Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
tools-only Bundle 212 Control Set Ext 14 Mobile E06bc984<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 655 P4 Security Design Review 22ebe2ae
<!-- Threat Modeling Skill | Version 3.0.0 (20260201b) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 655 P4 Security Design Review 2af0dc53
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 394 Reference Set 01 Password Storage 15486362
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 394 Reference Set 01 Password Storage Bba43c08
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 403 Reference Set 03 Input Validation B602fff0
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 403 Reference Set 03 Input Validation Bcaa1d79
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 297 Devkitjavasecurity Review 630fb571
Execute comprehensive security review for Java enterprise applications. Analyze vulnerabilities, dependencies, security configurations, and best practices specific to the Java ecosystem.
7 - tools-only Bundle 296 Devkitjavarefactor Class 3a77372a
Java Class Refactoring Assistant
7 - tools-only Bundle 446 Hooks Frontmatter Schema 829661a6
Hooks Frontmatter Schema for SKILL.md Files
7 - tools-only Bundle 207 Control Set 09 API Security 551a5be2
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 207 Control Set 09 API Security C77f3363
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 206 Control Set 08 Error Handling D0cf867e
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 502 Knowledge Architecture V52 Cn 756f0d96
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 502 Knowledge Architecture V52 Cn 7a1fa993
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 863 Reference Set 05 HTTP Headers 502cd929
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 885 Reference Set 10 User Privacy 3854b05a
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 109 Knowledge Architecture V52 D2959d9f
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 109 Knowledge Architecture V52 F3795e84
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 844 Reference Set 03 File Upload De5158e2
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 981 Skill Architecture Design Cn C5aa74e8
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 2607 Completeness Report Plugin Creator Bf91f9a2
Completeness Audit — plugin-creator Skill
7 - tools-only Bundle 426 Reference Set 07 Logging Vocabulary 0db6788a
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 426 Reference Set 07 Logging Vocabulary 19ba9628
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 436 Reference Set 10 Secrets Management 0642979f
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 436 Reference Set 10 Secrets Management F17ad0b1
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 210 Control Set Ext 12 Supply Chain Df2188d4
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 214 Control Set Ext 16 Agentic 31538521
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 502 Knowledge Architecture V52 Cn 0d76937b
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 502 Knowledge Architecture V52 Cn 444185b1
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 885 Reference Set 10 User Privacy 724c9ff6
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 885 Reference Set 10 User Privacy 7dccb419
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 203 Control Set 03 Input Validation 9ce76238
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 829 Reference Set 01 Authentication 7f047941
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 862 Reference Set 05 Html5 Security 51836b19
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 866 Reference Set 05 Xss Prevention Eef068a5
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include 212-control-set-ext-14-mobile_e06bc984, 655-p4-security-design-review_22ebe2ae, 655-p4-security-design-review_2af0dc53. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.