Claude skills and agent skills

altafinoSkill

kit-security

altafino/FableClaudeMDForOpus/.claude/skills/kit-security/SKILL.md

Security guardrails pack — injection, secrets, path traversal, auth defaults, deserialization, untrusted-content discipline. Use when asked for a security pass or when code touches user input, secrets, or auth.

kinhluanSkill

api-security

kinhluan/skills/skills/api-security/SKILL.md

Design, review, test, or harden REST, GraphQL, RPC, webhook, OAuth, and gateway security. Use for API authentication, object/function/property authorization, schemas, abuse controls, SSRF, inventory, rate limits, tokens, or OWASP API risk review.

Often used withbinary-diff·pentest-tools·llm-security

sergeyklaySkill

scan-security

sergeyklay/.agents/.agents/skills/scan-security/SKILL.md

Run a Snyk SAST + SCA security audit on the repository, remediate findings that pass the project's verification gates, and write a prioritized report to .audit/. Optional scope argument: all (default), code, deps, or changed.

symfonySkill

security-triage

symfony/ux/.agents/skills/security-triage/SKILL.md

Triage a security finding in a Symfony UX package into a disposition: a private CVE (coordinated disclosure through the Symfony security process), a public hardening PR (fix in the open, no CVE), or not-a-security-issue (reply to the reporter). Assigns severity and the affected maintained branches, and routes to the next step. Use when deciding whether a report or a discovered weakness needs a CVE, how it should be disclosed, or whether it is a security issue at all.

sd0xdevSkill

codex-security

sd0xdev/sd0x-dev-flow/skills/codex-security/SKILL.md

OWASP Top 10 security review using Codex exec. Supports review loop with context preservation.

blundergoatSkill

goat-security

blundergoat/goat-flow/.agents/skills/goat-security/SKILL.md

Use when assessing security implications of code changes, architecture decisions, or new features.

ApicurioSkill

security-review

Apicurio/apicurio-registry/.claude/skills/security-review/SKILL.md

Security review checklist. Use when the conversation involves

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

ronjunevaldozSkill

kmp-security

ronjunevaldoz/kmp-agent-skills/skills/kmp-security/SKILL.md

Mobile app security for Kotlin Multiplatform beyond Android-only R8 obfuscation — certificate/SSL pinning (expect/actual, no cross-platform Ktor support exists natively), root/jailbreak/tamper detection via freeRASP's real KMP variant, encrypted local storage via KSafe, iOS/ Kotlin-Native release-binary symbol stripping, and an OWASP Mobile Top 10 2024 coverage map across this collection. Does NOT cover Android-specific R8/ProGuard obfuscation — that's kmp-proguard-r8's own scope, cross- referenced here rather than duplicated. Does NOT cover secrets-in-source scanning (gitleaks pre-commit) — that's kmp-setup-hooks Option F.

wlsdksSkill

security-audit

wlsdks/ontology-atlas/.agents/skills/security-audit/SKILL.md

Periodic security sweep of Atlas in four areas (MCP and CLI, the Tauri desktop shell, the web renderer and connectors, the supply chain and CI) that follows untrusted input to what it can reach, proves each reach with a planted input, and turns every confirmed finding into a fix slice with a regression test. Not for a single diff, which takes the reviewer's security lens.

Often used withcreate-stories·community-led-growth·story-done

wlsdksSkill

security-audit

wlsdks/ontology-atlas/.claude/skills/security-audit/SKILL.md

Periodic security sweep of Atlas in four areas (MCP and CLI, the Tauri desktop shell, the web renderer and connectors, the supply chain and CI) that follows untrusted input to what it can reach, proves each reach with a planted input, and turns every confirmed finding into a fix slice with a regression test. Not for a single diff, which takes the reviewer's security lens.

Often used withcreate-stories·community-led-growth·story-done

DankosikSkill

go-security

Dankosik/golang-backend-skills/skills/go-security/SKILL.md

Implement or review Go authentication, authorization, tenant isolation, untrusted input, destinations, and secret handling.

ddmsolutionsSkill

ai-security

ddmsolutions/claude-skills/ai-security/SKILL.md

Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS technique mapping, injection signature detection, and adversarial robustness scoring.

Marwan-Ahmed-devSkill

vc:security

Marwan-Ahmed-dev/vibecode-pro-max/.agents/skills/vc-security/SKILL.md

STRIDE + OWASP-based security audit with optional auto-fix. Scans code for vulnerabilities, categorizes by severity, and can iteratively fix findings using vc:autoresearch pattern.

apacheSkill

security-triage

apache/streampipes/.claude/skills/security-triage/SKILL.md

Assess, route and report a suspected security vulnerability in Apache StreamPipes against the project's threat model. Use when a task involves a potential vulnerability, an exploit claim, a security finding from a scanner, or a decision about whether something is in or out of the security model.

5uck1essSkill

tri-security

5uck1ess/devkit/skills/tri-security/SKILL.md

Three-tier parallel security audit (injection + auth + config, each examined by a different model tier) with severity-ranked consolidation — use when the user asks for tri-security, triple security audit, three-way security review, multi-model vulnerability scan, or parallel security audit of a code change, branch, module, or endpoint. Worth the extra cost when — touching auth/payments/user-uploads/admin surfaces, before prod deploy of security-sensitive code, after a security incident, or when the user is paranoid about a specific attack class. Do NOT use for general code quality review (use tri-review), bug diagnosis (use tri-debug), or approach comparison on greenfield work (use tri-dispatch). Do NOT use for a single-line "is this XSS safe" question, or for running pre-existing scanners like npm audit / gosec / semgrep — those are single-tool tasks, not a tri workflow.

academindSkill

web-security

academind/claude-code-course/.claude/skills/web-security/SKILL.md

Enforce web security and avoid security vulnerabilities

AnyOrgNameSkill

security-jwt

AnyOrgName/php-skills/skills/symfony/security-jwt/SKILL.md

Add stateless JWT authentication to a Symfony API with LexikJWTAuthenticationBundle — firewall wiring in security.yaml, token TTL and refresh, and a custom authenticator when the defaults are not enough. Use when the user must configure a Symfony firewall for JWT — the login entry point, the api firewall, and the token authenticator in security.yaml; the user needs to authenticate a Symfony API statelessly with JWT tokens issued and verified by LexikJWTAuthenticationBundle; the user wants to set the JWT token TTL, add refresh tokens, or build a custom Symfony authenticator for token handling. Keywords: security, auth, authentication, jwt, symfony, firewall, stateless, api.

gwonvibeSkill

security-kit

gwonvibe/gwonvibe-agent-skills/skills/security-kit/SKILL.md

로그인·권한·결제·개인정보·파일 업로드·외부 URL·관리자 기능처럼 민감한 기능의 신뢰 경계를 설계하거나 변경된 흐름을 집중 점검할 때 사용한다.

jaskaranhundalSkill

iac-security

jaskaranhundal/usap-skills/.agents/skills/iac-security/SKILL.md

../../../cloud-infra/iac-security/SKILL.md

langbyyiSkill

api-security

langbyyi/websec-skills/api-security/SKILL.md

Entry P1 category router for API security. Use when choosing between API recon, authorization, token abuse, and hidden-parameter workflows before any deeper API topic skill.

Often used withbinary-diff·pentest-tools·llm-security