Claude skills and agent skills

joeldevzSkill

security

joeldevz/skynex-pi/skills/security/SKILL.md

On-demand security audit of code, config, or infrastructure. Use when the user wants security review outside the normal /skill:validate flow.

Often used withalbert-dm·cost-reducer·trigger-dev

subhansh-devSkill

SECURITY

subhansh-dev/agent-maxxing/SECURITY/SKILL.md

Security Policy ## Reporting a Vulnerability If you discover a security vulnerability in this project, please report it responsibly. Do NOT open a public GitHub issue for security vulnerabilities. Open

Often used withalbert-dm·cost-reducer·trigger-dev

tomas-uSkill

security

tomas-u/claude-skills/security/SKILL.md

Expert security architect providing comprehensive security guidance, architecture assessments, threat modeling, and compliance verification. Follows OWASP, NIS2, ISO 27001, NIST, and industry best practices. Use for security architecture design and review, threat modeling, security strategy, compliance assessment (OWASP, NIS2, GDPR, PCI DSS, SOC 2), infrastructure security, API security patterns, and incident response planning. For code-level security reviews, use the code-review skill.

Often used withalbert-dm·cost-reducer·trigger-dev

BappozSkill

security

Bappoz/My-Claude-Skills/skills/engineering/security/SKILL.md

Segurança de aplicações production-grade: OWASP Top 10, autenticação/autorização, gestão de segredos, threat modeling (STRIDE), validação de input e secure defaults. Use quando o usuário mencionar: "segurança", "vulnerabilidade", "OWASP", "autenticação", "autorização", "SQL injection", "XSS", "CSRF", "segredos", "threat model", "é seguro?", "hardening", "pentest". Não auxilia ataques maliciosos — foco em defesa e testes autorizados.

Often used withalbert-dm·cost-reducer·trigger-dev

caglarbaranboraSkill

security

caglarbaranbora/Apple-Agent-Kit/skills/security/SKILL.md

Route Keychain Services implementation tasks to the correct Knowledge Contracts -- item CRUD via SecItemAdd/SecItemCopyMatching/SecItemUpdate/SecItemDelete, accessibility levels, access groups and sharing, and storing structured/Codable data. Use when working with kSecClassGenericPassword, kSecClassInternetPassword, OSStatus, errSecSuccess, errSecItemNotFound, errSecDuplicateItem, kSecAttrAccessible, kSecAttrAccessGroup, Keychain Sharing, or kSecValueData. v1 is general (non-biometric-bound) Keychain item CRUD for generic/internet password items -- no SecAccessControl/biometric binding, no AutoFill/credential providers, no iCloud Keychain sync, no certificate/key/identity item classes. Triggers on SecItemAdd, SecItemCopyMatching, SecItemUpdate, SecItemDelete, kSecClassGenericPassword, kSecClassInternetPassword, kSecAttrAccessible, kSecAttrAccessGroup, Keychain access group, kSecValueData, Keychain, credential storage.

Often used withalbert-dm·cost-reducer·trigger-dev

cwklurksSkill

security

cwklurks/ship-score/skills/security/SKILL.md

Security Category — Ship Score Sub-Skill You are running the **Security** category of a Ship Score production readiness audit. Follow every instruction below precisely. Do not add checks beyond

Often used withalbert-dm·cost-reducer·trigger-dev

huyvpSkill

security

huyvp/claude-skills/security/SKILL.md

Secure web and desktop application development. Use when writing authentication, authorization, API endpoints, form handling, database queries, file uploads, Electron apps, Tauri apps, IPC handlers, cryptography, secrets management, security headers, input validation, or when reviewing code for vulnerabilities. Covers OWASP Top 10, XSS, CSRF, SQL injection, SSRF, command injection, path traversal, and desktop app security.

Often used withalbert-dm·trigger-dev·scalability

ksed8Skill

security

ksed8/cc-loopkit/.claude/skills/security/SKILL.md

Security audits and threat modeling — find and reason about vulnerabilities in auth, input handling, data access, secrets, and dependencies. Use when reviewing code for security, threat-modeling a feature, hardening an endpoint, handling auth/authz, or checking for injection, secret leakage, or unsafe data exposure. For a focused review of the current diff, prefer the `/security-review` command.

Often used withalbert-dm·cost-reducer·trigger-dev

musterd-ioSkill

security

musterd-io/musterd/.agents/skills/security/SKILL.md

The security role — the member who owns the team's application-security evidence (threat models, authorized scans, validated findings, private disclosure, the smallest defensible fix, and honest posture claims). Use when threat-modeling a system or a change, reviewing code or a workflow for security, running or reading a scanner, judging whether a finding is real and how severe, handling a leaked secret, reviewing a new dependency or the release pipeline, or writing anything public about security.

Often used withalbert-dm·cost-reducer·trigger-dev

precise-alloySkill

security

precise-alloy/ritus/skills/security/SKILL.md

Loaded automatically by execute-task and verify-task when changes touch auth, billing, migration, tenant isolation, infra, or shared contracts - security checklist. Do not invoke standalone unless the user specifically asks for a security review

Often used withalbert-dm·cost-reducer·trigger-dev

Rajveerx11Skill

security

Rajveerx11/skills/skills/checking/security/SKILL.md

Design, review, harden, or repair web and desktop application security. Use for authentication, authorization, tenancy, APIs, forms, databases, file uploads, SSRF, XSS, CSRF, injection, secrets, cryptography, dependencies, Electron/Tauri IPC, security headers, threat modeling, or evidence-backed vulnerability review and regression testing.

Often used withalbert-dm·cost-reducer·trigger-dev

vietnamtrainingpilot-ossSkill

security

vietnamtrainingpilot-oss/atelier/skills/security/SKILL.md

Router for application and code security — scanning a repository or diff for vulnerabilities, reviewing auth, secrets, and injection risks, generating patches for findings, and running a security pass before shipping. Use when the user mentions a security scan, vulnerability audit, CVE, secrets in code, auth review, injection, XSS, SQL injection, SSRF, dependency risk, or asks to check whether their code is safe to ship.

Often used withalbert-dm·cost-reducer·trigger-dev

OpenAISkill

security-scan

openai/codex-security/plugins/codex-security/skills/security-scan/SKILL.md

Find vulnerabilities in the current source of a whole repository or selected paths. This is the default single-pass audit. Use the diff skill for PR, commit, branch, or working-tree changes and the deep skill for an explicitly requested deep scan.

Often used withdjango-security·deployment-patterns·postgres-patterns

withkynamSkill

vc-security

withkynam/vibecode-pro-max-kit/.claude/skills/vc-security/SKILL.md

STRIDE + OWASP-based security audit with optional auto-fix. Scans code for vulnerabilities, categorizes by severity, and can iteratively fix findings using vc-autoresearch pattern.

OpenAISkill

security-scan

openai/plugins/plugins/codex-security/skills/security-scan/SKILL.md

Use for a standard, single-pass security audit of an entire repository or a scoped path, package, folder, or submodule with no diff to review. This is the default repository scan. Do not use for PR, commit, branch, or working-tree diffs, or for deep, multi-pass scans.

Often used withdjango-security·deployment-patterns·postgres-patterns

AdversisSkill

security

Adversis/skills/skills/security/SKILL.md

Entry point for the Adversis security plugin. Asks what you are trying to accomplish and routes you to the right skill: lint-baseline, threat-model, or security-persona. Start here.

Often used withalbert-dm·cost-reducer·trigger-dev

bmarshall511Skill

security

bmarshall511/Trellis/.claude/skills/security/SKILL.md

Use when handling user input, authentication, authorisation, secrets, file uploads, or database queries. Also when adding a dependency, exposing an endpoint, or reviewing whether something is safe to ship.

Often used withalbert-dm·cost-reducer·trigger-dev

CarriedWorldUniverseSkill

security

CarriedWorldUniverse/nexus/.agents/skills/security/SKILL.md

Secure-coding rules for nexus + the vulnerability/secret/SAST scan gate run at review and merge.

Often used withalbert-dm·cost-reducer·trigger-dev

danielgefenSkill

security

danielgefen/sous/skills/security/SKILL.md

Adversarial security gate. Reviews the change for vulnerabilities and tries to exploit them against a local environment. A confirmed exploit blocks the merge. Runs after merge-risk, before qa. Usage - /sous:security <change-id>

Often used withalbert-dm·cost-reducer·trigger-dev

FreaklingSkill

security

Freakling/Director-Driven-Development/.claude/skills/security/SKILL.md

Assess what is built against the OWASP baseline: the dependency audit, secrets scan and Semgrep where installed, then a read-only reviewer through the OWASP checklist. Findings become bug items, people and process items go to the director, and a dated report goes in product/security/. Use for "run a security assessment", "check the app against OWASP", "is this secure", or when /next-task or /release calls for one.

Often used withalbert-dm·cost-reducer·trigger-dev