Claude skills and agent skills

GitHubSkill

agent-owasp-compliance

github/awesome-copilot/skills/agent-owasp-compliance/SKILL.md

Check any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks. Use this skill when: - Evaluating an agent system's security posture before production deployment - Running a compliance check against OWASP ASI 2026 standards - Mapping existing security controls to the 10 agentic risks - Generating a compliance report for security review or audit - Comparing agent framework security features against the standard - Any request like "is my agent OWASP compliant?", "check ASI compliance", or "agentic security audit"

AWSSkill

scanning-with-aws-security-agent

aws/agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/scanning-with-aws-security-agent/SKILL.md

Run an AWS Security Agent scan on the workspace — uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked, verified findings with code locations and remediations. Use when the user asks to scan code, find vulnerabilities, run a security scan or review, check security issues, check scan status, show findings, list recent scans, or stop a scan.

No other project uses it yet

agentlas-aiSkill

agentlas-security-scan

agentlas-ai/Agentlas-OS/.agents/skills/agentlas-security-scan/SKILL.md

Use when an agent folder must pass the Agentlas Cloud 2-stage security scan (static rules + BYOK LLM judgment) before private sync or public publish, or when asked to run/interpret `hephaestus security scan`.

No other project uses it yet

rlaopeSkill

omh-security-event-response

rlaope/oh-my-hermes/skills/omh-security-event-response/SKILL.md

[omh] Security event on the code already shipped -- a CVE in a dependency, a secret committed to the repo, a license question, an advisory: triage reachability and severity, contain in order, and never close a leaked secret before its rotation is observed. Use when the user says: security-event-response, security event response, cve, triage this cve, cve in our dependency, cve in a dependency, security advisory, dependabot alert.

No other project uses it yet

nyldnReads credentialsSkill

octopus-security-audit

nyldn/claude-octopus/.claude/skills/skill-security-audit/SKILL.md

OWASP compliance, vulnerability scanning, and adversarial red team testing — use for security reviews

nyldnReads credentialsSkill

octopus-security-audit

nyldn/claude-octopus/skills/octopus-security-audit/SKILL.md

OWASP compliance, vulnerability scanning, and adversarial red team testing — use for security reviews

modu-aiSkill

moai-ref-llm-security

modu-ai/moai-adk/.claude/skills/moai-ref-llm-security/SKILL.md

AI/LLM defensive security reference: prompt-injection defense, OWASP LLM Top 10 defensive mapping, MCP and agentic tool-call hardening, training-data poisoning detection, model-output validation and guardrails, MITRE ATLAS defensive correlation, and NIST AI RMF governance. Agent-extending skill that amplifies backend, security, and AI-application engineering with production-grade defensive patterns for LLM-backed systems. NOT for: offensive techniques (jailbreak authoring, attack-payload crafting, red-team exploitation), model training or fine-tuning methodology, prompt optimization for capability, web-app OWASP Top 10 (see moai-ref-owasp-checklist), or general API design (see moai-ref-api-patterns).

AutomatticSkill

calypso-security-alerts

Automattic/wp-calypso/.claude/skills/calypso-security-alerts/SKILL.md

Provide advisory guidance for scanning Automattic/wp-calypso Dependabot alerts and Dependabot remediation PRs using the public dependency security alerts playbook.

OpenAISkill

propose-security-hardening

openai/plugins/plugins/codex-security/skills/propose-security-hardening/SKILL.md

Develop evidence-backed structural and architectural security hardening proposals from vulnerability disclosures, supplied findings, incident or assessment documents, source code, or a completed Codex Security scan. Use when a user asks for systemic improvements, alternatives beyond per-finding patches, before-and-after security architecture views, engineering tradeoff analysis, or an implementation-ready plan for a selected hardening option. Also use automatically after a Codex Security scan with reportable findings when the top-level scan workflow requests final-report hardening guidance.

GitHubReads credentialsSkill

mcp-implementation-security-review

github/awesome-copilot/skills/mcp-implementation-security-review/SKILL.md

Review the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline — authentication, sessions, rate limiting, input-schema validation, official-SDK usage, RCE vectors, and the OWASP MCP Top 10 — producing a report with file/line evidence. Use this skill when: - Reviewing an MCP server implementation for security before release - Checking a server against the baseline controls (MCP-01 to MCP-05) and the OWASP MCP Top 10 - Auditing tools for RCE vectors (command/code injection, unsafe deserialization, path traversal, SSTI, dependency hijacking, SSRF) - Verifying auth, session, rate-limiting, and input-validation controls on a network-exposed server - Reviewing MCP client code that handles untrusted server responses and session IDs - Requests like "review this MCP server for security" or "is my MCP server implementation secure?"

OpenAIReads credentialsSkill

twilio-security-api-auth

openai/plugins/plugins/twilio-developer-kit/skills/twilio-security-api-auth/SKILL.md

Choose the right Twilio authentication method and implement it correctly. Covers Auth Token (testing only), API Keys (production standard), OAuth2 client_credentials (time-limited bearer tokens), Access Tokens (client-side SDKs), and test credentials. Use this skill before making any Twilio API calls in production.

NVIDIASkill

create-security-advisory

NVIDIA/OpenShell/.agents/skills/create-security-advisory/SKILL.md

Prepare structured OpenShell vulnerability reports and create authorized private GitHub security advisory drafts. Use when drafting a GHSA, turning a finding into an advisory, or organizing a report for security review.

No other project uses it yet

SentryDeletes or force-pushesSkill

fix-security-vulnerability

getsentry/sentry-javascript/.agents/skills/fix-security-vulnerability/SKILL.md

Analyze and propose fixes for Dependabot security alerts

LUC4N3XSkill

levyra-security-review

LUC4N3X/Levyra-deepsound/.agents/skills/levyra-security-review/SKILL.md

Perform an evidence-based Levyra security review and Codex Security workflow covering threat modeling, attack paths, validation, remediation, revalidation, secrets, provider URLs, redirects, SSRF, MIME confusion, permissions, privacy, logging, workflows, dependency changes, update verification, and untrusted input. Use automatically for vulnerability scans, security findings, dependency risk, authentication, trust-boundary changes, sensitive data, or security-related pull requests.

ollaya-devReads credentialsSkill

security-and-hardening

ollaya-dev/ollaya/.claude/skills/security-and-hardening/SKILL.md

Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or external integrations, or when checking a login flow is safe against the OWASP Top Ten. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services. Use when auditing dependencies for known vulnerabilities, triaging package-manager audit findings, or assessing supply-chain risk in a new package. Use when personal data or privacy compliance (GDPR, CCPA) is involved.

Often used withconstraint-driven-development·observability-and-instrumentation·doubt-driven-development

danieletetiReads credentialsSkill

dmvcframework-security

danieleteti/delphimvcframework/.agents/skills/dmvcframework-security/SKILL.md

Use when writing or reviewing any DelphiMVCFramework server-side code that touches untrusted input — request bodies, query strings, headers, cookies, uploads, redirects, SQL/RQL, HTML output, JWT, CORS, secrets. Covers access control, mass assignment, SQL injection, XSS in TemplatePro, CSRF, path traversal, SSRF, file uploads, security headers, JWT hardening and secret management, with the DMVCFramework API that actually implements each control. Read before shipping an endpoint that a stranger can call.

activepiecesSkill

triage-security-advisories

activepieces/activepieces/.agents/skills/triage-security-advisories/SKILL.md

Triage the GitHub privately-reported vulnerability backlog for Activepieces — pull repository security advisories from the Security tab, scope-check against SECURITY.md, deeply validate each, compute SLA status, and propose fix plans for review. Use when the user asks to triage security advisories, work the reported-vulnerability backlog, or check SLA on reported vulns. For Dependabot dependency alerts, use the triage-dependabot-alerts skill instead.

No other project uses it yet

BankrBotSkill

aeon-skill-security-scan

BankrBot/skills/aeon-skill-security-scan/SKILL.md

Audit installed Bankr skills before you run them — scan SKILL.md and companion scripts for shell injection, secret exfiltration, path traversal, prompt-override payloads, destructive commands, and 2026-era obfuscation (zero-width Unicode, bidi override, base64-decode pipes, webhook SSRF hosts). Designed to integrate with Bankr Safety Scores. Silent on no-op runs; surfaces only NEW or RESOLVED findings vs prior scans. Triggers: "audit this skill", "is this skill safe to install", "security scan my skills", "check skill X for injection".

gmh5225Skill

linux-platform-security

gmh5225/awesome-game-security/.claude/skills/linux-platform-security/SKILL.md

Analyze Linux, SteamOS, Steam Deck, Wine, or Proton game-security boundaries. Use for ELF/process evidence, privileges, namespaces, seccomp, LSMs, compatibility, or Linux memory forensics.

gmh5225Skill

windows-kernel-security

gmh5225/awesome-game-security/.claude/skills/windows-kernel/SKILL.md

Analyze Windows driver trust, callbacks, IRQL, kernel memory, DSE, PatchGuard, VBS/HVCI, ETW, crash evidence, and build-specific internals for authorized game-security research.