Security
Security scanning and vulnerability detection
testing-handbook-skills
by elizaOS
"Application security testing toolkit from the Trail of Bits Testing Handbook. Covers fuzzing (libFuzzer, AFL++, cargo-fuzz, Atheris, Ruzzy), coverage analysis, harness writing, sanitizers, static analysis (Semgrep, CodeQL), and cryptographic testing (Wycheproof, constant-time)."
static-analysis
by elizaOS
"Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection. Use when running static analysis scans, writing custom detection rules, or processing analysis results."
blogwatcher
by elizaOS
Monitor blogs and RSS/Atom feeds for updates using the blogwatcher CLI.
sharp-edges
by elizaOS
"Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principles. Triggers: footgun, misuse-resistant, secure defaults, API usability, dangerous configuration."
spec-to-code-compliance
by elizaOS
Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whitepapers, finding gaps between specs and implementation, or performing compliance checks for protocol implementations.
release-check
by davepoon
Pre-release verification checklist. Validates features, tests, docs, security, and quality gates before shipping. Delegates to the Centinela (QA) agent.
security
by alinaqi
OWASP security patterns, secrets management, security testing
verify-authenticity
by RTGS2017
"真实性验证技能。分析用户提供的信息、消息、图片或内容，判断其真实性和可信度，识别虚假信息、AI生成内容或伪造内容。"
ship-safe-score
by asamassekou10
Get your project's security health score (0-100, A-F grade). Use when the user wants a quick security check or asks "is my code safe to ship?"
ship-safe
by asamassekou10
Run a full security audit on this project — 12 agents scan for secrets, injections, auth bypass, SSRF, supply chain attacks, misconfigs, and more. Use when the user wants a security audit, vulnerability scan, or asks if their code is safe to ship.
Auth Specialist
by omer-metin
email-and-password-best-practices
by lukevella
This skill provides guidance and enforcement rules for implementing secure email and password authentication using Better Auth.
hipaa-compliance
by BagelHole
Implement HIPAA security and privacy rules. Configure PHI protections and BAA requirements. Use when handling healthcare data.
aws-vpc
by BagelHole
Design and implement VPCs and networking. Configure subnets, route tables, and security groups. Use when setting up AWS network infrastructure.
aws-cloudtrail
by BagelHole
Configure AWS CloudTrail for audit logging. Set up organization trails and event analysis. Use when auditing AWS activity.
audit-logging
by BagelHole
Implement centralized audit logging and SIEM integration. Configure log retention and security monitoring. Use when implementing audit trail requirements.
gcp-audit-logs
by BagelHole
Configure GCP Cloud Audit Logs for compliance. Set up log routing and BigQuery analysis. Use when auditing GCP activity.
code-review-patterns
by romiluz13
"Internal skill. Use cc10x-router for all development tasks."
blueagent-x402
by BankrBot
Security OS for autonomous agents and builders on Base. 31 pay-per-use tools across Quantum Security, Agent Safety, Research, Data, and Earn. Built for AI agents, Zero-Human Companies (ZHC), and Base ecosystem builders. Pay USDC per call via x402 protocol — no subscription, no API key needed.
aurakit
by davepoon
"Sonnet Amplified fullstack engine. 34 modes, SEC-01~15 OWASP security, 13 runtime hooks, 75% token reduction. Install: npx @smorky85/aurakit"
security-audit
by davepoon
Deep security audit covering OWASP Top 10, authentication, authorization, data protection, dependency vulnerabilities, and secrets scanning. Delegates to the Centinela (QA) agent.
code-health
by davepoon
Scans the codebase for dead code, tech debt, outdated dependencies, and code quality issues. Delegates to the Centinela (QA) agent.
oh-distributed-security-design-review
by openharmonyinsight
OpenHarmony分布式系统安全代码检视专用技能。当用户要求"检视代码安全实现"、"代码安全审查"、"安全代码review"或类似的分布式系统代码安全检视请求时触发。此技能提供18条OpenHarmony分布式业务安全设计规则的详细检视指导，涵盖授权控制、状态机、数据传输、权限管理、可信关系等安全领域。使用此技能可在通用网络安全规则基础上，针对OpenHarmony分布式系统进行专项安全检视。
network
by markdown-viewer
Create network topology diagrams using PlantUML syntax with industry-standard device icons. Best for LAN/WAN diagrams, enterprise networks, cloud infrastructure, and vendor-specific diagrams (Cisco, Citrix, etc.). Uses mxgraph stencil icons for network devices with auto-layout. NOT for abstract dependency graphs (use graphviz) or simple flowcharts (use mermaid).