Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
majiayu000 Bundle Add Audit LoggingImplement tamper-evident audit logging with hash chain verification for admin actions (project)
567 - majiayu000 Bundle Add Auth Endpoint
Add authentication endpoints (register, login, refresh, logout) to NovaTune
567 - majiayu000 Bundle Add Rate Limiting
Configure rate limiting policies for API endpoints with sliding window limits
567 - majiayu000 Bundle Arch Security Review
[Architecture] Use when reviewing code for security vulnerabilities, implementing authorization, or ensuring data protection.
567 - majiayu000 Bundle Compliance Auditor
Automates Principle No. 9 (Decision Logging) and Principle No. 5 (Regulatory Readiness). The 'Chronicler' ensuring every choice is backed by a 'Why' and mapped to a requirement for ISO/GxP auditability.
567 - majiayu000 Bundle Hunt Csrf
Hunting skill for csrf vulnerabilities. Built from 15 public bug bounty reports including modern variants — SameSite=Lax sibling-subdomain bypass (Argo CD CVE-2024-22424), GraphQL mutations-via-GET (GitLab $3,370), framework-wide CSRF middleware disabled (Stripe Dashboard $5,000), path-traversal CSRF-token bypass (GitHub Enterprise CVE-2022-23732 $10k), Origin-omission bypass (TikTok $2,500), OAuth-state null-byte (Streamlabs), WebSocket CSRF / CSWSH (Coda), default-SameSite email-change → ATO (YoYo Games $400), social-account-link CSRF (HackerOne), JSON-CSRF via text/plain on email-change (TikTok $500). Use when hunting modern CSRF — heavy emphasis on chain-to-ATO patterns.
567 - majiayu000 Bundle Hunt Idor
Hunting skill for idor vulnerabilities. Built from 26 public bug bounty reports. Use when hunting idor on any target.
567 - majiayu000 Bundle Hunt Misc
Hunting skill for misc vulnerabilities. Built from 225 public bug bounty reports. Use when hunting misc on any target.
567 - majiayu000 Bundle Hunt Sqli
Hunting skill for sqli vulnerabilities. Built from 12 public bug bounty reports including modern NoSQL injection (Rocket.Chat CVE-2021-22911 MongoDB $regex, Mongoose ORM CVE-2024-53900 $where bypass), modern ORM raw-fragment SQLi (Django CVE-2024-42005, Sequelize GHSA-wrh9-cjv3-2hpw), second-order SOQL injection (HackerOne Salesforce), time-based blind SQLi in GraphQL resolvers, and SQLi on OIDC-proxy backends. Use when hunting SQLi / NoSQLi on any target.
567 - majiayu000 Bundle Openwebf Security
DEPRECATED umbrella Skill (backward compatibility). Use only for cross-cutting security reviews spanning remote content + XSS/sanitization + store compliance. Prefer focused openwebf-security-* Skills.
567 - majiayu000 Bundle Security Guardian
Expert en sécurité applicative pour détecter les vulnérabilités, auditer le code, et guider les bonnes pratiques de sécurité. OWASP Top 10, authentification, autorisation, cryptographie, gestion de secrets. Utiliser pour audits sécurité, reviews de code sensible, conception de features sécurisées, ou résolution de failles.
567 - majiayu000 Bundle Nodejs Best Practices
Node.js development principles and decision-making. Framework selection, async patterns, security, and architecture. Teaches thinking, not copying.
567 - majiayu000 Bundle Security Audit Owasp
A specialised skill for detecting security vulnerabilities in Python/JS codebases.
567 - majiayu000 Bundle Code Hardcode Audit
Detects hardcoded values, magic numbers, duplicate constants, and leaked secrets using Ruff, Semgrep, jscpd, and gitleaks. Use when auditing for hardcodes, magic numbers, PLR2004, constant detection, secret scanning, or before release.
567 - majiayu000 Bundle Hunt OAUTH
Hunting skill for oauth vulnerabilities. Built from 19 public bug bounty reports. Use when hunting oauth on any target.
567 - majiayu000 Bundle IOS Security
Secure iOS apps with Keychain Services, CryptoKit encryption, biometric authentication (Face ID, Touch ID), Secure Enclave key storage, LAContext, App Transport Security (ATS), certificate pinning, data protection classes, and secure coding patterns. Use when implementing app security features, auditing privacy manifests, configuring App Transport Security, securing keychain access, adding biometric authentication, or encrypting sensitive data with CryptoKit.
567 - majiayu000 Bundle Stride Analysis Patterns
Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.
567 - majiayu000 Bundle Authentication Authorization Guardian
Offensive authentication and authorization security enforcement. Triggered when implementing login/signup, reviewing JWT token handling, debugging session issues, implementing RBAC, or preparing auth for production. Scans for token exposure, weak password policies, session hijacking vulnerabilities, CSRF risks, and privilege escalation paths. Produces auto-scan reports with security hardening recommendations.
567 - majiayu000 Bundle Grove Auth Integration
Integrate Heartwood authentication into a new or existing Grove property. Covers client registration, PKCE OAuth flow, SvelteKit route setup, session validation, and wrangler configuration. Use when adding auth to any Grove site.
567 - majiayu000 Bundle Implementing Zero Trust Endpoint Compliance
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Security Hardening
Review code for application-level security hardening issues beyond framework checklists. Focuses on abuse prevention, API protection, business logic exploitation, rate limiting, input validation, and early request rejection. Use when auditing code for security, reviewing endpoints for abuse potential, or checking application resilience to real-world attacks.
567 - majiayu000 Bundle Resolve Conflict
Resolve disagreements between Cursor and Gemini feedback using weighted expertise.
567 - majiayu000 Bundle Ponytail Audit
Audit the whole repo for over-engineering. A ranked list of what to delete, simplify, or replace with stdlib or native features.
567 - majiayu000 Bundle Red Team Tactics
Red team tactics principles based on MITRE ATT&CK. Attack phases, detection evasion, reporting.
567 - majiayu000 Bundle Security Best Practices Review
Perform language and framework specific security best-practice reviews, vulnerability detection, and secure-by-default coding guidance for Python, JavaScript/TypeScript, and Go applications.
567 - majiayu000 Bundle Fristenbuch Fuehren
Zentrales Fristenbuch fuer die Kanzlei mit Haupt- und Vorfristen ueber alle Rechtsgebiete. Berechnet Fristbeginn nach den jeweiligen Verfahrensordnungen (ZPO StPO SGG FGO VwGO FamFG AO BGB) Drei-Tages-Fiktionen bei Postzustellung. Trennt Notfristen (BRAO-Haftungsrisiko) von Beobachtungsfristen. Setzt Vorfristen typisch fuenf Werktage vor Hauptfrist; bei BRAO-relevanten Notfristen sieben Werktage. Eskalation an Sekretariat und zustaendigen Anwalt bei Vorfristerreichung. Audit-Trail jeder Fristaenderung.
567 - majiayu000 Bundle Ki Anbieter Pruefung
Prüft KI-Anbieterverträge gegen die unternehmenseigenen Governance- Positionen; kennzeichnet Training auf Daten, Haftung, Modelländerungen und KI-Richtlinien-Konsistenz. Unterscheidet Anbieter/Betreiber-Rolle nach Art. 3 KI-VO; prüft Vertragspflichten nach Art. 25 KI-VO. Lädt, wenn der Nutzer „KI-Vertrag prüfen", „Anbietervertrag KI", „AI Act Art. 25 Vertragspflichten" oder „KI-AGB prüfen" sagt.
567 - majiayu000 Bundle Dotnet Audit Trail
Generates audit trail infrastructure for entities. Implements IAuditable interface, EF Core SaveChanges interceptor, and automatic population of CreatedAt, UpdatedAt, CreatedBy, and UpdatedBy fields.
567 - majiayu000 Bundle Malware Analyst
You are an Elite Cybersecurity Analyst specializing in identifying malicious intent in URLs, scripts, and software. Your mission is to ensure no harmful content enters the Antigravity ecosystem.
567 - majiayu000 Bundle Sast Configuration
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.
567 - majiayu000 Bundle PDF Processing Gw AI Security Ats Cv Scorer
description: Implementiere oder aendere PDF-Upload-Validierung und Textextraktion; verwenden bei Anpassungen an Upload-Regeln, Parsing oder Fehlerbehandlung.
567 - majiayu000 Bundle Aqua Voice Malleability
Adversarial malleability analysis of Aqua Voice Electron app with IPC injection, WebSocket interception, and braided monoidal skill interleaving
567 - majiayu000 Bundle Auth Skill
Handle secure user authentication including signup, signin, password hashing, JWT tokens, and Better Auth integration. Use for authentication and authorization systems.
567 - majiayu000 Bundle Security Best Practices
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
567 - majiayu000 Bundle Methodology
Manage and guide developers through active development methodology workflows. Use when: TDD, BDD, SDD, ATDD, or custom methodology workflows are needed. Keywords: methodology, workflow, TDD, BDD, SDD, ATDD, phase, checkpoint, development process.
567 - majiayu000 Bundle Laravel Coder
Generates modern maintainable Laravel applications code with a focus on performance and security by default and for best code style practices.
567
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include add-audit-logging, add-auth-endpoint, add-rate-limiting. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.