Claude skills and agent skills

QinAnzeReads credentialsSkill

security

QinAnze/SKILLS/skills/before-push-v2/security/SKILL.md

安全审计与加固。覆盖SAST/SCA/密钥扫描/STRIDE威胁建模/合规检查，按语言特定工具链识别漏洞并提供修复方案。Use when the user asks to check security, scan for vulnerabilities, audit code, or prepare for compliance.

Often used withalbert-dm·cost-reducer·trigger-dev

Rajveerx11Skill

security

Rajveerx11/skills/skills/checking/security/SKILL.md

Design, review, harden, or repair web and desktop application security. Use for authentication, authorization, tenancy, APIs, forms, databases, file uploads, SSRF, XSS, CSRF, injection, secrets, cryptography, dependencies, Electron/Tauri IPC, security headers, threat modeling, or evidence-backed vulnerability review and regression testing.

Often used withalbert-dm·cost-reducer·trigger-dev

vietnamtrainingpilot-ossSkill

security

vietnamtrainingpilot-oss/atelier/skills/security/SKILL.md

Router for application and code security — scanning a repository or diff for vulnerabilities, reviewing auth, secrets, and injection risks, generating patches for findings, and running a security pass before shipping. Use when the user mentions a security scan, vulnerability audit, CVE, secrets in code, auth review, injection, XSS, SQL injection, SSRF, dependency risk, or asks to check whether their code is safe to ship.

Often used withalbert-dm·cost-reducer·trigger-dev

willcoliveiraReads credentialsSkill

security

willcoliveira/mac-cleanup-agent/.claude/skills/security/SKILL.md

Find secrets left lying around (2FA recovery codes, OAuth client secrets, certificates and keys in Downloads/Desktop/Documents) and credential files other users can read (~/.ssh keys, ~/.npmrc, adbkey). Never reads the files; only offers permission tightening. Use when user says: "check for exposed secrets", "security check my mac", "are my keys safe".

Often used withalbert-dm·cost-reducer·trigger-dev

workthanwa-maxReads credentialsSkill

security

workthanwa-max/SKILLS/security/SKILL.md

สถาปัตยกรรมความปลอดภัยระดับองค์กร Zero-Trust, Threat Modeling, Immutable Logging

Often used withalbert-dm·cost-reducer·trigger-dev

OpenAISkill

security-scan

openai/codex-security/plugins/codex-security/skills/security-scan/SKILL.md

Find vulnerabilities in the current source of a whole repository or selected paths. This is the default single-pass audit. Use the diff skill for PR, commit, branch, or working-tree changes and the deep skill for an explicitly requested deep scan.

Often used withdjango-security·deployment-patterns·postgres-patterns

withkynamSkill

vc-security

withkynam/vibecode-pro-max-kit/.claude/skills/vc-security/SKILL.md

STRIDE + OWASP-based security audit with optional auto-fix. Scans code for vulnerabilities, categorizes by severity, and can iteratively fix findings using vc-autoresearch pattern.

OpenAISkill

security-scan

openai/plugins/plugins/codex-security/skills/security-scan/SKILL.md

Use for a standard, single-pass security audit of an entire repository or a scoped path, package, folder, or submodule with no diff to review. This is the default repository scan. Do not use for PR, commit, branch, or working-tree diffs, or for deep, multi-pass scans.

Often used withdjango-security·deployment-patterns·postgres-patterns

AdversisSkill

security

Adversis/skills/skills/security/SKILL.md

Entry point for the Adversis security plugin. Asks what you are trying to accomplish and routes you to the right skill: lint-baseline, threat-model, or security-persona. Start here.

Often used withalbert-dm·cost-reducer·trigger-dev

ArthurZakirovReads credentialsSkill

security

ArthurZakirov/SystemSmith/skills/security/SKILL.md

Mandatory credential protection skill for all agents. Prevents reading, exposing, or leaking credentials, secrets, API keys, tokens, passwords, and auth-capable config files.

Often used withalbert-dm·cost-reducer·trigger-dev

blueOctopusAIReads credentialsSkill

security

blueOctopusAI/intel-hub/.claude/skills/security/skill.md

Security Auditor Evaluate security implications of tools, configurations, plugins, and the intelligence hub itself. ## Input `/security [target]` Targets: - No argument: full hub audit - A tool name: evaluate that specific tool

Often used withalbert-dm·cost-reducer·trigger-dev

bmarshall511Skill

security

bmarshall511/Trellis/.claude/skills/security/SKILL.md

Use when handling user input, authentication, authorisation, secrets, file uploads, or database queries. Also when adding a dependency, exposing an endpoint, or reviewing whether something is safe to ship.

Often used withalbert-dm·cost-reducer·trigger-dev

CarriedWorldUniverseSkill

security

CarriedWorldUniverse/nexus/.agents/skills/security/SKILL.md

Secure-coding rules for nexus + the vulnerability/secret/SAST scan gate run at review and merge.

Often used withalbert-dm·cost-reducer·trigger-dev

danielgefenSkill

security

danielgefen/sous/skills/security/SKILL.md

Adversarial security gate. Reviews the change for vulnerabilities and tries to exploit them against a local environment. A confirmed exploit blocks the merge. Runs after merge-risk, before qa. Usage - /sous:security <change-id>

Often used withalbert-dm·cost-reducer·trigger-dev

Dev-PGVAAReads credentialsSkill

security

Dev-PGVAA/skills/security/SKILL.md

Audit security boundaries in AI, agent, RAG, and MCP systems, or manage project secrets with SOPS and age. Use for threat models, scoped security reviews, encrypted dotenv migration, recipient rotation, and secret exposure response.

Often used withalbert-dm·cost-reducer·trigger-dev

eliabdevweb-svgReads credentialsSkill

security

eliabdevweb-svg/opencode-skills-MCP/skills/security/SKILL.md

Sécurité applicative, OWASP Top 10, gestion des secrets, authentification, et bonnes pratiques de sécurité. Use when reviewing code for vulnerabilities, applying OWASP Top 10, handling authentication or authorization, managing secrets and tokens, auditing dependencies, or when the user mentions securite, vulnerabilite, XSS, injection, CSRF ou mot de passe.

Often used withalbert-dm·cost-reducer·trigger-dev

FreaklingSkill

security

Freakling/Director-Driven-Development/.claude/skills/security/SKILL.md

Assess what is built against the OWASP baseline: the dependency audit, secrets scan and Semgrep where installed, then a read-only reviewer through the OWASP checklist. Findings become bug items, people and process items go to the director, and a dated report goes in product/security/. Use for "run a security assessment", "check the app against OWASP", "is this secure", or when /next-task or /release calls for one.

Often used withalbert-dm·cost-reducer·trigger-dev

Geoffe-GaSkill

security

Geoffe-Ga/well-worn-tools/.claude/skills/security/SKILL.md

Implement secure coding practices against common vulnerabilities. Use when handling user input, file paths, subprocess calls, SQL queries, API keys, or building web endpoints. Covers input validation, injection prevention, secret management, and XSS/CSRF protection across Python, TypeScript, Go, and Rust. Do NOT use for general error handling (use error-handling skill) or for remediating dependency vulnerability scanner failures and CVE / GHSA advisories (use cve-remediation skill).

Often used withalbert-dm·cost-reducer·trigger-dev

Greg-KleinSkill

security

Greg-Klein/ai-rules-skills/skills/security/SKILL.md

Security rules and OWASP best practices — always active

Often used withalbert-dm·cost-reducer·trigger-dev

jack1415926Skill

security

jack1415926/claude-skills/skills/security/SKILL.md

Create security architecture diagrams using PlantUML syntax with identity, encryption, firewall, and compliance stencil icons. Best for IAM flows, zero-trust models, encryption pipelines, and threat detection architectures.

Often used withalbert-dm·cost-reducer·trigger-dev