Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
tools-only Bundle 417 Reference Set 05 HTTP Headers 031e23d6<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 417 Reference Set 05 HTTP Headers 98579a47
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 1731 Threat Modeling Guide 6962830a
Threat Modeling Guide
7 - tools-only Bundle 2666 Security Pack Summary 625530b5
Security & Compliance Plugin Pack - Complete Summary
7 - tools-only Bundle 204 Control Set 05 Client Side 8c4df881
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 294 Devkitjavadependency Audit D36d1edd
Java Dependency Audit and Security Analysis
7 - tools-only Bundle 262 Audit Skill Consistency Af37218f
Skill SKILL.md Consistency Audit Report
7 - tools-only Bundle 2544 Security Checklist Completeness 59836e15
Security Checklist Completeness
7 - tools-only Bundle 444 Control Set 01 Authentication 0f24120f
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 444 Control Set 01 Authentication 315e4b3c
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 077 Audit DB Transaction Management 504ffdd3
Database Transaction Management Audit
7 - tools-only Bundle 077 Audit DB Transaction Management Caf0c54e
Database Transaction Management Audit
7 - tools-only Bundle 205 Control Set 06 Cryptography A7a24278
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 207 Control Set 09 API Security 96cdfdf8
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 250 Security Reviewer Prompt 6cf255f9
You are a senior Security Reviewer with 10+ years of experience in cybersecurity, application security testing, and compliance validation. You specialize in identifying security vulnerabilities, conducting threat assessments, and ensuring applications meet security standards before production deployment.
7 - tools-only Bundle 1853 200 Dr Sops 07 Compliance Audit 5ce968ae
Compliance & Audit Guide: Security and Regulatory Compliance
7 - tools-only Bundle 379 Skillset Threat Modeling Tour V5 16999d09
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 379 Skillset Threat Modeling Tour V5 3a0190a3
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 390 Reference Set 01 Forgot Password 4edeccfa
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 390 Reference Set 01 Forgot Password Ac32c6b6
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 399 Reference Set 03 Deserialization A0c3c75c
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 399 Reference Set 03 Deserialization F924eaa2
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 405 Reference Set 03 Mass Assignment 350e41f4
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 405 Reference Set 03 Mass Assignment 7390d4b4
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 409 Reference Set 03 Ssrf Prevention 2816fc60
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 409 Reference Set 03 Ssrf Prevention Efc1f5d1
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 412 Reference Set 05 Csrf Prevention 80425bd7
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 412 Reference Set 05 Csrf Prevention D0e31b35
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 433 Reference Set 09 REST Assessment 28d67ae6
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 433 Reference Set 09 REST Assessment 6435f09c
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 652 P1 Project Understanding 6cc9a583
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 652 P1 Project Understanding C46b32d0
<!-- Threat Modeling Skill | Version 3.0.0 (20260201b) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 297 Devkitjavasecurity Review Ee1483f0
Validates security posture for Java enterprise applications (Spring, Jakarta EE, etc.). Use when auditing application security or before production deployments.
7 - tools-only Bundle 655 P4 Security Design Review 3ff4329b
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 655 P4 Security Design Review 5b6514a6
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 655 P4 Security Design Review F192546b
<!-- Threat Modeling Skill | Version 3.0.0 (20260202a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include 417-reference-set-05-http-headers_031e23d6, 417-reference-set-05-http-headers_98579a47, 1731-threat-modeling-guide_6962830a. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.