Skills real projects publish on GitHub, most starred first. Each one says what it will make an agent do before you copy it.
EndikaSkillEndika/eskills/skills/security-bar/SKILL.md
Use when reviewing changes for security to apply my checklist on top of security-review — input handling, secrets, authz, Supabase RLS, egress limits, server-side PIN enforcement, and the agent-harness surface (config secrets, hook injection, MCP risk, over-broad permissions).
eugenezhangco-specSkilleugenezhangco-spec/athena/.claude/skills/security-scan/SKILL.md
Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.
hereshecodesSkillhereshecodes/secureskills/skills/api-security/SKILL.md
Use when building REST APIs, GraphQL endpoints, or webhooks
Jawahars07SkillJawahars07/ballast/skills/security-vet/SKILL.md
Mandatory pre-install security vetting of any third-party skill, plugin, npm or pip package, editor extension, or cloned repo - reconnaissance, static scan, written verdict of SAFE / SAFE WITH CAVEATS / HOLD, explicit user approval, then a defensive install proportionate to the risk. Use BEFORE installing anything you did not write.
leaf76Skillleaf76/agent-skills/security-scan/SKILL.md
Comprehensive security scanning and vulnerability assessment for code, dependencies, and infrastructure. Includes SAST, DAST, dependency scanning, and security hardening recommendations. Use before deployments, after major changes, or for regular security audits.
lgzarturoSkilllgzarturo/codeconductor/.agents/skills/security-grc/SKILL.md
Map controls to SOC2, ISO 27001, PCI, or internal policy for the org you work for. Evidence and control design — not audit theater.
lgzarturoSkilllgzarturo/codeconductor/.agents/skills/security-web/SKILL.md
Review and harden web apps (authz, XSS, CSRF, SSRF, injection) on code you maintain. Complements the OWASP `security` skill. No exploit kits.
pankaj-mahaurSkillpankaj-mahaur/Agent-Daemon/skills/security-scan/SKILL.md
Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.
prasadmogulothuSkillprasadmogulothu/agent-skills/rls-security/SKILL.md
Generate row-level-security policies plus a cross-user isolation test, so users can only access their own rows. Written for Postgres/Supabase; adaptable to other databases. Use for any per-user or multi-tenant data.
TheurgicDuke771SkillTheurgicDuke771/DataQ/.claude/skills/security-scan/SKILL.md
Run the end-of-week security scan (CONTRIBUTING rule 36) — Dependabot + secret-scanning alerts, local pip-audit/pnpm-audit mirror of the CI gates, betterleaks sweep, OWASP spot check on endpoints added this week, Key Vault access audit, and the credential-rotation register. Use weekly, before a deploy, or when the user asks "run the security scan" / "any open vulns?".
UfukCetinkaya57SkillUfukCetinkaya57/backend-governance/.claude/skills/security-scan/SKILL.md
Sistematik guvenlik tarama proseduru - otomatik pattern arama ve risk tespiti
vivy-yiSkillvivy-yi/xiaohongshu-skills/skills/05-平台规则/account-security/SKILL.md
Use when protecting Xiaohongshu account from unauthorized access, preventing account theft, recovering compromised accounts, or implementing security measures to safeguard account and follower base
fdiblenSkillfdiblen/rseng-agent-skills/skills/rseng-security/SKILL.md
Covers securing research software and its supply chain: secrets and sensitive-file hygiene (env files, keys, credentials and the never-commit file catalog) with leak response, dependency vulnerability scanning and pinning, OpenSSF Scorecard and Best Practices badge, SLSA provenance levels, SBOMs, signed releases and repository hardening. Use PROACTIVELY when setting up CI or releases, when an API key, password, credential or token is committed or appears in code or history, when the user asks how secure their project or dependencies are, or mentions Scorecard, SLSA, SBOM, CVEs or secret scanning. For the agent itself see rseng-agent-security; for GDPR and personal-data obligations see rseng-regulatory-compliance; for sensitive-data storage practice see rseng-data-management.
Gabson0xSkillGabson0x/bountyforge/skills/security-arsenal/SKILL.md
Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, conditionally-valid-with-chain table, temp email creation scripts, XXE/deserialization/host header injection payloads. Use when you need specific payloads for XSS/SSRF/SQLi/XXE/NoSQLi/command injection/SSTI/IDOR/path-traversal/HTTP smuggling/WebSocket/MFA bypass, bypass techniques, temp email setup for multi-account testing, or to check if a finding is submittable. Also use when asked about what NOT to submit.
NVIDIASkillNVIDIA/OpenShell/.agents/skills/fix-security-issue/SKILL.md
Implement a fix for a reviewed security issue. Takes a directly requested issue number or scans for issues labeled `topic:security` and `agent:implementation-requested`. Reads the security review from the issue comments and implements the remediation plan. Trigger keywords - fix security issue, remediate security, implement security fix, patch vulnerability.
Hassaan146SkillHassaan146/claude-skills/cloud-security/SKILL.md
Use when assessing cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, or IaC security gaps. Covers AWS, Azure, and GCP posture assessment with MITRE ATT&CK mapping.
hoangsonwwSkillhoangsonww/AI-Agents-Orchestrator/.agents/skills/security-review/SKILL.md
Review code changes for security vulnerabilities, authentication gaps, injection risks, and unsafe patterns. Use before merging PRs or after security-sensitive changes.
EyadkellehSkillEyadkelleh/awesome-skills-security/skills/security-fuzzing/SKILL.md
Essential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.
awarexoneSkillawarexone/AXguard/cloud-security/SKILL.md
Review cloud and CORS misconfiguration in app code and IaC-adjacent configs — metadata URLs, public buckets, wildcard origins (CWE-918 / CWE-942 / A05:2021 / A10:2021).
awarexoneSkillawarexone/AXguard/oauth-security/SKILL.md
Analyze OAuth/OIDC integration security — use when reviewing redirect URIs, state/nonce, token handling, PKCE, or confused-deputy risks in authorization code flows (CWE-601 / A07:2021 / API2:2023).
A folder with a SKILL.md file: a name, a description of when to use it, and instructions. Claude loads a skill only when the task matches its description.
Copy the folder into your project's .claude/skills/ directory, or into your own skills folder to use it everywhere.
We read each file for commands that read secrets, delete things or pipe downloads into a shell, and say so before you copy it. No warning is not a promise that a file is safe.
Open a skill to see its discussion. Reports from people and their agents are coming.
