against systems you own or have explicit written permission to test. Unauthorized use may violate applicable laws.
6 -
jarle Skill Bun Security Scanner APISecurity Scanner API
- galyarderlabs Bundle Doc Maintenance 2
Audit top-level documentation (README, SPEC, PRODUCT) against recent git history to find drift shipped features missing from docs or features listed as upcoming that already landed. Proposes minimal edits, creates a branch, and opens a PR. Use when asked to review docs for accuracy, after major feature merges, or on a periodic schedule.
20 - galyarderlabs Skill Security Guardian 2
Use when legacy prompts or older framework flows reference `security-guardian` and you need the modern runtime to resolve that capability cleanly.
20 - galyarderlabs Skill Security Reviewer 2
Use when legacy prompts or older framework flows reference `security-reviewer` and you need the modern runtime to resolve that capability cleanly.
20 -
asiaostrich Skill Audit Assistant[UDS] 诊断 UDS 安装的健康状态，并向上游提交结构化反馈。 Use when: .standards/ 看起来损坏或不同步、验证 manifest 完整性、反馈既有 UDS 标准用起来的摩擦点。 Not for: 审计你自己应用程序的代码质量——请用 /metrics 或 /code-review；依赖包与密钥扫描——请用 /scan。 Keywords: UDS audit, health check, manifest integrity, standards feedback, friction, 安装健康, 标准审计, 反馈, 完整性检查.
- asiaostrich Skill Security Assistant
引导安全审查与漏洞评估，遵循 OWASP 标准。 Use when: 安全审计、漏洞检查、安全编码审查、威胁建模。 Not for: 自动化的依赖包、CVE 与密钥扫描——请用 /scan；处理正在发生的安全事件——请用 /incident。 Keywords: security, OWASP, vulnerability, authentication, authorization, 信息安全, 漏洞, 认证, 授权, 威胁建模.
- asiaostrich Skill Security Scan Assistant
引导自动化安全扫描、依赖包审计与密钥检测。 Use when: 依赖包审计、CVE 扫描、密钥检测、许可证合规。 Not for: 人工的威胁建模与安全设计审查——请用 /security；一般的代码整洁度——请用 /sweep。 Keywords: scan, audit, CVE, dependency, secret, SBOM, vulnerability, 扫描, 审计, 依赖包, 密钥检测.
-
thebeardedbearsas Bundle SecuritySecurity
-
intent-solutions-io Bundle Performing Security AuditsThis skill allows Claude to conduct comprehensive security audits of code, infrastructure, and configurations. It leverages various tools within the security-pro-pack plugin, including vulnerability scanning, compliance checking, cryptography review, and infrastructure security analysis. Use this skill when a user requests a "security audit," "vulnerability assessment," "compliance review," or any task involving identifying and mitigating security risks. It helps to ensure code and systems adhere to security best practices and compliance standards. Activates when you request "performing security audits" functionality.
- intent-solutions-io Bundle Validating Pci Dss Compliance
This skill uses the pci-dss-validator plugin to assess codebases and infrastructure configurations for compliance with the Payment Card Industry Data Security Standard (PCI DSS). It identifies potential vulnerabilities and deviations from PCI DSS requirements. Use this skill when the user requests to "validate PCI compliance", "check PCI DSS", "assess PCI security", or "review PCI standards" for a given project or configuration. It helps ensure that systems handling cardholder data meet the necessary security controls.
- intent-solutions-io Bundle Scanning For Vulnerabilities
This skill enables comprehensive vulnerability scanning using the vulnerability-scanner plugin. It identifies security vulnerabilities in code, dependencies, and configurations, including CVE detection. Use this skill when the user asks to scan for vulnerabilities, security issues, or CVEs in their project. Trigger phrases include "scan for vulnerabilities", "find security issues", "check for CVEs", "/scan", or "/vuln". The plugin performs static analysis, dependency checking, and configuration analysis to provide a detailed vulnerability report.
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include frontier-defense-partner-evaluation, security-auditor, backend-security-coder. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.