Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
diegosouzapw Bundle Done 2Complete current expedition - run tests, commit, push, and update kanban status
54 -
aibot88 Bundle NPM Dependency Audit ResolverResolves npm audit vulnerabilities by analyzing the npm registry API for patched versions, generating targeted package.json overrides, and testing upgrades via npm-check-updates compatibility mode.
3 - aibot88 Bundle Owasp Zap API Security Tester
Runs automated DAST scans against REST and GraphQL APIs using OWASP ZAP daemon API. Detects injection flaws, broken auth, and CORS misconfigurations with detailed remediation steps.
3 - aibot88 Bundle Nginx Config Validator Runbook
Validates Nginx configurations using nginx -t syntax checking, the crossplane Python parser for structural analysis, and gixy security analyzer. Detects misconfigurations, SSL issues, and security vulnerabilities.
3 - aibot88 Bundle NPM Package Changelog Analyzer
Analyzes NPM package changelogs and release notes using the NPM Registry API and GitHub Releases API. Detects breaking changes, security patches, and dependency conflicts across package upgrade paths.
3 - aibot88 Bundle NPM Package Dependency Auditor
Deep-audits npm package dependency trees using the npm Registry API and Socket.dev security intelligence. Identifies supply chain risks, typosquatting, and license incompatibilities across transitive dependencies.
3 - aibot88 Bundle Owasp Zap API Security Auditor
Orchestrates OWASP ZAP active and passive scans against REST and GraphQL endpoints using ZAP's Python API client. Generates DAST reports with CWE mappings and suggests WAF rule configurations.
3 - aibot88 Bundle Owasp Zap API Security Scanner
Automates OWASP ZAP scans against REST APIs using the ZAP Python API client. Imports OpenAPI/Swagger specs for targeted scanning and generates SARIF-format reports for GitHub Security tab integration.
3 - aibot88 Bundle Owasp Zap Security Audit Skill
Wraps OWASP ZAP API for automated web application security testing including active scan, spider crawl, and ajax spider endpoints. Generates structured findings reports with CWE classifications and OWASP Top 10 category mapping.
3 - aibot88 Bundle Sonarqube Code Quality Scanner
Runs SonarQube static analysis via the SonarQube Web API and sonar-scanner CLI. Detects code smells, bugs, and security vulnerabilities across 30+ languages with quality gate enforcement.
3 - aibot88 Bundle Nakulnagariy Nnblogs Claude Skills
Security Audit Skill
3 - aibot88 Bundle Openapi Spec Validator Linter 2
Validates OpenAPI 3.0/3.1 specifications using the @readme/openapi-parser and Spectral linter with custom rulesets. Detects missing descriptions, inconsistent naming conventions, and security scheme gaps in your API definitions.
3 - aibot88 Bundle Dmoneyoh Skills Basin Security Audit
security-audit
3 - aibot88 Bundle Oci Security Compliance Reviewer
OCI Security Compliance Reviewer
3 - aibot88 Bundle NPM Package Audit License Checker
Audits npm dependencies using npm audit, license-checker-rspack, and the npm registry API (registry.npmjs.org). Reports CVE vulnerabilities with CVSS scores, license compatibility matrices, and identifies abandoned packages via download trend analysis.
3 - aibot88 Bundle NPM Package Vulnerability Runbook
Automates vulnerability triage for Node.js projects using the npm Audit API and OSV.dev API. Generates step-by-step remediation runbooks with patching commands and dependency tree analysis.
3 - aibot88 Bundle NPM Package Vulnerability Scanner
Scans npm dependencies for known vulnerabilities using the npm audit JSON API and the OSV.dev REST API (api.osv.dev/v1/query). Cross-references findings with the GitHub Advisory Database (GHSA) for severity scoring.
3 - aibot88 Bundle Github Actions Workflow Composer 2
Composes GitHub Actions workflow YAML files from modular job templates, resolving action version pins and secret references. Validates against the GitHub Actions schema and checks for known action CVEs.
3 - aibot88 Bundle Sonarqube Quality Gate Enforcer 14
Enforces SonarQube quality gates in pull request workflows using the SonarQube Web API and ce/task endpoint. Blocks merges when code coverage drops, duplications exceed thresholds, or security hotspots are unreviewed.
3 - aibot88 Bundle Iyolrymtn Kku Adeo Newgen Claude Skills
ADEO Corporate Web Project: Skill & Security Configuration
3 - aibot88 Bundle Lunairefine Lunairefine Github Io Public
Taxonomy: Web3 & Smart Contract Security Engineer
3 - aibot88 Bundle Infisical Secret Management Platform
Infisical is an open-source platform for managing application secrets, environment variables, and certificates across teams and infrastructure. This skill enables agents to sync secrets, rotate credentials, and manage PKI using the Infisical CLI and API.
3 - aibot88 Bundle Nuclei Vulnerability Template Runner
Executes ProjectDiscovery Nuclei security scanning templates against target URLs. Supports custom YAML template authoring, CVE detection via nuclei-templates repository, and SARIF output for GitHub Security tab integration.
3 - aibot88 Bundle Sops Secret File Encryption Rotation
SOPS manages encrypted YAML, JSON, ENV, INI, and binary files with KMS, age, and PGP. It is a tight fit for secrets handling, rotation, and encrypted configuration workflows.
3 - aibot88 Bundle NPM Audit Dependency Report Generator
Generates comprehensive vulnerability reports from npm audit JSON output and the OSV (Open Source Vulnerabilities) API. Parses npm audit --json results, enriches each CVE with CVSS scores from the NVD REST API, and groups findings by severity. Produces SARIF output compatible with GitHub Advanced Security.
3 - aibot88 Bundle Trivy Security Scanner Containers Iac
Trivy is Aqua Security’s scanner for vulnerabilities, misconfigurations, secrets, SBOMs, and license issues. It fits security review, container hygiene, and infrastructure-as-code checks in one CLI.
3 - aibot88 Bundle Dxcsithlordpadawan Securebypolicy App Skills
Claude Skill: C Security Compliance Checker
3 - aibot88 Bundle Tanin T Security Awareness Articles Articles
บทความที่ 1: ทำไม Cybersecurity ถึงเป็น Life Skill ไม่ใช่แค่ IT Skill
3 - aibot88 Bundle Multi Axis Code Review And Quality Gates
Run a structured pre-merge review across correctness, readability, architecture, security, and performance instead of relying on a shallow spot check.
3 - aibot88 Bundle Zap Automated Security Scan Orchestrator
Orchestrates OWASP ZAP security scans via the ZAP API with automated spider, active scanner, and authentication sequence configuration. Generates compliance reports mapped to OWASP Top 10 and exports findings in SARIF and JUnit XML formats.
3 - aibot88 Bundle Enforce Repo Hygiene With Pre Commit Hooks
Run a repeatable pre-commit gate that catches formatting, lint, secret, and policy issues before they land in the repo.
3 - aibot88 Bundle Block Secret Leaks Before Commit Or Push With Ggshield
Scan staged changes, commits, or repositories for secrets before they leave the workstation or CI job, instead of relying on a later platform-side catch.
3 - aibot88 Bundle Audit Apple Platform UI Work Against Human Interface Guideli
Run a repeatable HIG compliance audit over app code before shipping UI changes, then use the findings to guide remediation.
3 -
construct-ai-primary Skill Fin Financial Reporting AuditPrepare financial statements, coordinate audits, respond to auditor queries, compile supporting schedules
0 - construct-ai-primary Skill Security Incident Management
End-to-end management of security incidents from initial report through investigation, evidence collection, resolution, and lessons learned
0 - construct-ai-primary Skill Sentinel
Sentinel Skill
0
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include done, npm-dependency-audit-resolver, owasp-zap-api-security-tester. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.