Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
tools-only Bundle 869 Reference Set 06 Key Management 8d29220d<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 875 Reference Set 08 Error Handling 9e413dc1
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 878 Reference Set 09 Dos Prevention 14f79d8d
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 420 Reference Set 06 Certificate Pinning 70422982
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 420 Reference Set 06 Certificate Pinning F0af49c6
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 440 Reference Set Ext 14 Mobile Security 50745c6d
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 440 Reference Set Ext 14 Mobile Security 714b27e2
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 1073 Network Security Incident Response Fe1dd1e0
Network Security Incident Response
7 - tools-only Bundle 448 Control Set Ext 01 02 Auth Patterns 20aa6001
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 448 Control Set Ext 01 02 Auth Patterns 9e7bf281
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 445 Reference Set 02 Idor Prevention 344c8152
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 445 Reference Set 02 Idor Prevention 802750c5
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 2211 Coderabbit Security Scanning 338f9cb4
coderabbit-security-scanning
7 - tools-only Bundle 435 Reference Set 10 Database Security 30a73f0b
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 435 Reference Set 10 Database Security E6160141
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 437 Reference Set Ext 11 Nodejs Docker 28321053
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 437 Reference Set Ext 11 Nodejs Docker Efa33170
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 059 Architecture Workflow Guide 51ef58a8
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 059 Architecture Workflow Guide 7548c205
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 2511 014 Security Headers Cors Middleware F2c11a7a
ADR-0014: Security Headers and Environment-Aware CORS Middleware
7 - tools-only Bundle 407 Reference Set 03 Query Parameterization B2eba6f1
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 407 Reference Set 03 Query Parameterization C5ab37da
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 432 Reference Set 09 Microservices Security A2daef28
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 432 Reference Set 09 Microservices Security E0843c95
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 953 Security Architecture Patterns 86619c5f
Security Architecture Patterns
7 - tools-only Bundle 838 Reference Set 01 Session Management 1200fc73
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 860 Reference Set 05 Dom Xss Prevention 982d1e93
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 865 Reference Set 05 Xss Filter Evasion D061cfe8
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 874 Reference Set 07 Logging Vocabulary 9d4943cd
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 995 Skillset Threat Modeling Tour Cn V5 E9af870f
<!-- Threat Modeling Skill | Version 3.0.0 (20260201a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 453 Reference Set 01 Security Questions B5b13f0b
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 453 Reference Set 01 Security Questions D59dec3e
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 456 Reference Set 05 Xss Filter Evasion 4fb88c13
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 456 Reference Set 05 Xss Filter Evasion Ba27d20a
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 385 Control Set Ext 10 Hardcoded Credentials 5b8d87dc
<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7 - tools-only Bundle 385 Control Set Ext 10 Hardcoded Credentials 663456b9
<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->
7
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include 869-reference-set-06-key-management_8d29220d, 875-reference-set-08-error-handling_9e413dc1, 878-reference-set-09-dos-prevention_14f79d8d. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.