Best Security agent skills, page 3

Entra App Registration

microsoft/azure-skills

Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration.

Brooks Audit

hyhmrright/brooks-lint

Architecture audit that maps module dependencies, checks layering integrity, and flags structural decay across a codebase, drawing on twelve classic engineering books.

Crabbox Quickstart

openclaw/crabbox

First contact with Crabbox: run your repository's tests inside a disposable Docker or Podman container on your own machine, no account and no cloud spend, then stop the box.

Li Audit

Jakeschincariol/linkedin-agent-skill

Post-mortem on what the user has already published - which posts actually worked, why, and what to stop doing.

Alfworld Receptacle Operator

zjunlp/SkillNet

This skill opens or closes a receptacle (like a fridge, cabinet, or microwave) to access its interior or secure it.

Oma Deepsec

first-fluke/oh-my-agent

Set up and run Deepsec vulnerability scans, triage, and CI gates.

UX Audit Walkthrough

AIPexStudio/AIPex

Minimalist UX/Interaction Audit Expert that deconstructs complex interactions through cognitive load and operational efficiency lenses.

Wcag22 A11y Audit

AIPexStudio/AIPex

WCAG 2.2 Accessibility Audit skill that systematically evaluates web pages against 8 core Success Criteria (1.1.1, 1.4.3, 1.4.11, 2.1.1, 2.1.2, 2.4.3, 2.4.7, 4.1.2) using accessibility tree…

Golive

mikehasa/golive-skill

Take an agent-written app from repo to live production on the user's OWN accounts, with providers they choose (hosting, database, auth, payments, email, domain/DNS).

Solidity Auditor

pashov/skills

Security audit of Solidity code while you develop.

X Ray

pashov/skills

Generates an x-ray.md pre-audit report covering overview, enhanced threat model (protocol-type profiling, git-weighted attack surfaces, temporal risk analysis, composability dependency mapping)…

Os Step By Step

kharmanskyi/open-steps

ALWAYS invoke this skill when you need the user to act - run a command, paste a secret, click, approve - and whenever they ask how to do something or say they do not know what to do: "step by step"…

Audit My App

reticlehq/reticle

Sweep a whole running web app for what is broken, without writing a script or knowing the codebase.

EC2

itsmostafa/aws-agent-skills

AWS EC2 virtual machine management — instances, security groups, key pairs, AMIs, EBS volumes, Auto Scaling Groups, Spot Instances, Session Manager, placement groups, and instance lifecycle…

Check

JuliusBrussee/cavekit

Read-only drift detector. Diffs SPEC.md against current code and reports violations grouped by severity.

Vendor Management

BagelHole/DevOps-Security-Agent-Skills

Implement vendor risk management programs.

Openloomi API

melandlabs/openloomi

openloomi HTTP API reference (local-first, served from the OpenLoomi Desktop app at http://localhost:3414).

Footgun Scan

maxrave-dev/kotlin-footguns

Scan a Kotlin or Compose Multiplatform diff for known footgun shapes and open the matching trap to confirm each hit.

Review Spd

zhu1090093659/spec_driven_develop

Findings-first code review workflow for AI coding agents.

Skill Index Updater

luongnv89/asm

Add GitHub skill repos to the ASM index: clone, audit, eval, regenerate index, rebuild catalog, open PR.

No Negative Echo

LB623/no-negative-echo

Prevent 此地无银三百两式 residue: finalize artifacts without echoing rejected session-only alternatives into labels, metadata, commits, PRs, or handoffs.

Develop Timeline Studio Plugin

MartinDelophy/ai-video-editor

Design, evaluate, implement, or review image and video generation connectors for Timeline Studio.

Redteam

agentscope-ai/OpenJudge

Use when the user wants to test their LLM/agent application for safety and security vulnerabilities — jailbreaks, prompt injection, PII extraction, harmful content generation, or evaluator gaming.

Old Coder API

AmazingAng/old-coder

Design, change, or review an HTTP/JSON API surface — endpoints, request/response shapes, authentication and authorization, pagination, idempotency, rate limits, versioning, and deprecations.

Security Audit

staruhub/ClaudeSkills

全面的代码安全检查和服务器安全审计skill。适用于：(1) 代码漏洞扫描 - 检测SQL注入、XSS、SSRF等OWASP Top 10漏洞，(2) 依赖安全检查 - 识别过时或有漏洞的第三方库，结合实时搜索确认最新CVE，(3) 服务器配置审计 - 检查SSH、防火墙、权限等安全配置，(4) 敏感信息泄露检测 - API密钥、密码、令牌等硬编码检测，(5) 容器安全扫描…

Capabilities Manager

infragate/capa

Manage capa CLI configuration — capabilities.yaml / capabilities.json, skills, MCP servers, tools, hooks, sub-agents, rules, plugins, AGENTS.md / CLAUDE.md, security options, tool exposure modes…

Terrashark

LukasNiessen/terrashark

Prevent Terraform/OpenTofu hallucinations by diagnosing and fixing failure modes: identity churn, secret exposure, blast-radius mistakes, CI drift, and compliance gate gaps.

Chisle Audit

JayPokale/Chisle

One-shot efficiency audit of a file, diff, or whole repo across BOTH axes at once: over-engineered code (reinvented stdlib, needless abstractions, speculative config) AND bloated prose (verbose…

Improve

shobcoder/shob

Survey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute.

Ln 54 Codebase Auditor

levnikolaevich/claude-code-skills

Audits cross-cutting codebase health, security and maintainability; not a single-change review or specialist audit.

Browser Fingerprint Audit

liarjsdev/liarjs-skills

Audit a browser fingerprint for internal contradictions with the liarjs CLI - canvas, WebGL, WebGL2, WebGPU, audio, 220 fonts, WebRTC and timezone probes, scored against the TLS/HTTP/ASN view of the…

AI Check

harshaneel/humanize

Use when someone asks "does this sound AI?", "check if this is AI-written", "what gives this away as AI", "run ai-check on this", or "score this text".

Minimal Run And Audit

lllllllama/RigorPilot-Skills

Rigor Run skill for README-first deep learning repo reproduction.

Firebase Basics

firebase/agent-skills

Provides foundational Firebase CLI setup, CLI installation, version checks (firebase-tools@latest --version), CLI login (including --no-localhost), project creation, project selection (firebase…

Firebase Auth Basics

firebase/agent-skills

Guide for setting up and using Firebase Authentication.

Firebase Hosting Basics

firebase/agent-skills

Deploys and configures classic Firebase Hosting for static websites, single-page apps (SPAs), and microservices.

Firebase App Hosting Basics

firebase/agent-skills

Deploys and manages full-stack web applications (Next.js, Angular) with Server-Side Rendering (SSR) using Firebase App Hosting.

Firebase Security Rules Auditor

firebase/agent-skills

Audits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource exhaustion, type safety, size limits…

Firebase AI Logic Basics

firebase/agent-skills

Official skill for integrating Firebase AI Logic (Gemini API) into web applications.

Firebase Firestore

firebase/agent-skills

Sets up, manages, queries, and configures Cloud Firestore databases (Standard/Enterprise edition), including data modeling, security rules, indexes, and SDK integrations (Web, Python, iOS, Android…

Landing Page Conversion Audit

autonnel/autonnel-skills

Audit a landing page, sales page or checkout page for conversion leaks and return a fix list ordered by expected revenue impact.

Gh Axi

kunchenguid/gh-axi

Operate GitHub through the gh-axi CLI - issues, pull requests, discussions, stacked PRs, workflow runs, workflows, releases, repositories, labels, gists, Projects (v2), Actions secrets and…

Neon Postgres

neondatabase/agent-skills

Guides and best practices for working with Lakebase Postgres on Neon: connections, pooled vs direct, schema migrations, branching, autoscaling, scale-to-zero, instant restore, read replicas, IP…

Neon

neondatabase/agent-skills

Overview of Neon, a complete set of cloud backend primitives around Lakebase Postgres: Auth, Object Storage, Functions, and the AI Gateway.

Audit Website

squirrelscan/skills

Audit a website with the squirrelscan CLI and fix the findings in code.

Clerk Setup

clerk/skills

Set up Clerk authentication in any project with the Clerk CLI and official framework quickstarts.

Convex

get-convex/agent-skills

Convex is the backend agents get right on the first try: an all-TypeScript reactive platform where the database, server functions, scheduling, file storage, auth, and realtime sync are one type-safe…