Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
antigravity Bundle 007Performs security audits, hardening, threat modeling (STRIDE/PASTA), red/blue team exercises, OWASP checks, code review, incident response, and infrastructure security for any project.
42.4k -
antigravity Skill InfinityEnforces a strict input boundary protocol (detect, classify, filter, verify) to ensure untrusted data never reaches business logic raw.
Audited 42.4k -
antigravity Skill UX AuditAudit screens against Nielsen's heuristics and mobile UX best practices using the StyleSeed Toss design language as the implementation context.
Audited 42.4k -
antigravity Bundle BumblebeeRun Bumblebee supply-chain inventory and exposure scans on macOS/Linux to detect compromised packages, extensions, and MCP host configs.
Audited 42.4k -
antigravity Skill Find BugsReview local branch changes for bugs, security vulnerabilities, and code quality issues using a structured checklist-driven process.
Audited 42.4k -
antigravity Skill WordpressBuild production-ready WordPress sites with theme and plugin development, WooCommerce integration, performance optimization, and security hardening, including WordPress 7.0 features.
Audited 42.4k -
antigravity Skill Clerk AuthProvides expert patterns for implementing Clerk authentication in Next.js, including middleware, server components, client hooks, organizations, and webhooks.
Audited 42.4k -
antigravity Skill Logic LensAnalyzes code for logical errors, race conditions, security vulnerabilities, and algorithmic flaws using structured reasoning across 9 risk categories.
Audited 42.4k -
google Bundle Google Cloud Recipe Foundation BuilderDeploys a secure, enterprise-grade Google Cloud landing zone foundation with organization policies, resource hierarchy, billing association, and centralized logging and monitoring.
14.4k -
affaan-m Bundle Delivery GateBlocks Claude from finishing a session until deterministic quality checks pass: learning library freshness, disk space, and rationalization pattern detection.
226k -
antigravity Bundle SupabaseBuild and manage Supabase projects including Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, and Queues with security best practices.
42.4k -
antigravity Skill Design UXRun a heuristic evaluation of interactive UIs against Nielsen's 10 usability heuristics and interaction add-ons, scoring the rendered artifact and producing a prioritized fix list.
Audited 42.4k -
cloudflare Skill Web PerfAudits web performance by measuring Core Web Vitals (LCP, INP, CLS) and supplementary metrics, identifying render-blocking resources, network dependency chains, layout shifts, caching issues, and accessibility gaps using Chrome DevTools MCP.
Audited 2.1k -
cloudflare Bundle CloudflareBuild and manage applications on the Cloudflare platform, including Workers, Pages, storage, AI, networking, security, and infrastructure-as-code.
Audited 2.1k -
cloudflare Bundle Sandbox SdkBuild secure, isolated code execution environments on Cloudflare Workers using the Sandbox SDK.
2.1k -
cloudflare Skill Cloudflare OneDesign, configure, troubleshoot, and review Cloudflare One Zero Trust and SASE deployments across Access, Gateway, WARP, Tunnel, and DLP.
Audited 2.1k -
cloudflare Bundle Turnstile SpinSet up Cloudflare Turnstile end-to-end: create a widget, deploy a managed siteverify Worker, insert frontend snippets, and validate the integration.
Audited 2.1k -
cloudflare Skill Cloudflare One MigrationsPlan and execute migrations from Zscaler, Palo Alto, legacy VPN, or SASE stacks to Cloudflare One with policy mapping, rollout plans, and parity analysis.
Audited 2.1k -
openai Bundle Security Threat ModelPerforms repository-grounded threat modeling by enumerating trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, then writes a concise Markdown threat model.
Audited 23.3k -
openai Bundle Security Ownership MapAnalyze git repositories to build a security ownership topology mapping people to files, compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization.
23.3k -
openai Bundle Security Best PracticesPerform language and framework-specific security best-practice reviews, write secure-by-default code, and generate prioritized vulnerability reports with suggested fixes.
Audited 23.3k -
android Skill Android Intent SecurityAudit Android component configurations and Intent handling to prevent Intent Redirection and unauthorized access.
Audited 6.1k -
dotnet Skill Test TaggingAnalyzes test suites across multiple languages and tags each test with standardized traits (positive, negative, critical-path, etc.) for better test categorization and coverage visibility.
4k -
dotnet Skill Configure AuthAdd authentication and authorization to a Blazor Web App, handling render modes, Identity pages, and auth state serialization.
Audited 4k -
dotnet Bundle Msbuild AntipatternsDetects and fixes common MSBuild anti-patterns in .csproj, .vbproj, .fsproj, .props, .targets, and .proj files, covering Exec misuse, unquoted conditions, hardcoded paths, and more.
Audited 4k -
dotnet Skill Detect Static DependenciesScan C# source files for hard-to-test static dependencies and produce a ranked report of static call sites by frequency.
Audited 4k -
dotnet Bundle Nuget Trusted PublishingSet up NuGet trusted publishing (OIDC) on a GitHub Actions repo, replacing long-lived API keys with short-lived tokens.
4k -
dotnet Skill Minimal API File UploadImplement file upload endpoints in ASP.NET Core minimal APIs (.NET 8+) with size limits, content validation, and streaming.
4k -
dotnet Skill Exp Mock Usage AnalysisAudits .NET test mock usage by tracing each mock setup through the production code's execution path to find dead, unreachable, redundant, or replaceable mocks.
Audited 4k -
oracle Bundle Oke TroubleshooterDiagnose and root-cause issues with OCI Kubernetes Engine clusters and workloads through evidence-driven investigation.
736 -
oracle Bundle Oci Functions TroubleshootDiagnose OCI Functions setup, control-plane, deployment, invocation, and observability issues using a deterministic triage workflow.
Audited 736 -
adobe Bundle AuthOpens a browser for login and captures an authentication token for AEM Edge Delivery Services admin APIs.
142 -
adobe Bundle Config AuthoringCreate, modify, review, and harden configuration for the Adobe Dispatcher Apache HTTP Server module and Apache HTTPD in AEM 6.5 LTS environments only.
Audited 142 -
adobe Bundle Incident ResponseInvestigate and triage runtime incidents involving the Adobe Dispatcher Apache HTTP Server module and related HTTPD configuration in AEM 6.5 LTS environments using MCP tools.
Audited 142 -
adobe Bundle Security HardeningPerform evidence-backed security audits for the Adobe Dispatcher Apache HTTP Server module and related HTTPD configuration in AMS workflows.
Audited 142 -
getsentry Skill Code ReviewReview pull requests following Sentry engineering practices, covering security, performance, testing, and design.
Audited 845
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include design-ux, logic-lens, security-ownership-map. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.