Claude skills and agent skills

yaklangPipes a download into a shellSkill

ai-ml-security

yaklang/hack-skills/skills/ai-ml-security/SKILL.md

AI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial examples, model poisoning, model stealing, data privacy attacks (membership inference, model inversion), and autonomous agent security risks.

alibabaSkill

security-check

alibaba/loongcollector/skills/security-check/SKILL.md

提交或推送前的安全检查，扫描 API Key、访问令牌等敏感信息。

LeanmcpSkill

security-repro

Leanmcp/superview.sh/skills/security-repro/SKILL.md

Build safe, local, defensive reproductions of ALREADY-PATCHED, publicly disclosed security vulnerabilities (CVEs, vendor advisories, AI-agent incidents) for whitepapers, control testing, and education. Use this skill whenever the user wants to reproduce, demonstrate, or write up a known vulnerability or security incident — phrases like "reproduce this CVE", "build a repro for", "demonstrate the EchoLeak/Cursor/postmark-mcp issue", "show how this exploit worked", "add a reproducibility guide", or "pull the NVD/CVE details for". It fetches advisory metadata from NVD and CVE.org, confirms the issue is fixed, and produces a vulnerable-vs-patched harness that is offline, loopback-only, and uses synthetic markers. It NEVER discovers, develops, or weaponizes new zero-days and refuses any unpatched or live-target request.

nearaiReads credentialsSkill

security-review

nearai/ironclaw/skills/security-review/SKILL.md

Security audit for code changes and PRs — OWASP top 10, auth flows, data handling, secrets exposure, supply chain risks. Writes findings as actionable items.

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

relaticleSkill

spatie-security

relaticle/relaticle/.claude/skills/spatie-security/SKILL.md

Apply Spatie's security guidelines when configuring applications, databases, servers, credentials, or signed Git commits, or when reviewing code for security concerns; use for SSL setup, CSRF protection, password hashing, database permissions, and server hardening.

wgpsecSkill

agent-security

wgpsec/AboutSecurity/skills/ai-security/agent-security/SKILL.md

AI Agent 系统安全测试方法论。当目标系统使用 AI Agent 执行工具调用、多 Agent 协作、 或自主决策时触发。覆盖 OWASP Agentic AI Security Top 10 (ASI01-ASI10): 目标劫持、工具滥用、身份权限、供应链、代码执行、记忆投毒、多 Agent 通信、 级联故障、人机信任利用、失控 Agent。

theopencoSkill

security-audit

theopenco/llmgateway/.agents/skills/security-audit/SKILL.md

Security best practices, vulnerability review, and full security audits for LLM Gateway. Use when writing security-sensitive code (auth, sessions, API keys, provider keys, billing, webhooks, user-supplied URLs, admin routes, CORS, rendering user content), when asked for a security review, security report, vulnerability research, pen test, or security audit, and for the monthly audit routine that fixes confirmed findings in a PR.

Often used withcreate-stories·community-led-growth·story-done

PydanticSkill

review-security

pydantic/monty/.agents/skills/review-security/SKILL.md

Security review of the current branch against its merge base — sandbox escapes, memory errors, panics and resource-limit bypasses. Use when reviewing changes for security risk, or before merging anything touching the heap/ module, path_security.rs, the wire protocol or the pool.

Often used withreview-bugbot·split-to-prs·create-rule

xrplevmSkill

security-audit

xrplevm/node/.claude/skills/security-audit/SKILL.md

Run a full security audit across all focus areas in parallel, reporting findings to peersyst/security

Often used withcreate-stories·community-led-growth·story-done

xrplevmSkill

security-issue

xrplevm/node/.claude/skills/security-issue/SKILL.md

Create a security finding in the private peersyst/security repo with proper labels and format. Use when reporting a security vulnerability, concern, or observation found during audits or ad-hoc review.

fleetdmSkill

security-triage

fleetdm/fleet/.claude/skills/security-triage/SKILL.md

Use when a security report arrives or needs a reply - a new Bugbop report (VDP or private bug bounty), a GitHub security advisory submission in the "triage" state on fleetdm/fleet, a disclosure in the security inbox, a reporter asking "any update?", or a fix merging for a tracked report. Also use for the daily security report triage ritual.

SentrySkill

security-model

getsentry/skills/skills/security-model/SKILL.md

Define, review, or update SECURITY_MODEL.md files that tell security review tools a repository's threat model, trust boundaries, invariants, reportable finding classes, and exclusions. Use when asked to "write a security model", "threat model this repo for scanners", "define security review scope", "what counts as a vulnerability here", "update SECURITY_MODEL.md", "why did the scanner flag or miss this", or to check whether existing security guidance still matches the code. Not for running a security review or editing the SECURITY.md disclosure policy.

joe-bellSkill

security-review

joe-bell/cva/.agents/skills/security-review/SKILL.md

Security code review for vulnerabilities. Use when asked to "security review", "find vulnerabilities", "check for security issues", "audit security", "OWASP review", or review code for injection, XSS, authentication, authorization, cryptography issues. Provides systematic review with confidence-based reporting.

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

doorkeeper-gemSkill

security-review

doorkeeper-gem/doorkeeper/.agents/skills/security-review/SKILL.md

Verify that code changes do not introduce OAuth security vulnerabilities. Use when modifying token handling, client authentication, scope validation, redirect URI checks, secret comparison, or grant flows in Doorkeeper.

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

rackSkill

security-triage

rack/rack/.agents/skills/security-triage/SKILL.md

End-to-end process for handling a Rack security report (GitHub Security Advisory) from receipt to backported release. Use when asked to triage, review, accept, describe, fix, merge, or backport a security advisory, or to review a review document for one.

samberSkill

golang-security

samber/cc-skills-golang/skills/golang-security/SKILL.md

Security best practices and vulnerability prevention for Golang — injection (SQL, command, XSS), cryptography, path traversal, SSRF and HTTP security headers, cookies, secrets management, memory safety, PII in logs, STRIDE/DREAD threat modeling, plus `gosec` SAST, race detection, and fuzz testing. Apply when writing, reviewing, or auditing Go code for security, or when touching crypto, file or network I/O, secrets, user input, or authentication. Not for non-exploitable defensive bugs such as nil panics or slice aliasing (→ See `samber/cc-skills-golang@golang-safety` skill), dependency vulnerability scanning with govulncheck (→ See `samber/cc-skills-golang@golang-dependency-management` skill), or wiring security scanners into CI pipelines (→ See `samber/cc-skills-golang@golang-continuous-integration` skill).

Often used withgolang-how-to·golang-gopls·golang-refactoring

gmh5225Skill

mobile-security

gmh5225/awesome-game-security/.claude/skills/mobile-security/SKILL.md

Analyze Android or iOS game-security trust boundaries, packages, native code, platform integrity, instrumentation, attestation, and signing. Use when mobile OS or device behavior is central.

GitHubReads credentialsSkill

security-review

github/squad/.copilot/skills/security-review/SKILL.md

How to review PRs for security — credentials, injection, workflow permissions, supply chain, git operation safety

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

compozySkill

security-review

compozy/compozy/.agents/skills/security-review/SKILL.md

Security code review for vulnerabilities. Use when asked to "security review", "find vulnerabilities", "check for security issues", "audit security", "OWASP review", or review code for injection, XSS, authentication, authorization, cryptography issues. Provides systematic review with confidence-based reporting.

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

Model Context ProtocolReads credentialsSkill

security-advisory

modelcontextprotocol/servers/.claude/skills/security-advisory/SKILL.md

Take a privately reported vulnerability through this repo's security advisory flow: board it as a draft card, check whether the code is this repo's server or the SDK underneath, accept or reject, fix it in the private fork, release, publish, then turn the card into public tracking. Use when a vulnerability is reported privately; when deciding whether an advisory is ours to fix or belongs to an SDK; when looking up or creating its private fork; when answering a reporter; or when a GHSA-titled board card needs handling.