Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
thedaviddias Bundle Content Security PolicyUse when reviewing headers, forms, cookies, or third-party integrations related to Implement a content security policy. Validate the effective browser and HTTP behavior in a production-like environment.
- thedaviddias Bundle Password Field Security
Use when reviewing headers, forms, cookies, or third-party integrations related to Secure password input fields. Validate the effective browser and HTTP behavior in a production-like environment.
-
techtideohio Bundle Techtide Contabo MaestroRouter skill for classifying Contabo tasks and delegating to the narrowest specialist for cost analysis, capacity planning, security hardening, VPS/VDS lifecycle operations, or Object Storage management. Use when the user asks a Contabo question that spans multiple domains or needs triage before specialist engagement.
-
sethdford Skill Infrastructure HardeningHarden infrastructure through patch management, service hardening, and secure baselines.
- sethdford Skill Security Monitoring Strategy
Develop comprehensive security monitoring strategy covering detection sources, alert tuning, and operational resilience.
- sethdford Skill Container Security Review
Review container security including image scanning, runtime policies, and supply chain integrity.
- sethdford Skill Dependency Vulnerability Scan
Scan application dependencies for known vulnerabilities and manage security updates across supply chain.
- sethdford Skill Developer Experience Audit
Systematically assess and improve developer experience (tools, documentation, onboarding, debugging) to increase team productivity. Use in roadmapping or when noticing developer friction.
- sethdford Skill Threat Intelligence Integration
Integrate threat intelligence into security operations to proactively detect and hunt threats.
- sethdford Skill Vulnerability Management Program
Establish vulnerability management program to identify, prioritize, remediate, and track vulnerabilities across infrastructure.
-
vril-labs Skill Code ReviewerPerforms automated code review with inline comments, flags anti-patterns, and suggests improvements against style guides. Invoke when asked to review code, check a pull request, audit code quality, or find issues in a file or diff.
- vril-labs Skill Config Manager
Manages environment variables, secrets, and feature flags — generates .env templates, validates required keys, and flags hardcoded secrets. Invoke when asked to manage configuration, audit for hardcoded secrets, generate .env templates, validate environment variables, or set up feature flags.
- vril-labs Skill Dependency Updater
Audits package.json, requirements.txt, or go.mod for outdated or vulnerable packages and proposes safe upgrades. Invoke when asked to update dependencies, audit packages, check for vulnerabilities, or upgrade libraries in a project.
- vril-labs Skill API Fuzz Tester
Fuzz test APIs — security testing and input validation. Use when finding API vulnerabilities, testing input handling, or security testing.
- vril-labs Bundle Debug
Investigate, audit, triage, and fix. Systematic debugging, incident lifecycle, domain auditing, and issue logging. Four-phase protocol: root cause → pattern analysis → hypothesis test → fix. Use for: any bug, test failure, production incident, error spikes, audit, triage, postmortem, "investigate", "why is this broken", "debug this", "production down", "is production ok", "audit stripe", "log issues".
-
alivirgo Skill Ask AI To Audit ItselfLeverage the Reflexion and Critic-Actor prompting patterns to force LLMs to self-correct logic errors, overlooked edge cases, and factual slips before final delivery.
- alivirgo Skill Flag Missing Facts First
How to command AI to conduct a Pre-Flight Information Audit and request missing data before attempting to solve complex problems.
Audited - alivirgo Skill Check Code For Obvious Flaws
How to run the 5-point Zero-Trust code audit to catch hallucinated package APIs, security leaks, unhandled exceptions, and edge-case crashes before running in production.
- alivirgo Skill Never Paste Private Passwords
The essential security protocol for protecting API keys, passwords, credit card numbers, and PII from leaking into AI logs, training queues, and shared chats.
- alivirgo Skill Django
Operational skill for Django: models, ORM query hygiene, migrations, views/URLs, settings security, and admin customization.
- alivirgo Skill Owasp Asvs
Operational skill for OWASP ASVS: selecting levels, mapping requirements to controls, evidence for reviews, and gap triage.
Audited - alivirgo Skill Supabase Rls
Advanced operational skill for Supabase Row Level Security: policy design, security definer RPCs, storage policies, Edge Function authz, and RLS performance.
- sethdford Skill Cqrs Design
Separate command (write) and query (read) models for complex domains. Use when read/write patterns diverge significantly or when audit/consistency requirements demand immutability.
- sethdford Skill Risk Scoring
Quantify risk using likelihood and impact, apply severity ratings, and prioritize mitigations. Use when prioritizing threats, allocating security budget, and communicating risk to leadership.
- sethdford Skill Threat Library
Build and maintain a reusable threat library tailored to your organization, platform, and threat landscape. Use when cataloging threats for future analyses, threat modeling sessions, and architecture reviews.
- sethdford Skill System Audit
Conduct comprehensive system architecture evaluation. Assess design quality, technical debt, operational readiness, scalability. Use when auditing existing systems.
- sethdford Skill Asset Inventory
Create a comprehensive inventory of assets (data, systems, infrastructure, people) and their criticality, value, and dependencies. Use when prioritizing threats and allocating security resources.
- sethdford Bundle Stride Analysis
Systematically identify and document threats using the STRIDE framework (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). Use when designing systems, reviewing architectures, conducting security design reviews, or updating threat models.
- sethdford Skill Alert Triage
Triage security alerts to classify as true/false positives and prioritize investigation and response.
- sethdford Skill Lessons Learned
Conduct post-incident reviews to document lessons learned and implement process improvements preventing recurrence.
- sethdford Skill Abuse Case Design
Design abuse cases (negative use cases) showing how attackers misuse system features. Use when identifying attacks that exploit intended functionality or business logic flaws.
- sethdford Skill Red Team Exercise
Plan and execute red team exercises to test security controls and incident response capabilities.
Audited - sethdford Skill API Security Testing
Expert approach to api-security-testing in API testing. Use when working with .
- sethdford Skill Dast Test Plan
Design and execute Dynamic Application Security Testing (DAST) test plans to find runtime vulnerabilities in web applications.
- sethdford Skill Soc2 Controls
Implement SOC 2 Trust Services Criteria controls for security, availability, processing integrity, confidentiality, and privacy.
- thedaviddias Bundle X Content Type
Use when auditing HTTP response headers on any web server or CDN for security hardening.
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include content-security-policy, password-field-security, techtide-contabo-maestro. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.