Find the best CLAUDE.md, AGENTS.md and Claude skills

moltbotSkill

security-triage

moltbot/clawdbot/.agents/skills/security-triage/SKILL.md

Triage OpenClaw security advisories, drafts, and GHSA reports with shipped-tag and trust-model proof.

ruvnetSkill

V3 Security Overhaul

ruvnet/wifi-densepose/.claude/skills/v3-security-overhaul/SKILL.md

Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation.

Often used withagent-agent·agent-analyze-code-quality·agent-app-store

MicrosoftSkill

security-report-check

microsoft/TypeScript/.github/skills/security-report-check/SKILL.md

Are you doing security research on this repo? This document covers what guarantees and non-guarantees are provided. Consult this document before reporting a security issue or conducting security research.

paperclipaiSkill

deal-with-security-advisory

paperclipai/paperclip/.agents/skills/deal-with-security-advisory/SKILL.md

Handle confidential GitHub Security Advisory response for Paperclip. Use when coordinating advisory triage, private-fork fixes, CVE/publication steps, and immediate security releases.

affaan-mCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/php-security.md

PHP security extending common rules

affaan-mCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/common-security.md

Security: mandatory checks, secret management, response protocol

electronSkill

chrome-release-verify

electron/electron/.claude/skills/chrome-release-verify/SKILL.md

End-to-end Chrome security backport for an Electron release branch. Given a Chrome Releases blog URL and a branch (e.g. 41-x-y), determines which CVE fixes are missing from the *actual synced source*, writes the cherry-pick patches locally, validates them with `e sync --3` + `lint --patches`, then pushes a single PR. Use when asked to backport a Chrome security release to N-x-y, "is CVE-X already in N-x-y?", or to produce/validate the cherry-pick set for a release branch.

No other project uses it yet

moltbotSkill

healthcheck

moltbot/clawdbot/skills/healthcheck/SKILL.md

Audit/harden OpenClaw hosts: SSH, firewall, updates, exposure, backups, disk encryption, gateway security.

Often used withtaskflow-inbox-triage·node-connect·discord-e2e

garrytanSkill

cso

garrytan/gstack/cso/SKILL.md

Security audit: supported static findings; qualified profiles add reproduction and repair candidates. (gstack)

Often used withios-clean·open-gstack-browser·landing-report

GoogleSkill

critique

google-gemini/gemini-cli/tools/gemini-cli-bot/.gemini/skills/critique/SKILL.md

Expertise in auditing and fixing repository scripts and GitHub Actions workflows to ensure technical robustness and security.

Often used withdelight·normalize·layout

NousResearchSkill

requesting-code-review

NousResearch/hermes-agent/skills/software-development/requesting-code-review/SKILL.md

Pre-commit review: security scan, quality gates, auto-fix.

Often used withchinese-code-review·diagnosing-superpowers·heartmula

moltbotSkill

openclaw-ghsa-maintainer

moltbot/clawdbot/.agents/skills/openclaw-ghsa-maintainer/SKILL.md

Inspect, patch, validate, publish, or confirm OpenClaw GHSA security advisories and private-fork state.

Often used withopenclaw-test-heap-leaks·security-triage

denolandSkill

review-pr

denoland/deno/.claude/skills/review-pr/SKILL.md

Review a Deno runtime pull request for correctness, tests, security, and conventions. Use when asked to review a PR or when a PR number/URL is provided for review.

Significant-GravitasSkill

pr-review

Significant-Gravitas/AutoGPT/.claude/skills/pr-review/SKILL.md

Review a PR for correctness, security, code quality, and testing issues. TRIGGER when user asks to review a PR, check PR quality, or give feedback on a PR.

ruvnetSkill

V3 Swarm Coordination

ruvnet/wifi-densepose/.claude/skills/v3-swarm-coordination/SKILL.md

15-agent hierarchical mesh coordination for v3 implementation. Orchestrates parallel execution across security, core, and integration domains following 10 ADRs with 14-week timeline.

Often used withagentic-jujutsu·flow-nexus-neural·flow-nexus-platform

pytorchSkill

pr-review

pytorch/pytorch/.agents/skills/pr-review/SKILL.md

Review PyTorch pull requests for code quality, security, and backward compatibility. Use when reviewing PRs, when asked to review code changes, or when the user mentions "review PR", "code review", or "check this PR".

n8n-ioSkill

n8n:human-like-code-review

n8n-io/n8n/.agents/skills/human-like-code-review/SKILL.md

Reviews a GitHub pull request like a thoughtful human reviewer and writes the feedback to a markdown file. Prioritizes context, architecture fit, solution complexity, bugs, security edge cases, and missing tests. Use when given a PR URL to review, or when the user says /human-like-code-review.

ruvnetSkill

Pair Programming

ruvnet/wifi-densepose/.claude/skills/pair-programming/SKILL.md

AI-assisted pair programming with multiple modes (driver/navigator/switch), real-time verification, quality monitoring, and comprehensive testing. Supports TDD, debugging, refactoring, and learning sessions. Features automatic role switching, continuous code review, security scanning, and performance optimization with truth-score verification.

Often used withV3 CLI Modernization·agentic-jujutsu·browser

DietrichGebertSkill

ponytail-audit

DietrichGebert/ponytail/skills/ponytail-audit/SKILL.md

Quality audit of a whole repo: bugs, security holes, what breaks under real load, risky code without tests, slow paths, and what to delete, merge or split. Ranked, each finding explained in plain English. One-shot report, changes nothing. Use for "audit this codebase", "review the whole repo", "find bloat", "what can I delete", /ponytail-audit.

electronSkill

chrome-release-cls

electron/electron/.claude/skills/chrome-release-cls/SKILL.md

Given a Chrome Releases blog post URL (chromereleases.googleblog.com), extract every CVE/bug and find the underlying Gerrit CL that fixed it by searching the local Chromium checkout and sub-repos. Use when asked to map Chrome security release notes to fixing CLs, or to find which commits correspond to CVEs in a Chrome stable update.

No other project uses it yet