Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
majiayu000 Bundle Audit Logging 3Audit logging is a critical security and compliance practice that records system events, user actions, and data access patterns. This skill provides comprehensive patterns for implementing audit loggi
567 - majiayu000 Bundle Macos Security 2
XProtect, MRT, TCC privacy permissions, quarantine, code signing validation, security audit
567 - majiayu000 Bundle Security Check 2
Assess token and address security via the GoPlus Security API.
567 - majiayu000 Bundle Security Review 20
Run a comprehensive security review on code
567 - majiayu000 Bundle Security Review 21
セキュリティレビューを実施。脆弱性チェック、セキュリティベストプラクティス確認、OWASP Top 10対策の際に使用。
567 - majiayu000 Bundle Zero Trust 2
Implement zero-trust network architecture. Configure identity-based access, micro-segmentation, and continuous verification. Use when implementing modern security architectures.
567 - majiayu000 Bundle Webapp Testing 14
Web application testing principles. E2E, Playwright, deep audit strategies.
567 - majiayu000 Bundle Moai Security Auth 2
Enterprise Skill for advanced development
567 - majiayu000 Bundle Security Audit 16
Comprehensive security audit of codebase using multiple security-auditor agents. Use before production deployments or after major features.
567 - majiayu000 Bundle Ruff 5
This skill should be used when users need to lint, format, or validate Python code using the Ruff command-line tool. Use this skill for tasks involving Python code quality checks, automatic code formatting, enforcing style rules (PEP 8), identifying bugs and security issues, or modernizing Python code. This skill should be invoked PROACTIVELY whenever Python code is written or modified to ensure code quality.
567 - majiayu000 Bundle Supabase 7
Build applications with Supabase for auth, real-time subscriptions, edge functions, and PostgreSQL with Row Level Security. Use when building full-stack apps with Supabase, implementing authentication, or adding real-time features.
567 - majiayu000 Bundle Git Workflow 34
Git workflow best practices for the career_ios_backend project. Automatically invoked when user mentions git operations, commits, pushes, or version control. Trigger keywords: "git", "commit", "push", "pull", "branch", "merge", "提交", "推送" Enforces pre-commit hooks, security checks, and documentation requirements.
567 - majiayu000 Bundle Opentelemetry 3
Instrument applications and infrastructure with OpenTelemetry for unified traces, metrics, and logs. Use when implementing distributed tracing, service-level troubleshooting, or vendor-neutral observability.
567 - majiayu000 Bundle Review Pr 18
Review a PR diff for quality, security, and correctness.
567 - majiayu000 Bundle Ln 830 Code Modernization Coordinator 2
Modernizes codebase via OSS replacement and bundle optimization. Use when acting on audit findings to reduce custom code.
567 - majiayu000 Bundle Code Review Excellence 2
Master code review best practices with constructive feedback patterns, quality assurance standards, review checklists, security considerations, and collaborative improvement techniques for high-quality software delivery.
567 - majiayu000 Bundle Code Reviewer 25
Reviews the codebase to find bugs, security issues, logic flaws, and violations of the Hardened Legal Drafting Specification. Provides exact fix suggestions and reusable refactor recommendations without modifying code.
567 - majiayu000 Bundle Reviewing Code 5
Systematically evaluate code changes for security, correctness, performance, and spec alignment. Use when reviewing PRs, assessing code quality, or verifying implementation against requirements.
567 - majiayu000 Bundle Better Auth Best Practices 2
Skill for integrating Better Auth - the comprehensive TypeScript authentication framework.
567 - majiayu000 Bundle Compliance Check 4
Check security compliance against standards and regulations
567 - majiayu000 Bundle Dependency Audit 6
Provides dependency management and supply chain security practices for auditing vulnerabilities, checking licenses, assessing dependency health, and managing upgrades safely. Use when auditing packages, reviewing security, managing dependencies, or when user mentions 'audit', 'vulnerability', 'dependency', 'supply chain', 'npm audit', 'license', 'bundle size'.
567 - majiayu000 Bundle Command Authoring 2
Create single-file commands with dynamic content injection (@path and !command). Use when building commands that need filesystem access, git state, runtime context, or argument handling with $1 placeholders. Includes @file injection, !shell execution, <injected_content> wrappers, and single-file structure patterns. Not for skills (use skill-development) or audit workflows.
567 - majiayu000 Bundle Penetration Testing 2
Simulated cyberattacks on systems to identify vulnerabilities before malicious attackers do, including ethical hacking, vulnerability assessment, and security testing with explicit permission.
567 - majiayu000 Bundle Security Auditor 5
Comprehensive Supabase security auditor for RLS policies, table privileges (GRANTs), and access control validation. Use when: - Auditing database security (RLS + GRANTs) - Generating access matrix (who can SELECT/INSERT/UPDATE/DELETE which tables) - Finding security gaps (missing RLS, overly permissive GRANTs) - Validating PostgREST access patterns - Creating security documentation for Docs/context/ - Creating RLS policies for new or existing tables - Validating user data protection - Checking admin access patterns - Identifying security vulnerabilities Triggers: "security audit", "access matrix", "who can update", "missing RLS", "check grants", "security gaps", "table permissions", "RLS policy", "row level security", "validate security", "user data protection", "admin access"
567 - majiayu000 Bundle Coding Mastery 2
Advanced software engineering — systems programming, exploit development tooling, automation scripting, network programming, cryptography implementation
567 - majiayu000 Bundle Unknown 47
- Planning exploit mitigation bypass strategies
567 - majiayu000 Bundle Load Balancing 3
Configure load balancers and traffic distribution. Implement health checks and SSL termination. Use when distributing traffic across servers.
567 - majiayu000 Bundle Observability 11
Add or change observability instrumentation (structured logging, OpenTelemetry traces/spans, RED metrics, dashboards, alerts). Use when adding logs/metrics/traces to code, defining telemetry field contracts, or building monitoring runbooks. NOT for diagnosing existing issues with existing telemetry (use debug); NOT for security-specific logging concerns (use security).
567 - majiayu000 Bundle Audit Process 2
Run a single-session process and automation audit on the codebase
567 - majiayu000 Bundle Gsd Audit Milestone 3
Audit milestone completion against original intent before archiving
567 - majiayu000 Bundle Fastapi JWT Auth 2
Provides a complete solution for JWT-based authentication in FastAPI applications. Use this skill when a user wants to add secure token-based authentication to their FastAPI project. This skill handles JWT creation, decoding, signature and expiration verification, password hashing, and custom claims. It includes patterns for login endpoints, protected routes using dependencies, role-based access control decorators, token refresh mechanisms, and middleware-based validation.
567 - majiayu000 Bundle Security Auditor 6
MASTER SECURITY: OWASP Top 10, SAST/DAST, PenTest, Auth/JWT Audit, Data Encryption, Incident Response. Use for Code Security, Armor config, and Audits.
567 - majiayu000 Bundle Security Baseline 3
Establish a security baseline for a website or web app. Use this skill when configuring HTTPS and TLS, setting security headers, planning secrets management, evaluating CSP policies, doing a basic security audit, or hardening a site before launch. Triggers on security headers, HTTPS, TLS, CSP, content security policy, HSTS, secrets management, vulnerability scan, security audit, harden, OWASP, security baseline. Also triggers when a security review is required for compliance or before going live.
567 - majiayu000 Bundle Supply Chain Security 4
Typosquatting detection, install script analysis, dependency confusion prevention, and phantom dependency detection for npm/pip.
567 - majiayu000 Bundle Supabase 8
Build applications with Supabase for auth, real-time subscriptions, edge functions, and PostgreSQL with Row Level Security. Use when building full-stack apps with Supabase, implementing authentication, or adding real-time features.
567 - majiayu000 Bundle Unknown 49
- Planning privilege escalation paths through security boundaries
567
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include security-auditor, macos-security, security-check. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.