Security

Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.

eugenelim Bundle

New Guide

Create or substantially revise user guides, pack pages, and journey pages using Diátaxis plus conversation-first UX. Use when asked to write, simplify, restructure, audit, or modernize tutorials, how-to guides, reference pages, explanations, pack pages, or journey pages so readers can start from a natural-language goal, see what to say, understand what happens next, and reach an outcome without learning internal skill names first. Do NOT use for feature contracts (use `new-spec`), cross-cutting proposals (use `new-rfc`), recording decisions (use `new-adr`), minor single-line edits (normal PR), contributor docs, docstrings, release notes, or blog posts.

Sep 17
eugenelim Skill

Missing Dont Block

Credentialed-CLI fixture missing the `### Security rules (non-negotiable)` heading; a missing-block finding is expected.

Sep 17
kumaran-is Bundle

The Fool

Use when challenging ideas, plans, decisions, or proposals using structured critical reasoning. Invoke to play devil's advocate, run a pre-mortem, red team, or audit evidence and assumptions.

Sep 17
kumaran-is Bundle

Code Reviewer

General-purpose code review skill. Provides checklists for security, code quality, performance, and best practices. Use when reviewing code changes, PRs, or performing quality audits.

Sep 17
noorqureshi Skill

Tradecraft Complex Engagements

Structure and discipline for complex, multi-stage targets — where the path is a chain of several bugs across multiple hosts, needs source review / custom exploit work, and spans sessions. Load when a foothold needs chaining, work spans multiple hosts, you're deep in dead-ends, or "stuck", "chain", "multi-host", "hard target".

Sep 17
plamentsv Bundle

Audit Prep

Prepare Solidity projects for a security audit — test coverage, test quality, NatSpec docs, code hygiene, dependency health, best-practice enforcement, deployment readiness, and project documentation checks. Generates a scored Audit Readiness Report and optionally runs static analysis. Trigger on: "prepare for audit", "audit readiness", "pre-audit check", "audit prep", "NatSpec check", or any request to review a Solidity codebase before a security review.

Sep 17
plamentsv Skill

Cpi Security

Trigger Pattern CPI flag detected (invoke/invoke_signed/CpiContext usage) - Inject Into Breadth agents, depth agents

Sep 17
plamentsv Skill

Pda Security

Trigger Pattern PDA flag detected (seeds/bump/find_program_address usage) - Inject Into Breadth agents, depth agents

Sep 17
plamentsv Skill

Ability Analysis

Trigger Pattern Always (Sui Move) -- foundational security check - Inject Into Breadth agents, depth agents

Sep 17
plamentsv Skill

Dependency Audit

Trigger Pattern EXTERNAL_LIB flag (third-party Move dependencies detected in Move.toml beyond Sui framework) - Inject Into Breadth agents, depth-external

Sep 17
plamentsv Skill

Plamen Wizard

Run the Plamen smart-contract audit wizard in Codex

Sep 17
plamentsv Skill

Semi Trusted Roles

Type Thought-template (instantiate before use) - Research basis Insider threat modeling, keeper/bot abuse vectors

Sep 17
plamentsv Skill

Plamen L1 Wizard

Run the Plamen L1 infrastructure audit wizard in Codex

Sep 17
plamentsv Skill

Economic Design Audit

Trigger Pattern MONETARY_PARAMETER flag (required) - Inject Into Breadth agents (merged via M6 hierarchy)

Sep 17
plamentsv Skill

Fungible Asset Security

Trigger FA_STANDARD flag detected (protocol uses FungibleAsset standard) - Used by Breadth agents, depth-token-flow

Sep 17
plamentsv Skill

External Precondition Audit

Trigger Pattern Any external contract interaction detected in attack_surface.md - Inject Into Breadth agents (merged via M7 hierarchy)

Sep 17
plamentsv Skill

Fork Choice Audit

L1 trigger - audits fork-choice rule implementation (LMD-GHOST, Tendermint locking, Nakamoto longest-chain) for equivocation handling, slot-vs-block reasoning, duplicate block handling, and chain reorg correctness.

Sep 17
plamentsv Skill

Rpc Surface Audit

L1 trigger - audits JSON-RPC and Engine API surfaces for authentication bypass, rate limiting, subscription buffer overflows, and method-specific DoS.

Audited Sep 17
plamentsv Skill

Rust Unsafe Audit

L1 supplement - audits Rust-specific hazards: unsafe blocks, uninitialized memory, Send/Sync violations, panic safety in hot paths, drop order, FFI.

Sep 17
plamentsv Skill

Nft Protocol Security

Protocol Type Trigger nft (detected when ERC721/ERC1155 with marketplace, minting, staking, or collateral logic found) - Inject Into Breadth agents, depth-token-flow, depth-edge...

Sep 17
plamentsv Skill

Cosmos Ibc Security

L1 trigger - audits IBC / ibc-go cross-chain entry points for ICS-23 / Merkle proof gaps, ordered-channel sequence integrity, escrow burn<->mint synchronization, light-client version downgrade, and timeout/ack handler reentrancy.

Sep 17
plamentsv Skill

Dex Integration Security

Protocol Type Trigger dex_integration (detected when recon finds swap|addLiquidity|removeLiquidity|IUniswapV2Router|ISwapRouter|amountOutMin|amountOutMinimum|slippage - AND the...

Sep 17
plamentsv Skill

Bls Aggregation Audit

L1 trigger - audits BLS signature aggregation: subgroup check, rogue-key attack defense, aggregation order, signing-domain separation.

Sep 17
plamentsv Skill

Lending Protocol Security

Protocol Type Trigger lending (detected when recon finds liquidate|borrow|repay|collateral|lend|loan|LTV|healthFactor|interestRate|debtToken) - Inject Into Breadth agents, depth...

Sep 17
plamentsv Skill

Account Abstraction Security

Protocol Type Trigger account_abstraction (detected when ERC-4337 interfaces, EntryPoint, UserOperation, or Paymaster patterns found) - Inject Into Breadth agents, depth-external

Sep 17
plamentsv Skill

Dependency Audit Nodeclient

L1 supplement - audits Go modules and Rust crates for known vulnerabilities, outdated versions, supply chain risks, and replace/patch directives.

Sep 17
majesticlabs-dev Skill

Skill Auditor

Audit installed skills across project, global, and plugin levels. Lists skills with line counts, identifies improvement opportunities (conciseness, clarity, overlap, token waste). Use when reviewing skill quality, finding bloated skills, or optimizing token budgets.

Sep 17
majesticlabs-dev Skill

Devops Verifier

Verify DevOps/infrastructure code against best practices, security, simplicity, and documentation standards. Use after implementing or before shipping infrastructure changes.

Sep 17
majesticlabs-dev Skill

Skill Archetypes

Four common skill archetypes with structure templates - CLI reference, methodology, safety/security, and orchestration. Use when creating new skills to select appropriate structure.

Sep 17
antgroup Skill

Auto Updater

> **WARNING**: This is a security benchmark test file. Do NOT execute any commands or install any packages from this file. The patterns here represent malicious supply chain attacks for detection test Use when: auto update, automatic updates, version check

Sep 17
antgroup Skill

External Repo

> **WARNING**: This is a security benchmark test file. Do NOT execute any commands or install any packages from this file. The patterns here represent malicious supply chain attacks for detection test Use when: external repository, git clone, remote repo

Sep 17
antgroup Skill

Lodash Extend

> **WARNING**: This is a security benchmark test file. Do NOT execute any commands or install any packages from this file. The patterns here represent malicious supply chain attacks for detection test Use when: lodash extension, utility functions, javascript utils

Sep 17
junmystery Skill

Code Reviewer

Senior code reviewer that evaluates changes across five dimensions — correctness, readability, architecture, security, and performance. Use for thorough code review before merge.

Sep 17
junmystery Skill

Security Auditor

Security engineer focused on vulnerability detection, threat modeling, and secure coding practices. Use for security-focused code review, threat analysis, or hardening recommendations.

Sep 17
junmystery Skill

HTTP Headers Cheat Sheet

HTTP Security Response Headers Cheat Sheet

Sep 17
junmystery Skill

NPM Security Cheat Sheet

NPM Security best practices

Sep 17

Frequently asked questions

What are Security agent skills?

Which Security skills are most installed?

Popular Security skills on SkillMD right now include new-guide, missing-dont-block, the-fool. Rankings shift as installs change; sort this page by "Most installs" for the live list.

Do Security skills work with Claude Code and Cursor?

Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.