Security

Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.

cyberstrikeus Skill

Pw 6 1 Pw61

Use compiler, interpreter, and build tools that offer features to improve executable security.

Audited Sep 17
cyberstrikeus Skill

Pw 9 1 Pw91

Define a secure baseline by determining how to configure each setting that has an effect on security or a security-related setting so that the default

Audited Sep 17
cyberstrikeus Skill

Ac 3 8 Revocation Of Access Authorizations

Enforce the revocation of access authorizations resulting from changes to the security attributes of subjects and objects based on [organization-defin

Audited Sep 17
cyberstrikeus Skill

Ac 4 20 Approved Solutions

Employ [organization-defined] to control the flow of [organization-defined] across security domains.

Audited Sep 17
cyberstrikeus Skill

Ma 4 3 Comparable Security And Sanitization

Require that nonlocal maintenance and diagnostic services be performed from a system that implements a security capability comparable to the capabi...

Audited Sep 17
cyberstrikeus Skill

Ma 5 2 Security Clearances For Classified Systems

Verify that personnel performing maintenance and diagnostic activities on a system processing, storing, or transmitting classified information possess

Audited Sep 17
cyberstrikeus Skill

Ps 5 Personnel Transfer

Review and confirm ongoing operational need for current logical and physical access authorizations to systems and facilities when individuals are r...

Audited Sep 17
cyberstrikeus Skill

T1597 001 Threat Intel Vendors

Adversaries may search private data from threat intelligence vendors for information that can be used during targeting.

Audited Sep 17
cyberstrikeus Skill

Ac 16 7 Consistent Attribute Interpretation

Provide a consistent interpretation of security and privacy attributes transmitted between distributed system components.

Audited Sep 17
cyberstrikeus Skill

Ac 8 System Use Notification

Display [organization-defined] to users before granting access to the system that provides privacy and security notices consistent with applicable law

Audited Sep 17
cyberstrikeus Skill

Au 2 Event Logging

Identify the types of events that the system is capable of logging in support of the audit function: [organization-defined];

Audited Sep 17
cyberstrikeus Skill

Ps 3 Personnel Screening

Screen individuals prior to authorizing access to the system;

Audited Sep 17
cyberstrikeus Skill

Ps 8 Personnel Sanctions

Employ a formal sanctions process for individuals failing to comply with established information security and privacy policies and procedures;

Audited Sep 17
cyberstrikeus Skill

T1681 Search Threat Vendor Data

Threat actors may seek information/indicators from closed or open threat intelligence sources gathered about their own campaigns, as well as those conducted by other adversaries that may align with...

Audited Sep 17
cyberstrikeus Skill

Ac 4 23 Modify Non Releasable Information

When transferring information between different security domains, modify non-releasable information by implementing [organization-defined].

Audited Sep 17
cyberstrikeus Skill

At 4 Training Records

Document and monitor information security and privacy training activities, including security and privacy awareness training and specific role-base...

Audited Sep 17
cyberstrikeus Skill

Au 14 Session Audit

Provide and implement the capability for [organization-defined] to [organization-defined] the content of a user session under [organization-defined] ;

Audited Sep 17
cyberstrikeus Skill

Ps 4 2 Automated Actions

Use [organization-defined] to [organization-defined].

Audited Sep 17
javimosch Skill

Confidant

Secret management service with KMS encryption

Audited Sep 17
javimosch Skill

Mitmproxy

Use this skill when the user wants to debug HTTP traffic, inspect HTTPS requests, capture network traffic, or use mitmproxy for security testing.

Audited Sep 17
javimosch Skill

Modsurfer

Use this skill when the user wants to devtools to validate audit and investigate webassembly binaries.

Audited Sep 17
javimosch Skill

Paperasse

Use this skill when the user needs help with French bureaucracy, accounting, tax, notary, audit, property management, or any French administrative paperwork.

Audited Sep 17
javimosch Skill

Skillshare

Use this skill when the user wants to sync skills across AI CLI tools, install or update skills from GitHub, run security audits on skills, or manage skill sharing across team members.

Audited Sep 17
javimosch Skill

Cargo Audit

Use this skill when the user wants to audit Rust project dependencies for security vulnerabilities, check Cargo.lock for known CVEs, or run security scans on Rust projects.

Audited Sep 17
javimosch Skill

Ossgofragel

Use this skill when the user wants to use ossgofragel — Open source security vulnerability scanner for Go projects.

Audited Sep 17
javimosch Skill

Repo Security Scanner

Use this skill when the user wants to use the repo-security-scanner command-line tool.

Audited Sep 17
cyberstrikeus Skill

Ad Security

Active Directory security testing and attack techniques

Sep 17
cyberstrikeus Skill

Attack Websocket

WebSocket security testing — CSWSH, message injection, auth bypass, origin validation

Sep 17
cyberstrikeus Skill

Attack Race Condition

Race condition / TOCTOU testing — concurrent requests to exploit time-of-check-to-time-of-use flaws

Audited Sep 17
cyberstrikeus Skill

Wstg Athn 08

Testing for Weak Security Question Answer

Sep 17
cyberstrikeus Skill

Wstg Conf 07

Test HTTP Strict Transport Security

Audited Sep 17
cyberstrikeus Skill

Wstg Conf 12

Test for Content Security Policy

Audited Sep 17
cyberstrikeus Skill

Wstg Cryp 01

Testing for Weak Transport Layer Security

Audited Sep 17
cyberstrikeus Skill

Wstg Inpv 01

Testing for Reflected Cross-Site Scripting (XSS)

Audited Sep 17
cyberstrikeus Skill

Wstg Inpv 02

Testing for Stored Cross-Site Scripting (XSS)

Sep 17
javimosch Skill

Cyberstrikeai

Use this skill when the user wants to use CyberStrikeAI for CyberStrikeAI is an AI-native security testing platform built in Go. It integrat.

Audited Sep 17

Frequently asked questions

What are Security agent skills?

Which Security skills are most installed?

Popular Security skills on SkillMD right now include PW.6.1_pw61, PW.9.1_pw91, AC-3(8)_revocation-of-access-authorizations. Rankings shift as installs change; sort this page by "Most installs" for the live list.

Do Security skills work with Claude Code and Cursor?

Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.