Security Agent Skills
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Security
1,976 skills
itsmostafa api-gateway
Manage AWS API Gateway for creating, publishing, and securing REST, HTTP, and WebSocket APIs using CLI commands, SAM templates, and best practices.
1.1k · bundle
itsmostafa secrets-manager
Store, retrieve, and automatically rotate credentials, API keys, and other secrets using AWS Secrets Manager.
1.1k · bundle
nvidia vss-manage-alerts
Operate the VSS alert pipeline for real-time monitoring, Alert-Bridge subscriptions, Slack notifications, incident queries, and camera onboarding.
2.2k · bundle
nvidia jetson-memory-audit
Measure Jetson DRAM and NvMap usage, capture before/after baselines, and verify memory reclamation with live audit data.
2.2k · bundle
nvidia nemotron-policy-generator
Generates custom safety policies for NVIDIA Nemotron content-safety guardrails, producing a Markdown policy, JSON taxonomy, and inference prompts from rough user input.
2.2k · bundle
phuryn privacy-policy
Draft a detailed privacy policy covering data types, jurisdiction, GDPR and compliance considerations, and clauses needing legal review.
22.6k
phuryn shipping-artifacts
Documents AI-built apps with architecture, permissions, secrets, and test coverage maps to make them reviewable before shipping.
22.6k
phuryn intended-vs-implemented
Finds gaps between documented intent and actual implementation in codebases, catching bugs that generic scanners miss because they lack a model of intent.
22.6k
phuryn porters-five-forces
Evaluate industry dynamics and market attractiveness by analyzing competitive rivalry, supplier power, buyer power, threat of substitutes, and threat of new entrants.
22.6k
browserbase safe-browser
Build a local browser agent that enforces a domain allowlist via CDP Fetch interception, using a safe_browser tool that owns the Playwright session and blocks off-domain requests.
3.6k · bundle
affaan-m repo-scan
Scans source code repositories across C++, Android, iOS, and Web to classify files, detect embedded third-party libraries, and produce actionable four-level verdicts per module with interactive HTML reports.
226k
affaan-m safety-guard
Prevents destructive operations on production systems and restricts file edits to a specific directory when running agents autonomously.
226k
affaan-m design-system
Generate or audit design systems, check visual consistency, and review PRs that touch styling.
226k
affaan-m hookify-rules
Create and manage Hookify rules that define patterns to watch for and messages to display when those patterns match.
226k
affaan-m perl-security
Provides comprehensive security patterns for Perl applications covering taint mode, input validation, safe file operations, SQL injection prevention, and web security.
226k
affaan-m security-scan
Audit Claude Code configuration files for security vulnerabilities, misconfigurations, and injection risks using AgentShield.
226k
affaan-m django-security
Secure Django applications against common vulnerabilities with production-ready settings, authentication, authorization, and input validation.
226k
affaan-m security-review
Provides a comprehensive security checklist and code patterns for authentication, input validation, secrets management, SQL injection prevention, XSS, CSRF, rate limiting, and sensitive data exposure.
226k · bundle
affaan-m click-path-audit
Trace every user-facing button through its full state change sequence to find bugs where functions individually work but cancel each other out, produce wrong final state, or leave the UI inconsistent.
226k
affaan-m hipaa-compliance
Provides HIPAA-specific decision gates and guardrails for healthcare software, directing users to implementation and review skills for PHI handling, audit logging, and compliance.
226k
affaan-m laravel-security
Secure Laravel applications with best practices for authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and deployment configurations.
226k
affaan-m production-audit
Audits local code for production readiness, identifying risks in security, data integrity, payments, operations, and UX before shipping.
226k
affaan-m quarkus-security
Secure Quarkus applications with authentication, authorization, input validation, and secrets management.
226k
affaan-m defi-amm-security
Provides a security checklist and hardened code examples for Solidity AMM contracts, covering reentrancy, donation attacks, oracle manipulation, slippage, and admin controls.
226k
affaan-m postgres-patterns
Quick reference for PostgreSQL best practices covering query optimization, schema design, indexing, Row Level Security, and connection pooling.
226k
affaan-m cisco-ios-patterns
Review Cisco IOS and IOS-XE configurations, choose read-only show commands, check ACL wildcard masks and interface direction, and build safe change-window verification checklists.
226k
affaan-m homelab-pihole-dns
Install and configure Pi-hole as a network-wide DNS ad blocker on a Raspberry Pi or Linux host, manage blocklists, set up DNS-over-HTTPS, integrate DHCP, create local DNS records, and troubleshoot DNS issues.
226k
affaan-m django-verification
Runs a comprehensive verification pipeline for Django projects including migrations, linting, tests with coverage, security scans, and deployment readiness checks before PRs or releases.
226k
affaan-m opensource-pipeline
Fork, sanitize, and package private projects for safe public release through a three-stage pipeline.
226k
affaan-m springboot-security
Provides best practices for implementing authentication, authorization, input validation, CSRF protection, secrets management, rate limiting, and dependency security in Spring Boot services.
226k
affaan-m ecc-tools-cost-audit
Audits ECC Tools GitHub App for cost issues like runaway PR creation, quota bypass, premium-model leakage, and duplicate jobs, using an evidence-first workflow.
226k
affaan-m laravel-verification
Runs a multi-phase verification pipeline for Laravel projects including environment checks, linting, static analysis, tests with coverage, security scans, and deployment readiness.
226k
affaan-m quarkus-verification
Runs a comprehensive verification pipeline for Quarkus projects including build, static analysis, tests with coverage, security scans, native compilation, and diff review before PRs or releases.
226k
coreyhaines31 aso
Audit and optimize App Store and Google Play listings to lift installs and conversion.
36.3k · bundle
coreyhaines31 competitor-profiling
Research and profile competitors from their URLs into actionable intelligence.
36.3k · bundle
antigravity 007
Performs security audits, hardening, threat modeling (STRIDE/PASTA), red/blue team exercises, OWASP checks, code review, incident response, and infrastructure security for any project.
42.4k · bundle
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include vss-manage-alerts, aso, jetson-memory-audit. Rankings shift as installs change; sort this page by "Most downloaded" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds add <owner>/<name>, or copy the file into your agent's skills directory.