Find the best CLAUDE.md, AGENTS.md and Claude skills

drvossReads credentialsSkill

security-scan

drvoss/everything-copilot-cli/skills/security/security-scan/SKILL.md

Use when you want a quick security pass on code changes or dependencies — checks OWASP Top 10 patterns, runs dependency audits, and surfaces critical vulnerabilities with targeted fixes.

Often used withdjango-security·deployment-patterns·postgres-patterns

RelaticleSkill

spatie-security

Relaticle/relaticle/.claude/skills/spatie-security/SKILL.md

Apply Spatie's security guidelines when configuring applications, databases, servers, credentials, or signed Git commits, or when reviewing code for security concerns; use for SSL setup, CSRF protection, password hashing, database permissions, and server hardening.

wgpsecSkill

agent-security

wgpsec/AboutSecurity/skills/ai-security/agent-security/SKILL.md

AI Agent 系统安全测试方法论。当目标系统使用 AI Agent 执行工具调用、多 Agent 协作、 或自主决策时触发。覆盖 OWASP Agentic AI Security Top 10 (ASI01-ASI10): 目标劫持、工具滥用、身份权限、供应链、代码执行、记忆投毒、多 Agent 通信、 级联故障、人机信任利用、失控 Agent。

theopencoSkill

security-audit

theopenco/llmgateway/.agents/skills/security-audit/SKILL.md

Security best practices, vulnerability review, and full security audits for LLM Gateway. Use when writing security-sensitive code (auth, sessions, API keys, provider keys, billing, webhooks, user-supplied URLs, admin routes, CORS, rendering user content), when asked for a security review, security report, vulnerability research, pen test, or security audit, and for the monthly audit routine that fixes confirmed findings in a PR.

Often used withcreate-stories·community-led-growth·story-done

jefflesterReads credentialsSkill

api-security

jefflester/claude-skills-supercharged/.claude/skills/api-security/SKILL.md

API security best practices and common vulnerability prevention. Enforces security checks for authentication, input validation, SQL injection, XSS, and OWASP Top 10 vulnerabilities. Use when building or modifying APIs.

Often used withbinary-diff·pentest-tools·llm-security

loulanyueDeletes or force-pushesSkill

perl-security

loulanyue/awesome-claude-notes/skills/perl-security/SKILL.md

Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies.

Often used withpytorch-patterns·architecture-decision-records

gyuhaSkill

fg-security

gyuha/forge/skills/fg-security/SKILL.md

Domain-specialised security audit of a codebase, outside the forge loop — a vendored multi-phase methodology (recon → parallel attack-class hunting → independent validation → machine-readable findings) whose findings, past a severity gate and your approval, become fix-forward backlog plans. Artefacts stay OUTSIDE the repo (upstream's ~/security-audit-skill/) so a vulnerability list has no path into a commit at all. Always skipped in fg-next all / fg-loop. Use in contexts like 'forge security', 'fg-security', '보안 감사', '취약점 찾아줘', 'security audit'.

opencueSkill

vc:security

opencue/cuecards/.agents/skills/vc-security/SKILL.md

STRIDE + OWASP-based security audit with optional auto-fix. Scans code for vulnerabilities, categorizes by severity, and can iteratively fix findings using vc:autoresearch pattern.

simoncorrySkill

security-scan

simoncorry/foundry/.agents/skills/security-scan/SKILL.md

Single-round adversarial security scan.

Often used withdjango-security·deployment-patterns·postgres-patterns

z91772524-aiSkill

api-security

z91772524-ai/pojia-next-mac/skills/api-security/SKILL.md

API security testing for REST/GraphQL/WebSocket/SOAP: discovery, authz, BOLA/IDOR, JWT/OAuth, rate-limit, and CI-oriented validation workflows.

Often used withbinary-diff·pentest-tools·llm-security

z91772524-aiSkill

llm-security

z91772524-ai/pojia-next-mac/skills/llm-security/SKILL.md

LLM/agent security testing: prompt injection, tool abuse, data exfil paths, guardrail bypass research, and evaluation harnesses.

Often used withattack-chain·pentest-tools·binary-diff

chaenmasahiro0425Reads credentialsSkill

security-scan

chaenmasahiro0425/claude-security-scan/SKILL.md

開発者のPC・手元のgitリポジトリ・GitHub・Vercelと公開サイト・クラウド（AWS / Google Cloud / Azure / Cloudflare / Supabase）・Gmailを読み取り専用で横断スキャンし、重要度別のHTMLレポートと前回からの差分を出すスキル。「セキュリティチェックして」「セキュリティスキャン」「脆弱性ないか見て」「APIキー漏れてない？」「乗っ取られてないか確認」「新しく出たリスクだけ教えて」「毎週スキャンを設定して」等で使う。設定の変更・送信・削除はしない。直すときは1件ずつ利用者の承認を取る。

Often used withdjango-security·deployment-patterns·postgres-patterns

PydanticSkill

review-security

pydantic/monty/.agents/skills/review-security/SKILL.md

Security review of the current branch against its merge base — sandbox escapes, memory errors, panics and resource-limit bypasses. Use when reviewing changes for security risk, or before merging anything touching the heap/ module, path_security.rs, the wire protocol or the pool.

Often used withreview-bugbot·split-to-prs·create-rule

xrplevmSkill

security-audit

xrplevm/node/.claude/skills/security-audit/SKILL.md

Run a full security audit across all focus areas in parallel, reporting findings to peersyst/security

Often used withcreate-stories·community-led-growth·story-done

xrplevmSkill

security-issue

xrplevm/node/.claude/skills/security-issue/SKILL.md

Create a security finding in the private peersyst/security repo with proper labels and format. Use when reporting a security vulnerability, concern, or observation found during audits or ad-hoc review.

KbWenSkill

auth-security

KbWen/agentic-os/.agents/skills/auth-security/SKILL.md

Secure authentication and authorization when credentials, sessions, roles, or permissions change.

ghalexPipes a download into a shellSkill

vm-security

ghalex/skills/vm-security/SKILL.md

Audit and harden a Linux VM (Ubuntu/Debian) over SSH — key-only login as one admin user, no root, fail2ban, ufw, unattended security upgrades, sysctl, journald cap, SSH login alerts — plus a read-only check for signs of compromise (login history, root logins, unknown IPs, shell history, cron/systemd persistence, odd processes, setuid files, modified package files, Docker exposure). Triggers — "secure my server", "harden this VM", "lock down ssh", "check my server for suspicious files", "was my server hacked", "audit this VM", "fail2ban and ufw on".

engineering-osSkill

eos-security

engineering-os/engineering-os/.agents/skills/eos-security/SKILL.md

Run adversarial Engineering OS security scanning, auditing, dependency checks, threat modeling, or compliance checks.

muyenSkill

security-scan

muyen/vibe-to-prod/.claude/skills/security-scan/SKILL.md

Proactive security scanning. Triggers when modifying auth, API endpoints, user data, or sensitive operations.

Often used withdjango-security·deployment-patterns·postgres-patterns

fleetdmSkill

security-triage

fleetdm/fleet/.claude/skills/security-triage/SKILL.md

Use when a security report arrives or needs a reply - a new Bugbop report (VDP or private bug bounty), a GitHub security advisory submission in the "triage" state on fleetdm/fleet, a disclosure in the security inbox, a reporter asking "any update?", or a fix merging for a tracked report. Also use for the daily security report triage ritual.