Find the best CLAUDE.md, AGENTS.md and Claude skills

striderZASkill

security-audit

striderZA/OpenCodeGameStudios/.agents/skills/security-audit/SKILL.md

Audit the game for security vulnerabilities: save tampering, cheat vectors, network exploits, data exposure, and input validation gaps. Produces a prioritised security report with remediation guidance. Run before any public release or multiplayer launch.

Often used withcreate-stories·community-led-growth·story-done

deadlock-mod-managerReads credentialsSkill

security-review

deadlock-mod-manager/deadlock-mod-manager/.agents/skills/security-review/SKILL.md

Security code review for Tauri/Rust/TypeScript desktop apps and Hono/oRPC APIs. Use when asked to "security review", "find vulnerabilities", "check for security issues", "audit security", or review code for injection, XSS, IPC abuse, path traversal, or authentication issues. Provides confidence-based reporting tuned to the Deadlock Mod Manager stack.

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

TheBeardedBearSASSkill

security-react

TheBeardedBearSAS/claude-craft/.claude/skills/security-react/SKILL.md

Sécurité React. Use when reviewing security, implementing auth, or hardening code.

full-stack-skillsSkill

tauri-security

full-stack-skills/tauri-skills/skills/tauri-security/SKILL.md

Guidance for Tauri v2 capabilities, scope configuration, and ACL-based permission control.

MystenLabsSkill

move-security

MystenLabs/skills/move-security/SKILL.md

Move smart contract security on Sui. Use when reviewing Move code for security vulnerabilities, designing access control patterns, handling capabilities safely, securing randomness usage, validating invariants, planning upgrade governance, managing keys, or auditing privileged operations. Also use when the user asks about UpgradeCap security, capability revocation, shared object authorization, onchain randomness restrictions, oracle data validation, emergency controls, or frontend transaction signing safety.

arsudsandesh97Skill

security-doc

arsudsandesh97/Revoact/skills/security-doc/SKILL.md

Generate a complete SECURITY.md file for any software project. Use whenever the user asks to create, write, generate, or draft a SECURITY.md — a comprehensive security documentation covering threat models, security controls, authentication, authorization, data protection, compliance requirements, and security best practices.

chadixearthReads credentialsSkill

security-scan

chadixearth/graphyloop/skills/security-scan/SKILL.md

Scan your OpenCode configuration (.opencode/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks AGENTS.md, settings.json, MCP servers, hooks, and agent definitions.

Often used withdjango-security·deployment-patterns·postgres-patterns

Joshua-PalamuttamReads credentialsSkill

security-scan

Joshua-Palamuttam/workbench-template/.agents/skills/security-scan/SKILL.md

Security audit with Security Engineer posture — OWASP Top 10, secrets detection, dependency risks

Often used withdjango-security·deployment-patterns·postgres-patterns

kayamanReads credentialsSkill

app-security

kayaman/skills/app-security/SKILL.md

Application and infrastructure security review skill. Use this skill whenever reviewing, auditing, designing, or hardening any application — whether it's a new project, a PR review, an architecture decision, or a "is this secure?" question. Covers OWASP Top 10, cloud infrastructure (AWS, Azure, GCP), serverless security, API security, authentication/authorization, secrets management, dependency supply chain, CI/CD pipeline hardening, and observability. Trigger this skill for any mention of security audit, threat model, hardening, vulnerability, pen-test prep, compliance checklist, or secure-by-default architecture. Also trigger when the user asks to review Terraform/IaC, Lambda functions, API Gateway configs, IAM policies, or Cognito setups — even if they don't explicitly say "security."

Kur1sulabSkill

api-security

Kur1sulab/blackbox/pt-api-security/SKILL.md

API security testing - GraphQL, REST API, WebSocket, and Web-LLM attack techniques.

Often used withbinary-diff·pentest-tools·llm-security

LeahyCCReads credentialsSkill

api-security

LeahyCC/claude-skills/skills/api-security/SKILL.md

OWASP API Security Top 10 (2023) with production Next.js App Router code. Access control, authentication with MFA and password reset, input validation (SQL, NoSQL and command injection), rate limiting and per-account login throttling, security headers and CSRF, data exposure, supply chain and startup env checks, SSRF with DNS pinning, file uploads, and AI tools on those APIs. Use when writing or reviewing Route Handlers, Server Actions, proxy.ts, auth flows, uploads, outbound fetches, or next.config security settings.

Often used withbinary-diff·pentest-tools·llm-security

neronainSkill

security-scan

neronain/ClaudeSkills-Neronain/skills/engineering/security-scan/SKILL.md

Run full security scans on the codebase using Ruflo security tools

Often used withdjango-security·deployment-patterns·postgres-patterns

zeljkoobrenovicSkill

security-scan

zeljkoobrenovic/sokrates-skills/skills/scanners/security-scan/SKILL.md

Security review in one pass, design first and code second: identity, authentication and permission design, secrets by design and in the tree, boundary validation and injection (command, SQL, path, template), crypto and randomness, unsafe and dynamic code, trust in third-party code (plugins, models, dependencies), with a posture stating what was swept clean and what was not covered. Use for security reviews or audits, auth or permission design, secrets, injection, crypto, unsafe code, plugin trust, or the threat surface.

Often used withdjango-security·deployment-patterns·postgres-patterns

waybarriosSkill

security-review

waybarrios/opencode-power-pack/skills/security-review/SKILL.md

Perform a focused security review of pending git changes to identify high-confidence security vulnerabilities with real exploitation potential. Use this skill when the user asks for a security review, security audit, vulnerability scan, or wants to check pending changes on a branch for security issues before merging. This is NOT a general code review.

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

codexstar69Skill

security-review

codexstar69/bug-hunter/skills/security-review/SKILL.md

Run a focused STRIDE-based security review using Bug Hunter-native artifacts. Use whenever the user asks for a full security audit, repository security review, weekly security scan, PR security review with deeper validation, or wants dependency CVEs and threat-model context combined into one workflow.

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

me2reshSkill

security-review

me2resh/apexyard/.claude/skills/security-review/SKILL.md

Security-focused PR review for vulnerabilities and best practices. Invokes the Security Reviewer agent (Hakim).

Often used withlinkerd-patterns·dependency-cve-sweep·project-guidelines-example

hardw00tSkill

cloud-security

hardw00t/ai-security-arsenal/skills/cloud-security/SKILL.md

Multi-cloud security assessment skill for AWS, Azure, and GCP. Use when performing cloud security audits, scanning for misconfigurations, testing IAM policies, auditing storage permissions, and identifying privilege escalation paths. Triggers on requests to audit cloud security, scan AWS/Azure/GCP, check cloud misconfigurations, or perform cloud penetration testing. Covers CIS benchmarks, CSPM, and cross-cloud identity federation.

TermiX-officialSkill

security-check

TermiX-official/cryptoclaw/skills/security-check/SKILL.md

Assess token and address security via the GoPlus Security API.

MasriyanReads credentialsSkill

09-web-security

Masriyan/Claude-Code-CyberSecurity-Skill/skills/09-web-security/SKILL.md

OWASP Top 10 testing, injection vulnerability detection, API security

appsec-foundrySkill

security-score

appsec-foundry/appsec-advisor/skills/security-score/SKILL.md

Deterministic quick Security Score (0-100) for a repository, computed from the scanner layer alone — no agents, no LLM, no threat model, nothing written into the target repository. Reports the score together with how many rules applied, the finding tally, and the weakest control domains. Use for a fast indication or a per-commit trend; it is not a risk rating and does not replace /appsec-advisor:appsec-analyzer.