Skills real projects publish on GitHub, most starred first. Each one says what it will make an agent do before you copy it.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
awarexoneSkillawarexone/AXguard/oauth-security/SKILL.md
Analyze OAuth/OIDC integration security — use when reviewing redirect URIs, state/nonce, token handling, PKCE, or confused-deputy risks in authorization code flows (CWE-601 / A07:2021 / API2:2023).
awarexoneSkillawarexone/AXguard/prompt-injection/SKILL.md
Assess direct and indirect prompt-injection risks in LLM/AI features — use for chatbots, RAG, agents, and tool-calling apps.
awarexoneSkillawarexone/AXguard/prototype-pollution/SKILL.md
Analyze JavaScript prototype pollution risks — use when reviewing deep merges, recursive object assigns, query-to-object parsers, or untrusted JSON key merges (CWE-1321 / A03:2021).
awarexoneSkillawarexone/AXguard/security-architecture-review/SKILL.md
Review security architecture and trust boundaries — use for design-level control gaps across authZ, secrets, egress, multi-tenant isolation, and insecure-by-design features (A04:2021) before or with /axguard-audit.
awarexonePipes a download into a shellSkillawarexone/AXguard/security-remediation/SKILL.md
Apply minimal defensive patches for confirmed findings and verify with re-audit — post-triage only.
awarexoneSkillawarexone/AXguard/session-security/SKILL.md
Analyze session management security — use when reviewing cookie flags, session fixation, timeout, logout, concurrent sessions, or server-side session stores (A07:2021 / CWE-287 / CWE-352 adjacency).
awarexoneSkillawarexone/AXguard/sql-injection/SKILL.md
Analyze SQL and ORM injection risks in application code — use for string-built queries, raw SQL helpers, and database sinks (CWE-89 / A03:2021).
awarexoneSkillawarexone/AXguard/ssrf-analysis/SKILL.md
Analyze and validate server-side request forgery in application code — use when reviewing outbound HTTP/fetch sinks, user-controlled URLs, webhook callbacks, previewers, or cloud metadata exposure (CWE-918 / A10:2021).
awarexoneSkillawarexone/AXguard/ssti-analysis/SKILL.md
Analyze server-side template injection risks — use when user input reaches template engines (Jinja, Twig, Freemarker, Pug, Liquid) or dynamic template compile/render APIs (CWE-1336 / A03:2021).
awarexonePipes a download into a shellSkillawarexone/AXguard/supply-chain-security/SKILL.md
Assess install hooks, curl|sh, untrusted indexes, and integrity gaps in dependency/build pipelines before ship (CWE-494 / CWE-506 / A06:2021 / A08:2021).
Often used withattack-chainpentest-toolsbinary-diff
awarexoneSkillawarexone/AXguard/threat-modeling/SKILL.md
Lightweight threat modeling for an application before deep scanning — map assets, trust boundaries, and abuse cases; feeds /axguard-audit.
awarexoneSkillawarexone/AXguard/websocket-security/SKILL.md
Analyze WebSocket security posture — use when reviewing WS/WSS upgrade auth, origin checks, message authorization, or cross-site WebSocket hijacking risks (CWE-346 / CWE-352 / A01:2021).
awarexoneSkillawarexone/AXguard/xss-analysis/SKILL.md
Analyze and validate cross-site scripting in web/UI code — use when reviewing HTML sinks, DOM APIs, template escaping, dangerouslySetInnerHTML, or reflected/stored XSS paths (CWE-79 / A03:2021).
A folder with a SKILL.md file: a name, a description of when to use it, and instructions. Claude loads a skill only when the task matches its description.
Copy the folder into your project's .claude/skills/ directory, or into your own skills folder to use it everywhere.
We read each file for commands that read secrets, delete things or pipe downloads into a shell, and say so before you copy it. No warning is not a promise that a file is safe.
Open a skill to see its discussion. Reports from people and their agents are coming.
