Plugins
12 plugins@nivkazdan
Security
Security from nivkazdan/skills-agents-catalog.
16 skills · plugin
curated
Security
Security audits, vulnerability scanning and secure coding.
30 skills · plugin
curated
Code Security Review Pipeline
Audit code changes for bugs, security flaws, and quality issues before merging.
15 skills · plugin
@alirezarezvani
Engineering Team
32 engineering skills: architecture, frontend, backend, fullstack, QA, DevOps, security, AI/ML, data engineering, Playwright (9 sub-skills), self-improving agent, Stripe integration, TDD guide, tech stack evaluator, Google Workspace CLI, a11y audit (WCAG 2.2), Azure cloud architect, GCP cloud architect, security pen testing, Snowflake development, adversarial-reviewer, ai-security, cloud-security,
16 skills · plugin
@trailofbits
Static Analysis
Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection
3 skills · plugin
@trailofbits
Testing Handbook Skills
Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)
15 skills · plugin
curated
MCP Security Audit Pipeline
Audit MCP servers for secrets exposure, shell injection, and supply chain risks.
12 skills · plugin
curated
Secure Laravel Deployment
Installs a pipeline to harden, audit, verify, and enforce security for Laravel apps.
4 skills · plugin
curated
Secure Firebase Backend
Installs a pipeline to validate, plan, execute, and enforce Firebase security best practices.
7 skills · plugin
curated
PR Review Pipeline
Install this pack to review a PR with structured analysis, security scanning, and quality enforcement.
11 skills · plugin
curated
Bug Finding Pipeline
Install this pack to detect bugs, security issues, and logical errors in your branch changes.
9 skills · plugin
curated
Secure Spring Boot Service
Installs a pipeline to harden, audit, verify, and enforce security for Spring Boot services.
4 skills · plugin
Results for “security”
1,231 skills
mukul975 Performing GCP Security Assessment With Forseti
Audit Google Cloud Platform environments for security misconfigurations using Forseti, Security Command Center, and gcloud CLI to evaluate IAM policies, firewall rules, storage permissions, and CIS compliance.
24.6k · bundle
mukul975 Implementing Continuous Security Validation With Bas
Deploy Breach and Attack Simulation tools to continuously validate security control effectiveness by safely emulating real-world attack techniques across the kill chain.
24.6k · bundle
mukul975 Triaging Security Alerts In Splunk
Triages security alerts in Splunk Enterprise Security by classifying severity, investigating notable events, correlating related telemetry, and making escalation or closure decisions using SPL queries and the Incident Review dashboard.
24.6k · bundle
vikingokft Frontend Security
Audits frontend codebases for security vulnerabilities and bad practices, covering XSS, CSRF, DOM issues, CSP, input validation, file uploads, and Node.js/NPM dependencies across web, React, Astro, Twig, Node.js, and Bun.
0 · bundle
whd4 Security Scanning Tools
This skill should be used when the user asks to "perform vulnerability scanning", "scan networks for open ports", "assess web application security", "scan wireless networks", "detect malware", "check cloud security", or "evaluate system compliance". It provides comprehensive guidance on security scanning tools and methodologies.
0
danstrem2 Security Scanning Tools
This skill should be used when the user asks to "perform vulnerability scanning", "scan networks for open ports", "assess web application security", "scan wireless networks", "detect malware", "check cloud security", or "evaluate system compliance". It provides comprehensive guidance on security scanning tools and methodologies.
2
affaan-m Laravel Security
Secure Laravel applications with best practices for authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and deployment configurations.
226k
mukul975 Scanning Kubernetes Manifests With Kubesec
Scan Kubernetes resource manifests with Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.
24.6k · bundle
agentskillexchange Owasp Zap Scanner
Runs OWASP ZAP security scans against web applications using Java or Docker, with setup guidance and links to upstream documentation.
28
chimeranext Security
Implements layered security for Flutter apps: code obfuscation, certificate pinning, secure storage, encryption, biometric authentication, and root/jailbreak detection.
4
promisingcoder Security Triage
Triage MarketingClaw security advisories, drafts, and GHSA reports with shipped-tag and trust-model proof.
0
mukul975 Auditing Terraform Infrastructure For Security
Audit Terraform infrastructure-as-code for security misconfigurations using Checkov, tfsec, Terrascan, and OPA/Rego policies to detect overly permissive IAM policies, public resource exposure, missing encryption, and insecure defaults before cloud deployment.
24.6k · bundle
adobe Security Hardening
Perform evidence-backed security audits for the Adobe Dispatcher Apache HTTP Server module and related HTTPD configuration in AMS workflows.
142 · bundle
zhaoxuya520 Database Security
Performs authorized database security assessments across PostgreSQL, MySQL, MSSQL, MongoDB, and Redis, checking exposure, authentication, authorization, dangerous configurations, and exploit paths.
12.8k · bundle
inehemiasm Firebase Security Rules Auditor
A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.
0
kintsugi-programmer Solidity Security
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.
0
zhaoxuya520 Ot Ics
Authorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation.
12.8k · bundle
drnabeelkhan Iso 27001
Applies the ISO 27001 framework to identify, assess, and mitigate security risks in systems, processes, and data handling, providing structured analysis and recommendations.
2
dawidvanzyl Asvs Security Review
Load this skill when the user says "asvs security review", "asvs-security-review", "/asvs-security-review", or when invoked by reference from the review-issue skill's standards-review step. Performs a rule-by-rule walk of docs/security-standards.md against a diff, scoped to the ASVS sections the diff actually touches, and reports findings using the project's existing severity mapping.
1
google Gke Security
Hardens Google Kubernetes Engine (GKE) clusters with Workload Identity, Secret Manager, RBAC, Binary Authorization, Network Policies, and Pod Security Standards.
14.4k · bundle
microsoft Azure Compliance
Run Azure compliance and security audits using azqr and Key Vault expiration checks, covering best-practice assessment, resource review, and security posture validation.
2.7k · bundle
openai Security Best Practices
Perform language and framework-specific security best-practice reviews, write secure-by-default code, and generate prioritized vulnerability reports with suggested fixes.
23.3k · bundle
mukul975 Performing Soap Web Service Security Testing
Analyze WSDL definitions and test SOAP endpoints for XML injection, XXE, WS-Security bypass, and SOAPAction spoofing.
24.6k · bundle
a5c-ai Security Review
Security vulnerability assessment identifying OWASP risks, injection vectors, authentication issues, and data exposure with severity classification.
1.7k · bundle
gtynnn060110-hash Security
Guidance on security analysis, compliance auditing, and vulnerability assessment techniques relevant to legal and regulatory compliance tasks
6 · bundle
mukul975 Implementing Iec 62443 Security Zones
Design and implement security zones and conduits for industrial automation and control systems per IEC 62443-3-2, including zone partitioning, firewall configuration, and validation through traffic analysis and penetration testing.
24.6k · bundle
mukul975-2 Hipaa Security Rule
Implements HIPAA Security Rule technical safeguards under 45 CFR §164.312 for electronic protected health information. Covers access controls with unique user identification, emergency access procedures, automatic logoff, encryption, audit controls, integrity controls, and transmission security. Keywords: HIPAA Security Rule, ePHI, access controls, encryption, audit controls, technical safeguards.
228 · bundle
mukul975 Testing Websocket API Security
Tests WebSocket API implementations for security vulnerabilities including missing authentication, Cross-Site WebSocket Hijacking, injection attacks, and denial-of-service.
24.6k · bundle
mukul975 Performing GRAPHQL Security Assessment
Assess GraphQL API endpoints for introspection leaks, injection attacks, authorization flaws, and denial-of-service vulnerabilities during authorized security tests.
24.6k · bundle
zhaoxuya520 Supply Chain Security
Assess software supply chain security by generating SBOMs, scanning dependencies, auditing CI/CD pipelines, analyzing container images, and verifying vulnerability reachability.
12.8k · bundle
shulkwisec AI Ml Security
AI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial examples, model poisoning, model stealing, data privacy attacks (membership inference, model inversion), and autonomous agent security risks.
21
x402agent Pump Security
Defense-in-depth security across Rust, TypeScript, and Bash for the Pump SDK — cryptographic key handling, memory zeroization, secure file I/O, input validation, privilege management, dependency auditing, and a 60+ item security checklist.
9
srednoff888-art Security Hardening
Use this skill for auth boundaries, input validation, secrets, RLS, injection risks, destructive-action review. Trigger when the task involves security work related to Security Hardening, production implementation, audits, debugging, strategy, or validation.
1 · bundle
hoangnguyen0403 PHP Security
PHP-only security standards for database access, password handling, and input validation. Use when securing PHP apps against SQL injection, XSS, or weak password storage; defer Laravel middleware and security questions in other languages.
542 · bundle
projectious-work Security Projections
Project processkit security policy Artifacts into runtime policy files for Agent-IDS and Tetragon-style enforcement. Use when an agent-ids-rule or image-provenance-policy Artifact must become an executable security configuration.
0 · bundle
neuralblitz Cloud
Designs cloud architectures, selects services, optimizes costs, and ensures security for cloud-native applications.
1