Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
tomevault-io Bundle Game Hacking TechniquesGuide for game-hacking technique taxonomy and threat modeling relevant to game security. Use this skill when researching memory access, code injection, overlays, input simulation, engine-specific attack surfaces, or how modern anti-cheat systems constrain user-mode, kernel-mode, hypervisor, and DMA-based cheat implementations. Use when this capability is needed.
- tomevault-io Bundle Llvm Tooling
Expertise in LLVM tooling development including Clang plugins, LLDB debugger extensions, Clangd/LSP, and LibTooling. Use this skill when building source code analysis tools, refactoring tools, debugger extensions, or IDE integrations. Use when this capability is needed.
- tomevault-io Bundle Nginx Proxy
Nginx reverse proxy configuration and optimization. Set up SSL termination, load balancing, caching, rate limiting, and security headers. Use when configuring Nginx as a reverse proxy, API gateway, or web server for production deployments. Use when this capability is needed.
- tomevault-io Bundle Digital Signature Pattern
Security pattern for implementing digital signatures. Use when implementing document signing, code signing, certificate signing, non-repudiation, or verifying authenticity and integrity of messages using asymmetric cryptography (RSA, ECDSA, Ed25519). Use when this capability is needed.
- tomevault-io Bundle Global Security
Your approach to handling global security. Use this skill when working on files where global security comes into play. Use when this capability is needed.
- tomevault-io Bundle Wow API Combat
Complete reference for WoW Retail Combat, Damage Meter, Threat, Loss of Control, Combat Text, Combat Audio Alert, Secret Values, and Spectator APIs. Covers the 12.0.0 combat log removal (CLEU no longer available to addons), C_DamageMeter built-in damage meter, C_Secrets secret predicates, C_CurveUtil/C_DurationUtil for secret value visualization, C_LossOfControl, C_CombatText, C_CombatAudioAlert, ENCOUNTER_STATE_CHANGED, threat functions, and the new COMBAT_LOG_MESSAGE event. Use when working with combat data, damage meters, threat, loss of control, combat text, encounter events, or any combat-related addon functionality. Use when this capability is needed.
- tomevault-io Bundle State Inconsistency Auditor
Finds state inconsistency bugs where an operation mutates one piece of coupled state without updating its dependent counterpart, causing silent data corruption or reverts in subsequent operations. Triggers on /state-audit, state inconsistency audit, or coupled state audit. Use when this capability is needed.
- tomevault-io Bundle Governance Cite
Cite governance controls and justifications when making recommendations about code quality, security, commits, or documentation. Use when justifying why a practice matters, when a user asks "why do we do this?", when reviewing code against standards, or when recommending practices that align with NIST, OWASP, ISO, SOC 2, CIS, or IEEE controls. Use when this capability is needed.
- tomevault-io Bundle Convex Security
Security best practices for Convex functions including ConvexError handling, argument/return validation, authentication helpers, access control, rate limiting, and internal functions. Use when writing public queries/mutations/actions, implementing authentication, adding authorization checks, handling errors, or reviewing Convex functions for security. Use when this capability is needed.
- tomevault-io Bundle Aj Geddes Useful AI Prompts Xss Prevention
XSS Prevention
- tomevault-io Bundle Security Review Gate
Use when implementation is complete or review is requested and the user may want a focused security review of the changed code
- tomevault-io Bundle Exploit Development
Develop working exploits using pwntools. Includes exploit template and common patterns. Use when this capability is needed.
- tomevault-io Bundle AI Audit Trail
AI Audit Trail & Accountability is a system that records and tracks Use when this capability is needed.
- tomevault-io Bundle Fix Hard
Zero-tolerance code quality enforcement. Fixes ALL errors, warnings, suppressions, and security issues. Includes mutation testing, intelligent suppression audit, and optional hook generation. No mercy, no shortcuts. Use when this capability is needed.
- tomevault-io Bundle Makefile Review
Audit Makefiles for build correctness, portability, and recipe duplication Use when this capability is needed.
- tomevault-io Bundle Code Review Via Cubic CLI
Run AI-powered code reviews using Cubic CLI to detect bugs, security vulnerabilities, and style issues in local changes. Use when the user says "review my code," "check my changes for bugs," "run cubic review," "review this diff," "pre-commit check," "find issues before I push," "analyze my branch changes," or "code quality check." Triggers on mentions of cubic, code review, diff review, pre-commit checks, bug detection, and code quality validation. Use when this capability is needed.
- tomevault-io Bundle Move Language
Build Move Language expertise for blockchain and Web3 development. Use when developing smart contracts, building DeFi protocols, or creating decentralized applications. This skill covers development, security, and deployment strategies. Use when this capability is needed.
- tomevault-io Bundle Krajh Oc Kickstart Security Best Practices
Security Best Practices
- tomevault-io Bundle Py Refactor
Orchestrate comprehensive Python refactoring - coordinates security, complexity, testing, code health, and modernization skills to systematically improve code quality. Use when this capability is needed.
- tomevault-io Bundle Semgrep Expert
Capability skill ("hat") — tool-level expert on Semgrep as Zeta's lightweight pattern-matching static-analysis layer. Covers when to reach for Semgrep versus CodeQL (heavier, dataflow) versus Roslyn analyzers (language-native) versus a Lean proof; CI integration with `gate.yml`; rule-pack selection (p/ci, p/secrets, p/owasp-top-ten); false-positive triage; SARIF export; SHA-pinned action versions. Distinct from `semgrep-rule-authoring` (the *how* of writing a custom rule) — this hat owns the *whether*, *where*, and *how-much* of Semgrep in the verification portfolio. Wear when adding a new rule-pack, tuning CI noise, or deciding Semgrep vs. another static-analysis tool. Use when this capability is needed.
- tomevault-io Bundle Whitelist Bypass Skill
Bypass attempt. Use for security testing. Use when this capability is needed.
- tomevault-io Bundle Spring Security 6
Migrate Spring Security 5 to Spring Security 6 configuration. Use when removing WebSecurityConfigurerAdapter, replacing @EnableGlobalMethodSecurity with @EnableMethodSecurity, converting antMatchers to requestMatchers, or updating to lambda DSL configuration style. Covers SecurityFilterChain beans and authentication manager changes. Use when this capability is needed.
- tomevault-io Bundle Bx Enhance Code Quality
Use when asked to rate, score, audit, or improve code quality of a project, when user wants a 0-10 quality assessment, or when asked what needs to change to reach perfect quality
- tomevault-io Bundle Wordpress Plugin Block Theme Development
Security-first WordPress development for 6.9+. Covers plugin architecture, block development (apiVersion 3, Interactivity API), block themes with theme.json, REST API, Abilities API, and the Security Trinity. Use when this capability is needed.
- tomevault-io Bundle Danielhogben Hermes Skills Langchain Audit
Langchain Audit
- tomevault-io Skill Idor Vulnerability Testing
This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references," or "bypass authorization to access other users' data." It provides comprehensive guidance for detecting, exploiting, and remediating IDOR vulnerabilities in web applications.
Audited - tomevault-io Bundle Terraphim Terraphim Skills Security Audit
You are a security specialist for Rust and WebAssembly applications. You identify vulnerabilities, review unsafe code, and ensure applications follow security best practices.
- tomevault-io Bundle Authentication Security
Authentication security standards covering OAuth2 flows (authorization code, PKCE), JWT best practices (RS256, expiration), MFA (TOTP, WebAuthn), session management, and NIST 800-63B compliance for production systems Use when this capability is needed.
- tomevault-io Bundle Anti Reversing Techniques
Understand anti-reversing, obfuscation, and protection techniques encountered during software analysis. Use this skill when analyzing malware evasion techniques, when implementing anti-debugging protections for CTF challenges, when reverse engineering packed binaries, or when building security research tools that need to detect virtualized environments. Use when this capability is needed.
- tomevault-io Bundle Threat Mitigation Mapping
Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness. Use when this capability is needed.
- tomevault-io Bundle Phxaudit
Project health audit and health check — architecture, performance, security, tests, dependencies. Use quarterly, before releases, after refactors, or when asked about project health. Use when this capability is needed.
- tomevault-io Bundle Omar Obando Qwen Orchestrator Code Review
Code Review Skill — Professional Quality Audit
- tomevault-io Bundle Cors Configuration
Configures Cross-Origin Resource Sharing with proper headers, preflight handling, and security best practices. Use when users request "CORS setup", "cross-origin requests", "API CORS", "preflight requests", or "CORS headers".
- tomevault-io Bundle Resolve Bugsnag Issue
Use when resolving Bugsnag issues. Fixes bugs, refactors code, performs code and security reviews, ensures 100% test coverage, runs CI checks, and creates pull requests. Updates GitHub issues with review results.
- tomevault-io Bundle Code Reaper
Static Application Security Testing (SAST) — deep source code analysis for vulnerability detection. Covers 12 languages (JavaScript/TypeScript, Python, PHP, Go, Ruby, Rust, Java, C#, Solidity, Kotlin, Swift, Dart). Automated scanning (Semgrep rulesets, Gitleaks, Trufflehog), manual pattern hunting (dangerous sinks, auth inconsistency, injection vectors), taint analysis (source→sink tracing), auth architecture audit (middleware gaps, IDOR patterns, privilege escalation), secret detection (API keys, tokens, credentials), dependency analysis (known CVEs in packages), and framework-specific vulnerability patterns. Generates prioritized findings with exploitability assessment. Use when asked to "review this code", "audit source code", "find vulnerabilities in code", "static analysis", "code security review", "SAST scan", or when source code is available for a target. Use when this capability is needed.
- tomevault-io Bundle Healthkit Sync
iOS HealthKit data sync CLI commands and patterns. Use when working with healthsync CLI, fetching Apple Health data (steps, heart rate, sleep, workouts), pairing iOS devices over local network, or understanding the HealthSync Helper App project architecture including mTLS certificate pinning, Keychain storage, and audit logging. Use when this capability is needed.
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include game-hacking-techniques, llvm-tooling, nginx-proxy. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.