Find the best CLAUDE.md, AGENTS.md and Claude skills

shenjingnanSkill

security-audit

shenjingnan/xiaozhi-client/.agents/skills/security-audit/SKILL.md

安全审计技能，用于检查和修复依赖安全问题

Often used withcreate-stories·community-led-growth·story-done

nahid-sparktalesSkill

auth-security

nahid-sparktales/agent-dispatcher/skills/security/auth-security/SKILL.md

Attack and harden an existing auth surface — session fixation and rotation, token verification, horizontal and vertical privilege escalation, password reset and account recovery, MFA bypass. Use when reviewing login, session, token, reset, invite, impersonation or role-elevation code, when someone reports seeing another user's data or an account takeover, or when auth changes are about to ship. Not for designing the login mechanism or permission model in the first place (authentication, authorization), not for infrastructure IAM, and never run against a system you have not been told you may test.

OpenAEV-PlatformReads credentialsSkill

review-security

OpenAEV-Platform/openaev/.claude/skills/review-security/SKILL.md

Security review checklist for OpenAEV code: RBAC, tenant isolation, data exposure, authentication. Use when reviewing PRs or auditing security of a feature.

Often used withreview-bugbot·split-to-prs·create-rule

skyelan1999Skill

aide-security

skyelan1999/aide/.agents/skills/aide-security/SKILL.md

Review or implement Aide authentication, permissions, tokens, secrets, path safety, encryption, or other security-sensitive behavior.

fjrevoredoSkill

security-stance

fjrevoredo/mini-diarium/.agents/skills/security-stance/SKILL.md

Mini Diarium's opinionated security, encryption, and privacy stance. Load when touching crypto (crates/mini-diarium-crypto/src/crypto/), auth (crates/mini-diarium-core/src/auth/, commands/auth/), IPC boundaries (src/lib/errors.ts, tauri.ts), auto-lock (screen_lock.rs, App.tsx idle timer), database schema/migrations (db/schema.rs), backups (backup.rs), config.json / JournalConfig, import/export, plugin sandbox (Rhai), search (intentionally stubbed), debug dump, Tauri capabilities (src-tauri/capabilities/) or CSP (tauri.conf.json), E2E isolation env vars, or anything involving passwords, keys, nonces, zeroization, or entry persistence. Also load when reviewing or proposing new features to judge against the six PHILOSOPHY.md principles and five non-negotiables.

ZeroDeng01Skill

security-review

ZeroDeng01/sublinkPro/.agents/skills/security-review/SKILL.md

Security review checklist for authentication, authorization, and sensitive data handling. Use when changing auth, MFA, secrets, input validation, or security-critical features. Not for general code review.

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

FaisalAlqarniSkill

security-scan

FaisalAlqarni/sp-ecc/skills/security-scan/SKILL.md

Scan Claude Code configuration for security vulnerabilities using AgentShield. Use before committing config changes or during periodic security checks.

Often used withdjango-security·deployment-patterns·postgres-patterns

jnotsknabPipes a download into a shellSkill

security-scan

jnotsknab/mux-swarm/Skills/bundled/security-scan/SKILL.md

Run real SAST and secret-scanning tools locally (semgrep, bandit, gitleaks, trivy). Use when auditing a codebase for vulnerabilities, exposed secrets, or vulnerable dependencies before shipping or on demand.

Often used withdjango-security·deployment-patterns·postgres-patterns

valITinoSkill

api-security

valITino/blhackbox/.claude/skills/api-security/SKILL.md

API security testing covering OWASP API Top 10 with active exploitation. Use when the user wants to test REST APIs, GraphQL endpoints, or API security.

Often used withbinary-diff·pentest-tools·llm-security

vredinSkill

security-scan

vredin/vredin-CC-Harness/.claude/skills/security-scan/SKILL.md

Source-to-sink taint analysis with adversarial mindset for finding real, exploitable vulnerabilities — not theoretical ones. Use before production deploys, when editing auth/session/payment/permission/upload/middleware code, on-demand security audits, or CI/CD pre-merge checks. Pairs with Rex agent for Red/Blue team execution.

Often used withdjango-security·deployment-patterns·postgres-patterns

codeaholicguySkill

security-review

codeaholicguy/ai-devkit/skills/security-review/SKILL.md

AI DevKit · Review code, skills, and prompts for security vulnerabilities — OWASP Top 10, prompt injection, business logic flaws, and insecure defaults. Use when reviewing PRs, auditing modules, reviewing AI skills/prompts, or preparing for release.

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

hoodiniReads credentialsSkill

owasp-security

hoodini/ai-agents-skills/skills/owasp-security/SKILL.md

Implement secure coding practices following OWASP Top 10. Use when preventing security vulnerabilities, implementing authentication, securing APIs, or conducting security reviews. Triggers on OWASP, security, XSS, SQL injection, CSRF, authentication security, secure coding, vulnerability.

enunoSkill

unifi-security

enuno/unifi-mcp-server/skills/unifi-security/SKILL.md

UniFi security operations: traditional firewall rules, firewall groups, zone-based firewall (ZBF), ACL rules, port forwarding, VPN tunnels, site-to-site VPN, and content filtering. Use when the task involves network access control, firewall policies, traffic blocking, or VPN configuration. Zone-based firewall requires UniFi Network 9.0+ and local API mode.

akitaonrailsReads credentialsSkill

security-audit

akitaonrails/my-skills/security-audit/SKILL.md

Threat-model and audit a codebase, commit range, or pull request for exploitable vulnerabilities, prompt and data injection, authentication or authorization bypass, tenant-data exposure, privilege escalation, malicious code/backdoors, unsafe execution, secrets leakage, supply-chain and CI compromise, insecure persistence, and denial of service. Use for dedicated security reviews, release gates, suspicious contributions, or requests to verify that a project protects users and their data.

Often used withcreate-stories·community-led-growth·story-done

vince-winkintelSkill

glab-security

vince-winkintel/gitlab-cli-skills/glab-security/SKILL.md

Configure GitLab project security scan profiles with glab. Use when enabling or disabling SAST, dependency scanning, secret detection, dependency-scanning auto-remediation, business_logic, skillguard, triage_and_remediation presets, or custom profile IDs; or checking scan-type status, including container_scanning. Triggers on GitLab security config, security scan profile, enable SAST, dependency scanning, secret detection, container scanning status, business logic, SkillGuard, triage and remediation, glab security.

stellaSkill

security-audit

stella/stella/.agents/skills/security-audit/SKILL.md

Audit Stella code, paths, or Git diffs for security defects affecting privileged legal data, tenant isolation, authentication, files, AI, and auditability. Use for security reviews; keep audits read-only unless remediation is explicitly requested.

Often used withcreate-stories·community-led-growth·story-done

openreviewSkill

security-audit

openreview/openreview-py/.github/skills/security-audit/SKILL.md

Perform a targeted privacy and integrity audit of an openreview-py stage, process function, builder, journal flow or helper, tracing the readers, signatures, emails and edges it produces for every venue setting and reproducing findings with an integration test. Use when asked to audit security, check who can see a note or an identity, verify anonymity, review conflict detection or assignment visibility, assess a workflow stage end to end, or when the request mentions threat model, data leak, deanonymization or attack surface for any part of this codebase. For reviewing a pull request diff rather than auditing a whole feature, use the code-review skill instead.

Often used withcreate-stories·community-led-growth·story-done

gongyijie85Reads credentialsSkill

security-scan

gongyijie85/dsh-ecc/skills/security-scan/SKILL.md

Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions. Use when auditing a .claude/ directory — CLAUDE.md, settings.json, MCP servers, hooks, or agent definitions.

Often used withdjango-security·deployment-patterns·postgres-patterns

jdanigoReads credentialsSkill

security-scan

jdanigo/hydraia/skills/security-scan/SKILL.md

Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.

Often used withdjango-security·deployment-patterns·postgres-patterns

LuisSambranoReads credentialsSkill

api-security

LuisSambrano/antigravity-config/skills/core/api-security/skill.md

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities

Often used withbinary-diff·pentest-tools·llm-security