Claude skills and agent skills

apacheSkill

security-triage

apache/streampipes/.claude/skills/security-triage/SKILL.md

Assess, route and report a suspected security vulnerability in Apache StreamPipes against the project's threat model. Use when a task involves a potential vulnerability, an exploit claim, a security finding from a scanner, or a decision about whether something is in or out of the security model.

jnMetaCodeReads credentialsSkill

security-guide

jnMetaCode/shellward/skills/security-guide/SKILL.md

OpenClaw 安全部署指南 / Security deployment guide — help users secure their OpenClaw installation

gwonvibeSkill

security-kit

gwonvibe/gwonvibe-agent-skills/skills/security-kit/SKILL.md

로그인·권한·결제·개인정보·파일 업로드·외부 URL·관리자 기능처럼 민감한 기능의 신뢰 경계를 설계하거나 변경된 흐름을 집중 점검할 때 사용한다.

jaskaranhundalSkill

iac-security

jaskaranhundal/usap-skills/.agents/skills/iac-security/SKILL.md

../../../cloud-infra/iac-security/SKILL.md

langbyyiSkill

api-security

langbyyi/websec-skills/api-security/SKILL.md

Entry P1 category router for API security. Use when choosing between API recon, authorization, token abuse, and hidden-parameter workflows before any deeper API topic skill.

Often used withbinary-diff·pentest-tools·llm-security

ldilovSkill

security-scan

ldilov/harness-forge/.agents/skills/security-scan/SKILL.md

Auto-discoverable wrapper for `.hforge/library/skills/security-scan/SKILL.md`.

Often used withdjango-security·deployment-patterns·postgres-patterns

MBrekhofSkill

xaf-security

MBrekhof/xafskills/skills/xaf-security/SKILL.md

Configure DevExpress XAF security: roles, permissions, users, and background job authentication. Use when setting up role permissions in Updater.cs, implementing object-level security, exporting/importing roles, creating background job security contexts, or troubleshooting permission issues. Covers type-level vs object-level permissions, CurrentUserIdOperator, PermissionsReloadMode, and the role update caveat.

MusserLabReads credentialsSkill

security-setup

MusserLab/lab-claude-skills/skills/security-setup/SKILL.md

Configure and manage Claude Code security protections for sensitive files, credentials, and data. Use when the user invokes /security-setup to set up or modify protections against unauthorized file access, credential exposure, or sensitive data leaks.

secureIO-GmbHReads credentialsSkill

security-scan

secureIO-GmbH/security-skills/skills/security-scan/SKILL.md

Use this skill to run a security scan combining SAST analysis, secret/credential detection, dependency vulnerability scanning (SCA), and container/IaC misconfiguration checks on staged code or the full codebase. Invoke as `/security-scan` to scan only git-staged files (fast, pre-commit use), or `/security-scan full` to scan the entire codebase. Uses semgrep or opengrep for SAST, trufflehog for secrets, and trivy (preferred) or grype for SCA and container/IaC scanning. Validates and deduplicates findings, generates a structured markdown report with severity ratings, and offers to auto-remediate fixable issues. Trigger this skill whenever the user wants to: run a security scan, check for secrets or credentials in code, scan dependencies for CVEs, check container or IaC configuration, do a SAST scan before committing, scan for vulnerabilities, run semgrep, trufflehog, trivy, or grype, or get a security report on their code.

Often used withdjango-security·deployment-patterns·postgres-patterns

SVerITGReads credentialsSkill

security-scan

SVerITG/Metis/.agents/skills/security-scan/skill.md

Audit the current session for security and data-safety issues

Often used withdjango-security·deployment-patterns·postgres-patterns

WishmakingfairySkill

security-scan

Wishmakingfairy/vibecheck/skills/security-scan/SKILL.md

This skill should be used when the user asks to \"run a security scan\", \"check for vulnerabilities\", \"security audit\", \"ship secure\", \"vibecheck scan\", or \"pre-deploy security check\". Runs 156 automated security checks across 15 categories and produces a categorized vulnerability report.

Often used withdjango-security·deployment-patterns·postgres-patterns

borgbaseDeletes or force-pushesSkill

security-review

borgbase/vykar/.agents/skills/security-review/SKILL.md

Security review skill for the vykar backup tool (Rust). Use when reviewing code for security issues, auditing cryptographic implementations, checking for credential leaks, reviewing unsafe code, or validating the security model of the backup tool. Covers encryption, key management, repository integrity, hook execution, config parsing, dependency auditing, and backup-specific attack surfaces.

Often used withdependency-cve-sweep·agent-sort·brand-discovery

ktnytSkill

security-review

ktnyt/cclsp/.claude/skills/security-review/SKILL.md

Request a security expert assessment for code changes that touch child process spawning, file system access, configuration loading, or environment variable handling. Use when the Reviewer identifies security-sensitive changes in the MCP-LSP bridge.

Often used withdependency-cve-sweep·agent-sort·brand-discovery

jellydnReads credentialsSkill

security-audit

jellydn/my-ai-tools/skills/security-audit/SKILL.md

Use when reviewing code for security vulnerabilities, hardening an application, or deriving security requirements from OWASP/ASVS guidance.

Often used withcreate-stories·community-led-growth·story-done

OneByJorahReads credentialsSkill

security-scrub

OneByJorah/VirtOffice/.agents/skills/security-scrub/SKILL.md

Find and remove secrets, real hostnames, IPs, credentials, and private data from a repo before publishing. Use before any public release, screenshot commit, or README update.

TheBeardedBearSASSkill

security-react

TheBeardedBearSAS/claude-craft/.claude/skills/security-react/SKILL.md

Sécurité React. Use when reviewing security, implementing auth, or hardening code.

full-stack-skillsSkill

tauri-security

full-stack-skills/tauri-skills/skills/tauri-security/SKILL.md

Guidance for Tauri v2 capabilities, scope configuration, and ACL-based permission control.

deadlock-mod-managerReads credentialsSkill

security-review

deadlock-mod-manager/deadlock-mod-manager/.agents/skills/security-review/SKILL.md

Security code review for Tauri/Rust/TypeScript desktop apps and Hono/oRPC APIs. Use when asked to "security review", "find vulnerabilities", "check for security issues", "audit security", or review code for injection, XSS, IPC abuse, path traversal, or authentication issues. Provides confidence-based reporting tuned to the Deadlock Mod Manager stack.

Often used withdependency-cve-sweep·agent-sort·brand-discovery

every-appReads credentialsSkill

security-review

every-app/every-app/.agents/skills/security-review/SKILL.md

Review the branch's pending changes for security problems against Every App's threat model, with pnpm security-review (Claude Code's scanner plus this repository's boundaries and false-positive rules); use before opening a pull request that touches the perimeter, identity, public routes, tools, OAuth, Access, secrets or queries.

Often used withdependency-cve-sweep·agent-sort·brand-discovery

arsudsandesh97Skill

security-doc

arsudsandesh97/Revoact/skills/security-doc/SKILL.md

Generate a complete SECURITY.md file for any software project. Use whenever the user asks to create, write, generate, or draft a SECURITY.md — a comprehensive security documentation covering threat models, security controls, authentication, authorization, data protection, compliance requirements, and security best practices.