Security Agent Skills

Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.

Security

1,976 skills
bankrbot
uniswap-hooks
Build Uniswap v4 hooks with security-first guidance on threat modeling, permission flags, NoOp attack prevention, delta accounting, and pre-deployment audit checklists.
1.2k · bundle
bankrbot
agent-wormhole
Creates temporary encrypted one-time handoffs between autonomous agents, supporting mission briefs, scoped secrets, artifacts, and receipts via CLI or API.
1.2k · bundle
bankrbot
smart-contract-audit
Audits EVM smart contracts across 19 domains using parallel specialist agents, synthesizes findings, and files GitHub issues.
1.2k · bundle
bankrbot
aeon-vuln-scanner
Audits trending open-source repos for exploitable vulnerabilities using Semgrep, TruffleHog, osv-scanner, and Slither, then routes findings to responsible disclosure channels (PVR for code flaws, public PRs for dependency CVEs).
1.2k · bundle
bankrbot
wallets
Create and manage Ethereum wallets, including EOAs, smart contract wallets, Safe multisig, EIP-7702, and account abstraction, with AI agent key safety rules and transaction approval thresholds.
1.2k · bundle
bankrbot
security
Audit Solidity smart contracts for reentrancy, oracle manipulation, token decimals, SafeERC20, ERC-4626 inflation, infinite approvals, and MEV vulnerabilities with a pre-deployment checklist.
1.2k · bundle
bankrbot
aeon-on-chain-monitor
Monitors EVM blockchain addresses and contracts for large transfers, new approvals, contract upgrades, unusual gas spends, MEV interactions, and first-time interactions with new contracts.
1.2k · bundle
bankrbot
opensea-wallet
Configure wallet signing providers for OpenSea transactions, supporting Privy, Turnkey, Fireblocks, Bankr, and local private keys.
1.2k · bundle
bankrbot
aeon-skill-security-scan
Audit installed SKILL.md files and companion scripts for shell injection, secret exfiltration, path traversal, prompt-override payloads, destructive commands, and obfuscation. Integrates with Bankr Safety Scores and produces delta reports against prior scans.
1.2k · bundle
bankrbot
trustlayer-sybil-scanner
Detects fake reviews, Sybil rings, rating manipulation, and reputation laundering in ERC-8004 agent ratings across 20+ blockchains using the TrustLayer API.
1.2k · bundle
bankrbot
token-scam-analysis
Perform forensic on-chain analysis of EVM tokens to detect scams, rug pulls, and soft rugs by cross-referencing on-chain state against team narratives.
1.2k · bundle
bankrbot
wake-token-spotter-analysis
Evaluates Base ERC-20 tokens by contract address, returning a 0-100 score across five criteria, launch protocol classification, security flags, and a narrative interpretation.
1.2k · bundle
composiohq
wiz-automation
Automate Wiz cloud security operations through Composio's Wiz toolkit via Rube MCP.
66.9k
composiohq
auth0-automation
Automates Auth0 identity management tasks through Composio's Auth0 toolkit via Rube MCP, including user management, connection setup, and tool execution.
66.9k
composiohq
rkvst-automation
Automate Rkvst operations through Composio's Rkvst toolkit via Rube MCP, with dynamic tool discovery and connection management.
66.9k
composiohq
nextdns-automation
Automate NextDNS operations through Composio's toolkit via Rube MCP, including tool discovery, connection management, and execution.
66.9k
composiohq
paradym-automation
Automate Paradym identity verification workflows through Composio's toolkit via Rube MCP, with dynamic tool discovery and connection management.
66.9k
composiohq
digicert-automation
Automate Digicert certificate operations through Composio's Digicert toolkit via Rube MCP.
66.9k
composiohq
ip2proxy-automation
Automate IP2Proxy operations through Composio's toolkit via Rube MCP, including tool discovery, connection management, and execution.
66.9k
composiohq
ip2whois-automation
Automates IP WHOIS lookups and domain ownership research via the Ip2whois API through Rube MCP and Composio.
66.9k
composiohq
lastpass-automation
Automate LastPass operations through Composio's Lastpass toolkit via Rube MCP, including credential management and secure access workflows.
66.9k
composiohq
abuselpdb-automation
Automate Abuselpdb abuse-reporting operations through Rube MCP and Composio's toolkit.
66.9k
composiohq
bitwarden-automation
Automate Bitwarden password management operations through Composio's Bitwarden toolkit via Rube MCP.
66.9k
composiohq
control-d-automation
Automate Control D DNS filtering operations through Composio's toolkit via Rube MCP, with dynamic tool discovery and connection management.
66.9k
composiohq
dnsfilter-automation
Automate DNS filtering operations through Composio's Dnsfilter toolkit via Rube MCP, including tool discovery, connection management, and execution.
66.9k
composiohq
jumpcloud-automation
Automate Jumpcloud identity and access management operations through Composio's Jumpcloud toolkit via Rube MCP.
66.9k
composiohq
virustotal-automation
Automate VirusTotal threat intelligence operations through Composio's toolkit via Rube MCP, including file scanning, URL analysis, and report retrieval.
66.9k
composiohq
fraudlabs-pro-automation
Automate Fraudlabs Pro fraud detection operations through Composio's toolkit via Rube MCP, including tool discovery, connection management, and execution.
66.9k
composiohq
identitycheck-automation
Automate Identitycheck identity verification tasks through Composio's toolkit via Rube MCP, with dynamic tool discovery and connection management.
66.9k
composiohq
securitytrails-automation
Automate Securitytrails domain intelligence and reconnaissance operations through Composio's toolkit via Rube MCP.
66.9k
composiohq
doppler-secretops-automation
Automate Doppler Secretops operations through Composio's toolkit via Rube MCP, including tool discovery, connection management, and execution.
66.9k
composiohq
sslmate-cert-spotter-api-automation
Automate SSL certificate monitoring and analysis using the Sslmate Cert Spotter API through Rube MCP and Composio.
66.9k
dimillian
review-swarm
Launches four parallel read-only sub-agents to review a git diff or file scope for regressions, security risks, performance issues, and contract gaps, then aggregates findings into a prioritized fix path.
3.8k · bundle
dimillian
project-skill-audit
Analyze a project's past sessions, memory files, and existing local skills to recommend the highest-value skills to create or update.
3.8k · bundle
dimillian
swiftui-performance-audit
Diagnose and fix SwiftUI performance issues like slow rendering, janky scrolling, and high CPU/memory usage through code review and profiling guidance.
3.8k · bundle
k-dense-ai
iso-13485-certification
Prepare ISO 13485:2016 certification documentation for medical device Quality Management Systems, including gap analysis, template-based document creation, and compliance checklists.
30.2k · bundle

Frequently asked questions

What are Security agent skills?

Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.

Which Security skills are most installed?

Popular Security skills on SkillMD right now include opensea-wallet, Uniswap Hooks, agent-wormhole. Rankings shift as installs change; sort this page by "Most downloaded" for the live list.

Do Security skills work with Claude Code and Cursor?

Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds add <owner>/<name>, or copy the file into your agent's skills directory.