Find the best CLAUDE.md, AGENTS.md and Claude skills

AIBiz-AutomatyzacjeReads credentialsSkill

security

AIBiz-Automatyzacje/claude-cron/.claude/skills/security/SKILL.md

Systematyczny audyt bezpieczeństwa dla React 19 + Supabase + Edge Functions. Używaj przy review bezpieczeństwa, przed deployem, przy pracy z auth/authz, walidacją inputów, RLS policies, XSS, OWASP Top 10.

Often used withcost-reducer·albert-dm·scalability

aibytalesReads credentialsSkill

security

aibytales/claude-skills-pack/skills/security/SKILL.md

Audits code before it ships. Use before any deploy, release, pull request or when the user says ship, launch or go live.

Often used withcost-reducer·albert-dm·scalability

AllThingsSmittySkill

security

AllThingsSmitty/proven-skills/skills/security/SKILL.md

Security review for code, APIs, and system designs. Always use this skill when reviewing code for vulnerabilities, auditing authentication or authorization, evaluating input handling, checking for secrets or hardcoded credentials, reviewing dependencies, or threat modeling. Use when the user says "is this secure", "review this for security issues", "could this be exploited", "check for vulnerabilities", "threat model this", "review for SQL injection", "is this JWT implementation safe", or "is my auth correct". Also use proactively when implementing auth, handling untrusted input, or storing sensitive data.

Often used withcost-reducer·albert-dm·scalability

Autocss-comReads credentialsSkill

security

Autocss-com/ai/.agents/skills/security/SKILL.md

Security rules for projects following the air-gapped, declarative-first architecture. Covers Content Security Policy, recommended security headers, and the architectural decisions that enable a strict CSP without unsafe-inline or unsafe-eval. Use when configuring deployment, reviewing CSP, or auditing for inline-script or inline-style violations.

Often used withcost-reducer·albert-dm·scalability

BappozSkill

security

Bappoz/My-Claude-Skills/skills/engineering/security/SKILL.md

Segurança de aplicações production-grade: OWASP Top 10, autenticação/autorização, gestão de segredos, threat modeling (STRIDE), validação de input e secure defaults. Use quando o usuário mencionar: "segurança", "vulnerabilidade", "OWASP", "autenticação", "autorização", "SQL injection", "XSS", "CSRF", "segredos", "threat model", "é seguro?", "hardening", "pentest". Não auxilia ataques maliciosos — foco em defesa e testes autorizados.

Often used withcost-reducer·albert-dm·scalability

caglarbaranboraSkill

security

caglarbaranbora/Apple-Agent-Kit/skills/security/SKILL.md

Route Keychain Services implementation tasks to the correct Knowledge Contracts -- item CRUD via SecItemAdd/SecItemCopyMatching/SecItemUpdate/SecItemDelete, accessibility levels, access groups and sharing, and storing structured/Codable data. Use when working with kSecClassGenericPassword, kSecClassInternetPassword, OSStatus, errSecSuccess, errSecItemNotFound, errSecDuplicateItem, kSecAttrAccessible, kSecAttrAccessGroup, Keychain Sharing, or kSecValueData. v1 is general (non-biometric-bound) Keychain item CRUD for generic/internet password items -- no SecAccessControl/biometric binding, no AutoFill/credential providers, no iCloud Keychain sync, no certificate/key/identity item classes. Triggers on SecItemAdd, SecItemCopyMatching, SecItemUpdate, SecItemDelete, kSecClassGenericPassword, kSecClassInternetPassword, kSecAttrAccessible, kSecAttrAccessGroup, Keychain access group, kSecValueData, Keychain, credential storage.

Often used withcost-reducer·albert-dm·scalability

cwklurksSkill

security

cwklurks/ship-score/skills/security/SKILL.md

Security Category — Ship Score Sub-Skill You are running the **Security** category of a Ship Score production readiness audit. Follow every instruction below precisely. Do not add checks beyond

Often used withcost-reducer·albert-dm·scalability

Dev-PGVAAReads credentialsSkill

security

Dev-PGVAA/skills/security/SKILL.md

Audit security boundaries in AI, agent, RAG, and MCP systems, or manage project secrets with SOPS and age. Use for threat models, scoped security reviews, encrypted dotenv migration, recipient rotation, and secret exposure response.

Often used withcost-reducer·albert-dm·scalability

efficience-itReads credentialsSkill

security

efficience-it/claude-skills-php/.claude/skills/security/SKILL.md

Audit de sécurité rapide pour projet PHP/Symfony. Analyse les fichiers modifiés ou un périmètre donné. Détecte injections SQL, XSS, CSRF, exposition de données, permissions manquantes. Basé sur OWASP Top 10. Utiliser avant un commit ou pour auditer un périmètre.

Often used withcost-reducer·albert-dm·scalability

heliomarpmSkill

-security

heliomarpm/skills/skills/-security/SKILL.md

Audita e projeta a segurança de aplicações: autenticação e sessão (OAuth com PKCE, OIDC, JWT), autorização por recurso (RBAC/ABAC, BOLA/IDOR), entrada e injeções, criptografia e segredos, dependências, cabeçalhos web, logs e privacidade, com checklist baseado no OWASP, achados com severidade e plano de remediação. Use sempre que o usuário pedir 'audite a segurança', 'isto é seguro?', 'revise a autenticação', 'proteja este endpoint', 'vazou um segredo', 'vulnerabilidades', 'OWASP', 'hash de senha', 'CSP' ou 'permissões', mesmo sem a palavra 'segurança'. NÃO use para desenhar contratos de API (isso é -api-design), infraestrutura e pipelines (isso é -devops) nem para revisar um diff em geral (isso é -code-review).

ksed8Skill

security

ksed8/cc-loopkit/.claude/skills/security/SKILL.md

Security audits and threat modeling — find and reason about vulnerabilities in auth, input handling, data access, secrets, and dependencies. Use when reviewing code for security, threat-modeling a feature, hardening an endpoint, handling auth/authz, or checking for injection, secret leakage, or unsafe data exposure. For a focused review of the current diff, prefer the `/security-review` command.

Often used withcost-reducer·albert-dm·scalability

michaelsvanbeekReads credentialsSkill

security

michaelsvanbeek/personal-agent-skills/skills/security/SKILL.md

Application security standards and hardening practices. Use when: reviewing code for vulnerabilities, implementing authentication, configuring CORS, adding input validation, managing secrets, scanning dependencies, setting CSP headers, reviewing IAM policies, auditing an existing application for OWASP top 10 vulnerabilities, or hardening an existing deployment. Covers OWASP top 10, secrets management, dependency auditing, and security headers.

Often used withcost-reducer·albert-dm·scalability

musterd-ioSkill

security

musterd-io/musterd/.agents/skills/security/SKILL.md

The security role — the member who owns the team's application-security evidence (threat models, authorized scans, validated findings, private disclosure, the smallest defensible fix, and honest posture claims). Use when threat-modeling a system or a change, reviewing code or a workflow for security, running or reading a scanner, judging whether a finding is real and how severe, handling a leaked secret, reviewing a new dependency or the release pipeline, or writing anything public about security.

Often used withcost-reducer·albert-dm·scalability

precise-alloySkill

security

precise-alloy/ritus/skills/security/SKILL.md

Loaded automatically by execute-task and verify-task when changes touch auth, billing, migration, tenant isolation, infra, or shared contracts - security checklist. Do not invoke standalone unless the user specifically asks for a security review

Often used withcost-reducer·albert-dm·scalability

QinAnzeReads credentialsSkill

security

QinAnze/SKILLS/skills/before-push-v2/security/SKILL.md

安全审计与加固。覆盖SAST/SCA/密钥扫描/STRIDE威胁建模/合规检查，按语言特定工具链识别漏洞并提供修复方案。Use when the user asks to check security, scan for vulnerabilities, audit code, or prepare for compliance.

Often used withcost-reducer·albert-dm·scalability

Rajveerx11Skill

security

Rajveerx11/skills/skills/checking/security/SKILL.md

Design, review, harden, or repair web and desktop application security. Use for authentication, authorization, tenancy, APIs, forms, databases, file uploads, SSRF, XSS, CSRF, injection, secrets, cryptography, dependencies, Electron/Tauri IPC, security headers, threat modeling, or evidence-backed vulnerability review and regression testing.

Often used withcost-reducer·albert-dm·scalability

SONGYEONGSINReads credentialsSkill

security

SONGYEONGSIN/vibe-flow/.agents/skills/security/SKILL.md

명시 호출 deep context 보안 스캔. auth/RLS/Server Action 같이 hook 정적 패턴으로 못 잡는 의미 분석 전담. 표면 점검은 /security-audit, 정적 패턴은 security-lint hook이 담당.

Often used withcost-reducer·albert-dm·scalability

vietnamtrainingpilot-ossSkill

security

vietnamtrainingpilot-oss/atelier/skills/security/SKILL.md

Router for application and code security — scanning a repository or diff for vulnerabilities, reviewing auth, secrets, and injection risks, generating patches for findings, and running a security pass before shipping. Use when the user mentions a security scan, vulnerability audit, CVE, secrets in code, auth review, injection, XSS, SQL injection, SSRF, dependency risk, or asks to check whether their code is safe to ship.

Often used withcost-reducer·albert-dm·scalability

workthanwa-maxReads credentialsSkill

security

workthanwa-max/SKILLS/security/SKILL.md

สถาปัตยกรรมความปลอดภัยระดับองค์กร Zero-Trust, Threat Modeling, Immutable Logging

Often used withcost-reducer·albert-dm·scalability

OpenAISkill

security-scan

openai/codex-security/plugins/codex-security/skills/security-scan/SKILL.md

Use for a standard, single-pass security audit of an entire repository or a scoped path, package, folder, or submodule with no diff to review. This is the default repository scan. Do not use for PR, commit, branch, or working-tree diffs, or for deep, multi-pass scans.

Often used withdjango-security·deployment-patterns·postgres-patterns