Claude skills and agent skills

MaxMiksaSkill

security-audit

MaxMiksa/Auto-Company/.claude/skills/security-audit/SKILL.md

Use when reviewing code security, auditing dependencies for CVEs, checking configuration or secret security, assessing authentication and authorization patterns, identifying OWASP vulnerabilities (injection, XSS, CSRF), or addressing security concerns about implementations.

Often used withcreate-stories·community-led-growth·story-done

marketcallsReads credentialsSkill

security-audit

marketcalls/openalgo/.claude/skills/security-audit/SKILL.md

Run OpenAlgo's periodic security audit across backend, frontend, database, cache, routes and dependencies, producing a dated xlsx report. Use for the monthly or twice-monthly review, before a release, after a dependency bump, or when the user asks for a security check, vulnerability scan, or audit report.

Often used withcreate-stories·community-led-growth·story-done

FmarzochiReads credentialsSkill

security-scan

Fmarzochi/EGC/skills/security/security-scan/SKILL.md

Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.

Often used withdjango-security·deployment-patterns·postgres-patterns

yaklangPipes a download into a shellSkill

ai-ml-security

yaklang/hack-skills/skills/ai-ml-security/SKILL.md

AI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial examples, model poisoning, model stealing, data privacy attacks (membership inference, model inversion), and autonomous agent security risks.

morrealevSkill

wp-security

morrealev/wordpress-manager/skills/wp-security/SKILL.md

Use when hardening WordPress security: filesystem permissions, HTTP security headers, authentication hardening, REST/XML-RPC API restriction, user capabilities audit, wp-config security constants, and incident response procedures.

CosmianSkill

meta-security

Cosmian/kms/.github/skills/meta-security/SKILL.md

Full security-audit orchestrator running /security-review, /cryptography-review, /threat-model, and /standards-review in canonical order per .github/skills/shared/orchestrator-contract.md. Each phase is a sub-agent (contract §6). Use before release or major changes; incremental skips only when explicitly requested for follow-ups.

alibabaSkill

security-check

alibaba/loongcollector/skills/security-check/SKILL.md

提交或推送前的安全检查，扫描 API Key、访问令牌等敏感信息。

LeanmcpSkill

security-repro

Leanmcp/superview.sh/skills/security-repro/SKILL.md

Build safe, local, defensive reproductions of ALREADY-PATCHED, publicly disclosed security vulnerabilities (CVEs, vendor advisories, AI-agent incidents) for whitepapers, control testing, and education. Use this skill whenever the user wants to reproduce, demonstrate, or write up a known vulnerability or security incident — phrases like "reproduce this CVE", "build a repro for", "demonstrate the EchoLeak/Cursor/postmark-mcp issue", "show how this exploit worked", "add a reproducibility guide", or "pull the NVD/CVE details for". It fetches advisory metadata from NVD and CVE.org, confirms the issue is fixed, and produces a vulnerable-vs-patched harness that is offline, loopback-only, and uses synthetic markers. It NEVER discovers, develops, or weaponizes new zero-days and refuses any unpatched or live-target request.

nearaiReads credentialsSkill

security-review

nearai/ironclaw/skills/security-review/SKILL.md

Security audit for code changes and PRs — OWASP top 10, auth flows, data handling, secrets exposure, supply chain risks. Writes findings as actionable items.

Often used withdependency-cve-sweep·agent-sort·brand-discovery

h0rn3tDeletes or force-pushesSkill

go-security

h0rn3t/golang-skills/skills/go-security/SKILL.md

Use when writing or reviewing Go code that touches untrusted input, secrets, or credentials — SQL, shell, or template injection, path traversal, SSRF, cookies and security headers, password hashing, TLS settings, token comparison, or what may appear in a log line. Also use when a handler accepts a file name, URL, or command argument from a client, or when asked to find "vulnerabilities", even if the user never says "security". Does not cover the os.Root and crypto/rand mechanics (see go-defensive) or the dependency CVE scan in the gate (see go-linting).

drvossReads credentialsSkill

security-scan

drvoss/everything-copilot-cli/skills/security/security-scan/SKILL.md

Use when you want a quick security pass on code changes or dependencies — checks OWASP Top 10 patterns, runs dependency audits, and surfaces critical vulnerabilities with targeted fixes.

Often used withdjango-security·deployment-patterns·postgres-patterns

wgpsecSkill

agent-security

wgpsec/AboutSecurity/skills/ai-security/agent-security/SKILL.md

AI Agent 系统安全测试方法论。当目标系统使用 AI Agent 执行工具调用、多 Agent 协作、 或自主决策时触发。覆盖 OWASP Agentic AI Security Top 10 (ASI01-ASI10): 目标劫持、工具滥用、身份权限、供应链、代码执行、记忆投毒、多 Agent 通信、 级联故障、人机信任利用、失控 Agent。

RelaticleSkill

spatie-security

Relaticle/relaticle/.claude/skills/spatie-security/SKILL.md

Apply Spatie's security guidelines when configuring applications, databases, servers, credentials, or signed Git commits, or when reviewing code for security concerns; use for SSL setup, CSRF protection, password hashing, database permissions, and server hardening.

theopencoSkill

security-audit

theopenco/llmgateway/.agents/skills/security-audit/SKILL.md

Security best practices, vulnerability review, and full security audits for LLM Gateway. Use when writing security-sensitive code (auth, sessions, API keys, provider keys, billing, webhooks, user-supplied URLs, admin routes, CORS, rendering user content), when asked for a security review, security report, vulnerability research, pen test, or security audit, and for the monthly audit routine that fixes confirmed findings in a PR.

Often used withcreate-stories·community-led-growth·story-done

jefflesterReads credentialsSkill

api-security

jefflester/claude-skills-supercharged/.claude/skills/api-security/SKILL.md

API security best practices and common vulnerability prevention. Enforces security checks for authentication, input validation, SQL injection, XSS, and OWASP Top 10 vulnerabilities. Use when building or modifying APIs.

Often used withattack-chain·llm-security·pentest-tools

loulanyueDeletes or force-pushesSkill

perl-security

loulanyue/awesome-claude-notes/skills/perl-security/SKILL.md

Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies.

gyuhaSkill

fg-security

gyuha/forge/skills/fg-security/SKILL.md

Domain-specialised security audit of a codebase, outside the forge loop — a vendored multi-phase methodology (recon → parallel attack-class hunting → independent validation → machine-readable findings) whose findings, past a severity gate and your approval, become fix-forward backlog plans. Artefacts stay OUTSIDE the repo (upstream's ~/security-audit-skill/) so a vulnerability list has no path into a commit at all. Always skipped in fg-next all / fg-loop. Use in contexts like 'forge security', 'fg-security', '보안 감사', '취약점 찾아줘', 'security audit'.

opencueSkill

vc:security

opencue/cuecards/.agents/skills/vc-security/SKILL.md

STRIDE + OWASP-based security audit with optional auto-fix. Scans code for vulnerabilities, categorizes by severity, and can iteratively fix findings using vc:autoresearch pattern.

simoncorrySkill

security-scan

simoncorry/foundry/.agents/skills/security-scan/SKILL.md

Single-round adversarial security scan.

Often used withdjango-security·deployment-patterns·postgres-patterns

z91772524-aiSkill

api-security

z91772524-ai/pojia-next-mac/skills/api-security/SKILL.md

API security testing for REST/GraphQL/WebSocket/SOAP: discovery, authz, BOLA/IDOR, JWT/OAuth, rate-limit, and CI-oriented validation workflows.

Often used withattack-chain·llm-security·pentest-tools