Plugins

12 plugins

Security from nivkazdan/skills-agents-catalog.

16 skills · plugin

Security audits, vulnerability scanning and secure coding.

30 skills · plugin

Code Security Review Pipeline

Audit code changes for bugs, security flaws, and quality issues before merging.

15 skills · plugin

@alirezarezvani

Engineering Team

32 engineering skills: architecture, frontend, backend, fullstack, QA, DevOps, security, AI/ML, data engineering, Playwright (9 sub-skills), self-improving agent, Stripe integration, TDD guide, tech stack evaluator, Google Workspace CLI, a11y audit (WCAG 2.2), Azure cloud architect, GCP cloud architect, security pen testing, Snowflake development, adversarial-reviewer, ai-security, cloud-security,

16 skills · plugin

Static Analysis

Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection

3 skills · plugin

Testing Handbook Skills

Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)

15 skills · plugin

MCP Security Audit Pipeline

Audit MCP servers for secrets exposure, shell injection, and supply chain risks.

12 skills · plugin

Secure Laravel Deployment

Installs a pipeline to harden, audit, verify, and enforce security for Laravel apps.

4 skills · plugin

Secure Firebase Backend

Installs a pipeline to validate, plan, execute, and enforce Firebase security best practices.

7 skills · plugin

PR Review Pipeline

Install this pack to review a PR with structured analysis, security scanning, and quality enforcement.

11 skills · plugin

Bug Finding Pipeline

Install this pack to detect bugs, security issues, and logical errors in your branch changes.

9 skills · plugin

Secure Spring Boot Service

Installs a pipeline to harden, audit, verify, and enforce security for Spring Boot services.

4 skills · plugin

Results for “security”

164 skills

Static Analysis

Configures and runs static analysis and linting tools across multiple languages, integrating with CI/CD and security platforms.

Fuzzing Dictionary

Guides fuzzers with domain-specific tokens to reach deeper code paths in parsers, protocol handlers, and file format processors.

Detecting Dependency Confusion

Detect and prevent public-over-private name resolution in npm, PyPI, and Maven dependency manifests.

24.6k · bundle

Requesting Code Review

Verifies a code change before it lands by scanning the staged diff, running tests, and delegating to an independent reviewer.

Multi Stage Dockerfile

Create optimized multi-stage Dockerfiles for any language or framework, following best practices for smaller, more secure container images.

Routes software engineering tasks across backend, frontend, AI/ML, mobile, DevOps, and infrastructure sub-skills, applying security and ethics gates.

Guides contributors through creating pull requests that add or fix skills, with a checklist covering metadata validation, risk labeling, and security disclaimers.

Backend Mindset

Guides backend development across API design, authentication, security, performance, architecture, and testing, with decision guides and defaults for production-ready systems.

Get best practices for Entity Framework Core, covering data context design, entity design, performance, migrations, querying, change tracking, security, and testing.

Fabric Lakehouse

Design, build, and optimize Microsoft Fabric Lakehouse solutions with guidance on core concepts, components, security, shortcuts, and performance optimization.

36.2k · bundle

Solana Vulnerability Scanner

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing.

Build Uniswap v4 hooks with security-first guidance on threat modeling, permission flags, NoOp attack prevention, delta accounting, and pre-deployment audit checklists.

Detecting Kerberoasting Attacks

Detect Kerberoasting attacks by monitoring for anomalous Kerberos TGS requests targeting service accounts with SPNs for offline password cracking.

24.6k · bundle

the-oasis-project

Runs five parallel review agents on code changes, validates findings, triages them, and applies approved fixes after confirmation.

leandrobenjaminl

Runs an adversarial code review with two blind judges analyzing the same code from opposing perspectives to find flaws before production.

Implements backend source code from BA, TechLead, and PM artifacts, generating files, .env.example, and pr-description.md while enforcing security rules.

sakamoto-family-smile

Django Security

Hardens Django applications against common vulnerabilities with production settings, authentication, authorization, SQL injection and XSS prevention, and secure deployment configurations.

Guides Go developers in building production-ready gRPC services, covering proto organization, server/client implementation, error handling, streaming, testing, and security best practices.

Discovers, classifies, protects, and governs API keys, tokens, secrets, and credentials across all providers with enterprise-grade security auditing and governance.

Backend Mindset

Guides backend development across API design, authentication, databases, performance, security, scalability, and testing, with quick decision guides and defaults for production-ready systems.

Audits Rust codebases for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes.

Detecting Mimikatz Execution Patterns

Hunt for Mimikatz execution using command-line patterns, LSASS access signatures, binary indicators, and in-memory detection of known modules.

24.6k · bundle

Performs structured code reviews of git branches, tracking findings in a living document and optionally running deep architectural analysis with subagents.

Shares authentication, global flags, and output formatting patterns for the gws CLI, including OAuth and service account setup, command syntax, and security rules.

Detecting Modbus Protocol Anomalies

Detects anomalies in Modbus/TCP and Modbus RTU communications in industrial control systems using Zeek, Suricata, and custom Python analysis.

24.6k · bundle

Detecting Process Hollowing Technique

Detect process hollowing (T1055.012) by analyzing memory-mapped sections, hollowed process indicators, and parent-child process anomalies in EDR telemetry.

24.6k · bundle

agentskillexchange

Semgrep Rule Author

Generates custom Semgrep rules from natural language descriptions of vulnerability patterns, verifying syntax with semgrep --validate and testing against sample fixtures with semgrep --test.

sakamoto-family-smile

Fastapi Patterns

Provides production-oriented patterns for building FastAPI services, covering async endpoints, dependency injection, Pydantic schemas, OpenAPI customization, testing, and security best practices.

Launches four parallel adversarial review agents covering security, scope, fidelity, and test gaps, then synthesizes findings into a ranked verdict for plans or feature branches.

Provides expert guidance on modern Java 21+ development, covering virtual threads, pattern matching, Spring Boot 3.x, GraalVM, and cloud-native enterprise patterns.

Dotnet Best Practices

Ensure .NET/C# code meets project-specific best practices for structure, design patterns, dependency injection, async/await, testing, configuration, and security.

Performing Web Application Scanning With Nikto

Scan web servers and applications for vulnerabilities, misconfigurations, and outdated software using the Nikto open-source scanner.

24.6k · bundle

Conducting Internal Reconnaissance With Bloodhound Ce

Map Active Directory attack paths and identify privilege escalation chains using BloodHound Community Edition for authorized security assessments.

24.6k · bundle

AI Engineering Standards

Enforces production-grade Python and AI engineering standards for FastAPI, LangChain/LangGraph, RAG pipelines, and LLM integrations, covering type safety, error handling, testing, and security.

sakamoto-family-smile

Laravel Security

Hardens Laravel applications against common vulnerabilities with guidance on authentication, authorization, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure deployment.

Salesforce Apex Quality

Enforces bulk-safety rules, sharing model requirements, CRUD/FLS security, SOQL injection prevention, PNB test coverage, and modern Apex idioms for Salesforce development.