Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
majiayu000 Bundle Detecting Mass Assignment<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Drizzle Schema Generation
Generates Drizzle ORM schema files for users, sessions, tokens, OAuth accounts, and audit logs. Syncs schema to Neon Postgres.
567 - majiayu000 Bundle Frappe Errors Permissions
Use when debugging or handling permission errors in Frappe/ERPNext. Prevents broken document access from throwing in permission hooks. Covers PermissionError (403), has_permission hook failures, User Permission restricting too much or too little, perm_level blocking field access, System Manager bypass not working, Guest access denied, sharing permissions not applying, permission_query_conditions breaking get_list, owner-based permissions confusion, Apply User Permission checkbox behavior, and the permission debug workflow using frappe.permissions.get_doc_permissions. Keywords: PermissionError, has_permission, permission_query_conditions, User Permission, perm_level, sharing, guest access, owner permission.
567 - majiayu000 Bundle Implementing Code Signing
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Ln 32 Dependency Upgrader
Upgrades dependencies across package managers with breaking-change research and rollback-safe verification. Use for dependency maintenance; not general code modernization.
567 - majiayu000 Bundle Pentest Data Exfil Tester
Test egress and DLP controls using synthetic canary data across authorized exfiltration channels.
567 - majiayu000 Bundle Pentest Network Exploiter
Run controlled exploitation against confirmed vulnerabilities while enforcing scope and authorization gates.
567 - majiayu000 Bundle Pentest Wireless Attacker
Evaluate authorized wireless networks for handshake, PMKID, rogue AP, and enterprise auth weaknesses.
567 - majiayu000 Bundle Ipsw
Apple firmware and binary reverse engineering with the ipsw CLI tool. Use when analyzing iOS/macOS binaries, disassembling functions in dyld_shared_cache, dumping Objective-C headers from private frameworks, downloading IPSWs or kernelcaches, extracting entitlements, analyzing Mach-O files, or researching Apple security. Triggers on requests involving Apple RE, iOS internals, kernel analysis, KEXT extraction, or vulnerability research on Apple platforms.
567 - majiayu000 Bundle Threat Mitigation Mapping
Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness.
567 - majiayu000 Bundle Uk Legal Canned Responses
Generate templated responses for common legal inquiries under English law (England & Wales). Covers DSARs (UK GDPR), disclosure/litigation holds (CPR), privacy inquiries, vendor questions, NDA requests, witness summons/legal process, and insurance notifications. Identifies when situations require individualised solicitor attention.
567 - majiayu000 Bundle Workspace Isolation Audit
Use when asked to audit or fix Supabase queries to ensure every query filters by workspace_id and workspace access is validated.
567 - majiayu000 Bundle 302 Frameworks Spring Boot REST
Use when you need to design, review, or improve REST APIs with Spring Boot — including HTTP methods, resource URIs, status codes, DTOs, versioning, deprecation and sunset headers, content negotiation (JSON and vendor media types), ISO-8601 instants in DTOs, pagination/sorting/filtering, Bean Validation at the boundary, idempotency, ETag concurrency, HTTP caching, error handling, security, contract-first OpenAPI (OpenAPI Generator), controller advice, and problem details for errors. This should trigger for requests such as Review Java code for Spring Boot REST API; Apply best practices for Spring Boot REST API in Java code. Part of cursor-rules-java project
567 - majiayu000 Bundle Memory Archivist
Cross-reference and synthesise daily memory files into patterns, insights, and carry-forward items. Use when asked to review memory, generate weekly synthesis, find forgotten tasks, detect decision patterns, or audit what was carried forward vs dropped. Also triggers on "what did I decide about X", "what's still pending", "weekly review", "memory synthesis", "what patterns do you see".
567 - majiayu000 Bundle Audit Engineering Productivity
Run a single-session engineering productivity audit on the codebase
567 - majiayu000 Bundle Encrypting And Decrypting Data
Validate encryption implementations and cryptographic practices. Use when reviewing data security measures. Trigger with 'check encryption', 'validate crypto', or 'review security keys'.
567 - majiayu000 Bundle Ln 623 Code Principles Auditor
Code principles audit worker (L3). Checks DRY (7 types), KISS/YAGNI, TODOs, error handling, DI patterns. Returns findings with severity, location, effort, recommendations.
567 - majiayu000 Bundle Detecting Shadow Data Stores
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Extracting Iocs From Samples
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Fnox Security Best Practices
Use when implementing secure secrets management with Fnox. Covers encryption, key management, access control, and security hardening.
567 - majiayu000 Bundle Implementing P2p C2 Networks
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Localsetup Safety And Backup
Security and safety (conservative), backup management, temporary file management, firewall management. Use for destructive ops, system config changes, backups, temp files, or when adding services.
567 - majiayu000 Bundle Performing Fuzzing Campaigns
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Performing Password Spraying
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Reverse Engineering Firmware
Reverse Engineering Firmware
567 - majiayu000 Bundle Symfony API Platform Security
Secure API Platform resources with security expressions, voters, and operation-level access control
567 - majiayu000 Bundle Testing Authentication Flaws
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Testing Business Logic Flaws
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Security Testing Verification
Test security features and verify implementation before deployment. Use this skill when you need to test CSRF protection, rate limiting, input validation, verify security headers, run security audits, or check the pre-deployment security checklist. Triggers include "test security", "security testing", "verify security", "security checklist", "pre-deployment", "test CSRF", "test rate limit", "security verification".
567 - majiayu000 Bundle Vitaecontext Wiki Maintenance
Maintainer-only skill for refreshing VitaeContext wiki knowledge from official sources. Use only from a local repository clone when a maintainer asks to refresh one module, audit all module wiki entries, or audit module source lists.
567 - majiayu000 Bundle Differential Review
Performs security-focused differential review of code changes (PRs, commits, diffs). Adapts analysis depth to codebase size, uses git history for context, calculates blast radius, checks test coverage, and generates comprehensive markdown reports. Automatically detects and prevents security regressions.
567 - majiayu000 Bundle Spring Boot Openapi Documentation
Generate comprehensive REST API documentation using SpringDoc OpenAPI 3.0 and Swagger UI in Spring Boot 3.x applications. Use when setting up API documentation, configuring Swagger UI, adding OpenAPI annotations, implementing security documentation, or enhancing REST endpoints with examples and schemas.
567 - majiayu000 Bundle Code Review Best Practices
Systematic approach to reviewing code for quality, security, and maintainability
567 - majiayu000 Bundle Sf Soql
Advanced SOQL skill with natural language to query generation, query optimization, relationship traversal, aggregate functions, and performance analysis. Build efficient queries that respect governor limits and security requirements.
567 - majiayu000 Bundle Puzzle Design
Extract puzzle and secret entities from narrative text. Use when analyzing puzzles, riddles, traps, hidden paths, easter eggs, mysteries, and enigmas.
567 - majiayu000 Bundle Performance And Web Vitals
Audit UI performance with Lighthouse and fix Core Web Vitals — LCP, CLS, INP. Fast UI is good UX. Use when optimising page load, fixing layout shift, reducing input delay, improving Lighthouse scores, or reviewing images, fonts, and render-blocking resources.
567
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include memory-archivist, detecting-mass-assignment, Drizzle Schema Generation. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.