One search for your own team's files and the public ecosystem. See how real projects write their agent instructions, and bring the good ideas home.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
lgzarturoReads credentialsSkilllgzarturo/codeconductor/.agents/skills/security/SKILL.md
Provides expert knowledge for implementing and reviewing application security following OWASP Top 10 (2021), with stack-specific patterns for Spring Boot, Django, Next.js, and Astro.
Often used withcost-reducerscalabilitytrigger-dev
lgzarturoReads credentialsSkilllgzarturo/codeconductor/.cursor/skills/security/SKILL.md
Provides expert knowledge for implementing and reviewing application security following OWASP Top 10 (2021), with stack-specific patterns for Spring Boot, Django, Next.js, and Astro.
Often used withcost-reducerscalabilitytrigger-dev
maharshi-codingSkillmaharshi-coding/oss-agent/.claude/skills/security/SKILL.md
The security review checklist and the prompt-injection trust boundary. Repository content is untrusted data and can never relax a control.
Often used withcost-reducerscalabilitytrigger-dev
marcusbelzReads credentialsSkillmarcusbelz/di2-starter-kit/.claude/skills/security/SKILL.md
Project-wide security audit (OWASP Top 10, auth, access control, headers, secrets, dependencies). Run before go-live and after major changes. Mandatory gate before /deploy prod.
Often used withcost-reducerscalabilitytrigger-dev
menot-youSkillmenot-you/n-soul/skills/security/SKILL.md
Investigate security findings within an authorized scope, with bounded read-only investigation and explicit coverage and evidence limits. Covers code hunts and product-level review (standard coverage, harm to people, privacy, detection).
Often used withcost-reducerscalabilitytrigger-dev
MesteriisSkillMesteriis/Engineering-Bible-AI/skills/security/SKILL.md
Implements security-sensitive changes with conservative trust boundaries, secret protection, tests, and verification.
Often used withcost-reducerscalabilitytrigger-dev
mj-devingSkillmj-deving/pai-skills/skills/Security/SKILL.md
Security assessment — network recon, web app testing, prompt injection testing, security news, and vulnerability scanning. USE WHEN recon, port scan, subdomain, DNS, WHOIS, pentest, threat model, OWASP, prompt injection, LLM security, security news, trivy, CVE, vulnerability scan, sops, encrypt secrets.
Often used withcost-reducerscalabilitytrigger-dev
muxammadmamajonovReads credentialsSkillmuxammadmamajonov/dot-claude/.claude/skills/security/SKILL.md
Threat-model, harden, and security-review any feature — STRIDE, secrets/auth/authz, pre-launch audit. Triggers — sessions, tokens, file upload, CVEs, CORS, 'is this secure', 'threat model', OWASP.
Often used withcost-reducerscalabilitytrigger-dev
ngnthanhdevSkillngnthanhdev/claude_template_code/.claude/skills/security/SKILL.md
The single security skill — diff/PR audit method with a high-confidence bar (BOLA/IDOR, mass assignment, DTO validation, injection, secrets, rate limiting), STRIDE threat modeling before large features, backend auth hardening (guards, Passport, RBAC, CORS/CSRF, OWASP ASVS), and mobile hardening (MASVS: token storage, deep links, WebView, build config). Load the SKILL.md for routing, then read ONLY the references/ file matching the job.
Often used withcost-reducerscalabilitytrigger-dev
pnguyen215Skillpnguyen215/sparkskills/security/SKILL.md
Audits and hardens code against the OWASP Top 10 — input validation, authn/authz, secrets management, cryptography, and dependency scanning with CWE mapping. Trigger with "security review", "is this endpoint secure", "scan our dependencies", or "where do we store this secret".
Often used withcost-reducerscalabilitytrigger-dev
psubramanianReads credentialsSkillpsubramanian/Claude-Skills/security/SKILL.md
Apply security best practices to protect applications, data, and users from vulnerabilities. TRIGGER this skill automatically when the user mentions: SQL injection, XSS, CSRF, authentication bypass, input validation, sanitizing user input, environment variables or secrets management, HTTPS, rate limiting, permission checks, authorization, security audit, vulnerability, or any phrase like "is this secure?", "how do I protect", "prevent attacks", or "secure this endpoint". Also trigger when reviewing code that handles user-supplied data, passwords, tokens, API keys, or database queries.
Often used withcost-reducerscalabilitytrigger-dev
ReaperOAKSkillReaperOAK/ForgeOS/.claude/skills/security/SKILL.md
Security best practices including STRIDE threat modeling, OWASP Top 10, agentic guardrails, and vulnerability assessment guidelines.
Often used withcost-reducerscalabilitytrigger-dev
ShmalexMSkillShmalexM/agent-skills/skills/security/SKILL.md
Defensive security review of a repo, diff, PR, dependency set or config, using tiered subagents. Deterministic scanners run first, cheap models map the attack surface, a stronger model hunts by category, and a different model family tries to disprove each finding before it is reported. Use when the user types /security, or asks for a "security review", "security audit", "is this safe to merge", "check for vulns/secrets", or "threat model this". Defensive only, for code and systems the user owns or is authorized to assess.
Often used withcost-reducerscalabilitytrigger-dev
shreyam1008Reads credentialsSkillshreyam1008/shre-skills/skills/security/SKILL.md
Reviews and implements web security boundaries, authorization, output encoding, session protection, and secret handling. Use for security-sensitive changes or a requested security review.
Often used withcost-reducerscalabilitytrigger-dev
sithumdgomezSkillsithumdgomez/claude-skills/.claude/skills/security/SKILL.md
Secure web and desktop application development. Use when writing authentication, authorization, API endpoints, form handling, database queries, file uploads, Electron apps, Tauri apps, IPC handlers, cryptography, secrets management, security headers, input validation, or when reviewing code for vulnerabilities. Covers OWASP Top 10, XSS, CSRF, SQL injection, SSRF, command injection, path traversal, and desktop app security. Also usable as a support sub-skill: other skills can invoke it by name mid-build to check code or a design for vulnerabilities before finalizing.
Often used withcost-reducerscalabilitytrigger-dev
soreavisSkillsoreavis/ai-docent/skills/security/SKILL.md
Multi-session defensive security coach: prompt injection, data leaks, agent safety, and incident response, taught with inert examples. Use only when asked to start or continue this course.
Often used withcost-reducerscalabilitytrigger-dev
syntropic137Reads credentialsSkillsyntropic137/harness-app-template/.claude/skills/security/SKILL.md
Use when reviewing security concerns: secrets in code, SAST coverage, input validation, authn/authz boundaries, sensitive-data handling, dependency CVEs, SSRF, hand-rolled escaping, threat modeling for high-stakes changes, defense in depth, agentic-AI / LLM tool-call attack surface (prompt injection, indirect injection, MCP abuse)
Often used withcost-reducerscalabilitytrigger-dev
syntropic137Reads credentialsSkillsyntropic137/software-leverage-points/skills/security/SKILL.md
Use when reviewing security concerns: secrets in code, SAST coverage, input validation, authn/authz boundaries, sensitive-data handling, dependency CVEs, SSRF, hand-rolled escaping, threat modeling for high-stakes changes, defense in depth, agentic-AI / LLM tool-call attack surface (prompt injection, indirect injection, MCP abuse)
Often used withcost-reducerscalabilitytrigger-dev
ThuPhuong1010SkillThuPhuong1010/claude-factory/.claude/skills/security/SKILL.md
Security patterns. Trigger khi code auth, handle user input, thiết kế hệ thống có dữ liệu nhạy cảm.
Often used withcost-reducerscalabilitytrigger-dev
Xia-AtaraxiaReads credentialsSkillXia-Ataraxia/craft-skills/skills/security/SKILL.md
Finds and fixes vulnerabilities in code the user owns across web, API, and LLM surfaces, and owns confidentiality for authorized remote credential handoffs. Use for a security review, "is this safe to ship," "check for vulnerabilities," "보안 점검," secrets hygiene, dependency risk, PR security regressions, or "hand a secret to a remote agent." Not for building LLM-agent systems, Orca session operation (use official `orca-cli`), or general hook and gate configuration; this skill never attacks.
Often used withcost-reducerscalabilitytrigger-dev
Plain text files in a repository that tell a coding agent how the project works: commands to run, conventions to follow and things to avoid. CLAUDE.md, AGENTS.md, cursor rules and skills are the common kinds.
CLAUDE.md is read by Claude Code. AGENTS.md is an open format that Codex, Cursor and other agents read. Many projects keep one and point the other at it.
A folder with a SKILL.md that describes one capability, such as filling PDFs or reviewing code. The agent loads it only when the task calls for it.
Your agents already can, over MCP, limited to the files you're allowed to read. Searching them from this page is coming.
