Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
wonsukchoi Bundle Security Fire Alarm InstallerUse when a task needs the judgment of a security and fire alarm systems installer — laying out detector/notification-appliance placement against NFPA 72, choosing Class A vs Class B circuit topology, sizing candela on notification appliances, prepping for an AHJ acceptance test, or diagnosing a false-alarm pattern on an existing system.
-
wonsukchoi Bundle Security Management SpecialistUse when a task needs the judgment of a corporate security management specialist — designing a physical/personnel security program, scoping an executive protection detail, building a workplace violence prevention plan, sizing or vetting a contract guard force, or running a facility security risk assessment. Distinct from a cybersecurity role (network/data protection) and from a compliance-officer (regulatory adherence) — this role protects people, physical assets, and continuity of operations against human threats.
-
wonsukchoi Bundle Equal Opportunity RepresentativeUse when a task needs the judgment of an Equal Opportunity Representative or Officer — running an adverse-impact analysis on hiring or promotion selection rates, conducting an availability analysis to set affirmative action placement goals, evaluating a compensation-equity regression for unexplained pay gaps, or preparing an affirmative action plan (AAP) for an OFCCP audit.
-
wonsukchoi Bundle Transportation Security ScreenerUse when a task needs the judgment of a Transportation Security Officer (airport checkpoint screener) — resolving an AIT or metal-detector alarm to its SOP endpoint, deciding disposition for a prohibited or restricted item, triaging a multi-alarm passenger under queue-time pressure, or evaluating whether a screening shortcut created a procedural gap.
-
wonsukchoi Bundle ReceptionistUse when a task needs the judgment of a receptionist or front-desk information clerk — triaging a multi-line phone queue under time pressure, deciding whether a visitor gets escorted back or asked to wait, de-escalating an upset caller before routing them, or running a visitor-badge/security-check procedure.
-
wonsukchoi Bundle Tax PreparerUse when a task needs the judgment of a paid individual/small-business tax return preparer — reconstructing income from client documents, choosing the right forms and schedules, computing tax liability including self-employment tax, running EITC/CTC/AOTC/HOH due-diligence checks, reconciling withholding against actual liability, or drafting a response to an IRS notice (CP2000, audit letter). Not a tax-strategy/CFO role (see financial-manager) — this is return-preparation and filing-compliance craft for the current filing season.
-
wonsukchoi Bundle Customs BrokerUse when a task needs the judgment of a licensed Customs Broker — classifying goods under the Harmonized Tariff Schedule (HTS), calculating landed duty and fees on an import entry, determining country of origin and free-trade-agreement eligibility, filing an Importer Security Filing (ISF) or entry summary, or deciding whether a classification or valuation position is defensible under CBP's "reasonable care" standard.
-
wonsukchoi Bundle Energy AuditorUse when a task needs the judgment of an Energy Auditor — running a blower-door/duct-leakage diagnostic sequence on a home or light-commercial building, testing combustion appliances for worst-case backdraft risk before recommending air sealing, reconciling utility billing history against walkthrough findings, ranking retrofit measures by savings-to-investment ratio (SIR) for a weatherization or utility rebate program, or writing the prioritized scope of work an install crew executes without the auditor on site. Distinct from an energy-engineer (industrial/commercial capital planning, IPMVP measurement and verification, calibrated simulation) — this role owns the field diagnostics and the residential/light-commercial audit-to-scope handoff.
-
wonsukchoi Bundle Security GuardUse when a task needs the judgment of a Security Guard — deciding whether to physically detain a suspected shoplifter or trespasser, choosing when to use force versus call police, writing a post-incident report that will hold up in a civil claim, running a fire watch or patrol schedule, or working a healthcare/retail/corporate post against written post orders.
-
wonsukchoi Bundle Data Entry KeyerUse when a task needs the judgment of a Data Entry Keyer — resolving an illegible or ambiguous source-document field before keying it, running key-verification (double-key) reconciliation on a batch, deciding whether a production-speed quota is compromising accuracy, or sampling a completed batch for a quality-control audit.
-
wonsukchoi Bundle Security ManagerUse when a task needs the judgment of a (physical/corporate) Security Manager — designing physical access controls, assessing a facility or event's security risk, responding to a security incident, or deciding how to allocate a security budget across prevention, detection, and response. Distinct from a cybersecurity/information-security role — this one covers physical and personnel security.
-
prism-shadow Skill Peopleops Lifecycle Control SolverUse this skill for PeopleOps Console tasks that ask you to reconcile onboarding, leave, payroll, remote-work, recruitment, document, notice, or audit evidence into a strict JSON answer template. It is especially useful when prompts mention source precedence, submitted versus draft records, folder readiness, notice defects, payroll handoff, accrual readiness, or normalized business labels.
-
prism-shadow Skill Ehr Quality Governance PacketsBuild normalized JSON packets and audits from a read-only EHR quality-governance API. Use for duplicate chart merge readiness, referral coordination, care transition handoffs, ServiceRequest quality review, and referral batch audits where Codex must inspect patient, provider, ICD-10, service-code, document, disclosure, encounter, audit-log, and active clinical-list evidence and return schema-conformant JSON only.
-
prism-shadow Skill Asteria Data Quality AuditsReconcile Asteria Fleet Data Quality Hub collections and produce exact JSON audit/certification answers from prompts that provide a case_scope.json, answer_template.json, environment_access.md, and Asteria hub endpoints. Use for contact-master/onboarding/roster readiness, fuel ledger normalization, freight accrual cleanup, and maintenance-history integrity tasks requiring source snapshot selection, duplicate retention, quarantine decisions, normalized totals, ranking panels, and compact Asteria control codes.
-
prism-shadow Skill Asteria Data Quality ReconciliationReconcile Asteria Fleet Data Quality Hub audit tasks that use environment_access.md, payloads/case_scope.json, and payloads/answer_template.json. Use for contact survivorship/readiness, fuel or freight ledger cleanup, maintenance history integrity, source-snapshot retention, alias/reference policy decisions, unit/FX normalization, quarantine/exception reporting, compact control-code panels, and strict JSON-only answer contracts.
-
prism-shadow Bundle Cedar Ridge Intake AuditAudit and verify Cedar Ridge intake work (patient access verification, referral readiness, dialysis transfer review, chronic-care enrollment panels, referral-to-chart activation) against the Cedar Ridge Intake Coordination Portal. Use whenever a task points at the Cedar Ridge Intake Coordination Portal and asks for a single JSON object following an answer_template.json — covers roster/patient access, referral batch readiness, transfer packet review, program enrollment panels, and referral chart activation.
-
prism-shadow Bundle Ehr Quality Governance PacketProduce a normalized JSON packet or audit from the read-only EHR quality-governance API. Covers duplicate-chart merge readiness, referral coordination, care-transition handoff, duplicate-review + service-request quality, and referral batch audit. Use whenever a task points at the shared EHR environment base URL (task-env), supplies case objects such as candidate/patient/referral/batch/provider/service-request IDs, asks you to verify evidence against that environment, and requires a single JSON object conforming to a provided answer_template.json. Do NOT use for tasks that do not target this EHR environment or that do not supply an answer template.
-
prism-shadow Bundle Court Operations CloseoutDeputy-clerk closeout and reconciliation packets for a Court Operations Portal. Use when the task combines local payloads (hearing notes, audit memos, finance worksheets, fee scratchpads, form excerpts, petition/budget summaries) with a court portal API, and asks for a single JSON answer matching a schema template. Covers audit/conflict resolution, disposition status, fee and payment-plan reconciliation, form-field handling, placeholder discipline, and exclusion of unsupported charges.
-
prism-shadow Bundle Asteria Fleet Dq AuditAudit and certify an Asteria Fleet Data Quality Hub collection (fuel purchases, freight charges, maintenance events, or contacts). Reconcile overlapping source records against the authoritative snapshot, normalize units and currency, infer opaque internal control codes, and emit exactly one JSON object that matches the task's answer_template. Use whenever a task points at the Asteria Fleet Data Quality Hub and stages payloads/case_scope.json + payloads/answer_template.json.
-
prism-shadow Bundle Pho Registered AuditComplete a Public Health Observatory (PHO) registered algorithmic audit. Resolve final releases/revisions from the read-only PHO portal, build the declared cohorts, run the six registered audit modules deterministically (delete-one-cluster jackknife / two-step GMM, nested leave-group-out ridge or elastic-net, restricted-null wild cluster bootstrap-t, grouped split conformal, trajectory PCA + deterministic k-means, exhaustive source/year/group perturbation), apply the robustness gates, and emit exactly one JSON object conforming to answer_template.json. Use when a task names the PHO portal at <TASK_ENV_BASE_URL>, ships analysis_request.json + answer_template.json, and demands a reproducibility/transportability audit with a controlled decision.
-
prism-shadow Bundle Pho Algorithmic AuditComplete a Public Health Observatory (PHO) registered algorithmic-audit task — gather read-only portal evidence, resolve declared releases and cohorts, run every declared audit module faithfully, apply the decision rule mechanically, and return exactly one JSON object conforming to answer_template.json with no narrative.
-
prism-shadow Skill Ehr Quality JSON PacketsBuild normalized JSON packets and audits against a read-only EHR quality-governance API. Use when Codex must inspect patient, duplicate-candidate, referral, ServiceRequest, provider, ICD-10, service-code, document, audit, encounter, immunization, disclosure, medication, condition, or allergy endpoints and return template-conforming JSON for merge readiness, referral coordination, referral batch audits, care-transition handoffs, or similar EHR governance tasks.
-
prism-shadow Bundle Asteria Hub ReconcilerReconcile and audit Asteria Fleet Data Quality Hub tasks. Use when a task asks Codex to read an Asteria case scope and answer contract, query the Fleet Data Quality Hub, reconcile overlapping source records for contacts, fuel transactions, freight charges, or maintenance events, compute quality or ledger metrics, assign compact internal decision/control codes, and return exact JSON only.
-
prism-shadow Skill Asteria Data Quality AuditReconcile Asteria Fleet Data Quality Hub collections and produce contract-exact JSON answers for contact-master readiness, fuel and freight normalization, maintenance-log certification, source-snapshot retention, and opaque Asteria policy/control/ledger code panels. Use when a task mentions Asteria Fleet Data Quality Hub, case_scope.json, answer_template.json, source snapshots, /api/query, overlapping source records, quarantines, canonical contacts, normalized fuel/freight totals, maintenance history metrics, or Asteria compact decision codes.
-
prism-shadow Skill Fewshot Attempt 01Public Health Observatory Algorithmic Audit Skill
-
prism-shadow Skill Pho Algorithmic AuditsSolve Public Health Observatory portal audit tasks by ingesting portal evidence, resolving publication releases and cohorts, and executing the registered statistical modules for the supported audit families.
-
prism-shadow Bundle Pho Observatory Algorithmic AuditsSolve Public Health Observatory portal audit tasks that provide an analysis_request.json and answer_template.json, including state, county, and country statistical audits with strict JSON output contracts.
-
prism-shadow Skill Peopleops Console ResolutionResolve ERP HR "PeopleOps Console" lifecycle tasks (leave/payroll source precedence, folder & notice readiness, recruitment reconciliation, audit-scope correlation) by reading the remote HTTP API and emitting normalized-label JSON answers.
-
prism-shadow Skill Peopleops Console ResolverResolve ERP HR "PeopleOps Console" cases (employee lifecycle, leave, payroll, policy cases, recruitment, documents, messages, audit) by reading the remote HTTP API, applying source-precedence and folder/notice/audit-scope rules, and returning normalized-label JSON that matches each task's answer_template.
-
prism-shadow Skill Peopleops Console Erp HrSolve ERP HR "PeopleOps Console" tasks (employee lifecycle, leave, payroll, policy cases, recruitment, documents, messages, audit) by reading the remote HTTP API, applying source-precedence and folder/notice control rules, and emitting normalized-label JSON answers.
-
prism-shadow Bundle Court Operations Closeout PacketPrepare a deputy-clerk closeout / field packet by reconciling local court materials (hearing & bench notes, audit memos, finance queue extracts and worksheets, petitions & budgets, form excerpts) against a read-only Court Operations Portal, then emit ONE JSON object that exactly matches the task's answer_template.json. Use for criminal sentencing/disposition registers, traffic-violation payment-plan closeouts, and post-sentencing financial / supervision (probation + license + installment) packets. Triggers: "closeout", "disposition register", "sentencing packet", "post-disposition/post-sentencing packet", "payment plan", "fee reconciliation", "audit findings", "Court Operations Portal", CC-1375 / CC-1379 forms, financial petitions.
-
onfire7777 Bundle PipeDeep expert in GHA workflows. Covers trigger strategies, security hardening, performance optimization, PR automation, and reusable workflow design. Use when designing new or highly optimizing GHA workflows.
-
onfire7777 Bundle GroveDesign, optimize, and audit repository structures including directory layouts, docs/, tests, scripts, anti-pattern detection, and migration planning for existing repositories.
-
onfire7777 Bundle JudgeCode review skill that uses the available Codex review adapter for automated PR reviews and pre-commit checks. Detects bugs, security vulnerabilities, logic errors, and intent mismatches. Use when code review and quality checks are needed.
-
onfire7777 Bundle LatchResponsible for proposing, configuring, debugging, and maintaining Claude Code hooks (event system such as PreToolUse/PostToolUse/Stop). Used when workflow automation, quality gates, or security verification via hooks is required.
-
onfire7777 Bundle ProbeIntegration with OWASP ZAP/Burp Suite, penetration test planning, DAST execution, and vulnerability scanning. Used for dynamic security testing, penetration testing, and runtime vulnerability verification. Complements Sentinel's static analysis.
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include security-fire-alarm-installer, security-management-specialist, equal-opportunity-representative. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.