Security
curated by SkillMD · plugin · 30 skills
Security audits, vulnerability scanning and secure coding.
Install the whole plugin (CLI)
npx skillmds add agricidaniel/ads
npx skillmds add bhanunamikaze/seo
npx skillmds add thedotmack/design-is
npx skillmds add cellebrite-labs/ghidra-rpc
npx skillmds add jakubantalik/transitions-polish
npx skillmds add forter/forter-agentic-readiness-audit
npx skillmds add heygen/hyperframes-animation
npx skillmds add risingwavelabs/b0
npx skillmds add dontbesilent2025/dbs-goal
npx skillmds add 24601/surrealdb
npx skillmds add kkkkhazix/neat-freak
npx skillmds add agenttestingclamp/r00-alirezarezvani-claude-skills-seo
npx skillmds add agricidaniel/ads-x
npx skillmds add systemtce/04-security
npx skillmds add thedotmack/pathfinder
npx skillmds add klotzkette/auditrechte
npx skillmds add dontbesilent2025/dbs-knowledge
npx skillmds add majiayu000/a11y
npx skillmds add agricidaniel/ads-meta
npx skillmds add agentskillexchange/snyk-agent-scan
npx skillmds add thedotmack/claude-code-plugin-release
npx skillmds add redpanda-data/rpk
npx skillmds add dontbesilent2025/dbs-content-system
npx skillmds add tinh2/ux
npx skillmds add zhaoxuya520/ida-reverse
npx skillmds add zhaoxuya520/apk-reverse
npx skillmds add zhaoxuya520/radare2
npx skillmds add zhaoxuya520/pentest-tools
npx skillmds add zhaoxuya520/go-rust-reverse
npx skillmds add zhaoxuya520/docs-generatorSkills in this plugin
- ▌ ads · agricidaniel bundleOperate professional paid advertising across Google, Meta, YouTube, LinkedIn, TikTok, Microsoft, Apple, Amazon, Reddit, Pinterest, Snapchat, and X. Use for account intake, source-grounded audits, strategy, budget and measurement planning, creative production, experiments, reporting, monitoring, and explicitly approved.
- ▌ seo · bhanunamikaze bundlePerforms deterministic, LLM-first SEO audits for websites, blog posts, and GitHub repositories, producing prioritized, confidence-labeled fixes.
- ▌ design-is · thedotmackAudits a design against Dieter Rams' ten principles, scores each with evidence, and produces a verdict with a handoff prompt for new, refined, or redesigned output.
- ▌ ghidra-rpc · cellebrite-labs bundleReverse engineering assistant that exposes Ghidra capabilities over a Unix domain socket for binary analysis, decompilation, and vulnerability research via CLI commands.
- ▌ transitions-polish · jakubantalik bundlePolishes existing motion against the transitions.dev motion-token scale by auditing duration, distance, scale, blur, and easing values and suggesting token-based corrections.
- ▌ forter-agentic-readiness-audit · forter bundleAudits a website against the Forter Agentic Readiness Guide by running 25 weighted rubrics, scoring each guideline, and producing a prioritized fix report.
- ▌ hyperframes-animation · heygen bundleProvides atomic motion rules, multi-phase scene blueprints, scene transitions, motion-design techniques, and runtime adapters (GSAP, Lottie, Three.js, Anime.js, CSS, WAAPI, TypeGPU) for composing animations with HyperFrames.
- ▌ b0 · risingwavelabs bundleDelegates tasks to specialized AI agents running in parallel via the Box0 platform, enabling code review, security checks, research, and documentation.
- ▌ dbs-goal · dontbesilent2025Audits fuzzy goals into checkable deliverables using Wittgenstein's philosophy of language, ensuring every word does work.
- ▌ surrealdb · 24601 bundleExpert guidance for architecting, developing, and operating SurrealDB 3, covering SurrealQL, multi-model data modeling, vector search, security, deployment, performance tuning, SDK integration, and ecosystem tools.
- ▌ neat-freak · kkkkhazix bundleReconciles project documentation, agent memory, and rule files against the actual codebase after a development session, ensuring accuracy and consistency across all knowledge layers.
- ▌ r00-alirezarezvani-claude-skills-seo · agenttestingclamp bundleRuns SEO and content marketing workflows with 10 commands covering keyword research, content audits, technical SEO, competitor analysis, and content planning.
- ▌ ads-x · agricidanielAudit X Ads measurement, pixel, conversions API, campaign structure, targeting, creative, budgets, brand safety, and reporting.
- ▌ 04-security · systemtce bundleGuides securing and deploying the Dify platform in production, covering SSRF protection, code sandboxing, Docker/Kubernetes deployment, monitoring, and recovery.
- ▌ pathfinder · thedotmackMaps a codebase into feature-grouped flowcharts, identifies duplicated concerns across features, and proposes a unified architecture with handoff prompts for refactoring.
- ▌ auditrechte · klotzkettePrüft Auditrechte-Klauseln in AGBs: ordnet Sachverhalt, Normen, Beweislast und Gegenargumente, liefert eine Fristen- und Risikoampel mit Sofortschritten und erstellt Redline-Entwürfe.
- ▌ dbs-knowledge · dontbesilent2025Turns a local folder into a searchable, maintainable knowledge base for AI agents, handling setup, navigation, content ingestion, querying, and health checks without external databases or RAG systems.
- ▌ a11y · majiayu000 bundleGuides implementation of accessible web interfaces to meet WCAG 2.2 AA, WAI-ARIA 1.2, and WCAG2ICT standards, covering semantic HTML, ARIA patterns, focus management, and automated validation.
- ▌ ads-meta · agricidanielAudits Meta Ads measurement, Pixel and Conversions API, attribution, creative, audiences, placements, automation, budgets, account structure, and policy for Facebook and Instagram campaigns.
- ▌ snyk-agent-scan · agentskillexchangeScans AI agents, MCP servers, and skills for security vulnerabilities from the command line, detecting prompt injections, tool poisoning, toxic flows, malware payloads, and credential handling issues across 15+ risk categories.
- ▌ claude-code-plugin-release · thedotmack bundleAutomates semantic versioning and release workflow for Claude Code plugins, including version increments across multiple manifest files, build verification, git tagging, GitHub releases, and changelog generation.
- ▌ rpk · redpanda-data bundleInstall the rpk CLI on macOS, Linux, or Docker, and configure profiles, connection settings, SASL/TLS credentials, and Enterprise licenses for Redpanda clusters.
- ▌ dbs-content-system · dontbesilent2025 bundleAudits local content archives and builds a reusable, structured content engineering project with content units, topic maps, and assembly drafts for ongoing reuse.
- ▌ ux · tinh2Audits UX quality of a codebase or validates implementation against design mockups, then fixes issues and commits changes.
- ▌ ida-reverse · zhaoxuya520 bundleProvides a complete workflow for IDA Pro reverse engineering of binaries (PE, ELF, APK, DLL, SO, firmware) using bundled PowerShell scripts to manage the MCP server and open files, then leverages 72 MCP tools for survey, decompilation, cross-references, data-flow tracing, patching, and reporting.
- ▌ apk-reverse · zhaoxuya520 bundleProvides a structured CLI workflow for Android APK reverse engineering, covering decompilation with jadx and apktool, smali modification, repackaging, signing, and Frida dynamic hooking, with optional native .so analysis via IDA or radare2.
- ▌ radare2 · zhaoxuya520 bundleProvides a command-line workflow for binary analysis with radare2, covering reconnaissance, disassembly, function analysis, string and import inspection, patching, binary diffing, and r2pipe scripting across PE, ELF, Mach-O, DEX, and WASM formats.
- ▌ pentest-tools · zhaoxuya520 bundleProvides a comprehensive penetration testing toolchain with 20+ security tools (Nmap, Nuclei, SQLMap, FFUF, Hashcat, etc.) exposed via MCP servers for authorized vulnerability scanning, exploitation, and reporting.
- ▌ go-rust-reverse · zhaoxuya520 bundleReverse engineers stripped Go and Rust binaries by recovering runtime metadata, symbols, panic strings, and idiomatic decompilation patterns.
- ▌ docs-generator · zhaoxuya520 bundleGenerates task-oriented technical documentation with progressive disclosure for READMEs, API docs, architecture docs, and security reports after reverse engineering, penetration testing, or CTF tasks.