Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
tomevault-io Bundle Sast Configuration 4Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across multiple programming languages. Use when this capability is needed.
- tomevault-io Bundle Pinpoint Security 2
Security patterns, CSP nonces, input validation, auth checks, Supabase SSR patterns. Use when implementing authentication, forms, security features, or when user mentions security/validation/auth. Use when this capability is needed.
- tomevault-io Bundle Code Review Security 3
Unified pre-merge security review — SAST + SCA + secrets + container + IaC + license against the PR diff, dependency-add gate for new direct deps, optional `gh pr review` posting. Use when conducting a comprehensive security review of a feature branch, gating a merge on critical findings, or producing a structured review comment for the PR. Use when this capability is needed.
- tomevault-io Bundle Vulnerability Scanner 2
Scans code for security vulnerabilities, identifies CVE patterns, and provides severity ratings with remediation guidance. Use when scanning for security issues, code vulnerabilities, or OWASP top 10 problems. Use when this capability is needed.
- tomevault-io Bundle Security Scan 7
Run dependency audits, secrets detection, and static analysis to find CVEs, leaked credentials, and insecure code patterns. Use at phase checkpoints or before releases. Use when this capability is needed.
- tomevault-io Bundle Observability 6
Add or change observability instrumentation (structured logging, OpenTelemetry traces/spans, RED metrics, dashboards, alerts). Use when adding logs/metrics/traces to code, defining telemetry field contracts, or building monitoring runbooks. NOT for diagnosing existing issues with existing telemetry (use debug); NOT for security-specific logging concerns (use security). Use when this capability is needed.
- tomevault-io Bundle Active Directory Attacks 2
This skill should be used when the user asks to "attack Active Directory", "exploit AD", "Kerberoasting", "DCSync", "pass-the-hash", "BloodHound enumeration", "Golden Ticket", "Silver Ticket", "AS-REP roasting", "NTLM relay", or needs guidance on Windows domain penetration testing. Use when this capability is needed.
- tomevault-io Bundle Smtp Penetration Testing 2
This skill should be used when the user asks to "perform SMTP penetration testing", "enumerate email users", "test for open mail relays", "grab SMTP banners", "brute force email credentials", or "assess mail server security". It provides comprehensive techniques for testing SMTP server security. Use when this capability is needed.
- tomevault-io Bundle Secure Code Review 3
Language-aware security code review covering CWE/OWASP patterns, SAST integration, and remediation guidance for Python, JS, Go, and Java. Use when this capability is needed.
- tomevault-io Bundle Security Best Practices 17
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks. Use when this capability is needed.
- tomevault-io Bundle Code Review Assistant 7
Automated code review assistance including best practices evaluation, security vulnerability detection, performance optimization suggestions, code quality assessment, and style guide enforcement. Use when Claude needs to perform code reviews, assess code quality, identify potential issues, or provide improvement recommendations. Use when this capability is needed.
- tomevault-io Bundle Security Hardening 3
Application security covering input validation, auth, headers, secrets management, and dependency auditing Use when this capability is needed.
- tomevault-io Bundle Security Audit 17
Perform a security audit of the codebase. Checks for OWASP Top 10, AI-specific vulnerabilities, dependency issues, and configuration problems. Use when this capability is needed.
- tomevault-io Bundle Doc Sync 6
Audit AI guidance files (CLAUDE.md, copilot-instructions.md, .github/agents/, .github/prompts/) for consistency. Use after updating any AI-facing documentation. Use when this capability is needed.
- tomevault-io Bundle Scope Drift Detection Spn 2
Use this skill when asked to detect scope drift, behavioral expansion, or gradual privilege/access creep in service principals or automation accounts. Triggers on keywords like "scope drift", "service principal drift", "SPN behavioral change", "automation account drift", "baseline deviation", "access expansion", or when investigating whether a service principal has gradually expanded beyond its intended purpose. This skill builds a 90-day behavioral baseline per SPN, compares it with 7-day recent activity, computes a weighted Drift Score across 5 dimensions, and correlates with SecurityAlert and AuditLogs for corroborating evidence.
- tomevault-io Bundle Security Review 27
AI-powered security vulnerability detection. Use PROACTIVELY after writing code that handles user input, authentication, API endpoints, payments, or sensitive data. Flags OWASP Top 10 issues with diff-aware scanning. Use when this capability is needed.
- tomevault-io Bundle Security Auditor 7
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Use when this capability is needed.
- tomevault-io Bundle Code Review Checklist 11
Code review guidelines covering code quality, security, and best practices. Use when this capability is needed.
- tomevault-io Bundle Senior Backend 10
This skill should be used when the user asks to "design REST APIs", "optimize database queries", "implement authentication", "build microservices", "review backend code", "set up GraphQL", "handle database migrations", or "load test APIs". Use for Node.js/Express/Fastify development, PostgreSQL optimization, API security, and backend architecture patterns. Use when this capability is needed.
- tomevault-io Bundle Security 25
Security best practices Use when this capability is needed.
- tomevault-io Bundle Code Review 313
Review code for bugs, security issues, performance, and best practices. Works with local changes, PRs, or specific files. Use when this capability is needed.
- tomevault-io Bundle Docs Validator 2
Documentation quality validator for Logseq Template Graph. Checks documentation completeness, accuracy, formatting, links, and consistency. Activates when asked to "validate docs", "check documentation", "audit docs quality", "find broken links", or similar requests. Provides actionable feedback and specific fixes for documentation issues. Use when this capability is needed.
- tomevault-io Bundle Wp Performance Review 2
WordPress performance code review and optimization analysis. Use when reviewing WordPress PHP code for performance issues, auditing themes/plugins for scalability, optimizing WP_Query, analyzing caching strategies, checking code before launch, or detecting anti-patterns, or when user mentions "performance review", "optimization audit", "slow WordPress", "slow queries", "high-traffic", "scale WordPress", "code review", "timeout", "500 error", "out of memory", or "site won't load". Detects anti-patterns in database queries, hooks, object caching, AJAX, and template loading. Use when this capability is needed.
- tomevault-io Bundle Backend Development 5
Node.js and Express backend development with API design, Turbonomic integration, security best practices, and performance optimization Use when this capability is needed.
- tomevault-io Bundle Pr Review 27
Review pull requests for code quality, security, and adherence to repo patterns. Use when reviewing PRs, checking code changes, performing code review, or validating changes before merge. Use when this capability is needed.
- tomevault-io Bundle Django Perf Review 10
Django performance code review. Use when asked to "review Django performance", "find N+1 queries", "optimize Django", "check queryset performance", "database performance", "Django ORM issues", or audit Django code for performance problems. Use when this capability is needed.
- tomevault-io Bundle Documentation Audit 5
Full audit and update of BioETL project documentation for v5.23+. Use when asked to review docs for staleness, reconcile docs with code, sync RULES.md and REQUIREMENTS.md, update architecture/provider/contract docs, reflect ADR-010/ADR-014/ADR-017, or identify dead documentation. Use when this capability is needed.
- tomevault-io Bundle Backend Security Coder 2
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews. Use when this capability is needed.
- tomevault-io Bundle Threat Modeling Expert 2
Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction. Use PROACTIVELY for security architecture reviews, threat identification, or building secure-by-design systems. Use when this capability is needed.
- tomevault-io Bundle Code Review 317
AI code review for PR or local changes. 280+ checks across security, architecture, performance, testing, and code quality. Posts findings as GitHub PR comments with confidence scores. Use when this capability is needed.
- tomevault-io Bundle Performance Audit 8
Comprehensive performance analysis to identify bottlenecks, optimization opportunities, and scalability issues. Use when this capability is needed.
- tomevault-io Bundle Security Best Practices 18
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks. Use when this capability is needed.
- tomevault-io Bundle Windows Privilege Escalation 2
This skill should be used when the user asks to "escalate privileges on Windows," "find Windows privesc vectors," "enumerate Windows for privilege escalation," "exploit Windows misconfigurations," or "perform post-exploitation privilege escalation." It provides comprehensive guidance for discovering and exploiting privilege escalation vulnerabilities in Windows environments. Use when this capability is needed.
- tomevault-io Bundle Copilot Instructions 2
Core directives for Copilot on the coffeemachine project. Use at all times to enforce hexagonal architecture, TDD, DDD, Java 25 modern features, commit conventions and security rules. Use when this capability is needed.
- tomevault-io Bundle Spring Boot Testing 2
Spring Boot 4 testing strategies and patterns. Use when writing unit tests, slice tests (@WebMvcTest, @DataJpaTest), integration tests, Testcontainers with @ServiceConnection, security testing (@WithMockUser, JWT), or Modulith event testing with Scenario API. Covers the critical @MockitoBean migration from @MockBean. Use when this capability is needed.
- tomevault-io Bundle Security Best Practices 16
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks. Use when this capability is needed.
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include sast-configuration, pinpoint-security, code-review-security. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.