Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
techwavedev Skill Top Web VulnerabilitiesThis skill should be used when the user asks to "identify web application vulnerabilities", "explain common security flaws", "understand vulnerability categories", "learn about inject...
-
techwavedev Skill Laravel ExpertSenior Laravel Engineer role for production-grade, maintainable, and idiomatic Laravel solutions. Focuses on clean architecture, security, performance, and modern standards (Laravel 10/11+).
-
lev-os Skill Deposition Ip SupplementProvides IP-specific deposition examination frameworks for patent, trademark, copyright, and trade secret cases. Covers inventor, infringer, licensing, and expert witnesses with question maps for claim construction, prior art, willfulness, Georgia-Pacific factors, likelihood of confusion, and trade secret identification. Use when preparing IP litigation depositions alongside @deposition-preparation and @deposition-expert-witness.
-
lev-os Bundle Codebase AuditDomain-parameterized codebase auditing (security, UX, performance, API, copy, CLI). Use when auditing code, assessing quality, finding issues, or pre-launch review.
-
lev-os Skill Geo Report PDFGenerate a professional PDF report from GEO audit data using ReportLab. Creates a polished, client-ready PDF with score gauges, bar charts, platform readiness visualizations, color-coded tables, and prioritized action plans.
-
techwavedev Bundle Anti Reversing TechniquesAUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: > 1.
-
lev-os Skill Employee NdaDrafts U.S. employee non-disclosure/confidentiality agreements that protect employer trade secrets and proprietary information while preserving employee mobility. Triggers on: employee NDA, confidentiality agreement, non-disclosure agreement, trade secret protection, proprietary information, onboarding confidentiality clause, pre-employment NDA.
-
lev-os Skill Field Of Use RestrictionDrafts field-of-use restriction clauses for IP licensing agreements. Covers grant language, prohibited activities, audit rights, breach remedies, and dispute resolution. Use when drafting IP license restrictions, patent field-of-use limitations, technology licensing clauses, or licensee scope provisions.
-
lev-os Skill Import Compliance ManualDrafts a U.S. import compliance manual demonstrating reasonable care under 19 U.S.C. § 1484. Covers HTS classification, customs valuation (19 U.S.C. § 1401a), country of origin, recordkeeping (19 C.F.R. Part 163), PGA compliance, internal audit, training, and corrective action. Use when creating or overhauling an importer-of-record compliance program, preparing for a CBP focused assessment, or establishing written reasonable-care procedures. Trigger keywords: import compliance manual, customs compliance program, CBP audit preparation, reasonable care, IOR compliance.
-
lev-os Skill Ip Infringement AnalysisProduces structured IP infringement memoranda evaluating patents, trademarks, copyrights, and trade secrets. Performs claim-by-claim patent comparisons, likelihood-of-confusion trademark tests, substantial similarity copyright assessments, and trade secret misappropriation evaluations with defense and remedies analysis. Use for infringement opinions, pre-filing assessments, cease-and-desist support, licensing disputes, or settlement valuation.
-
techwavedev Bundle Attack Tree ConstructionBuild comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.
-
techwavedev Skill Cc Skill Security ReviewThis skill ensures all code follows security best practices and identifies potential vulnerabilities. Use when implementing authentication or authorization, handling user input or file uploads, or creating new API endpoints.
-
techwavedev Skill Avoid AI WritingAudit and rewrite content to remove 21 categories of AI writing patterns with a 43-entry replacement table
-
lev-os Skill Audit SummaryProduces structured U.S. legal audit summaries that distill compliance findings into executive-ready risk prioritization and remediation plans, covering likelihood/impact scoring, consequence analysis, and corrective actions with timelines and owners. Use for legal audits, compliance audits, regulatory audits, compliance gap analyses, risk assessments, audit report summaries, or remediation roadmaps. Trigger keywords: audit summary, compliance findings, audit report, risk prioritization, remediation plan, regulatory exposure, corrective action plan.
-
lev-os Skill Managing Tax ControversyStructures tax controversy management with audit defense, protest, and appeals documentation. Use when managing tax audits, preparing protest letters, or documenting audit defense positions.
-
techwavedev Skill Firmware AnalystExpert firmware analyst specializing in embedded systems, IoT security, and hardware reverse engineering.
-
lev-os Skill Deposition IpSupplements general deposition preparation with IP-specific examination frameworks for patent, trademark, copyright, and trade secret cases. Covers witness strategies for inventors, accused infringers, licensing witnesses, and experts. Use alongside @deposition-preparation and @deposition-expert-witness when planning IP depositions, drafting outlines, or analyzing witness strategy.
-
techwavedev Skill Wordpress Plugin DevelopmentWordPress plugin development workflow covering plugin architecture, hooks, admin interfaces, REST API, and security best practices.
-
techwavedev Bundle Threat Mitigation MappingMap identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness.
-
techwavedev Skill Variant AnalysisFind similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, analyzing security vulnerabilities, or performing systematic code audits after finding an initial issue.
-
lev-os Skill API Acceptable Use PolicyDrafts a standalone API Acceptable Use Policy (AUP) for incorporation by reference into a master API license or terms-of-service agreement. Produces a publication-ready template with prohibited-use matrix, developer security checklist, graduated enforcement framework, AI/ML training restrictions, and versioning playbook. Trigger when a user needs to draft or update an API AUP, separate behavioral rules from core API terms, define prohibited API uses, add enforcement or change-management mechanics, or mentions acceptable use policy, developer security requirements, or API enforcement.
-
techwavedev Skill Windows Privilege EscalationThis skill should be used when the user asks to "escalate privileges on Windows," "find Windows privesc vectors," "enumerate Windows for privilege escalation," "exploit Windows miscon...
-
lev-os Skill Auditing Hipaa ComplianceConducts HIPAA compliance assessments with Privacy Rule, Security Rule, and Breach Notification analysis. Use when auditing HIPAA compliance, assessing privacy practices, or reviewing security controls.
-
lev-os Skill Charity Filing ThresholdsResearches state-specific charitable solicitation filing requirements keyed to gross revenue, producing a citation-backed state-by-state compliance matrix of audit thresholds, financial-statement tiers, filing fees, and due dates. Use when building charity compliance matrices, researching nonprofit filing thresholds, charitable solicitation registration renewals, comparing state audit requirements for 501(c)(3) organizations, or when the user mentions audit threshold, review threshold, compilation requirement, charity filing deadline, or multi-state nonprofit compliance.
-
lev-os Skill Far SubcontractDrafts FAR-compliant subcontract agreements between prime contractors and subcontractors under U.S. federal government prime contracts. Handles mandatory flow-down of FAR/DFARS/agency clauses, contract-type pricing, security/clearance, IP/data rights, and termination. Use when drafting government subcontracts, FAR flow-down clauses, or prime-sub agreements.
-
lev-os Skill Joint Operating AgreementDrafts U.S. Joint Operating Agreements (JOA) for oil and gas exploration, development, and production. Covers party structure, operator authority, AFE workflow, cost allocation, billing and audit rights, title and lien protections, default remedies, and governing-law provisions. Use when drafting, negotiating, or finalizing a JOA, joint account agreement, non-consent election, operator designation, participating interest schedule, or memorandum of operating agreement.
-
lev-os Skill License Agreement SummaryProduces a structured U.S. IP license agreement summary covering parties, grant scope, exclusivity, territory, financial terms, restrictions, IP management, risk allocation, and termination. Use when summarizing IP license agreements, extracting deal terms, or flagging licensing risks. Trigger keywords: license agreement, IP license, royalty, exclusivity, field of use, sublicense, audit, termination.
-
techwavedev Bundle Codebase Cleanup Deps AuditYou are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.
-
techwavedev Skill Ethical Hacking MethodologyMaster the complete penetration testing lifecycle from reconnaissance through reporting. This skill covers the five stages of ethical hacking methodology, essential tools, attack techniques, and professional reporting for authorized security assessments.
-
techwavedev Skill API Security Best PracticesImplement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
-
lev-os Skill Openclaw ConfigManage OpenClaw bot configuration - channels, agents, security, and autopilot settings
-
techwavedev Bundle Stride Analysis PatternsApply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.
-
lev-os Skill Know How LicenseDrafts Know-How License Agreements for licensing trade secrets, confidential processes, and proprietary methodologies where value derives from secrecy rather than patents. Reviews transaction documents to extract deal terms, financial structures, and exclusivity provisions. Use when drafting know-how licenses, trade secret licenses, technology transfer agreements, or confidential information licensing agreements.
-
lev-os Skill Solar Site LeaseDrafts U.S. solar site lease agreements between landowners and solar developers for long-term ground leases of solar PV facilities. Covers option and lease terms, rent structures, easements, construction and operations rights, decommissioning security, insurance and indemnity, tax and REC allocation, assignment and lender protections, defaults, and memorandum of lease. Use when drafting solar farm land leases, solar PV site leases, renewable energy land leases, or solar facility ground lease agreements.
-
lev-os Skill Unclaimed Property PolicyDrafts an enterprise Escheatment and Unclaimed Property Policy covering property identification, dormancy matrices, due diligence notices, NAUPA-format reporting, remittance, recordkeeping, and audit preparedness across all US state jurisdictions. Use when establishing or updating an unclaimed property compliance framework, preparing for state audits, or evaluating voluntary disclosure programs.
-
techwavedev Skill Wordpress Penetration TestingThis skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress users, themes, or plugins", "exploit WordPress vu...
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include wordpress-penetration-testing, solar-site-lease, api-acceptable-use-policy. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.