Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
majiayu000 Bundle Code Review 67Review code for bugs, security vulnerabilities, performance issues, and maintainability. Trigger with "review this code", "check this PR", "look at this diff", "is this code safe?", or when the user shares code and asks for feedback.
567 - majiayu000 Bundle Code Reviewer 16
Review code for best practices, bugs, security issues, and improvements. Use when reviewing code, checking PRs, or analyzing code quality.
567 - majiayu000 Bundle Review Comments 2
Audit comments for staleness — stale identifier references, outdated behavioral claims, and unverifiable flags
567 - majiayu000 Bundle Review Plan 6
Review implementation plans for parallelization, TDD, types, libraries, and security before execution
567 - majiayu000 Bundle Verify 20
Use when you need to PROVE a claim with evidence, run quality/security scans, or validate that work is actually complete. Evidence before claims -- no 'should work' allowed.
567 - majiayu000 Bundle Dependency Audit 5
Skill d'audit des dependances d'un projet. Verifie les packages outdated, les vulnerabilites connues, les licences incompatibles, et le poids des dependances. Supporte npm/pnpm (package.json) et Composer (composer.json). Ce skill devrait etre utilise periodiquement pour la maintenance ou avant une release.
567 - majiayu000 Bundle Incident Management 4
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
567 - majiayu000 Bundle Legal Advisor 2
Draft privacy policies, terms of service, disclaimers, and legal notices. Creates GDPR-compliant texts, cookie policies, and data processing agreements. Use PROACTIVELY for legal documentation, compliance texts, or regulatory requirements.
567 - majiayu000 Bundle Security Review 12
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
567 - majiayu000 Bundle Security Review 13
Security review checklist for web applications. Use when reviewing code for security vulnerabilities, auth issues, input validation, or any security-sensitive code.
567 - majiayu000 Bundle Security Reviewer 4
Audit memory safety and security in unsafe code blocks, buffer handling, and security-sensitive operations
567 - majiayu000 Bundle Senior Secops 2
SecOps for application security, vulnerability management, compliance, and secure development. Use when implementing security controls, conducting security audits, responding to vulnerabilities, or meeting compliance requirements.
567 - majiayu000 Bundle 124 Java Secure Coding 2
Use when you need to apply Java secure coding best practices — including validating untrusted inputs, defending against injection attacks with parameterized queries, minimizing attack surface via least privilege, applying strong cryptographic algorithms, handling exceptions securely without exposing sensitive data, managing secrets at runtime, avoiding unsafe deserialization, and encoding output to prevent XSS.
567 - majiayu000 Bundle Run Tests 7
Run the full test suite with linting, type checking, and code quality audit
567 - majiayu000 Bundle Worktree Workflow 3
Use to orchestrate the full development loop in a worktree - chains plan review, implementation, audit, and optional reach phases with state tracking
567 - majiayu000 Bundle Owasp Top 10 2
Understanding and mitigating the top 10 most critical security risks to web applications as defined by OWASP, including broken access control, cryptographic failures, injection, and insecure design.
567 - majiayu000 Bundle Express 3
Builds APIs with Express including routing, middleware, error handling, and security. Use when creating Node.js APIs, building REST services, or adding middleware-based server functionality.
567 - majiayu000 Bundle Firebase 4
Firebase Firestore, Auth, Storage, real-time listeners, security rules
567 - majiayu000 Bundle Vulnerable Secret 2
Guidance for extracting secrets from protected or obfuscated binaries through systematic static and dynamic analysis. This skill should be used when tasks involve reverse engineering executables, extracting hidden flags or keys, analyzing binary protections, or decoding obfuscated data within compiled programs.
567 - majiayu000 Bundle Datadog 3
Implement Datadog monitoring and APM for infrastructure and applications. Configure agents, create dashboards, set up alerts, and implement distributed tracing. Use when implementing enterprise monitoring, APM, or unified observability platforms.
567 - majiayu000 Bundle Review 51
Use when asked to review a pull request, examine code changes, find bugs, or audit a branch. Standard mode produces a severity-graded validated-findings report with concrete fixes; depth mode fans out parallel bug/security and quality reviewers and synthesizes a unified verdict. Not for an iterative review-and-fix loop — use audit-project.
567 - majiayu000 Bundle Write Plan 5
BEI-specific plan creation with questionnaire extraction, duplication audit, and /build workflow rules. Use when planning new features to ensure no duplication and proper workflow integration.
567 - majiayu000 Bundle Audit Cohesion 2
Audit codebase for internal cohesion - how well components fit together and maintain consistent patterns. Distinct from audit-arch (which checks rule violations); this checks integration fitness and convergence. Use when user says "audit cohesion", "check cohesion", "cohesion audit", or "alignment check".
567 - majiayu000 Bundle Audit 17
Comprehensive module audit — code quality, tests, security, edge cases, and recommendations
567 - majiayu000 Bundle Code Review 71
Review code changes for quality, security, and adherence to project standards
567 - majiayu000 Bundle Release 49
Use when preparing a release: aggregated GO/NO-GO gate checking coverage, security, tests, lint, and dependency vulnerabilities against manifest thresholds.
567 - majiayu000 Bundle Fapi 2
FAPI（Financial-grade API）機能の開発・修正を行う際に使用。FAPI 1.0 Baseline/Advanced, FAPI CIBA, mTLS, PAR, JARM実装時に役立つ。
567 - majiayu000 Bundle Mtls Configuration 2
Configure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing zero-trust networking, certificate management, or securing internal service communication.
567 - majiayu000 Bundle Remediation 2
Get a context-aware remediation plan for a vulnerability with fix verification steps
567 - majiayu000 Bundle Security Audit 7
코드베이스의 보안 취약점을 점검합니다. 시크릿 유출, 인증 처리, API 보안, 로그 노출 등을 검사합니다.
567 - majiayu000 Bundle Security Audit 8
Use when reviewing code security, auditing dependencies for CVEs, checking configuration or secret security, assessing authentication and authorization patterns, identifying OWASP vulnerabilities (injection, XSS, CSRF), or addressing security concerns about implementations.
567 - majiayu000 Bundle Spring Boot Testing 2
Standards for unit, integration, and slice testing in Spring Boot 3
567 - majiayu000 Bundle Moai Platform Firestore 2
Firebase Firestore specialist covering NoSQL patterns, real-time sync, offline caching, and Security Rules. Use when building mobile-first apps with offline support, implementing real-time listeners, or configuring Firestore security.
567 - majiayu000 Bundle 112 Java Maven Plugins 3
Use when you need to add or configure Maven plugins in your pom.xml — including quality tools (enforcer, surefire, failsafe, jacoco, pitest, spotbugs, pmd), security scanning (OWASP), code formatting (Spotless), version management, build information tracking, and benchmarking (JMH) — through a consultative, modular step-by-step approach that only adds what you actually need.
567 - majiayu000 Bundle Incident Response 8
Runs a security incident from detection to closure — triage, containment, investigation, communication, and the review afterward. Use this when a compromise is suspected or confirmed, when preparing an incident response plan or running an exercise, when deciding whether something is an incident, or when a breach may trigger notification obligations.
567 - majiayu000 Bundle IOS Code Review 2
Review iOS code for compliance with standards, NFRs, and security policy.
567
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include code-review, code-reviewer, review-comments. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.