Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
itsmostafa Bundle IamManage AWS Identity and Access Management for users, roles, policies, and permissions. Create IAM policies, configure cross-account access, set up service roles, troubleshoot permission errors, and enforce least-privilege security.
1.1k -
itsmostafa Bundle CognitoSet up and manage AWS Cognito user pools, identity pools, OAuth flows, and user authentication with CLI commands and Python SDK examples.
Audited 1.1k -
itsmostafa Bundle API GatewayManage AWS API Gateway for creating, publishing, and securing REST, HTTP, and WebSocket APIs using CLI commands, SAM templates, and best practices.
1.1k -
itsmostafa Bundle Secrets ManagerStore, retrieve, and automatically rotate credentials, API keys, and other secrets using AWS Secrets Manager.
Audited 1.1k -
nvidia Bundle Vss Manage AlertsOperate the VSS alert pipeline for real-time monitoring, Alert-Bridge subscriptions, Slack notifications, incident queries, and camera onboarding.
Audited 2.2k -
nvidia Bundle Jetson Memory AuditMeasure Jetson DRAM and NvMap usage, capture before/after baselines, and verify memory reclamation with live audit data.
Audited 2.2k -
nvidia Bundle Nemotron Policy GeneratorGenerates custom safety policies for NVIDIA Nemotron content-safety guardrails, producing a Markdown policy, JSON taxonomy, and inference prompts from rough user input.
Audited 2.2k -
phuryn Skill Privacy PolicyDraft a detailed privacy policy covering data types, jurisdiction, GDPR and compliance considerations, and clauses needing legal review.
Audited 22.6k -
phuryn Skill Shipping ArtifactsDocuments AI-built apps with architecture, permissions, secrets, and test coverage maps to make them reviewable before shipping.
Audited 22.6k -
phuryn Skill Intended Vs ImplementedFinds gaps between documented intent and actual implementation in codebases, catching bugs that generic scanners miss because they lack a model of intent.
Audited 22.6k -
phuryn Skill Porters Five ForcesEvaluate industry dynamics and market attractiveness by analyzing competitive rivalry, supplier power, buyer power, threat of substitutes, and threat of new entrants.
Audited 22.6k -
browserbase Bundle Safe BrowserBuild a local browser agent that enforces a domain allowlist via CDP Fetch interception, using a safe_browser tool that owns the Playwright session and blocks off-domain requests.
Audited 3.6k -
affaan-m Skill Repo ScanScans source code repositories across C++, Android, iOS, and Web to classify files, detect embedded third-party libraries, and produce actionable four-level verdicts per module with interactive HTML reports.
226k -
affaan-m Skill Safety GuardPrevents destructive operations on production systems and restricts file edits to a specific directory when running agents autonomously.
Audited 226k -
affaan-m Skill Design SystemGenerate or audit design systems, check visual consistency, and review PRs that touch styling.
Audited 226k -
affaan-m Skill Perl SecurityProvides comprehensive security patterns for Perl applications covering taint mode, input validation, safe file operations, SQL injection prevention, and web security.
Audited 226k -
affaan-m Skill Security ScanAudit Claude Code configuration files for security vulnerabilities, misconfigurations, and injection risks using AgentShield.
226k -
affaan-m Skill Django SecuritySecure Django applications against common vulnerabilities with production-ready settings, authentication, authorization, and input validation.
Audited 226k -
affaan-m Bundle Security ReviewProvides a comprehensive security checklist and code patterns for authentication, input validation, secrets management, SQL injection prevention, XSS, CSRF, rate limiting, and sensitive data exposure.
Audited 226k -
affaan-m Skill Click Path AuditTrace every user-facing button through its full state change sequence to find bugs where functions individually work but cancel each other out, produce wrong final state, or leave the UI inconsistent.
Audited 226k -
affaan-m Skill Hipaa ComplianceProvides HIPAA-specific decision gates and guardrails for healthcare software, directing users to implementation and review skills for PHI handling, audit logging, and compliance.
Audited 226k -
affaan-m Skill Laravel SecuritySecure Laravel applications with best practices for authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and deployment configurations.
Audited 226k -
affaan-m Skill Production AuditAudits local code for production readiness, identifying risks in security, data integrity, payments, operations, and UX before shipping.
Audited 226k -
affaan-m Skill Quarkus SecuritySecure Quarkus applications with authentication, authorization, input validation, and secrets management.
Audited 226k -
affaan-m Skill Defi Amm SecurityProvides a security checklist and hardened code examples for Solidity AMM contracts, covering reentrancy, donation attacks, oracle manipulation, slippage, and admin controls.
226k -
affaan-m Skill Postgres PatternsQuick reference for PostgreSQL best practices covering query optimization, schema design, indexing, Row Level Security, and connection pooling.
Audited 226k -
affaan-m Skill Cisco IOS PatternsReview Cisco IOS and IOS-XE configurations, choose read-only show commands, check ACL wildcard masks and interface direction, and build safe change-window verification checklists.
Audited 226k -
affaan-m Skill Homelab Pihole DnsInstall and configure Pi-hole as a network-wide DNS ad blocker on a Raspberry Pi or Linux host, manage blocklists, set up DNS-over-HTTPS, integrate DHCP, create local DNS records, and troubleshoot DNS issues.
226k -
affaan-m Skill Django VerificationRuns a comprehensive verification pipeline for Django projects including migrations, linting, tests with coverage, security scans, and deployment readiness checks before PRs or releases.
226k -
affaan-m Skill Opensource PipelineFork, sanitize, and package private projects for safe public release through a three-stage pipeline.
226k -
affaan-m Skill Springboot SecurityProvides best practices for implementing authentication, authorization, input validation, CSRF protection, secrets management, rate limiting, and dependency security in Spring Boot services.
Audited 226k -
affaan-m Skill Ecc Tools Cost AuditAudits ECC Tools GitHub App for cost issues like runaway PR creation, quota bypass, premium-model leakage, and duplicate jobs, using an evidence-first workflow.
Audited 226k -
affaan-m Skill Laravel VerificationRuns a multi-phase verification pipeline for Laravel projects including environment checks, linting, static analysis, tests with coverage, security scans, and deployment readiness.
226k -
affaan-m Skill Quarkus VerificationRuns a comprehensive verification pipeline for Quarkus projects including build, static analysis, tests with coverage, security scans, native compilation, and diff review before PRs or releases.
226k -
coreyhaines31 Bundle AsoAudit and optimize App Store and Google Play listings to lift installs and conversion.
36.3k -
coreyhaines31 Bundle Competitor ProfilingResearch and profile competitors from their URLs into actionable intelligence.
Audited 36.3k
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include vss-manage-alerts, design-system, competitor-profiling. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.