Security Agent Skills
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Security
1,976 skills
alirezarezvani skill-security-auditor
Scan and audit AI agent skills for security risks before installation, producing a PASS/WARN/FAIL verdict with findings and remediation guidance.
20.4k · bundle
addyosmani doubt-driven-development
Subjects every non-trivial decision to a fresh-context adversarial review before it stands, prioritizing correctness over speed for high-stakes or unfamiliar code.
69.5k
google gke-security
Hardens Google Kubernetes Engine (GKE) clusters with Workload Identity, Secret Manager, RBAC, Binary Authorization, Network Policies, and Pod Security Standards.
14.4k · bundle
google google-cloud-recipe-auth
Guides authentication and authorization to Google Cloud services, covering human users, service identities, Application Default Credentials (ADC), and best practices for secure access.
14.4k
google google-cloud-waf-security
Evaluates Google Cloud workloads against the Well-Architected Framework security pillar, identifies security requirements, and provides actionable recommendations for IAM, network security, data protection, and operational security.
14.4k
google iam-recommendations-fetcher
Fetches IAM recommendations and security insights from Google Cloud for a specified organization, folder, or project, using MCP tools, gcloud CLI, or direct API calls.
14.4k
google google-cloud-waf-reliability
Evaluates Google Cloud workloads against the Reliability pillar of the Well-Architected Framework, providing actionable recommendations for building, deploying, and managing reliable systems.
14.4k
google detection-engineering-coverage-evaluation
Automates detection engineering workflows in Google SecOps by extracting threat intelligence, generating detection opportunities, simulating attacker behavior with synthetic events, evaluating rule coverage, and creating new YARA-L 2.0 rules to close gaps.
14.4k
microsoft entra-agent-id
Create and manage OAuth2-capable identities for AI agents using Microsoft Graph beta API.
2.7k · bundle
microsoft azure-rbac
Finds the least-privilege Azure RBAC role for an identity, generates CLI commands and Bicep code to assign it, and provides guidance on permissions needed to grant roles.
2.7k
microsoft azure-aigateway
Configure Azure API Management as an AI Gateway to govern AI models, MCP tools, and agents with policies for caching, rate limiting, content safety, and cost control.
2.7k · bundle
microsoft azure-compliance
Run Azure compliance and security audits using azqr and Key Vault expiration checks, covering best-practice assessment, resource review, and security posture validation.
2.7k · bundle
microsoft azure-diagnostics
Debug and troubleshoot Azure production issues using AppLens, Azure Monitor, resource health, and systematic diagnosis flows for services like App Service, Functions, AKS, Container Apps, and Messaging.
2.7k · bundle
microsoft azure-identity-java
Authenticate Java applications with Azure services using Microsoft Entra ID, supporting credential types for local development, managed identities, service principals, and CI/CD pipelines.
2.7k · bundle
microsoft azure-identity-py
Authenticate to Azure services from Python using Microsoft Entra ID with DefaultAzureCredential, managed identity, service principals, and token caching.
2.7k
microsoft azure-keyvault-py
Manage secrets, cryptographic keys, and certificates in Azure Key Vault using the Python SDK.
2.7k
microsoft azure-identity-rust
Authenticate to Azure services from Rust using Microsoft Entra ID credentials, including managed identity, service principal, and local development tools.
2.7k
microsoft entra-app-registration
Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration for authenticating users and accessing Azure resources.
2.7k · bundle
microsoft azure-identity-dotnet
Authenticate .NET applications to Azure services using Microsoft Entra ID with support for managed identities, service principals, and developer credentials.
2.7k
microsoft azure-identity-ts
Authenticate to Azure services using the Azure Identity library for JavaScript, supporting DefaultAzureCredential, managed identity, service principals, and interactive browser login.
2.7k · bundle
microsoft azure-keyvault-keys-rust
Create, manage, and use cryptographic keys in Azure Key Vault from Rust, including RSA, EC, and HSM-protected keys for encryption, signing, and wrapping operations.
2.7k
microsoft azure-ai-contentsafety-java
Analyze text and images for harmful content using Azure AI Content Safety SDK for Java. Supports hate, violence, sexual content, and self-harm detection with blocklist management.
2.7k · bundle
microsoft azure-ai-contentsafety-py
Detect harmful user-generated and AI-generated content in text and images using Azure AI Content Safety SDK for Python.
2.7k
microsoft azure-keyvault-secrets-rust
Store, retrieve, and manage secrets in Azure Key Vault using the official Rust SDK.
2.7k
microsoft azure-keyvault-keys-ts
Manage cryptographic keys and secrets in Azure Key Vault using the @azure/keyvault-keys and @azure/keyvault-secrets SDKs for TypeScript.
2.7k · bundle
microsoft azure-enterprise-infra-planner
Architect and provision enterprise Azure infrastructure from workload descriptions, generating Bicep or Terraform for networking, identity, security, and multi-resource topologies aligned with the Well-Architected Framework.
2.7k · bundle
microsoft azure-ai-contentsafety-ts
Analyze text and images for harmful content using Azure AI Content Safety, with customizable blocklists and severity thresholds.
2.7k
microsoft azure-keyvault-secrets-ts
Manage secrets and keys in Azure Key Vault using the JavaScript SDK, including CRUD operations, cryptographic functions, backup/restore, and key rotation.
2.7k · bundle
microsoft azure-keyvault-certificates-rust
Manage X.509 certificates in Azure Key Vault from Rust, including creation, deletion, and signing operations.
2.7k
microsoft azure-security-keyvault-keys-java
Manage cryptographic keys and perform cryptographic operations in Azure Key Vault and Managed HSM using the Java SDK.
2.7k · bundle
microsoft azure-security-keyvault-secrets-java
Store, retrieve, and manage secrets like passwords, API keys, and connection strings using Azure Key Vault with the Java SDK.
2.7k · bundle
microsoft azure-security-keyvault-keys-dotnet
Manage cryptographic keys in Azure Key Vault and Managed HSM using the .NET SDK. Create, rotate, encrypt, decrypt, sign, and verify keys with KeyClient and CryptographyClient.
2.7k
microsoft microsoft-azure-webjobs-extensions-authentication-events-dot
Extend Microsoft Entra ID authentication flows with custom claims, attribute collection, and OTP delivery using Azure Functions triggers.
2.7k
itsmostafa ec2
Manage AWS EC2 virtual machines — instances, security groups, key pairs, AMIs, EBS volumes, Auto Scaling Groups, Spot Instances, Session Manager, placement groups, and instance lifecycle automation.
1.1k · bundle
itsmostafa iam
Manage AWS Identity and Access Management for users, roles, policies, and permissions. Create IAM policies, configure cross-account access, set up service roles, troubleshoot permission errors, and enforce least-privilege security.
1.1k · bundle
itsmostafa cognito
Set up and manage AWS Cognito user pools, identity pools, OAuth flows, and user authentication with CLI commands and Python SDK examples.
1.1k · bundle
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include gke-security, entra-agent-id, skill-security-auditor. Rankings shift as installs change; sort this page by "Most downloaded" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds add <owner>/<name>, or copy the file into your agent's skills directory.