Security

Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.

javimosch Skill

Dotenv Linter

dotenv-linter — linter for .env files. Checks for formatting issues, duplicates, alphabetization, and security concerns.

Audited Sep 17
javimosch Skill

Pip Audit

Use this skill when the user wants to audit Python dependencies for known vulnerabilities, check requirements files for CVEs, or scan Python environments for security issues.

Audited Sep 17
javimosch Skill

Sastsweep

Use this skill when the user wants to sast security scanner and vulnerability research cli.

Audited Sep 17
javimosch Skill

Sonarqube

SonarQube scanner for code quality and security analysis.

Audited Sep 17
javimosch Skill

Terrascan

Infrastructure as code security scanner.

Audited Sep 17
javimosch Skill

Cherrybomb

Use this skill when the user wants to audit API specifications, validate OpenAPI specs, or perform API security testing.

Audited Sep 17
javimosch Skill

Claude Red

Use this skill when the user needs offensive security expertise — penetration testing, vulnerability assessment, red team operations, bug bounty hunting, or security research for authorized engagements.

Audited Sep 17
cyberstrikeus Skill

Data Security Pr Ds Data Security

Data are managed consistent with the organization's risk strategy to protect the confidentiality, integrity, and availability of information

Audited Sep 17
cyberstrikeus Skill

T1655 Masquerading

Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools.

Audited Sep 17
cyberstrikeus Skill

Mp 8 Media Downgrading

Establish [organization-defined] that includes employing downgrading mechanisms with strength and integrity commensurate with the security category...

Audited Sep 17
cyberstrikeus Skill

T0820 Exploitation For Evasion

Adversaries may exploit a software vulnerability to take advantage of a programming error in a program, service, or within the operating system software or kernel itself to evade detection.

Audited Sep 17
cyberstrikeus Skill

T1562 010 Downgrade Attack

Adversaries may downgrade or use a version of system features that may be outdated, vulnerable, and/or does not support updated security controls.

Sep 17
cyberstrikeus Skill

T1564 009 Resource Forking

Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications.

Audited Sep 17
cyberstrikeus Skill

T1185 Browser Session Hijacking

Adversaries may take advantage of security vulnerabilities and inherent functionality in browser software to change content, modify user-behaviors, and intercept information as part of various brow...

Audited Sep 17
cyberstrikeus Skill

Ac 4 25 Data Sanitization

When transferring information between different security domains, sanitize data to minimize [organization-defined] in accordance with [organization-de

Audited Sep 17
cyberstrikeus Skill

Au 8 Time Stamps

Use internal system clocks to generate time stamps for audit records;

Audited Sep 17
cyberstrikeus Skill

Pl 3 System Security Plan Update

System Security Plan Update

Audited Sep 17
cyberstrikeus Skill

Ps 6 Access Agreements

Develop and document access agreements for organizational systems;

Audited Sep 17
cyberstrikeus Skill

T1547 005 Security Support Provider

Adversaries may abuse security support providers (SSPs) to execute DLLs when the system boots.

Sep 17
cyberstrikeus Skill

T1134 Access Token Manipulation

Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls.

Audited Sep 17
cyberstrikeus Skill

Ac 16 9 Attribute Reassignment Regrading Mechanisms

Change security and privacy attributes associated with information only via regrading mechanisms validated using [organization-defined].

Audited Sep 17
cyberstrikeus Skill

Ac 4 12 Data Type Identifiers

When transferring information between different security domains, use [organization-defined] to validate data essential for information flow decisions

Audited Sep 17
cyberstrikeus Skill

At 2 2 Insider Threat

Provide literacy training on recognizing and reporting potential indicators of insider threat.

Audited Sep 17
cyberstrikeus Skill

Cm 4 Impact Analyses

Analyze changes to the system to determine potential security and privacy impacts prior to change implementation.

Audited Sep 17
cyberstrikeus Skill

Pm 26 Complaint Management

Implement a process for receiving and responding to complaints, concerns, or questions from individuals about the organizational security and privacy

Audited Sep 17
cyberstrikeus Skill

Ps 1 Policy And Procedures

Develop, document, and disseminate to [organization-defined]: [organization-defined] personnel security policy that: Procedures to facilitate the impl

Audited Sep 17
cyberstrikeus Skill

Ps 4 Personnel Termination

Upon termination of individual employment: Disable system access within [organization-defined]; Terminate or revoke any authenticators and credentials

Audited Sep 17
cyberstrikeus Skill

Ps 9 Position Descriptions

Incorporate security and privacy roles and responsibilities into organizational position descriptions.

Audited Sep 17
cyberstrikeus Skill

T1202 Indirect Command Execution

Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.

Audited Sep 17
cyberstrikeus Skill

T1601 002 Downgrade System Image

Adversaries may install an older version of the operating system of a network device to weaken security.

Audited Sep 17
cyberstrikeus Skill

Ac 2 4 Automated Audit Actions

Automatically audit account creation, modification, enabling, disabling, and removal actions.

Audited Sep 17
cyberstrikeus Skill

Ac 4 30 Filter Mechanisms Using Multiple Processes

When transferring information between different security domains, implement content filtering mechanisms using multiple processes.

Audited Sep 17
cyberstrikeus Skill

Ac 4 31 Failed Content Transfer Prevention

When transferring information between different security domains, prevent the transfer of failed content to the receiving domain.

Audited Sep 17
cyberstrikeus Skill

Ac 4 19 Validation Of Metadata

When transferring information between different security domains, implement [organization-defined] on metadata.

Audited Sep 17
cyberstrikeus Skill

Pm 10 Authorization Process

Manage the security and privacy state of organizational systems and the environments in which those systems operate through authorization processes;

Audited Sep 17
cyberstrikeus Skill

T1430 002 Impersonate Ss7 Nodes

Adversaries may exploit the lack of authentication in signaling system network nodes to track the location of mobile devices by impersonating a node.

Audited Sep 17

Frequently asked questions

What are Security agent skills?

Which Security skills are most installed?

Popular Security skills on SkillMD right now include cherrybomb, dotenv-linter, pip-audit. Rankings shift as installs change; sort this page by "Most installs" for the live list.

Do Security skills work with Claude Code and Cursor?

Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.