Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
criptogus Skill Osint InvestigatorPlans and correlates open-source intelligence collection on domains, organizations and infrastructure for authorized investigations and threat intel. Use when the user asks for osint investigator work, or mentions osint, investigator.
Audited - criptogus Skill Incident Response Triage
Guides rapid triage and initial containment of a security incident following NIST SP 800-61, with evidence-preservation and notification checkpoints. Use when the user asks for incident response triage work, or mentions incident, response, triage.
Audited - criptogus Skill Sigma Detection Engineer
Turns a described threat behavior or log sample into a validated Sigma detection rule with MITRE ATT&CK mapping, false-positive notes and a test plan. Use when the user asks for sigma detection engineer work, or mentions sigma, detection, engineer.
Audited -
teycir Skill Malicious Exfiltration 1Exfiltration Exploit 1
- teycir Skill Malicious Exfiltration 7
Exfiltration Exploit 7
- teycir Skill Malicious Obfuscation 10
Obfuscation Exploit 10
- teycir Skill Malicious Supply Chain 5
Supply-chain Exploit 5
- teycir Skill Malicious Exfiltration 13
Exfiltration Exploit 13
- teycir Skill Malicious Supply Chain 11
Supply-chain Exploit 11
- teycir Skill Malicious Command Injection 2
Command-injection Exploit 2
- teycir Skill Malicious Command Injection 8
Command-injection Exploit 8
- teycir Skill Malicious Command Injection 14
Command-injection Exploit 14
- teycir Skill Malicious Privilege Escalation 3
Privilege-escalation Exploit 3
- teycir Skill Malicious Privilege Escalation 9
Privilege-escalation Exploit 9
- teycir Skill Malicious Privilege Escalation 15
Privilege-escalation Exploit 15
-
aradotso Skill Awesome Claude Code SubagentsCollection of 131+ specialized Claude Code subagents for development tasks across languages, frameworks, infrastructure, and quality assurance
- aradotso Skill Agents Best Practices Harness Design
Design, audit, and refactor production-safe agentic harnesses with provider-neutral best practices for tools, permissions, planning, context, and observability.
-
rweisssieker-xp Skill Ax Migration Audit BinderUse when audit binder, evidence binder, decision traceability, gate evidence, security evidence, legal evidence, or audit readiness needs.
- rweisssieker-xp Skill Ax Migration Scenario Lab
Use when migration intelligence fabric work needs scenario lab, reusable knowledge, benchmarking, portfolio control, scenario simulation, quality audit, resilience, value realization, or continuous improvement.
- rweisssieker-xp Skill Ax Migration Ciso Guardian
Use when a CISO, security lead, compliance officer, data protection officer, audit lead, risk manager, or security architect needs AX to D365FO migration security, privacy, roles, SoD, controls, evidence, gate readiness, or compliance guidance.
- rweisssieker-xp Skill Ax Migration Team Executor
Use when developers, functional consultants, data leads, integration specialists, report builders, testers, security analysts, or project team members need AX to D365FO migration tasks, acceptance criteria, technical actions, workshop outputs, or delivery execution guidance.
- rweisssieker-xp Skill Ax Migration Pmo Negotiator
Use when migration intelligence fabric work needs pmo negotiator, reusable knowledge, benchmarking, portfolio control, scenario simulation, quality audit, resilience, value realization, or continuous improvement.
- rweisssieker-xp Skill Ax Migration Regulatory Pack
Use when AX to D365FO migration work needs regulatory, compliance, privacy, audit, DACH, GDPR/DSGVO, GoBD, EU e-invoicing, finance audit, pharma validation, automotive EDI, or public-sector control guidance.
- rweisssieker-xp Skill Ax Migration War Game Master
Use when migration intelligence fabric work needs war game master, reusable knowledge, benchmarking, portfolio control, scenario simulation, quality audit, resilience, value realization, or continuous improvement.
- rweisssieker-xp Skill Ax Migration Legal Compliance
Use when legal counsel, compliance leads, privacy officers, records managers, audit teams, or risk owners need AX to D365FO data processing, retention, regulatory obligations, contractual risk, audit evidence, or compliance decision support.
- rweisssieker-xp Skill Ax Migration Migration Memory
Use when migration intelligence fabric work needs migration memory, reusable knowledge, benchmarking, portfolio control, scenario simulation, quality audit, resilience, value realization, or continuous improvement.
- rweisssieker-xp Skill Ax Migration Benchmarking Analyst
Use when migration intelligence fabric work needs benchmarking analyst, reusable knowledge, benchmarking, portfolio control, scenario simulation, quality audit, resilience, value realization, or continuous improvement.
-
selamy-labs Skill Malicious SkillA poisoned skill used only as a negative fixture for the security gate.
- selamy-labs Skill Verified Secret Migration
Use when moving a credential or secret into a secret manager without leaking it or destroying the source before byte-accurate readback verification.
- selamy-labs Skill Secret To Secret Manager Verified
Use when migrating a secret from any source into a secret manager. Requires non-empty extraction, exact-byte preservation, readback hash verification, and source destruction only after verified match.
-
sahit-sai Bundle Grill Me QAA guided interview to challenge and validate QA automation plans, test strategies, and framework designs before implementation. Use when the user wants to validate a test architecture, challenge a testing decision, prepare an AI-assisted testing rollout, or uses any "grill" trigger phrase (grill my test plan, audit my QA automation framework, challenge my QA strategy, review my test architecture).
- sahit-sai Bundle Secret Guard
Secret scanning wrapper for repositories and skill configs.
-
imtiazrayhan Skill Secret ScannerScan a repo or a diff for committed secrets — API keys, tokens, private keys, .env files, and high-entropy strings — then triage real leaks from fixtures. Use before pushing, in review, or when a credential may have leaked.
- imtiazrayhan Skill Dependency Audit
Audit project dependencies for known vulnerabilities and turn the raw scanner output into a triaged, prioritized upgrade plan. Use when an audit is noisy, a CVE was reported, or you need to know which advisories actually matter.
- imtiazrayhan Skill Data Retention Auditor
Audit where personal or sensitive data is collected, copied, retained, backed up, logged, exported, and deleted, then compare actual lifecycle behavior with stated policy. Use when adding a data field, preparing a privacy review, implementing account deletion, reducing stored data, or checking whether retention controls work across primary and secondary systems.
- imtiazrayhan Skill Monorepo Boundary Auditor
Audit a monorepo's package boundaries, dependency direction, public entry points, ownership, build graph, and affected-test rules, then report cycles and cross-layer imports with a staged repair plan. Use when packages are tightly coupled, builds invalidate too much, teams import internals, dependency cycles appear, or a monorepo migration needs enforceable architecture boundaries.
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include osint-investigator, incident-response-triage, sigma-detection-engineer. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.