Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
poorvith-mp Bundle Threat DetectionWrite detection rules, correlate SIEM telemetry and map behaviour to MITRE ATT&CK. Use when building security monitoring, SIEM rules, or anomaly detection.
- poorvith-mp Bundle Performance Audit
Profile and fix slowness across Core Web Vitals, backend queries and infrastructure. Use when auditing application performance, Core Web Vitals, or latency bottlenecks.
- poorvith-mp Skill Compliance Auditor
Moved to audit-readiness in skills-developer. Removed in v4.1.
- poorvith-mp Skill Evidence Collector
Moved to audit-readiness in skills-developer. Removed in v4.1.
- poorvith-mp Bundle Smart Contract Audit
Audit contracts for reentrancy, access control flaws and oracle manipulation. Use when auditing smart contracts for reentrancy, gas, or exploit risks.
- poorvith-mp Skill Performance Optimizer
Moved to performance-audit in skills-developer. Removed in v4.1.
- poorvith-mp Bundle Dependency Upgrade Auditor
Moved to dependency-audit in skills-developer. Removed in v4.1.
- poorvith-mp Skill Blockchain Security Auditor
Moved to smart-contract-audit in skills-developer. Removed in v4.1.
- poorvith-mp Bundle Secops Intelligence Engineer
Moved to threat-detection in skills-developer. Removed in v4.1.
-
wike-chi Bundle Memory HygieneAudit, clean, and optimize Clawdbot's vector memory (LanceDB). Use when memory is bloated with junk, token usage is high from irrelevant auto-recalls, or setting up memory maintenance automation.
- wike-chi Bundle Skill System Audit
技能系统自动审计技能。发现技能碎片化、交叉引用错误、路由表损坏、YAML合法性问题。 当用户说"审查技能系统"、"检查技能完整性"、"审计"、"find broken skills"时使用。 通用方法论，适用于任何 skill:// 协议的技能系统。
- wike-chi Skill Routing Table Audit
路由表 ROUTING-TABLE.yaml 审计技能。正确检查两层结构： (1) keywords层（描述性，不执行）(2) routing层（实际执行）。 检测技能路由覆盖、skills_index注册完整性、空intent、路径断裂。
-
arbazkhan971 Skill DocsDocs. OpenAPI/Swagger, JSDoc, docstrings, README, runbook, API docs, stale docs audit, missing coverage.
- arbazkhan971 Skill Comply
Compliance and governance — GDPR, HIPAA, SOC2, PCI-DSS, audit trails, privacy controls, data retention, license compliance.
- arbazkhan971 Skill Config
Config. dev/staging/prod, feature flags, A/B test rollout, config validation, env parity, secret safety, drift detection.
- arbazkhan971 Bundle Secure
Security audit. STRIDE + OWASP Top 10 + 4 red-team personas. Code evidence required.
- arbazkhan971 Skill Spring
Spring Boot mastery. Auto-configuration, security, Data JPA, Actuator, testing with TestContainers.
-
rweisssieker-xp Bundle Crisis Command ModeConvert incidents, outages, security events, compliance escalations or executive crises into a command structure, situation report, decisions, communications and action plan. Use when the user needs crisis command mode for CIO decision support.
- rweisssieker-xp Bundle Executive Reporting
Produce board-ready and management-ready reports, portfolio summaries, risk views, audit reports, KPI reports and presentation outlines from enterprise context. Use when the user needs executive reporting for CIO decision support.
- rweisssieker-xp Bundle Control Debt Burndown
Turn audit, compliance and control gaps into a prioritized burndown plan. Use when the user needs control debt burndown for CIO decision support.
- rweisssieker-xp Bundle Security Risk Adapter
Convert Defender, Sentinel, Splunk, Qualys or security finding exports into business risk and control-debt signals. Use when the user needs security risk adapter for CIO decision support.
- rweisssieker-xp Bundle Operating Risk Heatmap
Create a Green/Amber/Red operating risk heatmap across delivery, finance, security/control, customer and capacity domains. Use when the user needs operating risk heatmap for CIO decision support.
- rweisssieker-xp Bundle Audit Finding Predictor
Predict likely audit findings from missing evidence, weak controls, unclear ownership, exceptions and compliance signals. Use when the user needs audit finding predictor for CIO decision support.
- rweisssieker-xp Bundle Evidence Expiry Monitor
Identify stale or time-sensitive evidence before board, audit, risk or approval use. Use when the user needs evidence expiry monitor for CIO decision support.
- rweisssieker-xp Bundle Risk Chain Intelligence
Map cascading risk paths across projects, systems, data, security, compliance, operations, vendors, finance and organization. Use when isolated risk registers are insufficient.
- rweisssieker-xp Bundle Cost Of Delay Calculator
Estimate qualitative cost of delay from value-at-risk, board risk, decision debt, audit exposure, customer trust and scarce capacity. Use when the user needs cost of delay calculator for CIO decision support.
- rweisssieker-xp Bundle Governance Gap Predictor
Predict likely future governance, audit, control, ownership and evidence gaps from current plans, projects, AI use cases and operating practices. Use when the user needs governance gap predictor for CIO decision support.
- rweisssieker-xp Bundle Board Objection Simulator
Simulate hard objections from CEO, CFO, CISO, Audit, regulator, customer and board perspectives, including weak answers and missing evidence. Use when the user needs board objection simulator for CIO decision support.
- rweisssieker-xp Bundle Enterprise Command Center
Build a consolidated enterprise command center situation report across strategy, portfolio, risk, security, compliance, architecture, operations, finance and organization. Use when the user needs enterprise command center for CIO decision support.
- rweisssieker-xp Bundle Evidence Chain Of Custody
Build a chain-of-custody checklist for evidence used in executive, board, audit or risk decisions. Use when the user needs evidence chain of custody for CIO decision support.
- rweisssieker-xp Bundle Regulatory Horizon Scanner
Assess potential regulatory, compliance, audit and policy changes from user-provided context and prepare readiness actions. Use when the user needs regulatory horizon scanner for CIO decision support.
- rweisssieker-xp Bundle Regulatory Shock Simulator
Simulate an audit, regulator or customer evidence shock and build the minimum response pack leadership would need. Use when the user needs regulatory shock simulator for CIO decision support.
- rweisssieker-xp Bundle Technical Debt Capitalizer
Translate technical debt into financial, operational, security, compliance and strategic risk so executives can prioritize remediation. Use when the user needs technical debt capitalizer for CIO decision support.
- rweisssieker-xp Bundle Decision Consequence Mapper
Map first-, second- and third-order consequences of executive decisions across finance, operations, risk, security, compliance, architecture and organization. Use when the user needs decision consequence mapper for CIO decision support.
- rweisssieker-xp Bundle Executive Q And A Simulator
Simulate tough questions from Board, CEO, CFO, CISO, Audit, regulator, customer and employee perspectives for proposals, reports and decisions. Use when the user needs executive q and a simulator for CIO decision support.
- rweisssieker-xp Bundle Qms Audit Evidence Readiness
Assess whether IT changes, systems, data, access, validation, QMS, audit and change-control evidence are ready for regulated manufacturing or quality-sensitive decisions. Use when the user needs qms audit evidence readiness for CIO decision support.
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include threat-detection, performance-audit, compliance-auditor. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.