Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
javimosch Skill Quickstart 431---\nname: gosec\ndescription: Go security checker\n---\n# gosec Plugin\nGo security checker
- javimosch Skill Quickstart 471
---\nname: lynis\ndescription: Security auditing tool\n---\n# lynis Plugin\nSecurity auditing tool
-
tomevault-io Bundle Deep Plan 2Use when an implementation plan is proposed but requires a deep architectural audit for risks, side effects, and ambiguities before writing any code.
- tomevault-io Bundle Information Security Manager Iso27001 2
ISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies. Use for ISMS design, security risk assessment, control implementation, ISO 27001 certification, security audits, incident response, and compliance verification. Covers ISO 27001, ISO 27002, healthcare security, and medical device cybersecurity. Use when this capability is needed.
- tomevault-io Bundle Code Review 320
Bug/security/quality review of source + automated fix application, consolidated. Use after a phase or PR diff to catch regressions before ship. Use when this capability is needed.
- tomevault-io Bundle Security Requirement Extraction 3
Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases. Use when this capability is needed.
- tomevault-io Bundle Security Scanning Security Sast 2
Static Application Security Testing (SAST) for code vulnerability Use when this capability is needed.
- tomevault-io Bundle Code Review 321
Comprehensive code review with security, performance, and best practices focus Use when this capability is needed.
- tomevault-io Bundle Security Review 30
Security review checklist covering OWASP Top 10, authentication, authorization, input validation, secrets management, and common vulnerability patterns. Reference when reviewing code for security. Use when this capability is needed.
- tomevault-io Bundle Information Security Manager Iso27001 3
Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech companies. Provides ISMS implementation, cybersecurity risk assessment, security controls management, and compliance oversight. Use for ISMS design, security risk assessments, control implementation, and ISO 27001 certification activities. Use when this capability is needed.
- tomevault-io Bundle Security Best Practices 21
用于按语言和框架执行安全最佳实践检查，生成安全审查报告并提出 secure-by-default 改进建议。 Use when this capability is needed.
- tomevault-io Bundle Speak Security Basics 2
Security best practices for Speak API keys, audio data privacy, student Use when this capability is needed.
- tomevault-io Bundle Dependency Audit 2
Dependency management and auditing — evaluating new dependencies, security vulnerability scanning, update strategies, and license compliance. Use when adding or auditing dependencies. Use when this capability is needed.
- tomevault-io Bundle Scanning For Secrets 2
Detect exposed secrets, API keys, and credentials in code. Use when auditing for secret leaks. Trigger with 'scan for secrets', 'find exposed keys', or 'check credentials'. Use when this capability is needed.
- tomevault-io Bundle Security Bluebook Builder 8
Build a minimal but real security policy for sensitive apps. The output Use when this capability is needed.
- tomevault-io Bundle Hook Creator 6
Create Claude Code hooks with proper schemas, RBAC integration, and performance requirements. Use when implementing PreToolUse, PostToolUse, SessionStart, or any of the 10 hook event types for automation, validation, or security enforcement. Use when this capability is needed.
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Containe 2
Overview
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Customer 4
Customer.io Security Basics
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Perplexi 4
Perplexity Security Basics
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Security 2
Security Headers Generator
- tomevault-io Bundle Speak Security Basics 3
Security best practices for Speak API keys, audio data privacy, student Use when this capability is needed.
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Performi 2
Security Test Scanner
- tomevault-io Bundle Sharkitect Solutions Claude Code Plugins Plus Skills Win 4
Windsurf Audit Logging
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Openevid 16
OpenEvidence Security Basics
- tomevault-io Bundle Generating Compliance Reports 2
Generate comprehensive compliance reports for security standards. Use when creating compliance documentation. Trigger with 'generate compliance report', 'compliance status', or 'audit compliance'. Use when this capability is needed.
- tomevault-io Bundle Windsurf Security Basics 2
Apply Windsurf security best practices for workspace isolation, data Use when this capability is needed.
- tomevault-io Bundle API Security Best Practices 4
Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities Use when this capability is needed.
- tomevault-io Bundle Jeremylongshore Claude Code Plugins Plus Skills Performi 3
Performing Security Code Review
- javimosch Skill Quickstart 634
---\nname: codeql\ndescription: CodeQL security analysis CLI\n---\n# codeql Plugin\nCodeQL security analysis CLI
- javimosch Skill Quickstart 1655
---\nname: suricata\ndescription: Network threat detection\n---\n# suricata Plugin\nNetwork threat detection
- javimosch Skill Quickstart 1239
---\nname: semgrep\ndescription: Static analysis security scanner\n---\n# semgrep Plugin\nStatic analysis security scanner
- javimosch Skill Quickstart 2059
---\nname: cargo-deny\ndescription: Audit Rust dependency licenses\n---\n# cargo-deny Plugin\nAudit Rust dependency licenses
- javimosch Skill Quickstart 2424
secret-scan
- javimosch Skill Quickstart 2425
secret-tool Plugin
- javimosch Skill Quickstart 3086
ubuntu-security-status Plugin
-
diegosouzapw Bundle The Fool 2The Fool workflow skill. Use this skill when the user needs challenging ideas, plans, decisions, or proposals. Invoke to play devil's advocate, run a pre-mortem, red team, stress test assumptions, audit evidence quality, or find blind spots before committing. Do NOT use for building plans, making decisions, or generating solutions \u2014 this skill only challenges and critiques and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
54
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include quickstart, quickstart, deep-plan. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.