Best agent skills for security

1

Wizardmattpocock/skills

Generate an interactive bash wizard that walks a human through steps only they can perform.

Shell

278k

Wizard has 278,361 GitHub stars, has 460,665 installs on skills.sh, runs without an API key, works with Claude Code and Codex, is written in Shell and was last updated in October 2026.

2

Postgres Patternsaffaan-m/ECC

PostgreSQL database patterns for query optimization, schema design, indexing, and security.

JavaScript

274k

Postgres Patterns has 274,402 GitHub stars, has 2 installs on skills.sh, runs without an API key, works with Claude Code, Codex and Cursor, is written in JavaScript and was last updated in October 2026.

3

Ponytail AuditDietrichGebert/ponytail

Whole-repo audit for over-engineering. Like ponytail-review, but scans the entire codebase instead of a diff: a ranked list of what to delete, simplify, or replace with stdlib/native equivalents.

JavaScript

157k

Ponytail Audit has 156,966 GitHub stars, has 767 installs on skills.sh, runs without an API key, works with Claude Code, Codex and Cursor, is written in JavaScript and was last updated in October 2026.

4

Next Bundle Optimizervercel/next.js

Audit and reduce Next.js browser initial-load work.

JavaScript

143k

Next Bundle Optimizer has 143,231 GitHub stars, is published by the vendor itself, has 3 installs on skills.sh, runs without an API key, works with Claude Code, is written in JavaScript and was last updated in October 2026.

5

Cloudbrowser-use/browser-use

Documentation reference for using Browser Use Cloud — the hosted API and SDK for browser automation.

Python

117k

Cloud has 117,307 GitHub stars, is published by the vendor itself, needs an API key or token, works with Claude Code, Codex and Cursor, is written in Python and was last updated in October 2026.

6

Security And Hardeningaddyosmani/agent-skills

Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or external integrations, or when checking a…

JavaScript

102k

Security And Hardening has 102,166 GitHub stars, has 52,721 installs on skills.sh, runs without an API key, works with Claude Code, Codex and Cursor, is written in JavaScript and was last updated in October 2026.

7

Browser Auth Flowruvnet/ruflo

Probe a site's authentication flow for redirect leaks, missing CSRF, weak session cookies, and OAuth misconfiguration; produces an auth findings.md.

TypeScript

74k

Browser Auth Flow has 74,016 GitHub stars, runs without an API key, works with Claude Code and Codex, is written in TypeScript and was last updated in October 2026.

8

Hyperframes CLIheygen-com/hyperframes

Use the HyperFrames CLI development loop: init, add, catalog, capture, lint, check, snapshot, compare, grade-compare, preview, play, present, beats, keyframes, single or batch render, publish…

TypeScript

58k

Hyperframes CLI has 58,058 GitHub stars, has 830,413 installs on skills.sh, needs an API key or token, works with Claude Code, Codex and Cursor, is written in TypeScript and was last updated in October 2026.

9

007sickn33/agentic-awesome-skills

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.

Python

47k

007 has 47,305 GitHub stars, runs without an API key, works with Claude Code, Codex and Cursor, is written in Python and was last updated in October 2026.

10

Nature ResponseYuan1z0825/nature-skills

Draft, audit, or revise responses to peer review, revision cover letters, and marked-manuscript or LaTeX revision packages.

Python

46k

Nature Response has 46,219 GitHub stars, has 4 installs on skills.sh, runs without an API key, works with Claude Code, Codex and OpenCode, is written in Python and was last updated in October 2026.