Find the best CLAUDE.md, AGENTS.md and Claude skills

OpenAISkill

security-ownership-map

openai/skills/skills/.curated/security-ownership-map/SKILL.md

Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for example: orphaned sensitive code, security maintainers, CODEOWNERS reality checks for risk, sensitive hotspots, or ownership clusters). Do not trigger for general maintainer lists or non-security ownership questions.

lobehubSkill

desktop-security-update

lobehub/lobe-chat/.agents/skills/desktop-security-update/SKILL.md

Inspect, mark, or revoke vulnerable LobeHub Desktop versions through the existing release workflow and signed R2 security policy. Use for forced security updates across Stable, Canary, Beta, and Nightly.

usestrixSkill

find-security-vulnerabilities-in-code

usestrix/strix/skills/find-security-vulnerabilities-in-code/SKILL.md

Find security vulnerabilities in a codebase or repository with Strix — a white-box AI security review that reads your source, reasons about the actual data flow and authorization model, then exploits what it finds in a live sandbox so every reported issue has a working proof-of-concept instead of a noisy static-analysis alert. Covers injection, XSS, SSRF, broken access control and IDOR, insecure deserialization, secrets in code, unsafe dependencies, and business-logic flaws. Use when the user asks to security-scan, security-review, or audit their code, repo, or pull request for vulnerabilities.

OpenAISkill

define-security-policy

openai/codex-security/plugins/codex-security/skills/define-security-policy/SKILL.md

Define, review, or update SECURITY.md guidance for a repository or component. Use when the user wants to clarify what Codex Security should review, what is out of scope, which security properties must hold, or whether existing guidance still matches the code.

SnailSploitSkill

offensive-api-security

SnailSploit/Claude-Red/Skills/api/offensive-api-security/SKILL.md

Comprehensive API security testing methodology covering REST, gRPC, and WebSocket attack surfaces. Addresses the full OWASP API Security Top 10 2023 including BOLA/IDOR, broken authentication, excessive data exposure, rate limiting bypass, BFLA, mass assignment, SSRF, and security misconfiguration. Includes REST-specific attacks such as HTTP verb tampering, content-type switching, and parameter pollution. Covers gRPC exploitation through protobuf interception, reflection API enumeration, and metadata injection. Addresses WebSocket vulnerabilities including origin bypass, message injection, and cross-site WebSocket hijacking. Provides tooling guidance for Burp Suite, Postman, grpcurl, websocat, and mitmproxy. Each technique includes detection signatures and defensive indicators so you understand what artifacts your testing leaves behind. Designed for authorized penetration testing engagements against API-driven architectures.

nrwlSkill

draft-security-advisory

nrwl/nx/.claude/skills/draft-security-advisory/SKILL.md

Draft a GitHub security advisory (GHSA) for nrwl/nx from a vulnerability report. Investigates the affected code, determines affected packages and version ranges, proposes a CVSS score and CWEs, and writes a draft advisory following the layout of previously published nrwl/nx advisories. Output is a local draft only — a human reviews and publishes. Use when a security vulnerability report needs to become an advisory, or when the user says "draft an advisory", "write a GHSA", or "security advisory for <report>".

paperclipaiSkill

deal-with-security-advisory

paperclipai/paperclip/.agents/skills/deal-with-security-advisory/SKILL.md

Handle confidential GitHub Security Advisory response for Paperclip. Use when coordinating advisory triage, private-fork fixes, CVE/publication steps, and immediate security releases.

GitHubSkill

agent-owasp-compliance

github/awesome-copilot/skills/agent-owasp-compliance/SKILL.md

Check any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks. Use this skill when: - Evaluating an agent system's security posture before production deployment - Running a compliance check against OWASP ASI 2026 standards - Mapping existing security controls to the 10 agentic risks - Generating a compliance report for security review or audit - Comparing agent framework security features against the standard - Any request like "is my agent OWASP compliant?", "check ASI compliance", or "agentic security audit"

AutomatticSkill

calypso-security-alerts

Automattic/wp-calypso/.claude/skills/calypso-security-alerts/SKILL.md

Provide advisory guidance for scanning Automattic/wp-calypso Dependabot alerts and Dependabot remediation PRs using the public dependency security alerts playbook.

GitHubReads credentialsSkill

mcp-implementation-security-review

github/awesome-copilot/skills/mcp-implementation-security-review/SKILL.md

Review the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline — authentication, sessions, rate limiting, input-schema validation, official-SDK usage, RCE vectors, and the OWASP MCP Top 10 — producing a report with file/line evidence. Use this skill when: - Reviewing an MCP server implementation for security before release - Checking a server against the baseline controls (MCP-01 to MCP-05) and the OWASP MCP Top 10 - Auditing tools for RCE vectors (command/code injection, unsafe deserialization, path traversal, SSTI, dependency hijacking, SSRF) - Verifying auth, session, rate-limiting, and input-validation controls on a network-exposed server - Reviewing MCP client code that handles untrusted server responses and session IDs - Requests like "review this MCP server for security" or "is my MCP server implementation secure?"

NVIDIASkill

create-security-advisory

NVIDIA/OpenShell/.agents/skills/create-security-advisory/SKILL.md

Prepare structured OpenShell vulnerability reports and create authorized private GitHub security advisory drafts. Use when drafting a GHSA, turning a finding into an advisory, or organizing a report for security review.

No other project uses it yet

activepiecesSkill

triage-security-advisories

activepieces/activepieces/.agents/skills/triage-security-advisories/SKILL.md

Triage the GitHub privately-reported vulnerability backlog for Activepieces — pull repository security advisories from the Security tab, scope-check against SECURITY.md, deeply validate each, compute SLA status, and propose fix plans for review. Use when the user asks to triage security advisories, work the reported-vulnerability backlog, or check SLA on reported vulns. For Dependabot dependency alerts, use the triage-dependabot-alerts skill instead.

No other project uses it yet

usestrixPipes a download into a shellSkill

ci-security-scanning-with-strix

usestrix/strix/skills/ci-security-scanning-with-strix/SKILL.md

Add security scanning to CI/CD with Strix — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks vulnerable code before it merges, with results as PR comments and SARIF uploaded to code scanning. Covers both the self-hosted open-source CLI (runs in your runner) and the managed app.strix.ai platform (GitHub/GitLab app or API, no runner infra). Use when the user asks to add security scanning, SAST/DAST, pentesting, vulnerability checks, or automated security review to their CI pipeline, pre-merge gate, or PR workflow.

OpenAISkill

propose-security-hardening

openai/codex-security/plugins/codex-security/skills/propose-security-hardening/SKILL.md

Develop evidence-backed structural security hardening proposals from disclosures, findings, source code, or Codex Security scans. Use for systemic improvements, alternatives beyond individual patches, architectural tradeoffs, or implementation planning. Also use when a top-level scan requests final-report hardening guidance.

GoogleSkill

google-cloud-solution-multi-agent-security

google/skills/skills/cloud/google-cloud-solution-multi-agent-security/SKILL.md

Designs, deploys, and secures Google Cloud Agent Gateway solutions. Use when the user needs to configure multi-agent security, ingress (CLIENT_TO_AGENT), or egress (AGENT_TO_ANYWHERE) patterns involving Model Armor, IAP, and Agent Registry. Don't use for general Cloud Load Balancing or basic VPC setup not related to Agent Gateways.

GitHubSkill

dependabot

github/awesome-copilot/skills/dependabot/SKILL.md

Comprehensive guide for configuring and managing GitHub Dependabot. Use this skill when users ask about creating or optimizing dependabot.yml files, managing Dependabot pull requests, configuring dependency update strategies, setting up grouped updates, monorepo patterns, multi-ecosystem groups, security update configuration, auto-triage rules, or any GitHub Advanced Security (GHAS) supply chain security topic related to Dependabot. For pre-commit dependency vulnerability scanning in AI coding agents via the GitHub MCP Server, this skill references the Advanced Security plugin (`advanced-security@copilot-plugins`). Use this skill when an agent needs to scan dependencies for known vulnerabilities before committing.

usestrixSkill

fix-security-vulnerabilities-with-strix

usestrix/strix/skills/fix-security-vulnerabilities-with-strix/SKILL.md

Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause rather than the symptom, and re-run Strix to prove each fix actually closes the exploit. Handles injection, XSS, SSRF, broken access control, IDOR, and other validated findings. Use after a Strix scan reports findings, or when the user asks to remediate, patch, or fix security issues from a strix_runs report, vulnerabilities.json, findings.sarif, or a cloud scan.

NVIDIASkill

nemoclaw-maintainer-security-code-review

NVIDIA/NemoClaw/.agents/skills/nemoclaw-maintainer-security-code-review/SKILL.md

Perform a requested security review of a NemoClaw PR or a PR linked to an issue. Use for vulnerability or trust-boundary assessment.

No other project uses it yet

MicrosoftSkill

python-kwargs-setattr-security

microsoft/onnxruntime/.github/skills/python-kwargs-setattr-security/SKILL.md

When reviewing or fixing Python code that uses setattr() with user-controlled kwargs to configure C++ extension objects (SessionOptions, RunOptions, etc.) in ONNX Runtime. Use this to apply the allowlist pattern that prevents arbitrary file writes and other attacks via reflected property access.

open-gsdSkill

gsd-secure-phase

open-gsd/gsd-core/skills/gsd-secure-phase/SKILL.md

Retroactively verify threat mitigations for a completed phase