Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
majiayu000 Bundle Payment Security Clerk Billing StripeImplement secure payments using Clerk Billing and Stripe without ever touching card data. Use this skill when you need to set up subscription payments, handle webhooks, implement payment gating, understand PCI-DSS compliance, or integrate Stripe Checkout. Triggers include "payment", "Stripe", "Clerk Billing", "subscription", "PCI-DSS", "credit card", "payment security", "checkout", "webhook", "billing".
567 - majiayu000 Bundle Certifications Training
Professional certifications, CTF competitions, and training resources for AI security practitioners
567 - majiayu000 Bundle Gsd Code Review
Review source files changed during a phase for bugs, security issues, and code quality problems
567 - majiayu000 Bundle Arcanea Code Review
Conduct thorough, constructive code reviews that improve code quality and team knowledge. Focuses on what matters - architecture, logic, security, maintainability - while avoiding bikeshedding.
567 - majiayu000 Bundle 304 Frameworks Spring Boot Security
Use when you need to design, review, or improve security in Spring Boot applications — including SecurityFilterChain, OAuth2/JWT resource server patterns, form login basics, method security (@PreAuthorize), CSRF and CORS for APIs, session fixation, security headers, exception handling, password encoding, and sensitive-data-safe logging. This should trigger for requests such as Add Spring Boot security support; Review Spring Boot security configuration; Improve API authorization in Spring Boot; Add JWT resource server security in Spring Boot; Harden Spring Boot security headers and CSRF settings. Part of cursor-rules-java project
567 - majiayu000 Bundle Auditing Wireless Encryption Config
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Better Auth Security Best Practices
This skill provides guidance for implementing security features that span across Better Auth, including rate limiting, CSRF protection, session security, trusted origins, secret management, OAuth security, IP tracking, and security auditing. These topics are not covered in individual plugin skills.
567 - majiayu000 Bundle Binary Exploitation
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Feedoracle Compliance
MiCA compliance evidence and stablecoin risk scoring. Use when the user asks about stablecoin compliance, MiCA status, peg stability, or needs verifiable evidence for audit workflows.
567 - majiayu000 Bundle Detecting Container Runtime Threats
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Detecting Endpoint Lateral Movement
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Heartwood Auth
Integrate Heartwood (GroveAuth) authentication into Grove applications. Use when adding sign-in, protecting routes, or validating sessions in any Grove property.
567 - majiayu000 Bundle Implementing Attack Path Validation
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Owasp Security Testing
Security testing skill based on OWASP Top 10, covering ZAP scanning, security headers, input validation, authentication, and authorization testing.
567 - majiayu000 Bundle Performing Email Migration Security
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Performing Rfid Security Assessment
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Test Specialist
This skill should be used when writing test cases, fixing bugs, analyzing code for potential issues, or improving test coverage for JavaScript/TypeScript applications. Use this for unit tests, integration tests, end-to-end tests, debugging runtime errors, logic bugs, performance issues, security vulnerabilities, and systematic code analysis.
567 - majiayu000 Bundle 000 Jeremy Content Consistency Validator
Validate messaging consistency across website, GitHub repos, and local documentation generating read-only discrepancy reports. Use when checking content alignment or finding mixed messaging. Trigger with phrases like "check consistency", "validate documentation", or "audit messaging".
567 - majiayu000 Bundle Control Mapper
Map security controls between different compliance frameworks including NIST 800-53, ISO 27001, CIS Controls, PCI-DSS, HIPAA, SOC 2, and CMMC. Use this skill for gap analysis, multi-framework compliance, and control rationalization.
567 - majiayu000 Bundle Lockknife Android Forensics
Hyper-competent Android security research and forensics tool. Use for lock screen credential recovery, data extraction, and deep system analysis. Requires ADB and a connected Android device.
567 - majiayu000 Bundle 807 Regulations Eu Digital Services Act
Use when reviewing, designing, or modifying Java enterprise systems that may support intermediary services, hosting services, online platforms, marketplaces, content moderation, recommender systems, advertising delivery, complaint workflows, transparency reporting, or systemic-risk evidence under the EU Digital Services Act. This should trigger for requests such as Review a Java online platform for DSA controls; Design notice-and-action or appeal workflows; Add recommender, ad transparency, moderation, audit, researcher access, or privacy-safe observability evidence; Assess online-platform transparency controls before production release. Part of cursor-rules-java project
567 - majiayu000 Bundle Vibe Gap Analysis
Assesses production readiness or audits a codebase against its specs. Supports quick static mode, deep 17-dimension audit, or single-dimension focus.
567 - majiayu000 Bundle Dpa En Template Controller Processor
English language Data Processing Agreement (DPA) template under Article 28 GDPR between a controller and a processor. Use when the contract language is English (cross-border deals UK Ireland US providers) and the parties require a stand-alone DPA. Output is a complete English DPA template covering all eight mandatory items of Article 28 (3) GDPR.
567 - majiayu000 Bundle Gdpr Data Handling
Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when building systems that process EU personal data, implementing privacy controls, or conducting GDPR compliance reviews.
567 - majiayu000 Bundle Ln 74 Architecture Decision Recorder
Records one architecture decision with context, alternatives, tradeoffs, and consequences. Use for a significant choice; not for broad design, audit, or implementation.
567 - majiayu000 Bundle Performing Exploit Chain Development
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Dependency Manager
Expert dependency manager specializing in package management, security auditing, and version conflict resolution across multiple ecosystems. Masters dependency optimization, supply chain security, and automated updates with focus on maintaining stable, secure, and efficient dependency trees.
567 - majiayu000 Bundle Validating Authentication Implementations
Validate authentication mechanisms for security weaknesses and compliance. Use when reviewing login systems or auth flows. Trigger with 'validate authentication', 'check auth security', or 'review login'.
567 - majiayu000 Bundle Ln 71 System Design Baseline Builder
Creates a project baseline of architecture drivers and constraints. Use before design or planning; not for target design, plan review, implementation, or architecture audit.
567 - majiayu000 Bundle Authentication Authorization Security
認証・認可の設計とセキュリティ検証（OAuth 2.0、JWT、セッション管理、アクセス制御）の実務指針を提供するスキル。 脅威モデリング、トークン管理、権限モデルの選択を整理し、安全な認証基盤の設計判断を支援します。 Anchors: • Web Application Security / 適用: 脅威モデリング / 目的: 認証・認可の脅威整理 • OAuth 2.0 Simplified / 適用: フロー選定 / 目的: OAuth実装の安全性確保 • OWASP ASVS / 適用: セキュリティ検証 / 目的: 要件基準の確認 Trigger: Use when designing or reviewing authentication/authorization flows, selecting OAuth/JWT/session strategies, or validating access control and token security.
567 - majiayu000 Bundle Configure JWT
Set up JWT Bearer authentication with token service and authorization policies
567 - majiayu000 Bundle File Upload Processing Guardian
Offensive file upload and processing security and reliability enforcement. Triggered when implementing file uploads, reviewing Multer configuration, debugging upload failures, validating file types, or optimizing storage. Scans for security vulnerabilities, file size exploits, MIME type spoofing, path traversal, and storage efficiency issues. Produces auto-scan reports with security hardening recommendations.
567 - majiayu000 Bundle Fix Vulnerabilities
Fix security vulnerabilities and Dependabot alerts in project dependencies. Use when the user asks to address security issues, update vulnerable packages, fix CVEs, or runs /fix-vulnerabilities.
567 - majiayu000 Bundle Implementing Soc Automation Workflows
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Security Audit And Vulnerability Scanning
Comprehensive security audit workflow including dependency scanning, unsafe code detection, and secret management. Use when scanning for vulnerabilities or before production deployment.
567 - majiayu000 Bundle Senior Security
STRIDE threat modeling, DREAD risk scoring, secret detection, and secure architecture design. Use when conducting threat models, reviewing code for vulnerabilities, designing defense-in-depth, or scanning for hardcoded secrets.
567
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include payment-security-clerk-billing-stripe, gsd:code-review, arcanea-code-review. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.