One search for your own team's files and the public ecosystem. See how real projects write their agent instructions, and bring the good ideas home.
TheurgicDuke771SkillTheurgicDuke771/DataQ/.claude/skills/security-scan/SKILL.md
Run the end-of-week security scan (CONTRIBUTING rule 36) — Dependabot + secret-scanning alerts, local pip-audit/pnpm-audit mirror of the CI gates, betterleaks sweep, OWASP spot check on endpoints added this week, Key Vault access audit, and the credential-rotation register. Use weekly, before a deploy, or when the user asks "run the security scan" / "any open vulns?".
UfukCetinkaya57SkillUfukCetinkaya57/backend-governance/.claude/skills/security-scan/SKILL.md
Sistematik guvenlik tarama proseduru - otomatik pattern arama ve risk tespiti
vivy-yiSkillvivy-yi/xiaohongshu-skills/skills/05-平台规则/account-security/SKILL.md
Use when protecting Xiaohongshu account from unauthorized access, preventing account theft, recovering compromised accounts, or implementing security measures to safeguard account and follower base
NVIDIASkillNVIDIA/OpenShell/.agents/skills/fix-security-issue/SKILL.md
Implement a fix for a reviewed security issue. Takes a directly requested issue number or scans for issues labeled `topic:security` and `agent:implementation-requested`. Reads the security review from the issue comments and implements the remediation plan. Trigger keywords - fix security issue, remediate security, implement security fix, patch vulnerability.
Hassaan146SkillHassaan146/claude-skills/cloud-security/SKILL.md
Use when assessing cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, or IaC security gaps. Covers AWS, Azure, and GCP posture assessment with MITRE ATT&CK mapping.
hoangsonwwSkillhoangsonww/AI-Agents-Orchestrator/.agents/skills/security-review/SKILL.md
Review code changes for security vulnerabilities, authentication gaps, injection risks, and unsafe patterns. Use before merging PRs or after security-sensitive changes.
EyadkellehSkillEyadkelleh/awesome-skills-security/skills/security-fuzzing/SKILL.md
Essential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.
awarexoneSkillawarexone/AXguard/cloud-security/SKILL.md
Review cloud and CORS misconfiguration in app code and IaC-adjacent configs — metadata URLs, public buckets, wildcard origins (CWE-918 / CWE-942 / A05:2021 / A10:2021).
awarexoneSkillawarexone/AXguard/oauth-security/SKILL.md
Analyze OAuth/OIDC integration security — use when reviewing redirect URIs, state/nonce, token handling, PKCE, or confused-deputy risks in authorization code flows (CWE-601 / A07:2021 / API2:2023).
awarexoneSkillawarexone/AXguard/session-security/SKILL.md
Analyze session management security — use when reviewing cookie flags, session fixation, timeout, logout, concurrent sessions, or server-side session stores (A07:2021 / CWE-287 / CWE-352 adjacency).
dawn840705Skilldawn840705/codex-code-studios/skills/security-audit/SKILL.md
Audit the game for security vulnerabilities: save tampering, cheat vectors, network exploits, data exposure, and input validation gaps. Produces a prioritised security report with remediation guidance. Run before any public release or multiplayer launch.
YehudaFrankelSkillYehudaFrankel/clankbrain/.claude/skills/03-security/SKILL.md
Security audit — checks auth, SQL injection, exposed endpoints, and sensitive data. Triggers on "security check", "is this secure", "check for vulnerabilities", "check auth", "audit security", "security audit".
mbwsimsSkillmbwsims/claude-universe/skills/security-review/SKILL.md
Use when the user wants a security-focused review of specific files or changes: "security review this code", "check for exploits", "find security bugs", "pen test this", or "/security-review". This is for exploitability review of targeted code, not a broad whole-project scan or a general-purpose code review.
MicrosoftSkillmicrosoft/hve-core/.github/skills/project-planning/security-planning/SKILL.md
Security planning and plan-drift analysis for STRIDE, standards, controls, backlog handoff, current findings, and TM7 generation.
s-hiraokuSkills-hiraoku/synapse-a2a/.agents/skills/security-audit/SKILL.md
General-purpose security auditing guide. Covers OWASP Top 10, dependency vulnerabilities, authentication, authorization, input validation, and secret management. Use this when performing a security review or audit.
TabooHarmonySkillTabooHarmony/roblox-brain/skills/core/roblox-security/SKILL.md
Use when auditing Roblox code for exploit vectors, authority models, remotes, economy, and DataStore flows.
arpitexploresSkillarpitexplores/skills-super/super-security/SKILL.md
Security audits, threat modelling, testing, and remediation across apps, APIs, and infrastructure.
csiddhant796-blipSkillcsiddhant796-blip/claude-skills-collection/senior-security/SKILL.md
Security engineering toolkit for threat modeling, vulnerability analysis, secure architecture, and penetration testing. Includes STRIDE analysis, OWASP guidance, cryptography patterns, and security scanning tools. Use when the user asks about security reviews, threat analysis, vulnerability assessments, secure coding practices, security audits, attack surface analysis, CVE remediation, or security best practices.
eeshsaxenaSkilleeshsaxena/agent-skills/skills/security-sweep/SKILL.md
Catch the common, high-impact security mistakes before they ship. Use when reviewing code that handles input, auth, secrets, queries, or file paths.
hackIDLESkillhackIDLE/skills/skills/mesh-security/SKILL.md
Analyze Istio, Consul, and Linkerd service mesh configurations for security vulnerabilities with NIST 800-53 control mappings. Use when users need to audit mesh security, identify misconfigurations, check mTLS settings, review ACL policies, or prepare for FedRAMP assessments. Triggers on keywords like "mesh config", "istio security", "consul ACL", "linkerd policy", "service mesh audit", or "NIST compliance".
Plain text files in a repository that tell a coding agent how the project works: commands to run, conventions to follow and things to avoid. CLAUDE.md, AGENTS.md, cursor rules and skills are the common kinds.
CLAUDE.md is read by Claude Code. AGENTS.md is an open format that Codex, Cursor and other agents read. Many projects keep one and point the other at it.
A folder with a SKILL.md that describes one capability, such as filling PDFs or reviewing code. The agent loads it only when the task calls for it.
Your agents already can, over MCP, limited to the files you're allowed to read. Searching them from this page is coming.
