Claude skills and agent skills

ldilovSkill

security-scan

ldilov/harness-forge/.agents/skills/security-scan/SKILL.md

Auto-discoverable wrapper for `.hforge/library/skills/security-scan/SKILL.md`.

Often used withdjango-security·deployment-patterns·postgres-patterns

lxsmnsycSkill

security-fix

lxsmnsyc/agent-skills/skills/security-fix/SKILL.md

Fix a security vulnerability without leaking it before the release. Work happens on a local-only branch that is never pushed, then merges straight into the branch the release workflow publishes from. The fix becomes public at the same moment CI publishes the release, so the package keeps npm provenance. Use this skill whenever the user asks to fix a security issue, vulnerability, advisory, CVE or GHSA, or when other work finds one, even if they do not say "security-fix".

MBrekhofSkill

xaf-security

MBrekhof/xafskills/skills/xaf-security/SKILL.md

Configure DevExpress XAF security: roles, permissions, users, and background job authentication. Use when setting up role permissions in Updater.cs, implementing object-level security, exporting/importing roles, creating background job security contexts, or troubleshooting permission issues. Covers type-level vs object-level permissions, CurrentUserIdOperator, PermissionsReloadMode, and the role update caveat.

WishmakingfairySkill

security-scan

Wishmakingfairy/vibecheck/skills/security-scan/SKILL.md

This skill should be used when the user asks to \"run a security scan\", \"check for vulnerabilities\", \"security audit\", \"ship secure\", \"vibecheck scan\", or \"pre-deploy security check\". Runs 156 automated security checks across 15 categories and produces a categorized vulnerability report.

Often used withdjango-security·deployment-patterns·postgres-patterns

ktnytSkill

security-review

ktnyt/cclsp/.claude/skills/security-review/SKILL.md

Request a security expert assessment for code changes that touch child process spawning, file system access, configuration loading, or environment variable handling. Use when the Reviewer identifies security-sensitive changes in the MCP-LSP bridge.

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

striderZASkill

security-audit

striderZA/OpenCodeGameStudios/.agents/skills/security-audit/SKILL.md

Audit the game for security vulnerabilities: save tampering, cheat vectors, network exploits, data exposure, and input validation gaps. Produces a prioritised security report with remediation guidance. Run before any public release or multiplayer launch.

Often used withcreate-stories·community-led-growth·story-done

TheBeardedBearSASSkill

security-react

TheBeardedBearSAS/claude-craft/.claude/skills/security-react/SKILL.md

Sécurité React. Use when reviewing security, implementing auth, or hardening code.

full-stack-skillsSkill

tauri-security

full-stack-skills/tauri-skills/skills/tauri-security/SKILL.md

Guidance for Tauri v2 capabilities, scope configuration, and ACL-based permission control.

MystenLabsSkill

move-security

MystenLabs/skills/move-security/SKILL.md

Move smart contract security on Sui. Use when reviewing Move code for security vulnerabilities, designing access control patterns, handling capabilities safely, securing randomness usage, validating invariants, planning upgrade governance, managing keys, or auditing privileged operations. Also use when the user asks about UpgradeCap security, capability revocation, shared object authorization, onchain randomness restrictions, oracle data validation, emergency controls, or frontend transaction signing safety.

arsudsandesh97Skill

security-doc

arsudsandesh97/Revoact/skills/security-doc/SKILL.md

Generate a complete SECURITY.md file for any software project. Use whenever the user asks to create, write, generate, or draft a SECURITY.md — a comprehensive security documentation covering threat models, security controls, authentication, authorization, data protection, compliance requirements, and security best practices.

Kur1sulabSkill

api-security

Kur1sulab/blackbox/pt-api-security/SKILL.md

API security testing - GraphQL, REST API, WebSocket, and Web-LLM attack techniques.

Often used withbinary-diff·pentest-tools·llm-security

neronainSkill

security-scan

neronain/ClaudeSkills-Neronain/skills/engineering/security-scan/SKILL.md

Run full security scans on the codebase using Ruflo security tools

Often used withdjango-security·deployment-patterns·postgres-patterns

zeljkoobrenovicSkill

security-scan

zeljkoobrenovic/sokrates-skills/skills/scanners/security-scan/SKILL.md

Security review in one pass, design first and code second: identity, authentication and permission design, secrets by design and in the tree, boundary validation and injection (command, SQL, path, template), crypto and randomness, unsafe and dynamic code, trust in third-party code (plugins, models, dependencies), with a posture stating what was swept clean and what was not covered. Use for security reviews or audits, auth or permission design, secrets, injection, crypto, unsafe code, plugin trust, or the threat surface.

Often used withdjango-security·deployment-patterns·postgres-patterns

waybarriosSkill

security-review

waybarrios/opencode-power-pack/skills/security-review/SKILL.md

Perform a focused security review of pending git changes to identify high-confidence security vulnerabilities with real exploitation potential. Use this skill when the user asks for a security review, security audit, vulnerability scan, or wants to check pending changes on a branch for security issues before merging. This is NOT a general code review.

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

codexstar69Skill

security-review

codexstar69/bug-hunter/skills/security-review/SKILL.md

Run a focused STRIDE-based security review using Bug Hunter-native artifacts. Use whenever the user asks for a full security audit, repository security review, weekly security scan, PR security review with deeper validation, or wants dependency CVEs and threat-model context combined into one workflow.

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

me2reshSkill

security-review

me2resh/apexyard/.claude/skills/security-review/SKILL.md

Security-focused PR review for vulnerabilities and best practices. Invokes the Security Reviewer agent (Hakim).

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

hardw00tSkill

cloud-security

hardw00t/ai-security-arsenal/skills/cloud-security/SKILL.md

Multi-cloud security assessment skill for AWS, Azure, and GCP. Use when performing cloud security audits, scanning for misconfigurations, testing IAM policies, auditing storage permissions, and identifying privilege escalation paths. Triggers on requests to audit cloud security, scan AWS/Azure/GCP, check cloud misconfigurations, or perform cloud penetration testing. Covers CIS benchmarks, CSPM, and cross-cloud identity federation.

TermiX-officialSkill

security-check

TermiX-official/cryptoclaw/skills/security-check/SKILL.md

Assess token and address security via the GoPlus Security API.

OpenAISkill

deep-security-scan

openai/codex-security/plugins/codex-security/skills/deep-security-scan/SKILL.md

Run repeated Standard security scans of a repository or scoped path when the user requests a deep, exhaustive, or multi-pass audit. For changes to a PR, commit, branch or working tree, use security-diff-scan.

OpenAISkill

security-diff-scan

openai/codex-security/plugins/codex-security/skills/security-diff-scan/SKILL.md

Review a pull request, commit, branch diff, or working-tree patch for security vulnerabilities.