Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
jeremylongshore Skill Remofirst Core Workflow A"RemoFirst core workflow a \u2014 global HR, EOR, and payroll platform\ \ integration.\nUse when working with RemoFirst for global employment, payroll,\ \ or compliance.\nTrigger with phrases like \"remofirst core workflow a\", \"remofirst-core-workflow-a\"\ , \"global HR API\".\n"
- jeremylongshore Skill Remofirst Core Workflow B
"RemoFirst core workflow b \u2014 global HR, EOR, and payroll platform\ \ integration.\nUse when working with RemoFirst for global employment, payroll,\ \ or compliance.\nTrigger with phrases like \"remofirst core workflow b\", \"remofirst-core-workflow-b\"\ , \"global HR API\".\n"
- jeremylongshore Skill Remofirst Security Basics
"RemoFirst security basics \u2014 global HR, EOR, and payroll platform\ \ integration.\nUse when working with RemoFirst for global employment, payroll,\ \ or compliance.\nTrigger with phrases like \"remofirst security basics\", \"remofirst-security-basics\"\ , \"global HR API\".\n"
- jeremylongshore Skill Salesloft Security Basics
'Secure SalesLoft OAuth tokens, API keys, and webhook signatures. Use when implementing token rotation, securing webhook endpoints, or auditing SalesLoft API access controls. Trigger: "salesloft security", "salesloft secrets", "secure salesloft", "salesloft token rotation". '
-
thedixitjain Skill Security Benchmark Runner'Manage security benchmark runner operations. Auto-activating skill for Security Advanced. Triggers on: security benchmark runner, security benchmark runner Part of the Security Advanced skill category. Use when working with security benchmark runner functionality. Trigger with phrases like "security benchmark runner", "security runner", "security". '
2 -
sickn33 Skill Security Bluebook BuilderBuild a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using MUST/SHOULD/CAN language, with explicit assumptions, scope, and security gates.
45.1k - thedixitjain Skill Security Policy Generator
'Generate security policy generator operations. Auto-activating skill for Security Advanced. Triggers on: security policy generator, security policy generator Part of the Security Advanced skill category. Use when working with security policy generator functionality. Trigger with phrases like "security policy generator", "security generator", "security". '
2 -
snailsploit Skill Skill Exploit DevelopmentSkill Exploit Development
- jeremylongshore Skill Snowflake Security Basics
'Apply Snowflake security best practices: network policies, key rotation, MFA, encryption, and least-privilege access. Use when securing Snowflake access, implementing network policies, or auditing security configuration. Trigger with phrases like "snowflake security", "snowflake network policy", "secure snowflake", "snowflake MFA", "snowflake encryption". '
- sickn33 Skill Social Metadata Hardening
Fix social sharing previews so URLs render as rich cards on Facebook, LinkedIn, X/Twitter, WhatsApp, Telegram, and more. Covers OG tags, Twitter cards, absolute image URLs, and debugging.
45.1k - thedixitjain Bundle Supply Chain Risk Auditor
Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface, evaluating dependency health, or scoping security engagements.
2 - jeremylongshore Skill Techsmith Security Basics
'TechSmith security basics for Snagit COM API and Camtasia automation. Use when working with TechSmith screen capture and video editing automation. Trigger: "techsmith security basics". '
- sickn33 Bundle Threat Mitigation Mapping
Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness.
45.1k - thedixitjain Bundle Ton Vulnerability Scanner
Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks. Use when auditing FunC contracts.
2 - thedixitjain Skill Usenix Security Symposium
Use when targeting USENIX Security Symposium (USENIX Security) or deciding whether a computer-science manuscript fits this venue. Encodes conference fit, framing, evidence bar, submission-cycle checks, rebuttal posture, and desk-reject risks for security flagship.
2 - thedixitjain Skill Usenixsec Author Response
Use when reviews arrive from a USENIX Security Symposium cycle and the authors must respond — writing the rebuttal that survives online PC discussion, handling required ethics-content revisions flagged mid-review, and working with a shepherd after an "Accepted on Shepherd Approval" decision.
2 - thedixitjain Skill Usenixsec Topic Selection
Use when deciding whether a project belongs at the USENIX Security Symposium or a sibling venue — routing among USENIX Security, IEEE S&P, ACM CCS, NDSS, and specialty venues (PETS, SOUPS, RAID, WOOT), and confirming the work has the artifact/measurement/systems evidence USENIX Security rewards.
2 - jeremylongshore Skill Workhuman Security Basics
'Workhuman security basics for employee recognition and rewards API. Use when integrating Workhuman Social Recognition, or building recognition workflows with HRIS systems. Trigger: "workhuman security basics". '
- jeremylongshore Skill Xss Vulnerability Scanner
'Scan xss vulnerability scanner operations. Auto-activating skill for Security Fundamentals. Triggers on: xss vulnerability scanner, xss vulnerability scanner Part of the Security Fundamentals skill category. Use when working with xss vulnerability scanner functionality. Trigger with phrases like "xss vulnerability scanner", "xss scanner", "xss". '
- jeremylongshore Bundle Supabase Schema From Requirements
'Design Supabase Postgres schema from business requirements with migrations, RLS, and types. Use when translating specifications into database tables, creating migration files, adding Row Level Security policies, or generating TypeScript types from schema. Trigger with phrases like "supabase schema", "design database supabase", "schema from requirements", "supabase migration", "supabase tables from spec". '
- thedixitjain Skill Ectj Identification Strategy
Use when stress-testing identification, assumptions, asymptotics, regularity conditions, and proofs in a The Econometrics Journal (EctJ) submission, including proof placement under RES printed-appendix rules and pairing every asymptotic claim with finite-sample evidence referees can audit.
2 - thedixitjain Skill Ylj Footnotes And Cite Check
Use when running the final footnote-apparatus audit of a The Yale Law Journal (YLJ) piece — verifying every cite exists, is pinpointed, is correct Bluebook form, and actually supports its sentence, in preparation for (or during) the student source-pull. It verifies; it does not construct new cites (ylj-sources-and-bluebook).
2 - thedixitjain Bundle Analyzing Cyber Kill Chain
'Analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain framework to identify which phases an adversary has completed, where defenses succeeded or failed, and what controls would have interrupted the attack at earlier phases. Use when conducting post-incident analysis, building prevention-focused security controls, or mapping detection gaps to kill chain phases. Activates for requests involving kill chain analysis, intrusion kill chain, attack phase mapping, or Lockheed Martin kill chain framework. '
2 - thedixitjain Bundle Analyzing Security Headers
'Analyze HTTP security headers of web domains to identify vulnerabilities and misconfigurations. Use when you need to audit website security headers, assess header compliance, or get security recommendations for web applications. Trigger with phrases like "analyze security headers", "check HTTP headers", "audit website security headers", or "evaluate CSP and HSTS configuration". '
2 - thedixitjain Skill Assemblyai Security Basics
'Apply AssemblyAI security best practices for API keys, PII, and access control. Use when securing API keys, implementing PII redaction, or configuring temporary tokens for browser-side streaming. Trigger with phrases like "assemblyai security", "assemblyai secrets", "secure assemblyai", "assemblyai API key security", "assemblyai PII". '
2 - thedixitjain Skill Brightdata Security Basics
'Apply Bright Data security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Bright Data security configuration. Trigger with phrases like "brightdata security", "brightdata secrets", "secure brightdata", "brightdata API key security". '
2 - thedixitjain Bundle Clickhouse Multi Env Setup
| Configure ClickHouse across dev, staging, and production with environment-specific settings, secrets management, and infrastructure-as-code patterns. Use when setting up per-environment ClickHouse instances, managing connection configs, wiring secrets per environment, or deploying to multiple environments. Trigger with "clickhouse environments", "clickhouse dev staging prod", "clickhouse multi-env", "clickhouse environment config", "clickhouse staging setup".
2 - thedixitjain Bundle Clickhouse Security Basics
| Secure ClickHouse with user management, network restrictions, TLS, and audit logging. Use when hardening a ClickHouse deployment, creating restricted users, enforcing multi-tenant row isolation, or configuring network-level access controls. Trigger with "clickhouse security", "clickhouse user management", "secure clickhouse", "clickhouse TLS", "clickhouse access control", "clickhouse firewall".
2 - thedixitjain Skill Coderabbit Security Basics
'Configure CodeRabbit for security-focused code review with secret detection and vulnerability scanning. Use when setting up security review rules, configuring secret detection in PRs, or hardening CodeRabbit configuration for compliance requirements. Trigger with phrases like "coderabbit security", "coderabbit secrets", "secure coderabbit", "coderabbit vulnerability detection", "coderabbit security review". '
2 - thedixitjain Bundle Configuring Service Meshes
'Configure this skill configures service meshes like istio and linkerd for microservices. it generates production-ready configurations, implements best practices, and ensures a security-first approach. use this skill when the user asks to "configure service ... Use when appropriate context detected. Trigger with relevant phrases based on skill purpose. '
2 - thedixitjain Skill Container Security Auditor
'Audit container security auditor operations. Auto-activating skill for Security Advanced. Triggers on: container security auditor, container security auditor Part of the Security Advanced skill category. Use when analyzing or auditing container security auditor. Trigger with phrases like "container security auditor", "container auditor", "container". '
2 - thedixitjain Bundle Customerio Security Basics
'Apply Customer.io security best practices. Use when implementing secure credential storage, PII handling, webhook signature verification, or GDPR/CCPA compliance. Trigger: "customer.io security", "customer.io pii", "secure customer.io", "customer.io gdpr", "customer.io webhook verify". '
2 - thedixitjain Bundle Elevenlabs Security Basics
| Apply ElevenLabs security best practices for API keys, webhook HMAC validation, and voice data protection. Use when securing API keys, validating webhook signatures, or auditing ElevenLabs security configuration. Trigger with "elevenlabs security", "elevenlabs secrets", "secure elevenlabs", "elevenlabs API key security", "elevenlabs webhook signature", "elevenlabs HMAC".
2 - thedixitjain Skill Encryption At REST Checker
'Validate encryption at rest checker operations. Auto-activating skill for Security Advanced. Triggers on: encryption at rest checker, encryption at rest checker Part of the Security Advanced skill category. Use when working with encryption at rest checker functionality. Trigger with phrases like "encryption at rest checker", "encryption checker", "encryption". '
2 - thedixitjain Skill HTTP Header Security Audit
'Execute http header security audit operations. Auto-activating skill for Security Fundamentals. Triggers on: http header security audit, http header security audit Part of the Security Fundamentals skill category. Use when analyzing or auditing http header security audit. Trigger with phrases like "http header security audit", "http audit", "http". '
2 - thedixitjain Skill License Compliance Scanner
'Scan license compliance scanner operations. Auto-activating skill for Security Fundamentals. Triggers on: license compliance scanner, license compliance scanner Part of the Security Fundamentals skill category. Use when working with license compliance scanner functionality. Trigger with phrases like "license compliance scanner", "license scanner", "license". '
2
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include snowflake-security-basics, remofirst-core-workflow-a, remofirst-core-workflow-b. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.