Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
jornalistainclusivo Skill WordpressComplete WordPress development workflow covering theme development, plugin creation, WooCommerce integration, performance optimization, and security hardening. Includes WordPress 7.0 features: Real-Time Collaboration, AI Connectors, Abilities API, DataViews, and PHP-only blocks.
-
jornalistainclusivo Skill Security AuditComprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening.
-
jornalistainclusivo Skill API Security Best PracticesImplement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
-
jornalistainclusivo Skill Wordpress Plugin DevelopmentWordPress plugin development workflow covering plugin architecture, hooks, admin interfaces, REST API, security best practices, and WordPress 7.0 features: Real-Time Collaboration, AI Connectors, Abilities API, DataViews, and PHP-only blocks.
-
pangenomeai Skill Wiley FoodShared author-guideline skill for Wiley food & nutrition journals: Comprehensive Reviews in Food Science and Food Safety, Food Frontiers, eFood, Legume Science, Food and Energy Security, Molecular Nutrition & Food Research, Journal of Food Biochemistry, Food Science & Nutrition. Use to format or check a manuscript for a Wiley food journal — structure, abstract/keyword limits, Wiley reference styles, and figure specs. Triggers: submit to a Wiley food journal, CRFSFS/Food Frontiers/Food Science & Nutrition guidelines. Also fires when the user wants to publish on/in this journal, format a manuscript for it, or match its reference/citation style.
-
pangenomeai Skill Springer FoodShared author-guideline skill for Springer / Springer Nature food journals: Food Engineering Reviews, Food and Bioprocess Technology, Food Security, and the SpringerOpen journal Food Production Processing and Nutrition. Use to format or check a manuscript for a Springer food journal — structure, abstract/keyword limits, Springer reference styles, and figure specs. Triggers: submit to Food and Bioprocess Technology, Food Security, Food Engineering Reviews guidelines, Springer food formatting. Also fires when the user wants to publish on/in this journal, format a manuscript for it, or match its reference/citation style.
-
pangenomeai Skill Agri Food SecurityAuthor-guideline skill for Agriculture & Food Security (BMC / Springer Nature, open access). Use to format or check a manuscript for this BMC journal — structure, mandatory BMC declarations, numbered references, and figure specs. Triggers: submit to Agriculture & Food Security, BMC food journal guidelines, BMC declarations formatting. Also fires when the user wants to publish on/in this journal, format a manuscript for it, or match its reference/citation style.
-
alemar11 Bundle Skill AuditAudit skill or plugin instructions and usage evidence read-only. Use only when explicitly invoked as $skill-audit.
-
alemar11 Bundle DeslopAudit and safely remove low-value repository code. Use only when explicitly invoked by the user.
-
alemar11 Bundle MaintainerManually audit, maintain, and re-engineer existing repo skills and plugins through health checks, targeted upgrades, workflow hardening, package lifecycle work, validation, and explicit refreshes.
-
ariaxhan Bundle Create Portable SkillCreate, audit, or package a portable Claude/Codex skill. Use when building a new skill, converting an existing workflow into a reusable skill, reviewing whether something is a real skill or just a rule/reference/kit, or preparing a skills repository catalog.
-
ariaxhan Bundle Audit The PremiseStress-test the assumption baked into a task before spending real effort on it. Use when a request asserts something is broken, true, already decided, or unchanged before you act on it: "fix the broken X", "since Tuesday it's been down", "just flip the existing thing", "the data already has Y". Triggers include "is this problem even real", "check the assumption before I start", "the request says X but is that true". Produces a confirmed-or-corrected understanding, a logged disagreement when the premise was wrong, and a safer revised plan.
-
awslabs Skill Claims Billing RulesReasoning skill for healthcare claims billing rules and fraud detection logic. Use when the user asks about CMS billing rules, place of service codes, global surgery periods, modifier usage (25 59 76 77), NCCI edit logic, column 1 column 2 code pairs, mutually exclusive procedures, modifier indicators, fraud waste and abuse patterns, E&M upcoding, unbundling, phantom billing, impossible day detection, coding error versus fraud distinction, FWA investigation methodology, or claims audit logic. Triggers include "CMS billing rules", "NCCI edits", "modifier 25", "modifier 59", "global surgery period", "upcoding", "unbundling", "phantom billing", "impossible day", "FWA", "fraud waste abuse", "coding error vs fraud", "claims audit", "billing compliance", "E&M level selection".
Audited -
awslabs Skill Hedis Measure SpecificationReasoning skill for HEDIS measure specification, enrollment logic, exclusion evaluation, NCQA audit requirements, and care gap prioritization. Use when the user asks about HEDIS measure definitions, denominator/numerator/exclusion logic, continuous enrollment rules, Star Rating impact, or care gap closure strategies.
Audited -
mfielding92 Skill Code ReviewReview code changes for quality, security, and correctness. Use when the user says "review this PR", "review these changes", "check my code", "look at what I changed", or after implementing a feature. Produces a severity-organized report.
-
mfielding92 Skill Project OptimizerDeep scan and optimization of your project's Claude Code setup, workflows, and codebase patterns. Use when the user says "optimize", "audit my project", "scan for improvements", "how can I improve", "check my setup", or "what am I doing wrong".
-
hubeiqiao Skill Security ReviewUse this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
-
udecode Skill AutoclosureAutonomously close the current kitcn work tree through source sync, proof, review, checks, GitHub delivery, and final audit without expanding product scope.
-
udecode Skill Sync VisionIncrementally audit kitcn doctrine drift since the recorded baseline, classify it, update VISION.md and local planning owners, then advance the baseline only after proof.
-
udecode Skill Sync Convex AuthSync `zbeyens/convex-better-auth` with upstream, then sync kitcn against upstream `convex-better-auth` changes. Use when asked to run `sync-convex-auth`, compare the fork with upstream, fast-forward or PR the fork update when safe, audit commits the fork was behind on, classify relevance to kitcn auth integration, and delegate one implementation PR through `task`.
-
udecode Skill Changeset ResolveRepair an unreleased `.changeset/*.md` file so it matches the real branch delta against `main`. Use when a changeset was edited iteratively during debugging, when bullets may reflect turn-by-turn history instead of `main...HEAD`, when "removed/gone/renamed" claims need proof, or when you need to audit whether a changeset is actually lossless before commit.
-
dalehurley Skill Find Credential UsageSearch your entire system to find all instances where a specific API key, token, or credential has been used or stored. Use this skill when the user asks to locate, audit, or track where a credential appears across files, environment variables, configuration files, logs, or shell history. Helps identify security risks and credential exposure.
-
dalehurley Skill Analyze Codebase For ImprovementsAnalyze a codebase or project to identify actionable improvements, architectural enhancements, and optimization opportunities. Use this skill when the user asks to review code quality, suggest improvements, identify bottlenecks, audit a system, or get recommendations for enhancing a project. Generates a prioritized list of improvements with problem statements, solutions, and impact analysis.
-
gopherguides Skill Gopher GuidesAuthoritative Gopher Guides Go training materials accessed via REST API/cache wrapper. Use when reviewing Go code and the user explicitly asks 'what would Gopher Guides recommend?', 'how do professionals do this?', or wants training-material-backed practices/examples/audit. SKIP for general Go idiom questions handled by the `go` skill.
Audited -
helloeveryboby Bundle MobileapptesterChecklist-driven security testing for Android and iOS applications.
-
helloeveryboby Bundle ApisecuritytesterSpecialized testing for RESTful, GraphQL APIs, and JWT/OAuth mechanisms.
-
helloeveryboby Bundle WebsecuritytesterComprehensive web security testing orchestrator (Recon, Scanner, Logic Checklist).
-
dedinc Bundle Chef Flavor BalanceThe flavor-architecture skill — salt, fat, acid, sweet, bitter, umami, heat, aroma, texture. Use whenever designing or fixing the TASTE of any dish: checking if a recipe will actually be delicious, balancing or rescuing a dish ("too salty", "too bland", "missing something"), choosing what goes with what, building pairings, or finalizing seasoning. Every recipe creation or audit should consult this skill.
-
dedinc Bundle Chef Recipe OptimizerAudit, repair and rebuild recipes. Use when the user shares a recipe and wants it checked, fixed, scaled or improved; when a cooked dish failed; or for a final internal sanity-check of a newly generated recipe. For live failures, give the rescue first instead of forcing a full scored audit.
-
dedinc Bundle Chef Culinary InspectorCulinary inspector and quality-audit authority — evaluates dishes, menus, kitchens, and cooking processes like a triple inspector: Michelin-style (taste, technique, consistency), health-inspector (safety compliance), and efficiency auditor (waste, cost, workflow). Produces graded verdicts with concrete fixes. Use whenever the user asks "evaluate/rate my dish/recipe/menu/kitchen", wants feedback on something they cooked, asks what went wrong, or wants a pre-event readiness check.
-
futurejj Bundle Linux AdminLinux system administration including systemd, networking, permissions, troubleshooting, and security hardening. Trigger for Linux server management, process management, or system debugging.
-
futurejj Bundle Security HardeningApplication security including OWASP Top 10, input validation, CSP, CORS, secrets management, and dependency scanning. Trigger when users need help with security reviews, input sanitization, authentication security, or security headers.
-
seroneyemmanuel4-afk Skill Forge DocsVerify that user, contributor, architecture, operations, security, and release documentation is accurate and executable. Use for every maintained or distributed project.
-
seroneyemmanuel4-afk Skill Forge CacheFirst decide whether caching is justified, then audit keys, invalidation, consistency, privacy, and failure behavior. Use for detected caches, cdns, memoization, or a measured proposal to add caching.
-
seroneyemmanuel4-afk Skill Forge OfflineAudit local persistence, queued actions, synchronization, conflicts, revocation, privacy, and recovery under intermittent connectivity. Use for offline-capable web, mobile, or desktop applications.
-
seroneyemmanuel4-afk Skill Forge DiscoverBuild an evidence-backed application profile and architecture map before any specialized audit begins. Use for every repository audit.
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include linux-admin, security-hardening, wordpress. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.