Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
georgeqle Skill Reconcile Research 5Cross-document consistency audit across research outputs — find contradictions, stale assumptions, and gaps
1 -
georgeqle Skill Reconcile Research 6Cross-document consistency audit across research outputs — find contradictions, stale assumptions, and gaps
1 -
georgeqle Skill Youtube Channel Audit 3Run an evidence-first YouTube channel audit that captures raw metadata/transcripts, performance fields, portfolio roles, and repeated content patterns
1 -
georgeqle Skill Youtube Channel Audit 6Run an evidence-first YouTube channel audit that captures raw metadata/transcripts, performance fields, portfolio roles, and repeated content patterns
1 -
georgeqle Skill Youtube Description Optimizer 2Audit, draft, or template YouTube descriptions and metadata for promise-match, search clarity, CTA hierarchy, links, chapters, hashtags, and upload readiness
1 -
georgeqle Skill Youtube Title Thumbnail Audit 2Audit YouTube titles and thumbnails against channel performance and peer packaging patterns
1 -
georgeqle Skill Youtube Video Prelaunch Audit 2Audit unlisted or pre-release YouTube videos before public launch for edit readiness, polish, packaging, title, description, chapters, publish settings, launch timing, and social cross-sharing strategy
1 -
georgeqle Skill Youtube Video Prelaunch Audit 3Audit unlisted or pre-release YouTube videos before public launch for edit readiness, polish, packaging, title, description, chapters, publish settings, launch timing, and social cross-sharing strategy
1 -
georgeqle Skill Youtube Video Prelaunch Audit 4Audit unlisted or pre-release YouTube videos before public launch for edit readiness, polish, packaging, title, description, chapters, publish settings, launch timing, and social cross-sharing strategy
1 -
georgeqle Skill Youtube Video Prelaunch Audit 5Audit unlisted or pre-release YouTube videos before public launch for edit readiness, polish, packaging, title, description, chapters, publish settings, launch timing, and social cross-sharing strategy
1 -
georgeqle Skill Youtube Video Prelaunch Audit 6Audit unlisted or pre-release YouTube videos before public launch for edit readiness, polish, YouTube Test and Compare title/thumbnail launch sets, description, chapters, publish settings, launch timing, URL record capture, and social cross-sharing strategy
1 -
georgeqle Skill Youtube Description Optimizer 3Audit, draft, or template YouTube descriptions and metadata for promise-match, search clarity, CTA hierarchy, links, chapters, hashtags, and upload readiness
1 -
georgeqle Skill Youtube Title Thumbnail Audit 3Audit YouTube titles and thumbnails against channel performance and peer packaging patterns
1 -
georgeqle Skill Youtube Video Prelaunch Audit 7Audit unlisted or pre-release YouTube videos before public launch for edit readiness, polish, packaging, title, description, chapters, publish settings, launch timing, and social cross-sharing strategy
1 -
georgeqle Skill Youtube Video Prelaunch Audit 8Audit unlisted or pre-release YouTube videos before public launch for edit readiness, polish, packaging, title, description, chapters, publish settings, launch timing, and social cross-sharing strategy
1 -
georgeqle Skill Youtube Video Prelaunch Audit 9Audit unlisted or pre-release YouTube videos before public launch for edit readiness, polish, packaging, title, description, chapters, publish settings, launch timing, and social cross-sharing strategy
1 -
georgeqle Skill Youtube Video Prelaunch Audit 10Audit unlisted or pre-release YouTube videos before public launch for edit readiness, polish, packaging, title, description, chapters, publish settings, launch timing, and social cross-sharing strategy
1 -
georgeqle Skill Youtube Video Prelaunch Audit 11Audit unlisted or pre-release YouTube videos before public launch for edit readiness, polish, YouTube Test and Compare title/thumbnail launch sets, description, chapters, publish settings, launch timing, URL record capture, and social cross-sharing strategy
1 -
georgeqle Skill Creator Platform Capability Matrix 2Map creator platforms to free/manual evidence sources, available fields, audit depth, operational risk, and recommended next skill
1 -
georgeqle Skill Creator Platform Capability Matrix 3Map creator platforms to free/manual evidence sources, available fields, audit depth, operational risk, and recommended next skill
1 -
aaaaqwq Bundle Security Audit 3Audit codebases and infrastructure for security issues. Use when scanning dependencies for vulnerabilities, detecting hardcoded secrets, checking OWASP top 10 issues, verifying SSL/TLS, auditing file permissions, or reviewing code for injection and auth flaws.
1 -
ahang1598 Skill Skill 26产品设计套件入口 C:改版项目体验走查。当用户是设计师要对已上线产品做改版、诊断、找用户体验问题、启发式评估时,第一个该启动的 Skill。改版项目占企业内项目 30-40%,对团队设计师是常见场景。 与 product-management(产品管理)套件互补,服务不同角色: - 用户是设计师做体验走查 / 找用户体验问题 / 启发式评估 → 用本 Skill ✅ - 用户是产品经理做竞品对比分析 → 请用 product-management 套件的竞品分析 - 用户是产品经理分析用户反馈数据 → 请用 product-management 套件的用户反馈分析 - 用户是产品经理做产品指标复盘 → 请用 product-management 套件的产品指标复盘 本 Skill 对现有产品(URL / 代码 / 截图 / 口述)做系统性体验走查——Nielsen 10 启发式原则 + 响应式 + 性能共 12 个维度,输出问题清单 + 聚类的改版机会点,链式串联下游 /设计简报(v2 改版方向)→ /用户故事 → Flow 完整设计套件。设计师视角的体验走查 ≠ 产品经理的竞品分析 / 反馈数据分析。 触发关键词(前提:用户身份是设计师 / 设计师语境): - 设计师 + [改版 / 重做 / 改 / 优化 / 升级 / 重构] [现有产品 / 当前产品 / 已上线的 X / 旧版本 / v1 / 老版本] - 体验走查 / 启发式评估 / Heuristic Evaluation / UX audit / 体验审计 - 找现有产品的用户体验问题 / 诊断 / 找痛点 / 看看哪里能改 - 改版前先看看 / Nielsen 走查 / UX 体检 / 产品体验体检 - 我的产品上线后体验不好 / 现在的产品体验有问题 / 帮我看看产品哪里不好用 - audit / heuristic eval / UX review existing product 排除(反向): - 用户是产品经理做竞品对比分析 → 用 product-management 套件的竞品分析 - 用户是产品经理分析用户反馈数据 → 用 product-management 套件的用户反馈分析 - 用户是产品经理做产品指标复盘 → 用 product-management 套件的产品指标复盘 - 新产品无现有版本 → 用 frame(本套件入口
9 -
ahang1598 Skill Skill 34产品设计套件深挖工具。当用户是设计师想主动做用户研究(访谈 / 可用性测试 / 调研)—— 从规划研究问题、设计访谈大纲、到访谈后做主题归纳与洞察提炼时启动的 Skill。与 Signal(被动整理工单 / 评论)形成互补 —— Probe 是主动深挖少量样本(5-8 人深访),Signal 是被动整理海量样本(100-1000+ 条反馈)。 本 Skill 覆盖用户研究的三阶段全流程:① Plan(研究目标 / 方法选择 / 招募标准 / 时间表)→ ② Conduct(访谈大纲 5 段式 / 探针问题 / 反偏见提示)→ ③ Synthesize(亲和图法主题归纳 / JTBD 提炼 / 情感曲线 / 用户分层 / 洞察转设计机会)。核心差异化:每条洞察都附原话引用 + 情感强度 + 出现频次的证据链,下游 Brief / Journey / HMW 都能直接消费;并主动建议"哪些洞察该跑 Signal 做大样本验证"。x 支持 6 种研究方法(访谈 / 可用性测试 / 调研 / 卡片分类 / 日记研究 / A/B 测试),按"问题类型 + 时间预算 + 样本可获得性"匹配。 触发关键词(前提:用户身份是设计师 / 设计师语境): - 设计师 + [用户访谈 / 用研 / 深访 / 调研 / 可用性测试] - 我想做个用户访谈 / 帮我设计访谈大纲 / 访谈纪要整理 - 用户画像 / persona / JTBD 提炼 / 情感曲线 - 想搞清楚用户为什么 [流失 / 不用 / 抱怨] - probe / user research / interview synthesis / usability test design 排除(反向): - 工单 / 评论 / 海量反馈整理 → 用本套件 `/工单分析`(Signal) - 竞品体验拆解 → 用本套件 `/竞品拆解`(Bench) - 现有产品体验走查(不需要用户参与)→ 用本套件 `/启发评估`(Audit) - 已有可用性测试报告要做工程化决策 → 用 PM 套件 - 大型定量问卷分析 / 数据回归 → 不在本 Skill 范畴(建议用专门 data analyst 工具)
9 -
johnalbertini14-glitch Bundle SetupConfigure OpenClaw installations with optimized settings, channel setup, security hardening, and production recommendations.
1 -
johnalbertini14-glitch Bundle Auto ReplyAutonomous reply to X/Threads comments. Smart detection, templated responses, engagement automation.
1 -
johnalbertini14-glitch Bundle Dep AuditAudit project dependencies for known vulnerabilities (CVEs). Supports npm, pip, Cargo, and Go. Zero API keys required. Safe-by-default: report-only mode, fix commands require confirmation.
1 -
johnalbertini14-glitch Bundle Feed DietAudit your information diet across HN and RSS feeds — beautiful reports with category breakdowns, ASCII charts, and personalized recommendations.
1 -
johnalbertini14-glitch Bundle Claw AuditSecurity scanner and hardening tool for OpenClaw. Use when the user asks about security, wants to scan installed skills for malware or vulnerabilities, audit their OpenClaw configuration, check their security score, or harden their setup. Also triggers on keywords like "scan", "audit", "secure", "vulnerability", "malware", "safe", "hardening", "security score".
1 -
johnalbertini14-glitch Bundle ReefwatchContinuous local security monitoring daemon for Linux and macOS. Detects brute-force attacks, malware, privilege escalation, suspicious processes, file tampering, cryptominers, and network anomalies using YARA, Sigma, and custom detection rules. Runs as a background process and alerts only when real threats are found. Use when the user wants host-level intrusion detection, security monitoring, threat scanning, or asks about suspicious activity on their machine.
1 -
johnalbertini14-glitch Bundle Skill RefinerAudit and fix all skills in the workspace for compliance with skill-creator requirements. Use when asked to "refine skills", "audit skills", "check skill quality", or "fix non-compliant skills". Exhaustively searches the entire workspace (not just skills/) to find every SKILL.md, then audits and repairs each one.
1 -
johnalbertini14-glitch Bundle DjangoBuild secure Django apps avoiding ORM pitfalls, N+1 queries, and common security traps.
1 -
johnalbertini14-glitch Bundle MoneroAssist with Monero XMR transactions, privacy features, wallet management, and security practices.
1 -
johnalbertini14-glitch Bundle PaypalIntegrate PayPal payments with proper webhook verification, OAuth handling, and security validation for checkout flows and subscriptions.
1 -
johnalbertini14-glitch Bundle RobloxAvoid common Roblox mistakes — server/client security, DataStore pitfalls, memory leaks, and replication gotchas.
1 -
johnalbertini14-glitch Bundle DepguardDependency audit, vulnerability scanning, and license compliance. Free vuln check + paid continuous monitoring via git hooks.
1 -
johnalbertini14-glitch Bundle Vibe CheckAudit code for "vibe coding sins" — patterns that indicate AI-generated code was accepted without proper review. Produces a scored report card with fix suggestions.
1
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include youtube-description-optimizer, youtube-description-optimizer, creator-platform-capability-matrix. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.