Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
jiayaoqijia Bundle Aegis Protocol Defi SecurityAegisProtocol
- jiayaoqijia Bundle Smart Contract Security
Smart Contract Security Analyzer
- jiayaoqijia Bundle Gmgn Token
Research any crypto or meme token by address — real-time price, market cap, liquidity, holder list, trader list, top Smart Money and KOL positions, security audit (honeypot, rug pull risk, dev wallet, renounced status), social links (Twitter/X, website) via GMGN API on Solana, BSC, Base, or Ethereum. Use when user asks about a token's price, safety, holders, traders, smart money exposure, or wants due diligence before buying.
-
lgrappag Skill Compliance Audit LoggingMaintain comprehensive audit logs for compliance verification
- jiayaoqijia Bundle Gmgn Narrative
Independently research and write an AI-narrative / due-diligence card for a crypto token — the kind of "叙事分析" card that covers what story a token is telling and what's independently verifiable about its social spread. Use whenever the user asks for a token's "叙事"、"舆情"、"传播情况"、"社媒热度", wants to know "这个币在讲什么故事"/"这个币是不是在蹭热点", asks to analyze or fact-check a token's X/Twitter narrative, or gives a bare contract address together with a request to understand its story rather than just its price/security numbers. This is not a raw safety score (`gmgn-contract-dd` owns that), not a screened hot list (`gmgn-heat-rank` owns that), and not a buy decision (`gmgn-token-buy` / `gmgn-swap` own that) — route here only when the ask is specifically about story and spread.
- jiayaoqijia Bundle Crypto Intel Security Analyzer
Crypto Intel Security Analyzer
-
rudironsoni Skill Dotnet SecuritySecurity hardening and best practices for .NET applications. Navigation skill covering OWASP Top 10, authentication, authorization, cryptography, secrets management, and secure coding. For building secure applications. Keywords: security, owasp, authentication, authorization, cryptography, jwt, oauth, secrets, hardening
-
yigityildiz0 Bundle Licensing ComplianceAudit project dependencies for license compliance, identify legal issues, verify compatibility between licenses, and generate compliance reports. Use when.
- yigityildiz0 Bundle Pre Commit Checklist
Implement automated pre-commit quality checks including linting, formatting, type checking, tests, security scans, and commit message validation. Use when.
- yigityildiz0 Bundle Public Equity Research
Perform recommendation-grade research on a named listed company using exact security identity, point-in-time primary filings, business/segment economics, earnings quality, balance sheet, cash flow, dilution, management/governance, industry/competition, valuation, what is priced in, catalysts, revisions, risks, and falsifiable thesis criteria. Use for company/hisse fundamental analysis, earnings and valuation, or Turkish intents such as “şirketi/hisseyi derin analiz et”, “bilanço ve değerleme”, “adil değer”, “yatırım tezi”, “KAP/10-K sonuçları”, “bu hisse neden alınır/satılır”. For open-ended “which stock” requests, route through the broad equity funnel first; never infer a market-wide winner from one company analysis.
- yigityildiz0 Bundle Fuzzing Input Generator
Generate fuzz testing inputs for security and robustness testing using mutation-based, grammar-based, and coverage-guided fuzzing techniques. Use when.
- yigityildiz0 Skill Project Layout Refactor
Audit and safely refactor a repository's directory layout while preserving behavior, imports, build tooling, history, generated-file rules, and user.
Audited - yigityildiz0 Skill Advanced Attack Patterns
Advanced attack classes beyond the OWASP Top 10 baseline including state desynchronization, cache poisoning, replay attacks, and timing-attack side.
- yigityildiz0 Bundle Dependency Security Audit
Audit project dependencies for known vulnerabilities (CVEs), license issues, and outdated packages with SBOM generation. Use when deploying to production.
- yigityildiz0 Bundle Investment Thesis Tracker
Create and maintain an append-only investment thesis with original evidence cutoff, what is priced in, falsifiable pillars, KPIs, catalysts, valuation and entry gates, risks, kill/add/trim/exit criteria, review dates, and evidence-delta updates. Use to monitor a holding or prior recommendation, prepare earnings reviews, or for Turkish intents such as “yatırım tezimi kaydet/takip et”, “bu hisseyi bundan sonra izle”, “tez bozuldu mu”, “hangi şartta artır/sat”, “önceki analizle ne değişti”. Separate company quality, security readiness, and portfolio action; never rewrite the original thesis with hindsight.
- yigityildiz0 Skill Compliance Evidence Tracking
Organize compliance controls, owners, evidence, review cadence, exceptions, and gaps without claiming certification or legal compliance. Use for compliance tracking, audit evidence, control register, policy evidence, or readiness preparation. Turkish triggers: uyum kanıtlarını takip et, kontrol listesi, denetim hazırlığı, eksik kanıt.
- yigityildiz0 Bundle Skill Package Security Audit
Perform a static, read-only security and trust preflight on a downloaded or third-party skill, plugin, ZIP, repository, installer, or update. Use before import, installation, execution, or merge to inspect provenance, license, archive paths, controlling instructions, scripts, permissions, secrets, network/data flows, persistence, dependencies, and rollback. Turkish triggers: skill güvenli mi, eklentiyi incele, ZIP/repo güvenlik kontrolü, kurmadan önce denetle. Do not execute untrusted code.
- yigityildiz0 Skill Firebase Security Rules Auditor
A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are.
- yigityildiz0 Bundle Physio Professional Development
Build evidence-based physiotherapy professional development, research, and practice-improvement plans. Use for competency self-audit, CPD portfolio, learning goals, literature watch, journal club, reflection, mentorship, teaching, ethics, scope, interprofessional work, clinical audit, quality improvement, service evaluation, research/thesis protocol, preregistration, data governance, leadership, or career development. Trigger on mesleki gelişim, CPD, öğrenme planı, journal club, klinik audit, araştırma protokolü, tez. Do not invent credentials, credits, ethics approval, registration, or results, and never replace local regulatory, employer, sponsor, ethics, statistical, or supervision requirements.
-
jesusgarciafernandez Bundle Analisis Heuristico Auditoria De Usabilidad Y Diagnostico DeEl Análisis Heurístico profesional es la evaluación experta de interfaces basada en principios de diseño de interacción (Heurísticas). No es solo "criticar una web"; es Ingeniería del Diagnóstico UX. Úsala para tareas de Generación de Contenido: heuristic-evaluation, usability, ux-audit, nielsen-heuristics, user-experience, interaction-design.
- jesusgarciafernandez Bundle Auditoria De Diseno Gestion De Deuda UX Y Control De Calidad
La Auditoría de Diseño es una inspección técnica profunda del estado visual y funcional de un producto. No es solo "mirar qué está feo"; es Ingeniería del Saneamiento UX. Úsala para tareas de Generación de Contenido: design-audit, consistency, ux-debt, visual-inventory, quality-assurance, design-system.
- jesusgarciafernandez Bundle Auditoria De Seguridad Y Pentesting Red Ops
La Auditoría de Seguridad y Pentesting (v2.0) es la competencia de "Ser el villano para convertirte en el mejor héroe defensivo". Úsala para tareas de Desarrollo y Tecnología: ethical-hacking, pentesting, red-team, cybersecurity-audit, exploit-development, social-engineering.
Audited - jesusgarciafernandez Bundle Modelado De Amenazas Y Diseno De Seguridad Threat Ops
El Modelado de Amenazas y Diseño de Seguridad (v2.0) es la competencia de "Dibujar los ataques antes de que existan para cerrarles el paso". Úsala para tareas de Desarrollo y Tecnología: threat-modeling, stride, cybersecurity-design, risk-assessment, security-architecture, attack-surface.
- jesusgarciafernandez Bundle Auditoria Financiera Preventiva Y Control De Riesgos Audit O
La Auditoría Financiera Preventiva y Control de Riesgos (v2.0) es la competencia de "Asegurar que los números dicen la verdad". Úsala para tareas de Finanzas y Contabilidad: financial-audit, risk-control, internal-audit, compliance, integrity, ia-augmented.
- jesusgarciafernandez Bundle Auditoria Financiera Y Control Interno Audit Ops
La Auditoría Financiera y Control Interno (v2.0) es la competencia de verificar la fiabilidad de la información económica. No es solo "revisar facturas"; es Ingeniería de la Confianza Datos. Úsala para tareas de Finanzas y Contabilidad: audit, financial-audit, compliance, internal-control, tax-compliance, fraud-detection.
- jesusgarciafernandez Bundle Gobernanza De Algoritmos Y Auditoria De Ia Algo Gov Ops
La Gobernanza de Algoritmos y Auditoría de IA (v2.0) es la competencia de "Saber por qué la IA toma cada decisión y asegurar que es la correcta". Úsala para tareas de Legal y Cumplimiento: algorithm-governance, ai-audit, ethics, transparency, accountability, bias-detection.
- jesusgarciafernandez Bundle Fortalecimiento De Sistemas Y Bastionado Hardening Ops
El Fortalecimiento de Sistemas y Bastionado (v2.0) es la competencia de "Eliminar todo lo innecesario para dejar solo lo seguro". Úsala para tareas de Desarrollo y Tecnología: hardening, system-security, bastionado, compliance, cis-benchmarks, infrastructure.
- jesusgarciafernandez Bundle Mitigacion De Sesgos AI Fairness Bias Reduction
La Mitigación de Sesgos en Algoritmos (v2.0) es la competencia de detectar y corregir comportamientos discriminatorios en los modelos de IA. No es solo "limpiar datos"; es Ingeniería de la Equidad Sintética. Úsala para tareas de Inteligencia Artificial: ia, bias-mitigation, fairness, equity, trustworthy-ai, algorithm-audit.
- jesusgarciafernandez Bundle Seguridad Por Diseno En Arquitecturas API API Security Ops
La Seguridad por Diseño en Arquitecturas API (v2.0) es la competencia de "Cerrar las puertas de tus datos antes de abrirlas al mundo". Úsala para tareas de Legal y Cumplimiento: api-security, secure-by-design, oauth2, jwt, owasp-api-top10, rate-limiting.
- jesusgarciafernandez Bundle QA En Ecosistemas Web3 Web3 Quality Assurance Security
El Aseguramiento de Calidad en Ecosistemas Web3 (v2.0) es la competencia de validar la robustez técnica y económica de productos basados en blockchain. No es solo "hacer click en botones"; es Auditoría de Protocolos Inmutables. Úsala para tareas de Inteligencia Artificial: web3, blockchain, qa-testing, smart-contracts, decentralized-apps, security-audit.
- jesusgarciafernandez Bundle Aegisops Operaciones De Ciberseguridad Inteligente Shield Op
AegisOps (v2.0) es la competencia de "Operar la seguridad como una inteligencia dinámica y automatizada". Úsala para tareas de Legal y Cumplimiento: aegisops, cybersecurity, intelligence-ops, threat-intelligence, automation, monitoring.
- jesusgarciafernandez Bundle Metododologia De Pentesting Y Hacking Etico Pro Red Ops
La Metodología de Pentesting y Hacking Ético Profesional (v2.0) es la competencia de "Hackear con método, rigor y permiso". Úsala para tareas de Legal y Cumplimiento: pentesting-methodology, hacking-etico, oscp, owasp, ptess, vulnerability-assessment.
- jesusgarciafernandez Bundle Marcos De Calidad Y Gobernanza De Datos Data Governance Ops
Los Marcos de Calidad y Gobernanza de Datos (v2.0) es la competencia de "Asegurar que los datos de Jesús García Fernández sean el cimiento sólido del edificio empresarial". Úsala para tareas de Investigación e Inteligencia de Negocio: data-governance, data-quality, master-data-management, metadata, data-security, compliance.
-
whyzsm Bundle Audit New合同风险识别与条款分析 - 智能合同审查工具，自动识别风险条款、补充缺失条款、对比差异条款
- lgrappag Skill AI Threat Assessment
Implement threat evaluation system for dynamic AI responses
- whyzsm Bundle Tech Code Review Team
End-to-end code review workflow. Use when the user wants a complete code review package covering GitHub PR or git diff intake, strict bug/security/performance review, project coding standards, security auditing, clean-code maintainability checks, and structured Chinese review reports. Coordinates pr-reviewer, critical-code-reviewer, project-code-standard, security-audit, clean-code-review, and code-review-assistant.
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include aegis-protocol-defi-security, smart-contract-security, gmgn-token. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.