Find the best CLAUDE.md, AGENTS.md and Claude skills

moltbotSkill

security-triage

moltbot/clawdbot/.agents/skills/security-triage/SKILL.md

Triage OpenClaw security advisories, drafts, and GHSA reports with shipped-tag and trust-model proof.

affaan-mReads credentialsSkill

security-review

affaan-m/ECC/.agents/skills/security-review/SKILL.md

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

Often used withdependency-cve-sweep·agent-sort·brand-discovery

ruvnetSkill

V3 Security Overhaul

ruvnet/wifi-densepose/.claude/skills/v3-security-overhaul/SKILL.md

Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation.

Often used withagent-agent·agent-analyze-code-quality·agent-app-store

MicrosoftSkill

security-report-check

microsoft/TypeScript/.github/skills/security-report-check/SKILL.md

Are you doing security research on this repo? This document covers what guarantees and non-guarantees are provided. Consult this document before reporting a security issue or conducting security research.

addyosmaniReads credentialsSkill

security-and-hardening

addyosmani/agent-skills/skills/security-and-hardening/SKILL.md

Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or external integrations, or when checking a login flow is safe against the OWASP Top Ten. Use when building any feature that accepts untrusted data, manages user sessions or session cookies, or interacts with third-party services. Use when auditing dependencies for known vulnerabilities, triaging package-manager audit findings, or assessing supply-chain risk in a new package. Use when personal data or privacy compliance (GDPR, CCPA) is involved.

Often used withconstraint-driven-development·observability-and-instrumentation·doubt-driven-development

paperclipaiSkill

deal-with-security-advisory

paperclipai/paperclip/.agents/skills/deal-with-security-advisory/SKILL.md

Handle confidential GitHub Security Advisory response for Paperclip. Use when coordinating advisory triage, private-fork fixes, CVE/publication steps, and immediate security releases.

affaan-mReads credentialsCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/golang-security.md

Go security extending common rules

affaan-mReads credentialsCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/kotlin-security.md

Kotlin security extending common rules

affaan-mCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/php-security.md

PHP security extending common rules

affaan-mReads credentialsCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/python-security.md

Python security extending common rules

affaan-mReads credentialsCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/swift-security.md

Swift security extending common rules

affaan-mReads credentialsCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/typescript-security.md

TypeScript security extending common rules

affaan-mCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/common-security.md

Security: mandatory checks, secret management, response protocol

electronSkill

chrome-release-verify

electron/electron/.claude/skills/chrome-release-verify/SKILL.md

End-to-end Chrome security backport for an Electron release branch. Given a Chrome Releases blog URL and a branch (e.g. 41-x-y), determines which CVE fixes are missing from the *actual synced source*, writes the cherry-pick patches locally, validates them with `e sync --3` + `lint --patches`, then pushes a single PR. Use when asked to backport a Chrome security release to N-x-y, "is CVE-X already in N-x-y?", or to produce/validate the cherry-pick set for a release branch.

No other project uses it yet

moltbotSkill

healthcheck

moltbot/clawdbot/skills/healthcheck/SKILL.md

Audit/harden OpenClaw hosts: SSH, firewall, updates, exposure, backups, disk encryption, gateway security.

Often used withdiscord-e2e·taskflow-inbox-triage·node-connect

garrytanSkill

cso

garrytan/gstack/cso/SKILL.md

Security audit: supported static findings; qualified profiles add reproduction and repair candidates. (gstack)

Often used withios-clean·open-gstack-browser·landing-report

GoogleSkill

critique

google-gemini/gemini-cli/tools/gemini-cli-bot/.gemini/skills/critique/SKILL.md

Expertise in auditing and fixing repository scripts and GitHub Actions workflows to ensure technical robustness and security.

Often used withdelight·normalize·layout

NousResearchSkill

requesting-code-review

NousResearch/hermes-agent/skills/software-development/requesting-code-review/SKILL.md

Pre-commit review: security scan, quality gates, auto-fix.

Often used withchinese-code-review·diagnosing-superpowers·workflow-runner

moltbotSkill

openclaw-ghsa-maintainer

moltbot/clawdbot/.agents/skills/openclaw-ghsa-maintainer/SKILL.md

Inspect, patch, validate, publish, or confirm OpenClaw GHSA security advisories and private-fork state.

denolandSkill

review-pr

denoland/deno/.claude/skills/review-pr/SKILL.md

Review a Deno runtime pull request for correctness, tests, security, and conventions. Use when asked to review a PR or when a PR number/URL is provided for review.