Security

Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.

plurigrid Bundle

Modding Ghostty

Defensive security map of Ghostty terminal escape sequences. VT/OSC attack surface, stdin injection vectors, parser DFA analysis, CVE catalog. Triggers: ghostty security, escape sequence, terminal hardening, VT parser, OSC.

Sep 17
plurigrid Bundle

Onepassword CLI

1Password CLI (op) for secure secret management, credential injection, and shell plugin auth. Use when users need secrets, API keys, env vars, or authenticating third-party CLIs.

Sep 17
plurigrid Bundle

Variant Analysis

Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, analyzing security vulnerabilities, or performing systematic code audits after finding an initial issue.

Sep 17
plurigrid Bundle

Network Forensics

Analyze network traffic captures for security incidents, protocol anomalies, and data exfiltration. Uses tcpdump, tshark/Wireshark, Zeek, and ngrep for packet-level forensics in authorized testing environments.

Sep 17
plurigrid Bundle

Substitute Eraser

This skill should be used when the user asks to "scan for TODOs", "find placeholders", "clean up stubs", "remove temporary code", "audit for incomplete code", or "erase substitutions from codebase". Scans existing files for placeholder tokens and generates remediation plan.

Sep 17
plurigrid Bundle

Tizen Cve Scanner

Scans for known Tizen CVEs in app dependencies and kernel. Checks OpenCVE database and Samsung security updates.

Sep 17
plurigrid Bundle

Audit Orchestrator

Audit Orchestrator

Sep 17
plurigrid Bundle

Rf Signal Analysis

Analyze wireless and radio frequency security in applications, protocols, and hardware. Covers WiFi, Bluetooth/BLE, RFID/NFC, Zigbee, LoRa, cellular, and SDR-based analysis. Use when auditing IoT devices, wireless protocols, access control systems, or any RF-enabled infrastructure.

Sep 17
plurigrid Bundle

Cryptographic Audit

Audit cryptographic implementations for misuse, weak algorithms, improper key management, and TLS/certificate configuration issues. Uses testssl.sh, openssl, sslyze, and code review patterns. For authorized security assessments.

Sep 17
plurigrid Bundle

Differential Review

Security-focused code review of diffs and pull requests using Trail of Bits expertise.

Sep 17
plurigrid Bundle

Social Engineering Audit

Assess social engineering attack surface in applications and organizations. Identifies pretexting vectors, OSINT exposure, phishing susceptibility in authentication flows, and human-factor vulnerabilities in security architecture. Use when auditing auth flows, help desk procedures, password reset mechanisms, or organizational security posture.

Sep 17
plurigrid Bundle

Tizen Security Compliance

Maps security requirements to implementation. Coordinates compliance against FIPS 140-3, OCF, CommonCriteria, and Tizen specification.

Sep 17
plurigrid Bundle

Hermes Session As Snapshot

Replace Hermes' session/trajectory persistence (JSON files + in-memory dict + flush points) with Goblins vat-snapshot atomically capturing the conversation actor + a Syndicate event-log dataspace for the append-only history. Resume = vat-restore; fork = vat-clone; audit = traverse the event-log dataspace.

Sep 17
plurigrid Bundle

Testing Handbook Generator

Generates comprehensive testing handbooks and guides for security testing strategies.

Sep 17
plurigrid Bundle

Glamorous Moldable Multiplatform

- **v1.1.0 (2026-02-09)**: Live GraphQL update of all 10 repos with commit-level detail. Portal is hottest (grading system, WebGPU fix, security hardening). zig-syrup expanded (13 new modules, 326 worlds, 610 skills). asi at 636 droids. graded-optic born this week. leprechauns got Gay.jl green-root

Sep 17
plurigrid Skill

Burpsuite Project Parser

Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.

Audited Sep 17
plurigrid Skill

Static Security Analyzer

Wrapper around Tizen Studio static analyzer. Detects memory leaks, buffer overflows, and coding vulnerabilities in C/C++/JavaScript.

Audited Sep 17
plurigrid Bundle

Cq AI Deterministic Security Scanning With Ternary Polarity

Deterministic code security scanner using SplitMix64 seeding. Same seed + same codebase = identical findings. Ternary severity classification. Triggers: cq-ai, security scan, deterministic analysis, code query, vulnerability scanner.

Sep 17
newmindsgroup Skill

Zeroize Audit

Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data.

Audited Sep 17
newmindsgroup Skill

Laravel Expert

Senior Laravel Engineer role for production-grade, maintainable, and idiomatic Laravel solutions. Focuses on clean architecture, security, performance, and modern standards (Laravel 10/11+).

Audited Sep 17
newmindsgroup Skill

Pci Compliance

Master PCI DSS (Payment Card Industry Data Security Standard) compliance for secure payment processing and handling of cardholder data.

Audited Sep 17
newmindsgroup Skill

Security Audit

Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening.

Audited Sep 17
newmindsgroup Skill

Malware Analyst

Expert malware analyst specializing in defensive malware research, threat intelligence, and incident response. Masters sandbox analysis, behavioral analysis, and malware family identification.

Audited Sep 17
newmindsgroup Skill

Avoid AI Writing

Audit and rewrite content to remove 21 categories of AI writing patterns with a 43-entry replacement table

Audited Sep 17
newmindsgroup Skill

Firmware Analyst

Expert firmware analyst specializing in embedded systems, IoT security, and hardware reverse engineering.

Sep 17
paulasilvatech Bundle

Databricks Migration

Port Databricks notebooks and jobs to Microsoft Fabric. Provides an exhaustive dbutils to notebookutils substitution table: fs operations (runtime mounts or OneLake Shortcuts), secret scope to Key Vault URL conversion, notebook run and exit, widget replacement with parameter-tagged cells, and library install replacement with Fabric Environments. Covers Unity Catalog three-level namespace reduction to Lakehouse two-level schemas, DBFS path conversion to OneLake, Databricks Jobs to Spark Job Definitions, MLflow tracking URI removal, and Photon to Native Execution Engine substitution. Use when the user wants to: (1) replace dbutils with notebookutils, (2) collapse Unity Catalog namespaces to Lakehouse schemas, (3) convert Databricks Jobs or Delta Live Tables. Triggers: "migrate from databricks", "databricks to fabric", "dbutils to notebookutils", "dbutils fabric", "unity catalog migration", "dbfs to onelake", "databricks notebook migration", "delta live tables fabric", "photon native execution".

Sep 17
plurigrid Bundle

The Fool

Structured critical reasoning across 5 modes. Use when challenging ideas, plans, decisions, or proposals. Invoke to play devil's advocate, run a pre-mortem, red team, or audit evidence and assumptions. Triggers: play the fool, devil's advocate, challenge this, stress test, poke holes, what could go wrong, red team, pre-mortem, test my assumptions.

Sep 17
newmindsgroup Bundle

7

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.

Sep 17
newmindsgroup Bundle

Wordpress

Complete WordPress development workflow covering theme development, plugin creation, WooCommerce integration, performance optimization, and security hardening. Includes WordPress 7.0 features: Real-Time Collaboration, AI Connectors, Abilities API, DataViews, and PHP-only blocks.

Sep 17
newmindsgroup Skill

Network 101

Configure and test common network services (HTTP, HTTPS, SNMP, SMB) for penetration testing lab environments. Enable hands-on practice with service enumeration, log analysis, and security testing against properly configured target systems.

Audited Sep 17
newmindsgroup Skill

Audit Skills

Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads across Windows, macOS, Linux/Unix, and Mobile (Android/iOS).

Sep 17
plurigrid Bundle

Counter Surveillance

Assess and harden operational security (OPSEC) posture for applications, communications, and infrastructure. Identifies surveillance exposure, metadata leakage, and tracking vectors. Use when auditing privacy-sensitive applications, reviewing OPSEC for threat models involving state-level adversaries, or hardening communications infrastructure.

Sep 17
plurigrid Bundle

Entry Point Analyzer

Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricted, contract-only), and generates structured audit reports. Excludes view/pure/read-only functions. Use when auditing smart contracts (Solidity, Vyper, Solana/Rust, Move, TON, CosmWasm) or when asked to find entry points, audit flows, external functions, access control patterns, or privileged operations.

Sep 17
plurigrid Bundle

Osint Exposure Audit

Assess an organization's open-source intelligence (OSINT) exposure. Identifies leaked credentials, exposed infrastructure, metadata in public documents, social media intelligence, and reconnaissance surface available to attackers without authentication. Use when performing external attack surface assessment, pre-engagement reconnaissance review, or data leakage auditing.

Sep 17
plurigrid Bundle

Semgrep Rule Creator

Create custom Semgrep rules for detecting bug patterns and security vulnerabilities. This skill should be used when the user explicitly asks to "create a Semgrep rule", "write a Semgrep rule", "make a Semgrep rule", "build a Semgrep rule", or requests detection of a specific bug pattern, vulnerability, or insecure code pattern using Semgrep.

Sep 17
plurigrid Bundle

Trailofbits Security

- `codeql` - GitHub's semantic code analysis

Sep 17

Frequently asked questions

What are Security agent skills?

Which Security skills are most installed?

Popular Security skills on SkillMD right now include modding-ghostty, onepassword-cli, variant-analysis. Rankings shift as installs change; sort this page by "Most installs" for the live list.

Do Security skills work with Claude Code and Cursor?

Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.