Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
prism-shadow Bundle Portfolio Engineering AuditEntry instructions for solving portfolio-engineering audit tasks (work-item portfolio-mix reviews, SLA-aging audits, and release-readiness assessments) against the shared work-items environment. Use when you must produce a single JSON answer for one of these audit task types and want the validated field conventions for scope, classification, duplicates, authoritative-vs-stale fields, ordering, and precision.
-
prism-shadow Skill Peopleops Console Lifecycle ControlSolve ERP HR "PeopleOps Console" lifecycle/leave/payroll/policy-case/recruitment/document/notice/audit tasks by cross-referencing the remote HTTP API and applying source-precedence, folder-readiness, notice-defect, and audit-scope business rules to emit normalized-label JSON.
-
prism-shadow Skill Peopleops Console Case ResolutionResolve ERP HR "PeopleOps Console" lifecycle/leave/payroll/policy-case/recruitment/documents/messages/audit tasks by applying record-source precedence, folder/notice readiness gates, and scoped audit correlation, then emitting normalized enum labels.
-
prism-shadow Bundle Court Clerk Closeout ReconciliationPrepare a structured JSON closeout/register/field-packet for a court clerk by reconciling messy local materials (bench/hearing notes, clerk worksheets, finance-queue extracts, petition & budget summaries, form excerpts) against the authoritative court-operations records the task exposes (case, charge, docket, citation, fee-schedule, payment-policy, form, and financial-petition records). Use for criminal sentencing closeouts, traffic-violation dispositions with payment plans, and post-sentencing field packets (probation-referral / license suspension / installment-order forms). Trigger words: closeout, disposition register, reconcile, audit findings, fee reconciliation, payment plan / installment order, sentencing packet, clerk worksheet, hearing/bench notes.
-
prism-shadow Skill Task Group 012 Fewshot Attempt 01Use for Northwind PeopleOps Console tasks that require reconciling employee leave, payroll assignment, onboarding closeout, remote-work case folders/notices, recruitment outcomes, audit evidence, and JSON answers that must match an answer_template with normalized enum labels.
-
prism-shadow Skill Task Group 012 Fewshot Attempt 03Use for Northwind PeopleOps Console tasks that require reconciling HR lifecycle records, leave/payroll source precedence, recruitment outcomes, folder/notice readiness, audit evidence, and writing evaluator-ready answer.json files from a provided answer_template.json.
-
wonsukchoi Bundle UsherUse when a task needs the judgment of an usher, lobby attendant, or ticket taker — staffing doors and scanner lanes before a show or game, deciding when to hold or admit a late arrival, reading crowd density at a pinch point before it becomes a capacity problem, resolving a ticket or accessible-seating dispute at the door, or escalating a medical or security incident in the house.
-
wonsukchoi Bundle BailiffUse when a task needs the judgment of a bailiff or court officer — deciding whether an in-custody defendant appears in visible or concealed restraints, running courtroom entry screening and staffing it for expected volume, handling a disruptive defendant or spectator under the judge's authority, moving a jury note between jury room and bench without an ex parte violation, or planning custody/security for a jury sequestration.
-
wonsukchoi Bundle JewelerUse when a task needs the judgment of a Jeweler/Precious Stone and Metal Worker — calculating a wax pattern's dimensions from a target ring size and alloy-specific casting shrinkage rate, verifying stone setting security by prong metal thickness rather than visual tightness, reconciling metal weight in/out on a job, or deciding whether a specific gemstone can safely tolerate ultrasonic cleaning or heat during a repair.
-
wonsukchoi Bundle File ClerkUse when a task needs the judgment of a File Clerk — designing or diagnosing a filing/classification system, running a misfile-rate audit, sequencing a records-retention purge, indexing a physical-to-digital conversion batch, or resolving a lost-file/charge-out tracking gap.
-
komunite Skill Subscription Cost AuditAnalyze and produce a subscription cost audit with structured process, quality checks, and system integration
-
komunite Skill Supply Chain SecurityCreate a supply chain security with structured process, quality checks, and system integration
-
komunite Skill Personal Brand AuditAnalyze and produce a personal brand audit with structured process, quality checks, and system integration
-
komunite Skill Customer Experience AuditAnalyze and produce a customer experience audit with structured process, quality checks, and system integration
-
amey-thakur Skill Security Engineer RoleOperate as a security engineer who reduces real risk through threat models, targeted reviews, scalable tooling, and incident duty. Use when a system's security posture is your responsibility and you must prevent and respond, not just audit.
-
cslawyer1985 Bundle Legal Doc SummarizerRead contracts, NDAs, terms of service, employment agreements, leases, and SaaS MSAs and produce a structured summary that flags risk, surfaces hidden obligations, and gives plain-language explanations. Identifies indemnification, limitation of liability, IP assignment, non-compete, auto-renewal, choice-of-law, arbitration, termination, and payment-terms clauses. Compares clauses to market norms and flags deviations. Outputs a redline checklist of what to push back on. NOT a substitute for licensed counsel — provides general information only. Use when asked to summarize a contract, review an NDA, explain an employment agreement, audit a SaaS MSA, check a lease, prepare for negotiation, redline a contract, or understand what a clause means. Triggers on "summarize this contract", "review this NDA", "explain this clause", "redline", "review my offer letter", "lease review", "MSA review", "DPA review", "ToS summary", "what does this mean".
-
cslawyer1985 Bundle Wechat Content Audit全平台内容合规审核技能。覆盖微信公众号/今日头条/知乎/小红书/抖音/B站六大主流平台的内容审核规范,包括政治安全、医疗健康、广告营销、虚假信息、侵权风险、低质内容、平台特有规则七大审核维度。用于内容发布前的全平台合规检查,确保内容符合各平台运营规范,降低封号/限流/投诉风险。
-
cslawyer1985 Bundle China Data ComplianceEnsure applications comply with Chinese data protection laws (PIPL, Cybersecurity Law, Data Security Law). Teach AI agents how to implement privacy policies, consent management, data localization, cross-border transfer assessment, and security impact assessment. Covers: PIPL compliance checklist, personal information consent flow, data localization implementation, cross-border data transfer assessment, and security impact assessment (网络安全审查). Triggers on: 中国数据合规, china data compliance, 个人信息保护法, PIPL compliance, 网络安全法, cybersecurity law, 数据安全法, data security law, 数据本地化, data localization, 跨境数据传输, cross-border data transfer, 隐私政策, privacy policy china, 个人信息同意, consent management china, 网络安全审查, security assessment china, 数据出境, data export china
-
cslawyer1985 Bundle Contract Audit Stream使用合同审核流式接口(SSE)批量审核合同(链接或文件上传),甲/乙方视角可选,需携带 api_key;部署域名 https://dyinsight.cn,接口 /api/v1/skills/contract/audit。Triggers on phrases like "审核合同", "audit contract", "合同流式审核", "调用 contract-audit-stream".
-
cslawyer1985 Bundle Security Review Openai执行语言和框架特定的安全最佳实践审查并提出改进建议。仅在用户明确请求安全最佳实践指导、安全审查/报告或默认安全编码帮助时触发。仅对受支持的语言(python、javascript/typescript、go)触发。不要为一般代码审查、调试或非安全任务触发。
-
cslawyer1985 Bundle Mediation Brief DrafterUse this skill when a litigator, in-house counsel, or ADR specialist needs to draft a two-part mediation brief for a civil mediation session under JAMS, AAA, FINRA, or court-annexed rules. Produces a DRAFT SHARED brief and a CONFIDENTIAL mediator-only brief with BATNA/WATNA/ZOPA analysis, settlement- authority worksheet, and a do-not-share audit for licensed counsel review.
-
komunite Skill Microcopy AuditAnalyze and produce a microcopy audit with structured process, quality checks, and system integration
-
javimosch Skill Seithar Intelseithar-intel — Threat Intelligence & Cognitive Security Feed
-
wonsukchoi Bundle Web AdministratorUse when a task needs the judgment of a Web Administrator — diagnosing an outage or slow-page incident, planning a TLS/DNS cutover, deciding CDN vs origin caching policy, or hardening a web server/WAF configuration against a specific threat.
-
wonsukchoi Bundle Compliance OfficerUse when a task needs the judgment of a Compliance Officer — deciding whether a suspected violation triggers a mandatory regulatory filing or disclosure, designing or risk-rating a compliance monitoring program, running a violation investigation to root cause, briefing a board/audit committee on compliance findings, or responding to a regulatory exam finding.
-
wonsukchoi Bundle Blockchain EngineerUse when a task needs the judgment of a Blockchain Engineer — applying the checks-effects-interactions pattern to prevent a reentrancy exploit, auditing a privileged/administrative function for missing access control, designing a manipulation-resistant oracle for on-chain price data, minimizing gas cost through storage-write design, or deciding whether a smart contract needs an upgradability pattern before deployment.
-
wonsukchoi Bundle Security SupervisorUse when a task needs the judgment of a first-line security supervisor — building post coverage and shift schedules, deciding how to fill a callout or staffing gap, reviewing an incident or use-of-force report, responding to a client's request to cut a post, or handling an officer performance or discipline issue.
-
wonsukchoi Bundle Intelligence AnalystUse when a task needs the judgment of a law-enforcement or security Intelligence Analyst — building an Analysis of Competing Hypotheses (ACH) matrix from fragmentary reporting, grading source reliability and information credibility on the Admiralty scale, mapping a criminal network's link chart to find the actual facilitator, calibrating confidence language in an intelligence bulletin, or red-teaming a fast-forming analytic consensus.
-
wonsukchoi Bundle Treasurer ControllerUse when a task needs the judgment of a senior Treasurer or Controller overseeing an organization's cash/liquidity management and financial reporting function at an executive level — managing banking relationships and liquidity, overseeing the close and external audit process, or making a treasury policy decision (investment of cash, hedging, debt covenants). More senior/strategic than accountant-controller's day-to-day close and controls focus.
-
haibarakiku Bundle Security GuardSecurity Guard
-
haibarakiku Bundle LocksmithExpert locksmith specializing in residential, commercial, and automotive lock services including emergency lockout response, key cutting, lock installation, master key systems, and security assessments
Audited -
haibarakiku Bundle Fintech Engineer> **DISCLAIMER:** This skill provides general fintech engineering education and information only. It does NOT constitute professional technology or financial advice. Building financial systems requires proper security audits, regulatory compliance, and professional engineering practices. This skill does not have access to actual financial systems or sensitive data.
-
wonsukchoi Bundle Medical Records SpecialistUse when a task needs the judgment of a Medical Records Specialist / Health Information Management (HIM) professional — assigning ICD-10-CM/PCS or CPT codes from clinical documentation, drafting a compliant physician query, processing a release-of-information (ROI) request under HIPAA's minimum necessary standard, or building a defense response to a payer/RAC coding-denial audit.
-
wonsukchoi Bundle Personal Financial AdvisorUse when a task needs the judgment of a personal financial advisor — building a retirement income plan, evaluating a Social Security claiming strategy, structuring a tax-loss harvesting and asset-location plan, drafting an Investment Policy Statement, or stress-testing a plan against sequence-of-returns and longevity risk.
-
wonsukchoi Bundle Application Security EngineerUse when a task needs the judgment of an Application Security Engineer — checking whether an endpoint verifies object-level authorization (not just authentication), running threat modeling at design time rather than deferring security review to the end, triaging a dependency vulnerability by actual reachability rather than CVSS score alone, combining SAST/DAST/SCA tooling to cover their distinct blind spots, or applying context-specific output encoding to untrusted input. Distinct from an information security analyst — this role works inside the SDLC to prevent vulnerabilities before they ship, not detect and respond to intrusions in production.
-
wonsukchoi Bundle Correctional Services ManagerUse when a task needs the judgment of a correctional services manager (warden/facility administrator) — deciding how to respond to a staffing cut against safety risk, reviewing an inmate classification or housing decision, evaluating a use-of-force incident, deciding whether restrictive housing placement is justified and time-limited, or weighing security spending against programming budget under fiscal pressure.
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include portfolio-engineering-audit, peopleops-console-lifecycle-control, peopleops-console-case-resolution. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.