Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
tomevault-io Bundle Conventions ImproverAudit and improve project conventions files (AGENTS.md, CLAUDE.md, GEMINI.md). Scans for all conventions files, evaluates quality against a scoring rubric, outputs a quality report, then makes targeted improvements with user approval. Use when asked to check, audit, update, or improve AGENTS.md or similar files. Use when this capability is needed.
- tomevault-io Bundle Dynamic Instrumentation
Expertise in LLVM-based dynamic binary instrumentation, runtime tracing, and program monitoring. Use this skill when implementing runtime analysis tools, code coverage systems, profilers, or dynamic security monitors. Use when this capability is needed.
- tomevault-io Bundle Secure Development Lifecycle
Comprehensive SDLC security covering planning, development, testing, deployment, and maintenance with classification-driven controls and AI governance Use when this capability is needed.
- tomevault-io Bundle Auditing Access Control
Audit access control implementations for security vulnerabilities and misconfigurations. Use when reviewing authentication and authorization. Trigger with 'audit access control', 'check permissions', or 'validate authorization'. Use when this capability is needed.
- tomevault-io Bundle Secret Rotation Runbook
Rotate and validate secrets following the project runbook. Use when the user mentions secret rotation, API key changes, or credential updates. Use when this capability is needed.
- tomevault-io Bundle Stage Completion Auditor
Audit completed Codex work for a tg-msg-manager stage after implementation, checks, report, or lifecycle cleanup and before accepting the stage as complete. Use when Codex claims a stage is complete and the result must be checked against AGENTS.md, the active stage file, stage report, changed files, test/check output, docs rules, and lifecycle state. Use when this capability is needed.
- tomevault-io Bundle Phy Concurrency Audit
Static concurrency and race-condition auditor for Go, Java, Python, Node.js/TypeScript. Detects shared-state mutations without locks (Go map races, Java non-atomic increments, Python thread/asyncio shared lists), TOCTOU (time-of-check-time-of-use) patterns across all languages, sync.Mutex copied by value, WaitGroup.Add inside goroutines, SimpleDateFormat as instance field, double-checked locking without volatile, asyncio shared state without Lock. Maps findings to CWE-362 (race condition) and CWE-367 (TOCTOU). Zero competitors on ClawHub — not a single concurrency-audit SKILL.md in 13,700+ files. Use when this capability is needed.
- tomevault-io Bundle Goravel Crud Review
Review and audit a Goravel CRUD implementation for completeness, correctness, and best practices. Checks all API operations, permissions, error handling, query efficiency, route registration, and response consistency. Use when this capability is needed.
- tomevault-io Bundle Appsec Expert
Elite Application Security engineer specializing in secure SDLC, OWASP Top 10 2025, SAST/DAST/SCA integration, threat modeling (STRIDE), and vulnerability remediation. Expert in security testing, cryptography, authentication patterns, and DevSecOps automation. Use when securing applications, implementing security controls, or conducting security assessments. Use when this capability is needed.
- tomevault-io Bundle Celery Expert
Expert Celery distributed task queue engineer specializing in async task processing, workflow orchestration, broker configuration (Redis/RabbitMQ), Celery Beat scheduling, and production monitoring. Deep expertise in task patterns (chains, groups, chords), retries, rate limiting, Flower monitoring, and security best practices. Use when designing distributed task systems, implementing background job processing, building workflow orchestration, or optimizing task queue performance. Use when this capability is needed.
- tomevault-io Bundle Firebase Firestore Standard
Comprehensive guide for Firestore Standard Edition, including provisioning, security rules, and SDK usage. Use this skill when the user needs help setting up Firestore, writing security rules, or using the Firestore SDK in their application. Use when this capability is needed.
- tomevault-io Bundle Technical Debt Detector
Identify and prioritize technical debt in Python codebases. Use when the user asks to find tech debt, analyze code quality, identify what needs refactoring, find security issues, check test coverage gaps, review dependencies, find TODOs/FIXMEs, or assess maintainability. Triggers on phrases like "find technical debt", "what's wrong with this codebase", "where should I focus refactoring", "audit this code", "find TODOs", "check for security issues", "analyze dependencies", or "what needs tests". Complements python-simplifier skill (use that for complexity and code smell analysis). Use when this capability is needed.
- tomevault-io Bundle Theater Detection Audit
Performs comprehensive audits to detect placeholder code, mock data, TODO markers, and incomplete implementations in codebases. Use this skill when you need to find all instances of "theater" in code such as hardcoded mock responses, stub functions, commented-out production logic, or fake data that needs to be replaced with real implementations. The skill systematically identifies these instances, reads their full context, and completes them with production-quality code. Use when this capability is needed.
- tomevault-io Bundle Eresussecurity Appsec Skills Eresus Codeql Heuristics
CodeQL-Informed Audit Heuristics
- tomevault-io Bundle Security Environment Standards
Security and environment configuration standards for web applications, including environment variable management, secure coding practices, and production deployment security. Use when setting up environments, configuring security, or deploying applications. Use when this capability is needed.
- tomevault-io Bundle Production Readiness Auditor
Audit production deployment readiness and operational requirements Use when this capability is needed.
- tomevault-io Bundle Helixdevelopment Helixagent Performing Security Testing
Security Test Scanner
- tomevault-io Bundle Helixdevelopment Helixagent Scanning Container Security
Container Security Scanner
- tomevault-io Bundle Claude Security Review
Security-focused review for Hyperlane protocol code. Use for Solidity contracts, Rust agents, and infrastructure changes. Use when this capability is needed.
- tomevault-io Bundle Gold Standards
Mandatory best practices and gold standards for Kailash SDK development including absolute imports, parameter passing, error handling, testing policies (Real infrastructure recommended in Tiers 2-3), workflow design, custom node development, security, documentation, and test creation. Use when asking about 'best practices', 'standards', 'gold standards', 'mandatory rules', 'required patterns', 'absolute imports', 'Real infrastructure recommended', 'testing policy', 'error handling standards', 'security best practices', 'documentation standards', or 'workflow design standards'. Use when this capability is needed.
- tomevault-io Bundle Spring Boot Security
Spring Security 7 implementation for Spring Boot 4. Use when configuring authentication, authorization, OAuth2/JWT resource servers, method security, or CORS/CSRF. Covers the mandatory Lambda DSL migration, SecurityFilterChain patterns, @PreAuthorize, and password encoding. For testing secured endpoints, see spring-boot-testing skill. Use when this capability is needed.
- tomevault-io Bundle Auditing Test Quality
Automates test quality assessment, identifies vanity tests, and guides systematic improvement of test suites. Use when reviewing test suites, identifying shallow tests, enforcing behavioral test standards, or when the user mentions test quality, vanity tests, or test effectiveness.
- tomevault-io Bundle Project Guidelines Writer
Use this skill when the user wants repository guidance documents generated or refreshed, including AGENTS.md, CONTRIBUTING.md, STYLEGUIDE.md, TESTING.md, ARCHITECTURE.md, and SECURITY.md. It analyzes the repository, generates all six guideline files by default, prefers managed-section updates for existing files, and should not be used for feature specs or implementation.
- tomevault-io Bundle Backend Audit Orchestrator
Orchestrate 3 read-only backend audits in parallel and merge results. No file modifications. Use when this capability is needed.
- tomevault-io Bundle Gemini Tool Orchestrator
Natural-language orchestration of security tools through Gemini. Translates intent ("scan this scope for exposed admin panels") into safe, parameterized tool pipelines using nmap, masscan, naabu, httpx, nuclei, ffuf, gobuster, subfinder, amass, dnsx, katana, gau, semgrep, trivy, checkov, gitleaks, syft, grype, and custom scripts. Use when the user wants Gemini to drive a chain of CLI tools end to end with guardrails. Use when this capability is needed.
- tomevault-io Bundle Agentic Layer Audit
Audit codebase for agentic layer coverage and identify gaps. Use when assessing agentic layer maturity, identifying investment opportunities, or evaluating primitive coverage. Use when this capability is needed.
- tomevault-io Bundle Audit Output Styles
Audit Claude Code output styles for quality, compliance, and usability. Use when creating custom styles or validating existing ones. Use when this capability is needed.
- tomevault-io Bundle Incident Response Commander
Guides teams through IT outages and security incidents, providing structured workflows for detection, containment, eradication, and post-mortem analysis. Use when this capability is needed.
- tomevault-io Bundle Security Review Criteria
Security review criteria based on OWASP Top 10. Covers severity levels, trust boundaries, detection patterns, and language-specific checks for security vulnerabilities. Use when this capability is needed.
Audited - tomevault-io Bundle Architecture Docs
Use this skill when creating, updating, or maintaining ARCHITECTURE.md files, when users ask about "my architecture documentation" or "architecture", when generating diagrams from architecture documentation, when validating/checking/auditing architecture (including BIAN alignment, META layers, standards compliance), or when answering questions about documented components, data structures, integrations, security, performance, deployment, technology stack, or architectural decisions
- tomevault-io Bundle Generating Compliance Reports
Generate comprehensive compliance reports for security standards. Use when creating compliance documentation. Trigger with 'generate compliance report', 'compliance status', or 'audit compliance'. Use when this capability is needed.
- tomevault-io Bundle Stack Upgrade Fix Swift
Action findings from stack-upgrade-audit-swift. Apply mechanical edits, bump Swift / iOS deployment target, run pod install, verify build, commit per category. Local only. Use when this capability is needed.
- tomevault-io Bundle Leverage Point Audit
Audit a codebase for the 12 leverage points of agentic coding. Identifies gaps and provides prioritized recommendations. Use when improving agentic coding capability, analyzing why agents fail, or optimizing a codebase for autonomous work. Use when this capability is needed.
- tomevault-io Bundle Security Vendor Management
Security protocols and vendor management expertise from Marcus covering emergency response codes, vendor relations, and operational safety Use when this capability is needed.
- tomevault-io Bundle Content Versioning
Use when implementing draft/publish workflows, version history, content rollback, or audit trails. Covers versioning strategies, snapshot storage, diff generation, and version comparison APIs for headless CMS.
- tomevault-io Bundle Protocol Audit Prep
Prepare auditor-facing evidence bundles and AUDIT.md for protocol vaults without changing code. Use when an audit is upcoming and you need structured context, invariants, and test coverage summaries. Use when this capability is needed.
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include conventions-improver, dynamic-instrumentation, secure-development-lifecycle. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.