Claude skills and agent skills

NVIDIASkill

fix-security-issue

NVIDIA/OpenShell/.agents/skills/fix-security-issue/SKILL.md

Implement an authorized fix for a reviewed security issue and open a PR that closes its issue.

aashariSkill

mail-security

aashari/ai-agent-skills/skills/apple-mail/mail-security/SKILL.md

Find security-related emails — login alerts, 2FA changes, password resets, new device notifications, suspicious activity, and account security events across all accounts. Use when user asks about security alerts in their email, account access notifications, or wants to review security events. Arguments: optional time range or account/service filter.

ARCASSystemsSkill

data-security

ARCASSystems/FounderOS/skills/data-security/SKILL.md

Check whether data is safe to share with an external tool. Say "is this safe to paste", "can I send this to <tool>", or "classify this data". Fires before pasting, uploading, forwarding, or sending data to an external tool or AI model. Classifies the data and checks it against the user's data-handling policy.

cyber-sortedSkill

cybersorted

cyber-sorted/skills-pro/cybersorted/SKILL.md

Security and enterprise architecture advisory skill. Use this skill when the user needs help with cybersecurity strategy, threat modeling, risk assessment, compliance, security architecture, enterprise architecture, or governance. Trigger when the user mentions: security posture, threat model, STRIDE, PASTA, risk assessment, risk register, compliance mapping, SOC2, ISO 27001, NIST 800-53, CIS benchmarks, MITRE ATT&CK, zero trust, incident response, IR plan, security policy, architecture decision record, ADR, vendor risk, third-party risk, board briefing, security maturity, maturity assessment, gap analysis, security review, code review for security, IaC review, Terraform security, Kubernetes security, CI/CD security, API security, cloud configuration review, tabletop exercise, red team, blue team, penetration test planning, security architecture, network segmentation, defense in depth, least privilege, data classification, encryption strategy, key management, identity and access management, IAM, SIEM, SOC, vulnerability management, patch management, business continuity, disaster recovery, BCP, DRP, privacy by design, GDPR, CCPA, data protection, platform security, build vs buy security, DevSecOps, shift left security, supply chain security, SBOM, secure coding, secure by design, OWASP Top 10, OWASP ASVS, OWASP SAMM, input validation, output encoding, SQL injection prevention, XSS prevention, CSRF prevention, secrets management, dependency security, SAST, DAST, SCA, secure API design, penetration test, pentest, pen test, red team, offensive security, vulnerability assessment, exploit, Kerberoasting, Active Directory attack, privilege escalation, lateral movement, CVSS, CSTM, Cyber Scheme, web application testing, network penetration test, cloud penetration test, container security testing, physical security assessment, or any security and architecture advisory request. Supports roles: CISO, CTO, CPO, Security Architect, Security Engineer, Enterprise Architect, Secure Developer, Penetration Tester.

bbartlingSkill

security-checks

bbartling/open-fdd/.agents/skills/security-checks/SKILL.md

ZAP, npm audit, gitleaks, CSP. Pointer to the Open-FDD agent spec.

open-edge-platformPipes a download into a shellSkill

security-review

open-edge-platform/edge-ai-libraries/.github/skills/security-review/SKILL.md

On-demand security review for code, containers, and Kubernetes configuration. Use when changes involve authentication/authorization logic, input parsing, file handling, secrets, logging, dependency upgrades, Dockerfiles, Docker Compose, Helm charts, CI/CD workflows, or privilege elevation. Covers secure code review (input validation, injection, dynamic execution, dependency hygiene), AI-generated code guardrails, container artifact hardening (Dockerfile, Compose), and Helm/Kubernetes security defaults. Produces classified findings (Fix in artifact vs. Deployment-time responsibility) with severity and confidence levels. Do NOT use for: runtime, host, cluster, or organizational security controls; general code quality or style reviews unrelated to security; enforcing network policies, node hardening, or cloud IAM configuration.

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

LanternOpsSkill

security-review

LanternOps/breeze/.claude/skills/security-review/SKILL.md

Review Breeze RMM security through tenant isolation, identity, remote execution, agent trust, integrations and supply chain. Use for requested security reviews, focused vulnerability analysis or pre-pentest audits; distinguishes static evidence from authorized lab reproduction and keeps findings private.

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

gemini-cli-extensionsSkill

security-patcher

gemini-cli-extensions/security/skills/security-patcher/SKILL.md

Invoke this as your absolute first action before using any other tools whenever a user requests to fix, patch, or remediate a vulnerability. Do not perform manual research first.

withpiperSkill

security-gate

withpiper/pipekit/skills/security-gate/SKILL.md

Feature-scoped security gate between /verify and pk ship — classifies the diff into sensitive categories, runs matched checklists, writes the PASS sentinel pk ship hard-requires on gated projects. Not /repo-security-review (repo-wide) or /pr-security-review (PR-scoped).

jggomezSkill

security-audit

jggomez/expert-ai-developer-skills/skills/security-audit/SKILL.md

Conducts comprehensive security reviews on source code, infrastructure as code (IaC), and architectural designs. It identifies vulnerabilities such as injection flaws, broken access control, and exposure of sensitive data. Use this skill when asked to perform a security audit, a pentest review, check for OWASP Top 10 violations, or ensure compliance with security best practices.

Often used withcreate-stories·community-led-growth·story-done

TabooHarmonySkill

roblox-security

TabooHarmony/roblox-brain/skills/core/roblox-security/SKILL.md

Use when auditing or hardening Roblox code against exploits: authority, remotes, economy, purchases, and DataStore flows.

romaraytSkill

security-review

romarayt/raytsystem-public-os/.agents/skills/security-review/SKILL.md

Audit raytsystem changes for prompt injection, provenance bypass, path/symlink/hardlink escape, secret leakage, stale fencing, partial promotion, unsafe parsing, and unapproved side effects. Use for SECURITY REVIEW, adversarial testing, recovery review, or approval-boundary validation; remain independent and read-only.

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

georgekhananaevSkill

owasp-security

georgekhananaev/claude-skills-vault/.claude/skills/owasp-security/SKILL.md

Use when reviewing code for security vulnerabilities, implementing authentication/authorization, handling user input, or discussing web application security. Covers OWASP Top 10:2025, ASVS 5.0, and Agentic AI security (2026).

wulaosijiSkill

security-drill

wulaosiji/skills/security-drill/SKILL.md

AI Agent自动化安全演练与攻击模拟测试工具，运行定时攻击场景（prompt注入、社会工程学、命令绕过、信息泄露、模型降级），验证事件响应和加固控制有效性，输出通过/失败报告。 Use when: "安全演练", "攻防测试", "攻击模拟", "security drill", "attack simulation", "渗透测试", "incident response test", "red team exercise". 在隔离环境中模拟攻击，不修改真实系统，结果本地存储，支持每周定时执行。Cross-references: security-hardening, skill-security-audit, secure-key-manager. Built by UniqueClub 🌐 https://uniqueclub.ai

harnessSkill

security-report

harness/harness-skills/skills/observability-governance/security-report/SKILL.md

Generate security compliance reports using Harness SCS and STO via MCP. Analyze vulnerabilities, SBOMs, and manage exemptions. Use when user says "security report", "vulnerabilities", "SBOM", "security scan", "compliance check", or asks about application security.

DongDuong2001Skill

security-plan

DongDuong2001/pudo-code-system/skills/plan/security/SKILL.md

Threat modeling, compliance, and secure by design architecture

henryvn27Skill

orca-security

henryvn27/orca-framework/skills/orca-security/SKILL.md

Review security-relevant behavior, install scripts, CI, data handling, and unsafe agent instructions.

igmarinSkill

security-check

igmarin/rails-agent-skills/skills/security-check/SKILL.md

Use when auditing a Rails app for XSS, CSRF, SQLi, IDOR, secrets, or auth bypass. Never print secrets. Trigger words: security, audit, XSS, CSRF, SQL injection, vulnerability.

static-web-serverSkill

security-advisory

static-web-server/static-web-server/.agents/skills/security-advisory/SKILL.md

Draft a GitHub Security Advisory (GHSA) for the Static Web Server (SWS) project — reproduce and scope the vulnerability, verify affected versions, score it with CVSS 3.1 and CWEs, write the advisory text, and create or update the private draft via gh. Use when a vulnerability is reported privately or confirmed by an audit, or when editing an existing draft advisory.

0xlayerghostSkill

defi-security

0xlayerghost/solidity-agent-kit/skills/defi-security/SKILL.md

[AUTO-INVOKE] MUST be invoked BEFORE deploying DeFi contracts (DEX, lending, staking, LP, token). Covers anti-whale, anti-MEV, flash loan protection, launch checklists, and emergency response. Trigger: any deployment or security review of DeFi-related contracts.