Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Windsurf SecWindsurf Security Basics
- tomevault-io Bundle Checking Hipaa Compliance
Check HIPAA compliance for healthcare data security requirements. Use when auditing healthcare applications. Trigger with 'check HIPAA compliance', 'validate health data security', or 'audit PHI protection'. Use when this capability is needed.
- tomevault-io Bundle Checking Owasp Compliance
Check compliance with OWASP Top 10 security risks and best practices. Use when performing comprehensive security audits. Trigger with 'check OWASP compliance', 'audit web security', or 'validate OWASP'. Use when this capability is needed.
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Checking Ses
Checking Session Security
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Database Sec
Overview
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Documenso Se
Documenso Security Basics
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Firecrawl Se
Firecrawl Security Basics
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Fireflies Se
Fireflies.ai Security Basics
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Guidewire Se
Guidewire Security Basics
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Instantly Se
Instantly Security Basics
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Langchain Se
LangChain Security Basics
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Maintainx Se
MaintainX Security Basics
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Finding Secu
Finding Security Misconfigurations
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Assisting Wi
Assisting With SOC 2 Audit Preparation
- tomevault-io Bundle Validating Authentication Implementations
Validate authentication mechanisms for security weaknesses and compliance. Use when reviewing login systems or auth flows. Trigger with 'validate authentication', 'check auth security', or 'review login'. Use when this capability is needed.
- tomevault-io Bundle When Reviewing Pull Request Orchestrate Comprehensive Code R
Use when conducting comprehensive code review for pull requests across multiple quality dimensions. Orchestrates 12-15 specialized reviewer agents across 4 phases using star topology coordination. Covers automated checks, parallel specialized reviews (quality, security, performance, architecture, documentation), integration analysis, and final merge recommendation in a 4-hour workflow.
- tomevault-io Bundle When Auditing Code Style Use Style Audit
Code style and conventions audit with auto-fix capabilities for comprehensive style enforcement Use when this capability is needed.
- tomevault-io Bundle Esaldgut AI Native Engineering Workspace Swift Auth Security
Auth security checklist (iOS, defense-in-depth)
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Apollo Secur
Apollo Security Basics
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Linear Secur
Linear Security Basics
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Replit Secur
Replit Security Basics
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Vercel Secur
Vercel Security Basics
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Windsurf Aud
Windsurf Audit Logging
- tomevault-io Bundle Implementation Engineer
Implement features and fixes in this repo with security-first defaults, minimal diffs, and validated outcomes across userscript/backend boundaries. Use when this capability is needed.
- tomevault-io Bundle Verify Vuln Issues
Triage the repo's open "[Vulnerability]" GitHub issues — for every issue lacking a true-positive/false-positive label, fetch the referenced commit, judge whether it is a genuine security fix or a false positive, post an analysis comment, and apply the verdict label. Pure dependency bumps get a `dependency` label and are closed. Use when asked to "verify", "triage", or "review" the vulnerability issues / findings in the tracker. Use when this capability is needed.
- tomevault-io Bundle Repo Generating Validation Reports
Guidelines for generating validation/audit reports with UUID chains, progressive writing, and UTC+7 timestamps Use when this capability is needed.
- tomevault-io Bundle Zenprojectgit Claude Code Plugins Plus Skills Windsurf Audit
Windsurf Audit Logging
- tomevault-io Bundle Ammalgam Protocol Web3 Audit Response Toolkit Reviewing Audi
Reviewing Web3 Audit Reports
- tomevault-io Bundle Silentdata Development
Build privacy-preserving smart contracts and dApps on Silent Data L2. Use when creating contracts with private read methods, private events, confidential ERC-20 (UCEF), compliant security tokens (UCEF3643), or deploying to Silent Data blockchain. Handles Hardhat deployment, ethers.js/viem integration, and private event consumption. Use when this capability is needed.
- tomevault-io Bundle Spring Boot Openapi Documentation
Provides patterns to generate comprehensive REST API documentation using SpringDoc OpenAPI 3.0 and Swagger UI in Spring Boot 3.x applications. Use when setting up API documentation, configuring Swagger UI, adding OpenAPI annotations, implementing security documentation, or enhancing REST endpoints with examples and schemas.
- tomevault-io Bundle Platform Healthcheck
Comprehensive platform health verification for nemotron-v3 home security system. USE WHEN checking platform health, after infrastructure changes, debugging service issues, or verifying deployment state. Use when this capability is needed.
- tomevault-io Bundle Approved Answer Matcher
Use when a security questionnaire question can be answered from vetted language while preserving caveats, confidence, and approval status.
- tomevault-io Bundle Repo Assessing Criticality Confidence
Universal classification system for checker and fixer agents using orthogonal criticality (CRITICAL/HIGH/MEDIUM/LOW importance) and confidence (HIGH/MEDIUM/FALSE_POSITIVE certainty) dimensions. Covers priority matrix (P0-P4), execution order, dual-label pattern for verification status, standardized report format, and domain-specific examples. Essential for implementing checker/fixer agents and processing audit reports Use when this capability is needed.
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Auditing Wal
Wallet Security Auditor
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Cookie Secur
Cookie Security Analyzer
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Deepgram Sec
Deepgram Security Basics
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include jeremylongshore--claude-code-plugins-plus-skills--windsurf-security-basics, checking-hipaa-compliance, checking-owasp-compliance. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.