# Best agent skills for security > The best agent skills for security are Wizard, Postgres Patterns and Ponytail Audit, ranked by GitHub stars; Wizard leads with 278,361 stars. The list covers 143 agent skills in the appsgit catalog, one entry per repository. ## Key facts | Fact | Value | |---|---| | Question | What are the best agent skills for security? | | Picks | 10 | | Top pick | Wizard (278,361 stars) | | Data as of | Oct 7, 2026 | | Canonical URL | https://appsgit.com/best/agent-skills-for-security | ## Ranked picks - [Wizard](https://appsgit.com/skills/mattpocock-wizard) (278,361 stars, MIT, Shell): Wizard has 278,361 GitHub stars, has 460,665 installs on skills.sh, runs without an API key, works with Claude Code and Codex, is written in Shell and was last updated in October 2026. - [Postgres Patterns](https://appsgit.com/skills/affaan-m-postgres-patterns) (274,402 stars, MIT, JavaScript): Postgres Patterns has 274,402 GitHub stars, has 2 installs on skills.sh, runs without an API key, works with Claude Code, Codex and Cursor, is written in JavaScript and was last updated in October 2026. - [Ponytail Audit](https://appsgit.com/skills/dietrichgebert-ponytail-audit) (156,966 stars, MIT, JavaScript): Ponytail Audit has 156,966 GitHub stars, has 767 installs on skills.sh, runs without an API key, works with Claude Code, Codex and Cursor, is written in JavaScript and was last updated in October 2026. - [Next Bundle Optimizer](https://appsgit.com/skills/vercel-next-bundle-optimizer) (143,231 stars, MIT, JavaScript): Next Bundle Optimizer has 143,231 GitHub stars, is published by the vendor itself, has 3 installs on skills.sh, runs without an API key, works with Claude Code, is written in JavaScript and was last updated in October 2026. - [Cloud](https://appsgit.com/skills/browser-use-cloud) (117,307 stars, MIT, Python): Cloud has 117,307 GitHub stars, is published by the vendor itself, needs an API key or token, works with Claude Code, Codex and Cursor, is written in Python and was last updated in October 2026. - [Security And Hardening](https://appsgit.com/skills/addyosmani-security-and-hardening) (102,166 stars, MIT, JavaScript): Security And Hardening has 102,166 GitHub stars, has 52,721 installs on skills.sh, runs without an API key, works with Claude Code, Codex and Cursor, is written in JavaScript and was last updated in October 2026. - [Browser Auth Flow](https://appsgit.com/skills/ruvnet-browser-auth-flow) (74,016 stars, MIT, TypeScript): Browser Auth Flow has 74,016 GitHub stars, runs without an API key, works with Claude Code and Codex, is written in TypeScript and was last updated in October 2026. - [Hyperframes CLI](https://appsgit.com/skills/heygen-com-hyperframes-cli) (58,058 stars, Apache-2.0, TypeScript): Hyperframes CLI has 58,058 GitHub stars, has 830,413 installs on skills.sh, needs an API key or token, works with Claude Code, Codex and Cursor, is written in TypeScript and was last updated in October 2026. - [007](https://appsgit.com/skills/sickn33-007) (47,305 stars, MIT, Python): 007 has 47,305 GitHub stars, runs without an API key, works with Claude Code, Codex and Cursor, is written in Python and was last updated in October 2026. - [Nature Response](https://appsgit.com/skills/yuan1z0825-nature-response) (46,219 stars, Apache-2.0, Python): Nature Response has 46,219 GitHub stars, has 4 installs on skills.sh, runs without an API key, works with Claude Code, Codex and OpenCode, is written in Python and was last updated in October 2026. ## How this list was made - Candidates: the 143 agent skills in the Security category on appsgit. - Ranked by GitHub stars (installs on skills.sh break ties), at most one entry per repository so one project cannot fill the list. - The catalog itself only lists skills with a valid SKILL.md, a license and a commit in the last six months, from repositories with 100+ stars or a skills.sh listing. ## FAQ ### Do these agent skills need an API key? 2 of the 10 picks need an API key or token, for example Cloud; 8 run without one. Each page on appsgit lists the environment variables a agent skill expects. ### Which coding agents work with these skills? Claude Code (all), Codex (9 of 10), Cursor (6 of 10) and OpenCode (6 of 10). The client list comes from each project's published compatibility data; appsgit does not guess it. ### Are any of these agent skills official? Yes: Next Bundle Optimizer and Cloud are published by the vendor themselves. ### How do I install an agent skill? A skill is a folder with a SKILL.md file that you copy into your agent's skills directory, or install from a plugin marketplace when the repository is one. Every skill page on appsgit shows the install command. ## Related questions - [What are the best MCP servers?](https://appsgit.com/best/mcp-servers) - [What are the best MCP servers for Claude Code?](https://appsgit.com/best/mcp-servers-for-claude-code) - [What are the best MCP servers for Cursor?](https://appsgit.com/best/mcp-servers-for-cursor) - [What are the best MCP servers for VS Code?](https://appsgit.com/best/mcp-servers-for-vs-code) - [What are the best official MCP servers?](https://appsgit.com/best/official-mcp-servers) - [Which MCP servers are trending right now?](https://appsgit.com/best/trending-mcp-servers) - [What are the best Claude Code skills?](https://appsgit.com/best/claude-code-skills) - [What are the best agent skills for OpenAI Codex?](https://appsgit.com/best/skills-for-codex) ## See also - [Security agent skills](https://appsgit.com/skills/category/security) - [All agent skills](https://appsgit.com/skills) - [Trending agent skills](https://appsgit.com/skills/trending) - [Official agent skills](https://appsgit.com/skills/official) --- Canonical page: https://appsgit.com/best/agent-skills-for-security Source: appsgit (https://appsgit.com), the app store for github. Data from the GitHub API, refreshed nightly. Machine access: JSON API https://appsgit.com/api/v1/apps (OpenAPI: https://appsgit.com/openapi.json), MCP server https://mcp.appsgit.com/mcp, full index https://appsgit.com/llms-full.txt.