Plugins

12 plugins

Security from nivkazdan/skills-agents-catalog.

16 skills · plugin

Security audits, vulnerability scanning and secure coding.

30 skills · plugin

Code Security Review Pipeline

Audit code changes for bugs, security flaws, and quality issues before merging.

15 skills · plugin

@alirezarezvani

Engineering Team

32 engineering skills: architecture, frontend, backend, fullstack, QA, DevOps, security, AI/ML, data engineering, Playwright (9 sub-skills), self-improving agent, Stripe integration, TDD guide, tech stack evaluator, Google Workspace CLI, a11y audit (WCAG 2.2), Azure cloud architect, GCP cloud architect, security pen testing, Snowflake development, adversarial-reviewer, ai-security, cloud-security,

16 skills · plugin

Static Analysis

Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection

3 skills · plugin

Testing Handbook Skills

Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)

15 skills · plugin

MCP Security Audit Pipeline

Audit MCP servers for secrets exposure, shell injection, and supply chain risks.

12 skills · plugin

Secure Laravel Deployment

Installs a pipeline to harden, audit, verify, and enforce security for Laravel apps.

4 skills · plugin

Secure Firebase Backend

Installs a pipeline to validate, plan, execute, and enforce Firebase security best practices.

7 skills · plugin

PR Review Pipeline

Install this pack to review a PR with structured analysis, security scanning, and quality enforcement.

11 skills · plugin

Bug Finding Pipeline

Install this pack to detect bugs, security issues, and logical errors in your branch changes.

9 skills · plugin

Secure Spring Boot Service

Installs a pipeline to harden, audit, verify, and enforce security for Spring Boot services.

4 skills · plugin

Results for “security”

26 skills

Coordinates five specialized coding agents (linter, perf, refactor, security, test) to enforce quality gates across the development lifecycle, from lint enforcement through performance profiling, refactoring, security auditing, and test coverage.

Semgrep Rule Creator

Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns with proper testing and validation.

Provides shared C language infrastructure for OpenClaw skills, including AST parsing, CMake analysis, Unity test generation, and security rule checking.

Coding Rules Enforcer

Enforces language-specific coding rules, style guidelines, patterns, security, and testing standards by referencing a built-in guidelines bank.

Django Verification

Runs a comprehensive verification pipeline for Django projects including migrations, linting, tests with coverage, security scans, and deployment readiness checks before PRs or releases.

Gates a git branch before merge by running code review, security, test, and accessibility passes on the diff, then emits a single verdict.

More results

Verification Loop

Runs a multi-phase verification pipeline including build, type-check, lint, tests, security scan, and diff review to ensure code quality before creating a PR.

Builds, configures, and debugs enterprise Java applications with Spring Boot 3.x, microservices, or reactive programming, including WebFlux endpoints, JPA optimization, and Spring Security with OAuth2/JWT.

10.4k · bundle

Runs a structured code review using four parallel subagents covering style, correctness, security, and performance, then synthesizes findings by severity and gives an approve/needs-changes recommendation.

Designs and implements backend systems including REST APIs, microservices, database architectures, authentication flows, and security hardening. Covers Node.js/Express/Fastify development, PostgreSQL optimization, API security, and backend architecture patterns.

20.4k · bundle

Generates test files, creates mocking strategies, analyzes code coverage, designs test architectures, and produces test plans and defect reports across functional, performance, and security testing disciplines.

10.4k · bundle

agentskillexchange

Multi Lens Review

Reviews a PR or diff through three independent lenses—correctness, security, and test coverage—then deduplicates and validates findings before persisting them, reducing noise while catching more real bugs.

Spring Boot Engineer

Generates Spring Boot 3.x configurations, REST controllers, Spring Security 6 authentication flows, Spring Data JPA repositories, and reactive WebFlux endpoints for building microservices and reactive Java applications.

10.4k · bundle

Routes to 82 Lightning Web Components skill packages covering reactivity, wire adapters, component communication, accessibility, performance, security, and Jest testing. Finds and opens the exact skill package for LWC-related requests.

Salesforce Component Standards

Enforce quality, security, and accessibility standards for Salesforce Lightning Web Components, Aura components, and Visualforce pages.

Fuzz Python code and C extensions with coverage guidance and AddressSanitizer support using a libFuzzer-based fuzzer.

Build and run custom fuzzers with LibAFL, a modular Rust fuzzing library, including drop-in libFuzzer replacement and custom component configuration.

Static Analysis

Configures and runs static analysis and linting tools across multiple languages, integrating with CI/CD and security platforms.

Fuzzing Dictionary

Guides fuzzers with domain-specific tokens to reach deeper code paths in parsers, protocol handlers, and file format processors.

Backend Mindset

Guides backend development across API design, authentication, security, performance, architecture, and testing, with decision guides and defaults for production-ready systems.

Guides Go developers in building production-ready gRPC services, covering proto organization, server/client implementation, error handling, streaming, testing, and security best practices.

Backend Mindset

Guides backend development across API design, authentication, databases, performance, security, scalability, and testing, with quick decision guides and defaults for production-ready systems.

Performs structured code reviews of git branches, tracking findings in a living document and optionally running deep architectural analysis with subagents.

sakamoto-family-smile

Fastapi Patterns

Provides production-oriented patterns for building FastAPI services, covering async endpoints, dependency injection, Pydantic schemas, OpenAPI customization, testing, and security best practices.

AI Engineering Standards

Enforces production-grade Python and AI engineering standards for FastAPI, LangChain/LangGraph, RAG pipelines, and LLM integrations, covering type safety, error handling, testing, and security.

Salesforce Apex Quality

Enforces bulk-safety rules, sharing model requirements, CRUD/FLS security, SOQL injection prevention, PNB test coverage, and modern Apex idioms for Salesforce development.