Security Agent Skills
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Security
1,976 skills
antigravity infinity
Enforces a strict input boundary protocol (detect, classify, filter, verify) to ensure untrusted data never reaches business logic raw.
42.4k
antigravity bumblebee
Run Bumblebee supply-chain inventory and exposure scans on macOS/Linux to detect compromised packages, extensions, and MCP host configs.
42.4k · bundle
antigravity find-bugs
Review local branch changes for bugs, security vulnerabilities, and code quality issues using a structured checklist-driven process.
42.4k
antigravity wordpress
Build production-ready WordPress sites with theme and plugin development, WooCommerce integration, performance optimization, and security hardening, including WordPress 7.0 features.
42.4k
antigravity clerk-auth
Provides expert patterns for implementing Clerk authentication in Next.js, including middleware, server components, client hooks, organizations, and webhooks.
42.4k
antigravity logic-lens
Analyzes code for logical errors, race conditions, security vulnerabilities, and algorithmic flaws using structured reasoning across 9 risk categories.
42.4k
google google-cloud-recipe-foundation-builder
Deploys a secure, enterprise-grade Google Cloud landing zone foundation with organization policies, resource hierarchy, billing association, and centralized logging and monitoring.
14.4k · bundle
affaan-m delivery-gate
Blocks Claude from finishing a session until deterministic quality checks pass: learning library freshness, disk space, and rationalization pattern detection.
226k · bundle
antigravity supabase
Build and manage Supabase projects including Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, and Queues with security best practices.
42.4k · bundle
antigravity design-ux
Run a heuristic evaluation of interactive UIs against Nielsen's 10 usability heuristics and interaction add-ons, scoring the rendered artifact and producing a prioritized fix list.
42.4k
cloudflare cloudflare
Build and manage applications on the Cloudflare platform, including Workers, Pages, storage, AI, networking, security, and infrastructure-as-code.
2.1k · bundle
cloudflare sandbox-sdk
Build secure, isolated code execution environments on Cloudflare Workers using the Sandbox SDK.
2.1k · bundle
cloudflare cloudflare-one
Design, configure, troubleshoot, and review Cloudflare One Zero Trust and SASE deployments across Access, Gateway, WARP, Tunnel, and DLP.
2.1k
cloudflare turnstile-spin
Set up Cloudflare Turnstile end-to-end: create a widget, deploy a managed siteverify Worker, insert frontend snippets, and validate the integration.
2.1k · bundle
cloudflare cloudflare-one-migrations
Plan and execute migrations from Zscaler, Palo Alto, legacy VPN, or SASE stacks to Cloudflare One with policy mapping, rollout plans, and parity analysis.
2.1k
openai security-threat-model
Performs repository-grounded threat modeling by enumerating trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, then writes a concise Markdown threat model.
23.3k · bundle
openai security-ownership-map
Analyze git repositories to build a security ownership topology mapping people to files, compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization.
23.3k · bundle
openai security-best-practices
Perform language and framework-specific security best-practice reviews, write secure-by-default code, and generate prioritized vulnerability reports with suggested fixes.
23.3k · bundle
android android-intent-security
Audit Android component configurations and Intent handling to prevent Intent Redirection and unauthorized access.
6.1k
dotnet test-tagging
Analyzes test suites across multiple languages and tags each test with standardized traits (positive, negative, critical-path, etc.) for better test categorization and coverage visibility.
4k
dotnet configure-auth
Add authentication and authorization to a Blazor Web App, handling render modes, Identity pages, and auth state serialization.
4k
dotnet detect-static-dependencies
Scan C# source files for hard-to-test static dependencies and produce a ranked report of static call sites by frequency.
4k
dotnet nuget-trusted-publishing
Set up NuGet trusted publishing (OIDC) on a GitHub Actions repo, replacing long-lived API keys with short-lived tokens.
4k · bundle
dotnet minimal-api-file-upload
Implement file upload endpoints in ASP.NET Core minimal APIs (.NET 8+) with size limits, content validation, and streaming.
4k
dotnet exp-mock-usage-analysis
Audits .NET test mock usage by tracing each mock setup through the production code's execution path to find dead, unreachable, redundant, or replaceable mocks.
4k
oracle oke-troubleshooter
Diagnose and root-cause issues with OCI Kubernetes Engine clusters and workloads through evidence-driven investigation.
736 · bundle
oracle oci-functions-troubleshoot
Diagnose OCI Functions setup, control-plane, deployment, invocation, and observability issues using a deterministic triage workflow.
736 · bundle
adobe auth
Opens a browser for login and captures an authentication token for AEM Edge Delivery Services admin APIs.
142 · bundle
adobe config-authoring
Create, modify, review, and harden configuration for the Adobe Dispatcher Apache HTTP Server module and Apache HTTPD in AEM 6.5 LTS environments only.
142 · bundle
adobe incident-response
Investigate and triage runtime incidents involving the Adobe Dispatcher Apache HTTP Server module and related HTTPD configuration in AEM 6.5 LTS environments using MCP tools.
142 · bundle
adobe security-hardening
Perform evidence-backed security audits for the Adobe Dispatcher Apache HTTP Server module and related HTTPD configuration in AMS workflows.
142 · bundle
getsentry code-review
Review pull requests following Sentry engineering practices, covering security, performance, testing, and design.
845
getsentry skill-scanner
Scans agent skills for security issues including prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks.
845 · bundle
getsentry gha-security-review
Audits GitHub Actions workflows for exploitable vulnerabilities with concrete attack scenarios.
845 · bundle
getsentry django-access-review
Reviews Django codebases for access control vulnerabilities and IDOR by tracing authorization flows, mapping attack surfaces, and reporting confirmed gaps with enforceable fixes.
845 · bundle
getsentry claude-settings-audit
Analyze a repository to generate recommended Claude Code settings.json permissions for read-only commands, detecting tech stack, build tools, and monorepo structure.
845
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include security-best-practices, delivery-gate, skill-scanner. Rankings shift as installs change; sort this page by "Most downloaded" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds add <owner>/<name>, or copy the file into your agent's skills directory.