Find the best CLAUDE.md, AGENTS.md and Claude skills

ccxtSkill

binance-tokenized-securities-info

ccxt/ccxt/.agents/skills/binance-tokenized-securities-info/SKILL.md

Query Ondo tokenized US stock data on Binance Web3. Covers: supported stock token list, RWA metadata (company info, attestation reports), market and per-asset trading status (with corporate action codes for earnings, dividends, splits), real-time on-chain data (token price, holders, circulating supply, market cap), US stock fundamentals (P/E, dividend yield, 52-week range), and token K-Line/candlestick charts.

affaan-mReads credentialsCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/golang-security.md

Go security extending common rules

affaan-mReads credentialsCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/kotlin-security.md

Kotlin security extending common rules

affaan-mCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/php-security.md

PHP security extending common rules

affaan-mReads credentialsCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/python-security.md

Python security extending common rules

affaan-mReads credentialsCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/swift-security.md

Swift security extending common rules

affaan-mReads credentialsCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/typescript-security.md

TypeScript security extending common rules

OpenAISkill

track-findings

openai/codex-security/plugins/codex-security/skills/track-findings/SKILL.md

Track validated Codex Security findings in Linear, Jira, GitHub issues, or draft GitHub security advisories. Supports issue batches, duplicate checks, and reviewed writes. Do not use for scans or fixes.

OpenAISkill

validation

openai/codex-security/plugins/codex-security/skills/validation/SKILL.md

Use when Codex is already in the validation phase of a security scan or the user explicitly asks to determine whether one or more candidate security findings are valid. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.

OpenAISkill

triage-finding

openai/codex-security/plugins/codex-security/skills/triage-finding/SKILL.md

Triage supplied or imported security findings against a repository using its security policy and static code evidence. Accepts scanner reports, advisories, GitHub findings, and Jira or Linear tickets. Do not use for discovery, duplicate triage, runtime validation, or fixes.

OpenAISkill

vulnerability-writeup

openai/codex-security/plugins/codex-security/skills/vulnerability-writeup/SKILL.md

Turn vulnerability notes, disclosure reports, PoCs, source code, or Codex Security findings into self-contained vulnerability reports with clearly supported claims. Use for one vulnerability or a disclosure campaign; a Codex Security scan is optional.

OpenAISkill

finding-discovery

openai/codex-security/plugins/codex-security/skills/finding-discovery/SKILL.md

Use when Codex is already in the finding-discovery phase of a security scan or the user explicitly asks to discover candidate security findings in a repository or code change. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.

Arize-aiPipes a download into a shellSkill

daytona

Arize-ai/phoenix/.agents/skills/daytona/SKILL.md

Creates and manages isolated cloud sandboxes (secure code execution environments with dedicated runtimes) on the Daytona platform. Use when a task needs an isolated runtime, sandbox, secure compute, or Daytona SDK/API/CLI operations. Covers Python, TypeScript, Java, Go, and Ruby SDKs.

OpenAISkill

attack-path-analysis

openai/codex-security/plugins/codex-security/skills/attack-path-analysis/SKILL.md

Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security finding from source to sink and calibrate severity. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.

OpenAISkill

verify-fix

openai/codex-security/plugins/codex-security/skills/verify-fix/SKILL.md

Use only when the user explicitly requests verification that a security fix remediates a reported vulnerability. Do not invoke automatically while implementing fixes, reviewing ordinary code changes, or running tests. Do not use for non-security fixes, candidate finding validation, or full repository scans.

GitHubSkill

postgresql-code-review

github/awesome-copilot/skills/postgresql-code-review/SKILL.md

PostgreSQL-specific code review assistant focusing on PostgreSQL best practices, anti-patterns, and unique quality standards. Covers JSONB operations, array usage, custom types, schema design, function optimization, and PostgreSQL-exclusive security features like Row Level Security (RLS).

apereoSkill

cas-actuators

apereo/cas/.claude/skills/cas-actuators/SKILL.md

Review and change CAS actuator endpoints: the security filter chain, access levels and IP access, REST actuator endpoints, exposure vs access, unmasked responses, request-path regexes, auditing and the actuator scenarios. Use when touching actuator endpoints or management security.

spinabotSkill

healthcheck

spinabot/brigade/skills/healthcheck/SKILL.md

Host security hardening and risk-tolerance configuration for Brigade deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk posture, exposure review, Brigade cron scheduling for periodic checks, or version status checks on a machine running Brigade (laptop, workstation, Pi, VPS).

Often used withtaskflow-inbox-triage·node-connect·discord-e2e

GitHubSkill

supabase-rls-policies

github/awesome-copilot/skills/supabase-rls-policies/SKILL.md

Write, review, and test Supabase Row Level Security (RLS) policies so that one user cannot read or change another user''s rows. Use when creating or changing tables, policies, views, or security definer functions in a Supabase project, when reviewing a migration that touches RLS, or when asked to prove user isolation with pgTAP tests that sign in as two users.

prowler-cloudSkill

prowler-sdk-check

prowler-cloud/prowler/skills/prowler-sdk-check/SKILL.md

Creates and updates Prowler SDK security checks (implementation, metadata, fixers, configurable checks). Trigger: When creating or updating a Prowler SDK security check or its metadata.json for any provider (AWS, Azure, GCP, Kubernetes, GitHub, M365, etc.), adding a check fixer, or making a check configurable via audit_config.

No other project uses it yet