Best Security agent skills

Wizard

mattpocock/skills

Generate an interactive bash wizard that walks a human through steps only they can perform.

Active · last commit Oct 19, 2026

Ponytail Audit

DietrichGebert/ponytail

Quality audit of a whole repo: bugs, security holes, what breaks under real load, risky code without tests, slow paths, and what to delete, merge or split.

Active · last commit Oct 18, 2026

Next Bundle Optimizer

vercel/next.js

Audit and reduce Next.js browser initial-load work.

Active · last commit Oct 26, 2026

Cloud

browser-use/browser-use

Documentation reference for using Browser Use Cloud — the hosted API and SDK for browser automation.

Active · last commit Oct 22, 2026

Security And Hardening

addyosmani/agent-skills

Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or external integrations, or when checking a…

Active · last commit Oct 13, 2026

Browser Auth Flow

ruvnet/ruflo

Probe a site's authentication flow for redirect leaks, missing CSRF, weak session cookies, and OAuth misconfiguration; produces an auth findings.md.

Active · last commit Oct 26, 2026

Browser Login

ruvnet/ruflo

Drive an authentication flow once, sanitize cookies through AIDefence, and vault a reusable cookie handle in browser-cookies for future sessions.

Active · last commit Oct 26, 2026

Federation Audit

ruvnet/ruflo

Review the signed coordination evidence visible through RuFlo Federation.

Active · last commit Oct 26, 2026

Learn Agent Skills

rohitg00/ai-engineering-from-scratch

Focused interactive tutor for the Agent Skills Engineering path in AI Engineering from Scratch.

Active · last commit Oct 23, 2026

Learn MCP

rohitg00/ai-engineering-from-scratch

Focused interactive tutor for the Model Context Protocol (MCP) path in AI Engineering from Scratch.

Active · last commit Oct 23, 2026

Nature Response

Yuan1z0825/nature-skills

Draft, audit, or revise responses to peer review, revision cover letters, and marked-manuscript or LaTeX revision packages.

Maintained · last commit Oct 25, 2026

Improve Animations

emilkowalski/skills

Survey a codebase's animation and motion code as a senior motion advisor, then produce a prioritized audit and self-contained implementation plans for other agents (or cheaper models) to execute.

Maintained · last commit Oct 11, 2026

007

sickn33/agentic-awesome-skills

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.

Active · last commit Oct 24, 2026

Accesslint Audit

sickn33/agentic-awesome-skills

Find and fix WCAG 2.2 accessibility issues.

Active · last commit Oct 24, 2026

Accesslint Diff

sickn33/agentic-awesome-skills

Diff a live page's accessibility violations against a baseline — by default compares uncommitted changes (stash-based), or pass --branch [] to diff against a branch.

Active · last commit Oct 24, 2026

Open Code Review

alibaba/open-code-review

Performs AI-powered code review on Git changes using the ocr CLI from alibaba/open-code-review.

Active · last commit Oct 20, 2026

Security Audit

cloudflare/security-audit-skill

Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons.

Maintained · last commit Sep 14, 2026

Resume Builder

reactive-resume/reactive-resume

Builds a complete resume from scratch as Reactive Resume JSON that conforms to the schema and imports at https://rxresu.me.

Active · last commit Oct 25, 2026

Resume Tailor

reactive-resume/reactive-resume

Tailors one resume to one specific job posting.

Active · last commit Oct 25, 2026

Claude Md Improver

anthropics/claude-plugins-official

Audit and improve CLAUDE.md files in repositories.

Maintained · last commit Oct 23, 2026

Claude Security

anthropics/claude-plugins-official

Claude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into…

Maintained · last commit Oct 23, 2026

Agent Governance

github/awesome-copilot

Patterns and techniques for adding governance, safety, and trust controls to AI agent systems.

Maintained · last commit Oct 26, 2026

Agent Owasp Compliance

github/awesome-copilot

Check any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks.

Maintained · last commit Oct 26, 2026

Dingtalk Channel Connect

agentscope-ai/QwenPaw

Use a headed browser to automatically complete DingTalk channel integration for QwenPaw.

Active · last commit Oct 26, 2026

Omp Roles

agentscope-ai/QwenPaw

Use this skill whenever you need the allowedtools / skills preset for a sub-agent role before calling spawnsubagent.

Active · last commit Oct 26, 2026

Implementing Secret Scanning With Gitleaks

mukul975/Anthropic-Cybersecurity-Skills

This skill covers implementing Gitleaks for detecting and preventing hardcoded secrets in git repositories.

Active · last commit Aug 31, 2026

Analyzing Indicators Of Compromise

mukul975/Anthropic-Cybersecurity-Skills

Analyzes indicators of compromise (IOCs) including IP addresses, domains, file hashes, URLs, and email artifacts to determine maliciousness confidence, campaign attribution, and blocking priority.

Active · last commit Aug 31, 2026

Analyzing iOS App Security With Objection

mukul975/Anthropic-Cybersecurity-Skills

Runtime iOS app security testing with Objection (Frida): inspect keychain and filesystem data, explore app internals at runtime, and validate/bypass client-side protections during authorized mobile…

Active · last commit Aug 31, 2026

Analyzing Linux Elf Malware

mukul975/Anthropic-Cybersecurity-Skills

Analyze malicious Linux ELF binaries — botnets, cryptominers, ransomware, and rootkits targeting Linux servers, containers, and cloud infrastructure — through static analysis, dynamic tracing, and…

Active · last commit Aug 31, 2026

Knowledge Ops

alirezarezvani/claude-skills

Use when a Head of Ops, Knowledge Manager, or TPM-Internal needs to author, validate, or clean up company SOPs and internal runbooks (procurement intake, vendor offboarding, incident-comms cascade…

Active · last commit Oct 23, 2026

Loop Library

alirezarezvani/claude-skills

Discover, find, compare, audit, repair, adapt, and design repeatable AI-agent loops with explicit triggers, actions, verification, stopping conditions, guardrails, and handoffs.

Active · last commit Oct 23, 2026

Code Review

phuryn/pm-skills

Review code for actionable defects. Correctness is the core; performance and security are optional sub-cases of the same engine.

Active · last commit Oct 16, 2026

Shipping Artifacts

phuryn/pm-skills

The durable documentation set that makes an AI-built (vibe-coded) app reviewable before shipping.

Active · last commit Oct 16, 2026

Long Horizon Prompting

muratcankoylan/Agent-Skills-for-Context-Engineering

This skill should be used when writing, enhancing, or evaluating the launch prompt for a long-running autonomous agent or a parallel multi-agent orchestration attacking a hard problem: pseudo-formal…

Active · last commit Oct 12, 2026

Experiment Audit

wanshuiyin/Auto-claude-code-research-in-sleep

Audit experiment integrity before claiming results.

Active · last commit Oct 24, 2026

Lean Formalize

wanshuiyin/Auto-claude-code-research-in-sleep

Develop and verify a mathematical proof in Lean, continue an incomplete Lean project, or audit whether it proves the original statement.

Active · last commit Oct 24, 2026

Meta Apply

wanshuiyin/Auto-claude-code-research-in-sleep

Privileged applier that LANDS meta-optimize / corpus-audit patches the user approved — the ONLY skill permitted to mutate the skill corpus from a self-modification proposal, with cross-model jury…

Active · last commit Oct 24, 2026

Lark Shared

larksuite/cli

Use for lark-cli setup/auth tasks: auth login/status/logout, user vs bot identity, business-domain permissions (--domain, including all/docs/drive), missing scopes, revoking authorization, or…

Active · last commit Oct 14, 2026

Lark Mail

larksuite/cli

飞书邮箱：Use when user mentions 起草邮件、写邮件、草稿、发送/回复/转发邮件、查阅邮件、看邮件、搜索邮件、邮件文件夹、邮件标签、邮件联系人、监听新邮件、邮件收信规则等；use for mail/email intent only.

Active · last commit Oct 14, 2026

Skill Security Auditor

eigent-ai/eigent

Security auditing for code, configs, and infrastructure.

Active · last commit Oct 25, 2026

Prompt Guard

Orchestra-Research/AI-Research-SKILLs

Meta's 86M prompt injection and jailbreak detector.

Maintained · last commit Jun 16, 2026

Java Architect

Jeffallan/claude-skills

Use when building, configuring, or debugging enterprise Java applications with Spring Boot 3.x, microservices, or reactive programming.

Active · last commit Oct 26, 2026

Chatgpt App Builder

mcp-use/mcp-use

Build, modify, debug, migrate, review, or verify TypeScript MCP servers and MCP Apps with mcp-use.

Active · last commit Oct 21, 2026

MCP Apps Builder

mcp-use/mcp-use

Build, modify, debug, migrate, review, or verify TypeScript MCP servers and MCP Apps with mcp-use.

Active · last commit Oct 21, 2026

MCP Builder

mcp-use/mcp-use

Build, modify, debug, migrate, review, or verify TypeScript MCP servers and MCP Apps with mcp-use.

Active · last commit Oct 21, 2026

Openapi To MCP

mcp-use/mcp-use

Build and deploy an MCP server from an OpenAPI / Swagger spec using the mcp-use TypeScript SDK.

Active · last commit Oct 21, 2026

Fixing Metadata

ibelick/ui-skills

Audit and fix HTML metadata including page titles, meta descriptions, canonical URLs, Open Graph tags, Twitter cards, favicons, JSON-LD structured data, and robots directives.

Active · last commit Oct 25, 2026

Leanback To Compose Tv Migration

android/skills

Provides instructions and architectural patterns for migrating Android TV applications from legacy Leanback UI Toolkit, Android Views, or Support Fragments to Jetpack Compose for TV (androidx.tv).

Active · last commit Oct 23, 2026