Browse Skills — Page 256

securing-azure-with-microsoft-defender

mukul975/Anthropic-Cybersecurity-Skills

>

securing-container-registry-images

mukul975/Anthropic-Cybersecurity-Skills

>

securing-container-registry-with-harbor

mukul975/Anthropic-Cybersecurity-Skills

Harbor is an open-source container registry that provides security features including vulnerability scanning (integrated Trivy), image signing (Notary/Cosign), RBAC, content trust policies, replicatio

securing-github-actions-workflows

mukul975/Anthropic-Cybersecurity-Skills

>

securing-helm-chart-deployments

mukul975/Anthropic-Cybersecurity-Skills

Secure Helm chart deployments by validating chart integrity, scanning templates for misconfigurations, and enforcing security contexts in Kubernetes releases.

securing-historian-server-in-ot-environment

mukul975/Anthropic-Cybersecurity-Skills

>

securing-kubernetes-on-cloud

mukul975/Anthropic-Cybersecurity-Skills

>

securing-remote-access-to-ot-environment

mukul975/Anthropic-Cybersecurity-Skills

>

securing-serverless-functions

mukul975/Anthropic-Cybersecurity-Skills

>

security

alinaqi/maggy

OWASP security patterns, secrets management, security testing

Security Dashboard

Community-Access/accessibility-agents

GitHub security alerts command center -- triage Dependabot, code scanning, and secret scanning alerts entirely from the editor. Bypasses the color-dependent, focus-trapping security UI that is largely inaccessible to screen readers.

Security Digest

aaronjmars/aeon

Lead with confirmed exploitation (CISA KEV), enrich with EPSS, filter GitHub Advisories to your tracked stack, output one action per item

security-advisory-compat-enforcer

github/gh-aw

Review a GitHub security advisory and safely update .github/aw/compat.json with evidence-backed version enforcement.

security-alert-review

microsoft/azure-devops-skills

List and review Advanced Security alerts for an Azure DevOps repository. Shows dependency vulnerabilities, secret exposure, and code scanning findings with filtering by severity, state, and alert type.

security-and-hardening

addyosmani/agent-skills

Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services.

security-audit

catlog22/Claude-Code-Workflow

OWASP Top 10 and STRIDE security auditing with supply chain analysis. Triggers on "security audit", "security scan", "cso".

security-audit

cloudflare/security-audit-skill

Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security audits, or pen tests. Run the complete workflow only for explicit codebase audit or pen-test requests, full/comprehensive/end-to-end reviews, or requested report artifacts.

security-audit-eval

UKGovernmentBEIS/inspect_evals

Audit a third-party Inspect AI evaluation for security risks before running it locally. Decide whether the eval is safe by checking for malicious host-side code, externally-fetched files that aren't quality-controlled, sandbox-breakout instructions, weak sandbox configuration, supply-chain hazards, credential exposure, resource exhaustion, and provenance signals. Use when the user asks to audit / vet / security-review an eval repo (GitHub URL or local path), or asks "is it safe to run X". Do NOT use for assessing whether an eval *measures what it claims* (use eval-validity-review) or for general code-quality review (use eval-quality-workflow / code-quality-review-all).

security-audit-v2

diegosouzapw/awesome-omni-skills

Security Auditing Workflow Bundle workflow skill. Use this skill when the user needs Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

security-auditor

alirezarezvani/claude-code-tresor

Continuous security vulnerability scanning for OWASP Top 10, common vulnerabilities, and insecure patterns. Use when reviewing code, before deployments, or on file changes. Scans for SQL injection, XSS, secrets exposure, auth issues. Triggers on file changes, security mentions, deployment prep.

security-auditor-v2

diegosouzapw/awesome-omni-skills

security-auditor workflow skill. Use this skill when the user needs Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

security-auditor-v3

diegosouzapw/awesome-omni-skills

security-auditor workflow skill. Use this skill when the user needs Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

security-awareness

trailofbits/skills-curated

>

security-baseline

rampstackco/claude-skills

Establish a security baseline for a website or web app. Use this skill when configuring HTTPS and TLS, setting security headers, planning secrets management, evaluating CSP policies, doing a basic security audit, or hardening a site before launch. Triggers on security headers, HTTPS, TLS, CSP, content security policy, HSTS, secrets management, vulnerability scan, security audit, harden, OWASP, security baseline. Also triggers when a security review is required for compliance or before going live.

security-best-practices

openai/skills

"Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks."

security-best-practices

tech-leads-club/agent-skills

Perform language and framework specific security best-practice reviews and suggest improvements. Use when the user explicitly requests security best practices guidance, a security review or report, or secure-by-default coding help. Supports Python, JavaScript/TypeScript, and Go. Do NOT use for general code review, debugging, threat modeling (use security-threat-model), or non-security tasks.

security-bluebook-builder

benjaminasterA/antigravity-awesome-skills

Build security Blue Books for sensitive apps

security-bluebook-builder-v2

diegosouzapw/awesome-omni-skills

Security Bluebook Builder workflow skill. Use this skill when the user needs Build a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using MUST/SHOULD/CAN language, with explicit assumptions, scope, and security gates and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

security-bounty-hunter

affaan-m/ECC

Hunt for exploitable, bounty-worthy security issues in repositories. Focuses on remotely reachable vulnerabilities that qualify for real reports instead of noisy local-only findings.

security-check

TermiX-official/cryptoclaw

Assess token and address security via the GoPlus Security API.

security-checklist

jamditis/claude-skills-journalism

Pre-deployment security audit for web applications, organized by OWASP Top 10:2025 categories. Use when reviewing code before shipping, auditing an existing application, or when users mention "security review," "ready to deploy," "going to production," or express concern about vulnerabilities. Covers access control, supply chain, cryptography, injection, auth, integrity, logging, and exception handling.

security-compliance-compliance-check

benjaminasterA/antigravity-awesome-skills

You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform compliance audits and provide im...

security-compliance-compliance-check-v2

diegosouzapw/awesome-omni-skills

Regulatory Compliance Check workflow skill. Use this skill when the user needs You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform comprehensive compliance audits and provide implementation guidance for achieving and maintaining compliance and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

security-diff-scan

openai/codex-security

Review a pull request, commit, branch diff, or working-tree patch for security vulnerabilities.

security-disclosure-triage

superagent-ai/skills

Verify whether an incoming security advisory is a real, disclosable vulnerability in a target repository checkout, and assign an honest severity. Use when triaging an advisory, GHSA, scanner finding, or draft report from the researcher/reporter side to decide if it is worth disclosing. Optimizes against false confirmations and inflated severity.

security-engineering

elophanto/EloPhanto

Expert application security engineer specializing in threat modeling, vulnerability assessment, secure code review, and security architecture design. Adapted from msitarzewski/agency-agents.

security-expert

MicrosoftDocs/cloud-adoption-framework

Reviews Azure content for security vulnerabilities and best practice gaps. Use when asked to perform a security review of documentation.

security-flutter

TheBeardedBearSAS/claude-craft

Sécurité Flutter. Use when reviewing security, implementing auth, or hardening code.

security-guidance

alirezarezvani/claude-skills

PreToolUse security-anti-pattern hook for Claude Code. Catches 12 common security risks (command injection, XSS, SQL injection, unsafe deserialization, GitHub Actions workflow injection, eval/new Function code injection) BEFORE the Edit/Write/MultiEdit operation completes. Session-state caching prevents duplicate warnings on the same file+rule combo. Stdlib only — no dependencies. Use when you want a safety net during Claude Code sessions that touch security-sensitive code (auth, payments, user input handling, IaC). Disable with ENABLE_SECURITY_REMINDER=0 if you need to perform a verified-safe operation that would otherwise trip a pattern. Triggers — "add security hook", "block unsafe code", "detect command injection before write", "prevent SQL injection patterns", "security warning hook".

security-hygiene

Tibsfox/gsd-skill-creator

>

security-operations

serac-labs/serac

Build ServiceNow Security Operations — sn_si_incident with NIST-aligned state transitions, sn_vul_vulnerable_item with CVSS/risk scoring, sn_ti_indicator IOC matching, and containment playbooks.

security-ownership-map

tech-leads-club/agent-skills

Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Use when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for example: orphaned sensitive code, security maintainers, CODEOWNERS reality checks for risk, sensitive hotspots, or ownership clusters). Do NOT use for general maintainer lists, non-security ownership questions, or threat modeling (use security-threat-model).

security-ownership-map

openai/skills

"Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for example: orphaned sensitive code, security maintainers, CODEOWNERS reality checks for risk, sensitive hotspots, or ownership clusters). Do not trigger for general maintainer lists or non-security ownership questions."

security-paperclip

TheBeardedBearSAS/claude-craft

Paperclip-Sicherheit — Tenancy-Isolation, Secrets, Approval-Gates, harte Budgets, signierter Adapter-Channel. Verwenden Sie dies beim Auditing oder Härten von Paperclip.

security-patrol

sirkirby/unifi-mcp

Show everything that happened at a specific area across all UniFi products (Network, Protect, Access) in a given time window. Use when the user asks about activity at a door, entrance, room, or area.

security-patterns

CloudAI-X/claude-workflow-v2

Implements authentication, authorization, encryption, secrets management, and security hardening patterns. Use when designing auth flows, managing secrets, configuring CORS, implementing rate limiting, or when asked about JWT, OAuth, password hashing, API keys, RBAC, or security best practices.

security-pen-testing

alirezarezvani/claude-skills

Use when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security assessments. Covers static analysis, dependency scanning, secret detection, API security testing, and pen test report generation.

security-pentest-planner

OneWave-AI/claude-skills

Plans security penetration tests for web applications. Analyzes codebase, API routes, auth implementation, and infrastructure config to generate comprehensive pentest plans. For authorized testing only.

security-questionnaire-answers

Significant-Gravitas/skills-catalog

Draft security questionnaire answers from cited evidence, with gaps and owner questions listed.

security-react

TheBeardedBearSAS/claude-craft

Sécurité React. Use when reviewing security, implementing auth, or hardening code.

security-reactnative

TheBeardedBearSAS/claude-craft

Security - React Native 0.85+ Best Practices. Use when reviewing security, implementing auth, or hardening code.

security-report-check

microsoft/TypeScript

>

security-requirement-extraction

wshobson/agents

Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.

security-requirement-extraction

benjaminasterA/antigravity-awesome-skills

Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.

security-requirement-extraction-v2

diegosouzapw/awesome-omni-skills

Security Requirement Extraction workflow skill. Use this skill when the user needs Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

security-research

code-yeongyu/oh-my-openagent

Team Mode security research skill. Orchestrates 3 vulnerability hunters and 2 PoC engineers to audit a codebase in parallel, prove exploitability, classify root causes, and calibrate severity by actual exploitability. Use for security review, vulnerability research, exploitability audit, pre-release security check, threat model validation, and `/security-research`. Triggers: 'security-research', 'security research', 'security review', 'vulnerability audit', 'exploitability audit', '보안 리뷰', '취약점 감사'.

security-research-hygiene

trailofbits/codex-config

>-

github/security-review

github/awesome-copilot

'AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching tools miss. Use this skill when asked to scan code for security vulnerabilities, find bugs, check for SQL injection, XSS, command injection, exposed API keys, hardcoded secrets, insecure dependencies, access control issues, or any request like "is my code secure?", "review for security issues", "audit this codebase", or "check for vulnerabilities". Covers injection flaws, authentication and access control bugs, secrets exposure, weak cryptography, insecure dependencies, and business logic issues across JavaScript, TypeScript, Python, Java, PHP, Go, Ruby, and Rust.'

affaan-m/security-review

affaan-m/ECC

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

microsoft/security-review

microsoft/power-platform-skills

>-

security-review-construction

datadrivenconstruction/DDC_Skills_for_AI_Agents_in_Construction

Security review checklist for construction software systems. Use when building integrations, APIs, data pipelines, or dashboards for construction projects.

security-review-pr

warpdotdev/oz-for-oss

Audit a pull request diff for common security concerns (input validation, sanitization, authentication and authorization, secrets management, unsafe dependencies, and related risks) and fold findings into the same review.json produced by the base PR review. Use as a supplement to `review-pr` whenever a code PR is being reviewed.

security-review-spec

warpdotdev/oz-for-oss

Audit a product or tech spec pull request diff for high-level security concerns (threat surface, authentication and authorization model, trust boundaries, sensitive data handling, secrets and key management, dependency posture, and abuse or misuse cases) and fold findings into the same review.json produced by the base spec review. Use as a supplement to `review-spec` whenever a spec PR is being reviewed.

security-reviewer

Jeffallan/claude-skills

Identifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance. Use when conducting security audits, reviewing code for vulnerabilities, or analyzing infrastructure security. Invoke for SAST scans, penetration testing, DevSecOps practices, cloud security reviews, dependency audits, secrets scanning, or compliance checks. Produces vulnerability reports, prioritized recommendations, and compliance checklists.

security-scan

openai/codex-security

Use for a standard, single-pass security audit of an entire repository or a scoped path, package, folder, or submodule with no diff to review. This is the default repository scan. Do not use for PR, commit, branch, or working-tree diffs, or for deep, multi-pass scans.

security-scan

affaan-m/ECC

Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.

security-scanning

bobmatnyc/claude-mpm-skills

CI security scanning: secrets, deps, SAST, triage, expiring exceptions

security-scanning-security-dependencies

benjaminasterA/antigravity-awesome-skills

You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across ecosystems to identify vulnerabilities, ass...

security-scanning-security-dependencies-v2

diegosouzapw/awesome-omni-skills

Dependency Vulnerability Scanning workflow skill. Use this skill when the user needs You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

security-scanning-security-hardening

benjaminasterA/antigravity-awesome-skills

Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.

security-scanning-security-hardening-v2

diegosouzapw/awesome-omni-skills

security-scanning-security-hardening workflow skill. Use this skill when the user needs Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

security-scanning-security-sast

benjaminasterA/antigravity-awesome-skills

Static Application Security Testing (SAST) for code vulnerability

security-scanning-security-sast-v2

diegosouzapw/awesome-omni-skills

SAST Security Plugin workflow skill. Use this skill when the user needs 'Static Application Security Testing (SAST) for code vulnerability and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

security-suite

boshu2/agentops

Run composable security analysis.

security-symfony

TheBeardedBearSAS/claude-craft

Sécurité & RGPD - Atoll Tourisme. Use when reviewing security, implementing auth, or hardening code.

security-test

HoangNguyen0403/agent-skills-standard

Fast, continuous DevSecOps pipeline for Pull Requests and active branches. Runs SAST, SCA, and secrets detection to catch vulnerabilities before they merge.

security-threat-model

openai/skills

"Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work."

security-threat-model

tech-leads-club/agent-skills

Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Use when the user asks to threat model a codebase or path, enumerate threats or abuse paths, or perform AppSec threat modeling. Do NOT use for general architecture summaries, code review, security best practices (use security-best-practices), or non-security design work.

security-triage

openclaw/openclaw

Triage OpenClaw security advisories, drafts, and GHSA reports with shipped-tag and trust-model proof.

securityheaders

taracodlabs/aiden

HTTP security header audit (A+ to F) with fix recommendations

securitytrails-automation

ComposioHQ/awesome-claude-skills

"Automate Securitytrails tasks via Rube MCP (Composio). Always search tools first for current schemas."

seed-data

ClipboardHealth/core-utils

Trigger seed data generation for test environments via GitHub Actions. Use when asked to seed, create test data, or set up HCPs/facilities/shifts.

seed-protocol-design

yogsoth-ai/de-anthropocentric-research-engine

SOP: design random seed strategy for reproducibility

seed-selection

yogsoth-ai/de-anthropocentric-research-engine

Validate and prioritize starting papers for snowball surveys. Evaluates which seeds will yield the richest citation traces based on citation count, recency, and network position.

seedance

vm0-ai/vm0-skills

Seedance video generation API by ByteDance. Use when user mentions "Seedance", "ByteDance video AI", "text-to-video", "image-to-video", or wants to generate AI videos using Seedance models.

seedance

inferen-sh/superpowers

Generate videos with ByteDance Seedance 2.0 via inference.sh CLI. Unified model for text-to-video, image-to-video, and reference-to-video with synchronized audio, up to 1080p, 4-15s duration. Pro and Fast variants. Studio variants with private asset library for portrait consistency. Use for: social media videos, music videos, product demos, animated content, AI video with sound. Triggers: seedance, seedance 2, bytedance video, seedance t2v, seedance i2v, seedance r2v, video with audio, seedance 2.0, bytedance seedance, seedance studio

seedance-debugger

cclank/lanshu-awesome-ai-video-kit

诊断 Seedance 2.0 生成视频时出现的常见问题（人物 ID 漂移/双胞胎/字幕/Logo/风格漂移/延长跳变/画质劣化/特效不对/中文发音/音色不准/结尾噪音 等 12 类），定位根因并给出修复后的提示词。用于"我的提示词生成出来不对"、"视频里出现奇怪的字幕"、"人脸不像参考图"、"出现两个一样的人物"、"风格变了"、"怎么修这个提示词"等触发场景。

seedance-prompter

cclank/lanshu-awesome-ai-video-kit

把用户的自然语言视频需求转换为符合 Doubao Seedance 2.0 进阶公式的提示词（8 要素：精准主体+动作细节+场景环境+光影色调+镜头运镜+视觉风格+画质+约束条件）。用于"帮我写一个 Seedance 提示词"、"生成视频提示词"、"做个产品广告视频"、"用 Seedance 生成 XX"等触发场景。如果用户没明确说 Seedance，但描述的是单一镜头的复杂叙事/多主体/电影感视频，也优先用此 skill。

seedance-storyboard

cclank/lanshu-awesome-ai-video-kit

把复杂剧情/故事大纲拆分为 Seedance 2.0 的"镜头1/镜头2/镜头3"多分镜结构。每个分镜按 4 维度组织（运镜 + 主体动作与表情 + 位置/空间变化 + 音频）。用于"帮我把这个故事写成 Seedance 提示词"、"分镜脚本"、"多镜头视频"、"剧情复杂的视频"、"剧本转分镜"等触发场景。

seedream-imagegen

staruhub/ClaudeSkills

用 ByteDance Seedream 4.0 API（经 Segmind）生成 AI 图像。当用户要从文字描述生成营销素材、海报、产品图、概念图、社交媒体配图等高质量图像，且环境配有 SEGMIND_API_KEY 时使用。支持 2K/4K、多比例、单次最多 15 张批量、最多 3 张参考图控风格。不用于：修改/编辑已有图片（用图像编辑类 skill）、视频生成、无 API 环境下的快速配图需求。

seeing-images

oaustegard/claude-skills

Augmented vision tools for analyzing images beyond native visual capabilities. Use when tasked with describing images in detail, reproducing images as SVGs, identifying subtle features, comparing image regions, reading degraded text, or any task requiring careful visual inspection. Also use when the image-to-svg skill needs ground truth about colors, shapes, or boundaries.

seek

simota/agent-skills

Designing search engines and vector DBs for full-text, vector, and hybrid retrieval. Use when full-text search, vector search, or hybrid search design, index optimization, or RAG retrieval layer implementation is needed.

seek-and-analyze-video

diegosouzapw/awesome-omni-skills

Seek and Analyze Video workflow skill. Use this skill when the user needs Seek and analyze video content using Memories.ai Large Visual Memory Model for persistent video intelligence and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

seek-and-analyze-video-v2

diegosouzapw/awesome-omni-skills

Seek and Analyze Video workflow skill. Use this skill when the user needs Seek and analyze video content using Memories.ai Large Visual Memory Model for persistent video intelligence and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

sega

bergside/awesome-design-skills

A playful, arcade-inspired interface for games — built on the VT323 pixel typeface, hard-edged 0px corners, chunky pill buttons that physically press into solid offset blocks

segment

TerminalSkills/skills

>-

segment-analyzer

t0ddc3by/claude-for-customer-success

>

segment-anything-model

NousResearch/hermes-agent

SAM: zero-shot image segmentation via points, boxes, masks.

segment-audience

indranilbanerjee/digital-marketing-pro

Create audience segments. Use when: building or updating CRM or email platform segments for campaign targeting.

segment-automation

benjaminasterA/antigravity-awesome-skills

Automate Segment tasks via Rube MCP (Composio): track events, identify users, manage groups, page views, aliases, batch operations. Always search tools first for current schemas.