Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
alirezarezvani Skill Compliance ReadinessPressure-tests any compliance program with six forcing questions before adopting a new framework, planning an audit cycle, or signing off on certification readiness.
Audited 20.4k -
alirezarezvani Bundle Incident ResponseClassify, triage, and manage declared security incidents from initial triage through forensic evidence collection and escalation routing.
Audited 20.4k -
alirezarezvani Bundle Skill Security AuditorScan and audit AI agent skills for security risks before installation, producing a PASS/WARN/FAIL verdict with findings and remediation guidance.
20.4k -
addyosmani Skill Doubt Driven DevelopmentSubjects every non-trivial decision to a fresh-context adversarial review before it stands, prioritizing correctness over speed for high-stakes or unfamiliar code.
69.5k -
google Bundle Gke SecurityHardens Google Kubernetes Engine (GKE) clusters with Workload Identity, Secret Manager, RBAC, Binary Authorization, Network Policies, and Pod Security Standards.
14.4k -
google Skill Google Cloud Recipe AuthGuides authentication and authorization to Google Cloud services, covering human users, service identities, Application Default Credentials (ADC), and best practices for secure access.
Audited 14.4k -
google Skill Google Cloud Waf SecurityEvaluates Google Cloud workloads against the Well-Architected Framework security pillar, identifies security requirements, and provides actionable recommendations for IAM, network security, data protection, and operational security.
Audited 14.4k -
google Skill Iam Recommendations FetcherFetches IAM recommendations and security insights from Google Cloud for a specified organization, folder, or project, using MCP tools, gcloud CLI, or direct API calls.
14.4k -
google Skill Google Cloud Waf ReliabilityEvaluates Google Cloud workloads against the Reliability pillar of the Well-Architected Framework, providing actionable recommendations for building, deploying, and managing reliable systems.
Audited 14.4k -
google Skill Detection Engineering Coverage EvaluationAutomates detection engineering workflows in Google SecOps by extracting threat intelligence, generating detection opportunities, simulating attacker behavior with synthetic events, evaluating rule coverage, and creating new YARA-L 2.0 rules to close gaps.
14.4k -
microsoft Bundle Entra Agent IdCreate and manage OAuth2-capable identities for AI agents using Microsoft Graph beta API.
2.7k -
microsoft Skill Azure RbacFinds the least-privilege Azure RBAC role for an identity, generates CLI commands and Bicep code to assign it, and provides guidance on permissions needed to grant roles.
Audited 2.7k -
microsoft Bundle Azure AigatewayConfigure Azure API Management as an AI Gateway to govern AI models, MCP tools, and agents with policies for caching, rate limiting, content safety, and cost control.
2.7k -
microsoft Bundle Azure ComplianceRun Azure compliance and security audits using azqr and Key Vault expiration checks, covering best-practice assessment, resource review, and security posture validation.
2.7k -
microsoft Bundle Azure DiagnosticsDebug and troubleshoot Azure production issues using AppLens, Azure Monitor, resource health, and systematic diagnosis flows for services like App Service, Functions, AKS, Container Apps, and Messaging.
Audited 2.7k -
microsoft Bundle Azure Identity JavaAuthenticate Java applications with Azure services using Microsoft Entra ID, supporting credential types for local development, managed identities, service principals, and CI/CD pipelines.
Audited 2.7k -
microsoft Skill Azure Identity PyAuthenticate to Azure services from Python using Microsoft Entra ID with DefaultAzureCredential, managed identity, service principals, and token caching.
Audited 2.7k -
microsoft Skill Azure Keyvault PyManage secrets, cryptographic keys, and certificates in Azure Key Vault using the Python SDK.
Audited 2.7k -
microsoft Skill Azure Identity RustAuthenticate to Azure services from Rust using Microsoft Entra ID credentials, including managed identity, service principal, and local development tools.
2.7k -
microsoft Bundle Entra App RegistrationGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration for authenticating users and accessing Azure resources.
Audited 2.7k -
microsoft Skill Azure Identity DotnetAuthenticate .NET applications to Azure services using Microsoft Entra ID with support for managed identities, service principals, and developer credentials.
Audited 2.7k -
microsoft Bundle Azure Identity TSAuthenticate to Azure services using the Azure Identity library for JavaScript, supporting DefaultAzureCredential, managed identity, service principals, and interactive browser login.
Audited 2.7k -
microsoft Skill Azure Keyvault Keys RustCreate, manage, and use cryptographic keys in Azure Key Vault from Rust, including RSA, EC, and HSM-protected keys for encryption, signing, and wrapping operations.
Audited 2.7k -
microsoft Bundle Azure AI Contentsafety JavaAnalyze text and images for harmful content using Azure AI Content Safety SDK for Java. Supports hate, violence, sexual content, and self-harm detection with blocklist management.
Audited 2.7k -
microsoft Skill Azure AI Contentsafety PyDetect harmful user-generated and AI-generated content in text and images using Azure AI Content Safety SDK for Python.
Audited 2.7k -
microsoft Skill Azure Keyvault Secrets RustStore, retrieve, and manage secrets in Azure Key Vault using the official Rust SDK.
2.7k -
microsoft Bundle Azure Keyvault Keys TSManage cryptographic keys and secrets in Azure Key Vault using the @azure/keyvault-keys and @azure/keyvault-secrets SDKs for TypeScript.
Audited 2.7k -
microsoft Bundle Azure Enterprise Infra PlannerArchitect and provision enterprise Azure infrastructure from workload descriptions, generating Bicep or Terraform for networking, identity, security, and multi-resource topologies aligned with the Well-Architected Framework.
2.7k -
microsoft Skill Azure AI Contentsafety TSAnalyze text and images for harmful content using Azure AI Content Safety, with customizable blocklists and severity thresholds.
Audited 2.7k -
microsoft Bundle Azure Keyvault Secrets TSManage secrets and keys in Azure Key Vault using the JavaScript SDK, including CRUD operations, cryptographic functions, backup/restore, and key rotation.
Audited 2.7k -
microsoft Skill Azure Keyvault Certificates RustManage X.509 certificates in Azure Key Vault from Rust, including creation, deletion, and signing operations.
Audited 2.7k -
microsoft Bundle Azure Security Keyvault Keys JavaManage cryptographic keys and perform cryptographic operations in Azure Key Vault and Managed HSM using the Java SDK.
Audited 2.7k -
microsoft Bundle Azure Security Keyvault Secrets JavaStore, retrieve, and manage secrets like passwords, API keys, and connection strings using Azure Key Vault with the Java SDK.
Audited 2.7k -
microsoft Skill Azure Security Keyvault Keys DotnetManage cryptographic keys in Azure Key Vault and Managed HSM using the .NET SDK. Create, rotate, encrypt, decrypt, sign, and verify keys with KeyClient and CryptographyClient.
Audited 2.7k -
microsoft Skill Microsoft Azure Webjobs Extensions Authentication Events DotExtend Microsoft Entra ID authentication flows with custom claims, attribute collection, and OTP delivery using Azure Functions triggers.
Audited 2.7k -
itsmostafa Bundle Ec2Manage AWS EC2 virtual machines — instances, security groups, key pairs, AMIs, EBS volumes, Auto Scaling Groups, Spot Instances, Session Manager, placement groups, and instance lifecycle automation.
1.1k
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include microsoft-azure-webjobs-extensions-authentication-events-dotnet, entra-app-registration, azure-compliance. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.