Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
tomevault-io Bundle Shortcut AuditAudit keyboard shortcuts in VMark code vs dev docs. Use when asked to review, reconcile, or optimize shortcuts, or when updating shortcut documentation. Use when this capability is needed.
- tomevault-io Bundle Inspect Computer Config
Use when the user asks to inspect, summarize, audit, compare, or troubleshoot this computer's hardware, operating system, CPU, memory, GPU, disk, or local runtime configuration.
- tomevault-io Bundle Go Validation
Go code validation workflow covering formatting, linting, testing, and security using go fmt, go vet, golangci-lint, go test, and govulncheck. Always use validate.sh script for comprehensive validation. For troubleshooting, see reference/. Use when this capability is needed.
- tomevault-io Bundle Docs Health
Audit documentation health — file sizes, nested CLAUDE.md coverage, stale references, skill inventory. Triggers on doc audit, check docs, missing CLAUDE.md, bloated files, documentation drift, stale file references, skill line counts. Use when this capability is needed.
- tomevault-io Bundle Architectural Analysis
Deep architectural audit focused on finding dead code, duplicated functionality, architectural anti-patterns, type confusion, and code smells. Use when user asks for architectural analysis, find dead code, identify duplication, or assess codebase health. Don't use for style/formatting issues, performance profiling, security audits, or feature-level code review. Use when this capability is needed.
- tomevault-io Bundle Web Otel Spec Implementation Audit
Audits pulse-web-otel docs/instrumentations/*/SPEC.md against src for format compliance (including mandatory Mermaid HLD, LD, and edge-case flow diagrams) and spec–code parity with a positive/negative/edge test matrix. Uses audit-index.json for dimension checklist and path mapping. Use when editing pulse-web-otel SPECs or instrumentations, after queue hooks fire, or when the user asks for SPEC vs implementation alignment. Use when this capability is needed.
- tomevault-io Bundle Static Analysis
Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection. Use when running static analysis scans, writing custom detection rules, or processing analysis results. Use when this capability is needed.
- tomevault-io Bundle Florianbuetow Claude Code API
API Security (API)
- tomevault-io Bundle Florianbuetow Claude Code Fix
Security Fix Generation
- tomevault-io Bundle Check Design
Audit OpenStride design compliance (colors, emojis, icons, forbidden imports) Use when this capability is needed.
- tomevault-io Bundle Patch Repo
Create deterministic git patches (stage/commit) and optionally push safely; writes audit reports under run/skills/patch-repo (scripts/skills/patch-repo.sh). Use when this capability is needed.
- tomevault-io Bundle Harness Writing
Writing effective fuzzing harnesses for security testing. Use when this capability is needed.
- tomevault-io Bundle Hogwash Removal
Audit code and documentation for mathematical cargo-culting, inflated claims, and category-theoretic hogwash. Use when reviewing READMEs, module docs, comments, or papers that reference category theory, type theory, or abstract math. Detects misuse of technical terminology, analogy-dressed-as-theorem, name-dropping citations, and overclaimed novelty. Use when this capability is needed.
- tomevault-io Bundle Review Standards
Use this skill when asked to review authentication code for security issues.
- tomevault-io Bundle Skill Snitch
Security auditing for MOOLLM skills - static analysis and runtime surveillance Use when this capability is needed.
- tomevault-io Bundle Audit Feature Interaction
Analyze feature interaction pairs and triples for concurrent defects Use when this capability is needed.
- tomevault-io Bundle Auth Expert
Authentication and authorization expert specializing in JWT, OAuth 2.0, session management, RBAC, password security. Use for auth implementation, token management, or security issues. Use when this capability is needed.
- tomevault-io Bundle Hunt Apt
Hunt for a specific APT/threat actor in your environment. Use when you have a threat actor name or GTI collection ID and want to search for their TTPs and IOCs. Gathers intelligence from GTI, searches SIEM for IOCs and TTP-based indicators, and documents findings. Use when this capability is needed.
- tomevault-io Bundle Hunt Ioc
Hunt for specific IOCs across your environment. Use when you have a list of IPs, domains, hashes, or URLs from threat intel and want to check if they appear in your SIEM. Systematic searching with enrichment and documentation. Use when this capability is needed.
- tomevault-io Bundle Pin Workflows
Audits all .github/workflows/ action references, upgrades any that are behind the latest release, and pins every tag to its exact SHA commit hash for supply chain security. Use when this capability is needed.
- tomevault-io Bundle Diottodev Runic Code Review
You are a senior software engineer with expertise in code quality, security, and performance. Your goal is to surface real problems that would matter in production — not just style preferences.
- tomevault-io Bundle Dojo Review
Review Dojo code for best practices, common mistakes, security issues, and optimization opportunities. Use when auditing models, systems, tests, or preparing for deployment. Use when this capability is needed.
- tomevault-io Bundle Verify App
Comprehensive application verification specialist. Runs static analysis (typecheck, lint, prettier), build verification, code quality review, and security checks. Produces structured pass/fail report with recommendations. Use when this capability is needed.
- tomevault-io Bundle Setup For Oss
Review and bootstrap open-source repo health (OSS) by auditing or scaffolding README, CONTRIBUTING, CODE_OF_CONDUCT, LICENSE, SECURITY, GitHub templates, CI workflows, Renovate, publishing (pkg-pr-new + npm Trusted Publishing), linting/formatting, Changesets, and automation. Use when asked to review OSS setup, check OSS health, or set up/add OSS files and workflows. Use when this capability is needed.
- tomevault-io Bundle Ghost Validate
This skill should be used when the user asks to "validate a finding", "check if a vulnerability is real", "triage a security finding", "confirm a vulnerability", "determine if a finding is a true positive or false positive", or provides a security finding for review. It validates security vulnerability findings by tracing data flows, verifying exploit conditions, analyzing security controls, and optionally testing attack vectors against a live application. Use when this capability is needed.
- tomevault-io Bundle Iso 27001 Controls
Verify implementation of ISO 27001:2022 information security controls across CIA platform development and operations Use when this capability is needed.
- tomevault-io Bundle Open Source Policy
Open source governance, security posture badges, license compliance, SBOM generation, and vulnerability management for transparency-driven development Use when this capability is needed.
- tomevault-io Bundle Secure Code Review
Conduct comprehensive security code reviews using OWASP Top 10, SAST/DAST patterns, and Hack23 ISMS secure development policy Use when this capability is needed.
- tomevault-io Bundle Codeql Scanning
Analyze code for common vulnerability patterns using CodeQL-style queries. Identify injection flaws, unsafe deserialization, prototype pollution, path traversal, and other security issues in TypeScript/JavaScript code. Use when this capability is needed.
- tomevault-io Bundle Iuliandita Skills Code Review
Code Review: Deep Correctness Audit
- tomevault-io Bundle Readme Refresh
Audit and update a project README, or bootstrap a new one. Detects tech stack, versions, and services. Use when this capability is needed.
- tomevault-io Bundle Stellar Dev
End-to-end Stellar development playbook. Covers Soroban smart contracts (Rust SDK), Stellar CLI, JavaScript/Python/Go SDKs for client apps, Stellar RPC (preferred) and Horizon API (legacy), Stellar Assets vs Soroban tokens (SAC bridge), wallet integration (Freighter, Stellar Wallets Kit), smart accounts with passkeys, status-sensitive zero-knowledge proof patterns, testing strategies, security patterns, and common pitfalls. Optimized for payments, asset tokenization, DeFi, privacy-aware applications, and financial applications. Use when building on Stellar, Soroban, or working with XLM, Stellar Assets, trustlines, anchors, SEPs, ZK proofs, or the Stellar RPC/Horizon APIs. Use when this capability is needed.
- tomevault-io Bundle Security Checklist
Security checklist to run before marking any task done Use when this capability is needed.
- tomevault-io Bundle Shield
Security scanner for code, addresses, and transactions Use when this capability is needed.
- tomevault-io Bundle Ipsw
Apple firmware and binary reverse engineering with the ipsw CLI tool. Use when analyzing iOS/macOS binaries, disassembling functions in dyld_shared_cache, dumping Objective-C headers from private frameworks, downloading IPSWs or kernelcaches, extracting entitlements, analyzing Mach-O files, or researching Apple security. Triggers on requests involving Apple RE, iOS internals, kernel analysis, KEXT extraction, or vulnerability research on Apple platforms. Use when this capability is needed.
- tomevault-io Bundle Calcom API
Secret used to verify webhook payload signatures via X-Cal-Signature-256 header. Use when this capability is needed.
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include shortcut-audit, inspect-computer-config, go-validation. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.