Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
imtiazrayhan Skill Security Headers HardenerAudit and harden a web app's or API's HTTP security headers — Content-Security-Policy, HSTS, X-Content-Type-Options, frame-ancestors, Referrer-Policy, Permissions-Policy, and CORS — and produce a staged rollout that won't break the site. Use before a launch, during a security pass, or when a scanner (Mozilla Observatory, securityheaders.com, a pentest) flags missing or weak headers. Audits and edits header config; rolls CSP out Report-Only first.
- imtiazrayhan Skill Dependency Upgrade Planner
Plan and de-risk a major dependency, framework, or runtime upgrade — map the full version path, read every intermediate migration guide, and pin the breaking changes to your actual call sites instead of bumping the number and hoping. Use when a key dependency is several majors behind, when a security advisory forces an upgrade, or before a framework migration.
- imtiazrayhan Skill Release Readiness Reviewer
Review whether a specific release is ready to ship by checking scope, tests, compatibility, migrations, configuration, observability, rollout, rollback, support, security, and ownership against explicit evidence. Use before a production deployment, major version, risky feature launch, migration, or go/no-go meeting.
- imtiazrayhan Skill Localization Readiness Auditor
Audit an application or feature for localization readiness across extracted messages, interpolation, pluralization, date and number formatting, layout expansion, right-to-left behavior, sorting, search, assets, metadata, and test coverage. Use before adding a locale, reviewing hard-coded UI text, or investigating a feature that breaks outside English.
- imtiazrayhan Skill Background Job Reliability Auditor
Audit scheduled jobs, queue consumers, workers, and asynchronous workflows for delivery assumptions, idempotency, retries, poison messages, concurrency, timeouts, checkpoints, shutdown, and observability. Use when a job duplicates work, silently stops, falls behind, fails only at scale, or needs review before production.
-
mj-deving Bundle Beads BootstrapAudit or initialize repo Beads workflow and files. USE WHEN bootstrap Beads, adopt Beads, standardize Beads workflow, initialize a new repo onto Beads, or verify whether a repo already has mature Beads doctrine.
- mj-deving Bundle Beads Hook Audit
Audit and repair Claude-side Beads hook behavior on the local machine. USE WHEN Beads hooks, SessionStart, PreCompact, Stop, PostToolUse, hook doctrine, auto-close risk, or machine-level Beads alignment.
- mj-deving Bundle Beads Version Audit
Audit a repo's live Beads posture before migration or coordination work. USE WHEN verify backend mode, remotes, hooks, legacy drift, or whether a repo is safe to upgrade, share, or recover.
- mj-deving Bundle Beads Recovery Audit
Rehearse Beads recovery and drift handling. USE WHEN backup, restore, pull or push, lock cleanup, or mode-transition safety should be audited before trusting Beads operationally.
- mj-deving Bundle Osint
Structured OSINT investigations — people lookup, company intel, investment due diligence, entity/threat intel, domain recon, organization research using public sources with ethical authorization framework. USE WHEN OSINT, due diligence, background check, research person, company intel, investigate, company lookup, domain lookup, entity lookup, organization lookup, threat intel, discover OSINT sources.
- mj-deving Bundle Secupdates
Security news from tldrsec, no.security, Krebs, Schneier, and other sources. USE WHEN security news, security updates, what's new in security, breaches, security research, sec updates, tldrsec, Krebs, Schneier.
- mj-deving Bundle Desloppify
Multi-language codebase health scanner — technical debt scoring and cleanup plans. USE WHEN desloppify, health scan, technical debt, health score, cleanup plan, debt audit, code health.
- mj-deving Bundle Codexbridge
Invoke Codex CLI from Claude in a controlled way for plan review, repo audit, codegen, and strict JSON contracts. USE WHEN ask codex, consult codex, codex review, codex json output, run codex, codex plan review, codex audit.
- mj-deving Bundle Annualreports
Aggregate and analyze annual security reports from major vendors — extract trends, compare threat landscapes year-over-year, produce synthesized threat intelligence summaries. Fetch, list, and update report sources. USE WHEN annual reports, security reports, threat reports, industry reports, vendor reports, threat landscape, fetch report, list sources, update sources.
-
pilot2service Skill Assumption And Evidence AuditExtracts every load-bearing assumption behind a recommendation, traces each to its source, grades the strength of the evidence, and ranks the gaps by leverage times weakness. Use before a business case, analysis, or recommendation is locked in, to see which unverified claims could actually change the conclusion if they turned out false.
- pilot2service Skill Competitive And Five Forces Mapping
Maps an industry's competitive dynamics using Porter's Five Forces — rivalry, threat of new entrants, substitutes, supplier power, buyer power — to explain why the industry is structurally attractive or not, not just who the named competitors are. Use when assessing whether a market or industry segment is worth entering, defending, or exiting.
-
teycir Skill Safe Security Audit 7Security-audit Helper 7
- teycir Skill Safe Security Audit 19
Security-audit Helper 19
- teycir Skill Safe Security Audit 31
Security-audit Helper 31
- teycir Skill Safe Security Audit 43
Security-audit Helper 43
- teycir Skill Safe Security Audit 55
Security-audit Helper 55
- teycir Skill Malicious Obfuscation 4
Obfuscation Exploit 4
-
rweisssieker-xp Skill Ax Migration Cfo Finance LeadershipUse when a CFO, finance director, controller, audit sponsor, or finance leadership team needs AX to D365FO migration budget control, ROI, TCO, benefits realization, closing readiness, audit readiness, or financial decision support.
- rweisssieker-xp Skill Ax Migration Evidence Vault Manager
Use when migration work needs evidence vault, go-live evidence, audit binder, freshness, traceability, and missing proof control.
- rweisssieker-xp Skill Ax Migration Post Go Live Optimizer
Use when migration intelligence fabric work needs post go live optimizer, reusable knowledge, benchmarking, portfolio control, scenario simulation, quality audit, resilience, value realization, or continuous improvement.
- rweisssieker-xp Skill Ax Migration Rollout Wave Optimizer
Use when migration intelligence fabric work needs rollout wave optimizer, reusable knowledge, benchmarking, portfolio control, scenario simulation, quality audit, resilience, value realization, or continuous improvement.
- rweisssieker-xp Skill Ax Migration Sustainability Advisor
Use when migration intelligence fabric work needs sustainability advisor, reusable knowledge, benchmarking, portfolio control, scenario simulation, quality audit, resilience, value realization, or continuous improvement.
- rweisssieker-xp Skill Ax Migration Peer Comparison Analyst
Use when migration intelligence fabric work needs peer comparison analyst, reusable knowledge, benchmarking, portfolio control, scenario simulation, quality audit, resilience, value realization, or continuous improvement.
- rweisssieker-xp Skill Ax Migration Portfolio Control Tower
Use when migration intelligence fabric work needs portfolio control tower, reusable knowledge, benchmarking, portfolio control, scenario simulation, quality audit, resilience, value realization, or continuous improvement.
- rweisssieker-xp Skill Ax Migration Quality Maturity Scorer
Use when migration intelligence fabric work needs quality maturity scorer, reusable knowledge, benchmarking, portfolio control, scenario simulation, quality audit, resilience, value realization, or continuous improvement.
- rweisssieker-xp Skill Ax Migration Risk Escalation Advisor
Use when risk escalation, blocker classification, go-live blockers, security/legal/data/cutover escalation, or external approval routing.
- rweisssieker-xp Skill Ax Migration Delivery Quality Auditor
Use when migration intelligence fabric work needs delivery quality auditor, reusable knowledge, benchmarking, portfolio control, scenario simulation, quality audit, resilience, value realization, or continuous improvement.
- rweisssieker-xp Skill Ax Migration Value Realization Engine
Use when migration intelligence fabric work needs value realization engine, reusable knowledge, benchmarking, portfolio control, scenario simulation, quality audit, resilience, value realization, or continuous improvement.
- rweisssieker-xp Skill Ax Migration Legacy Archive Strategist
Use when migration work needs legacy archive strategy, history retention, read-only access, audit retrieval, and reporting archive.
- rweisssieker-xp Skill Ax Migration Technical Debt Liquidator
Use when migration intelligence fabric work needs technical debt liquidator, reusable knowledge, benchmarking, portfolio control, scenario simulation, quality audit, resilience, value realization, or continuous improvement.
- rweisssieker-xp Skill Ax Migration Commerce Security Pci Lead
Use when commerce security, PCI, payment tokens, POS roles, device security, payment secrets, or store security gate needs.
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include security-headers-hardener, dependency-upgrade-planner, release-readiness-reviewer. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.