Security
Security scanning and vulnerability detection
audit-agents-skills
by FlorianBruniaux
Comprehensive quality audit for Claude Code agents, skills, and commands with comparative analysis
enterprise-agent-ops
by affaan-m
Operate long-lived agent workloads with observability, security boundaries, and lifecycle management.
skill-audit
by nyldn
Systematic codebase auditing with comprehensive checklists. Use when: AUTOMATICALLY ACTIVATE when user requests auditing:. "audit and check the entire app". "audit X for Y" or "check for broken features"
skill-security-framing
by nyldn
URL validation and content wrapping for untrusted sources. Use when: This skill provides SECURITY UTILITIES - it should be referenced by other skills,. not invoked directly by users. Auto-integrate when:. Fetching content from URLs
security-scan
by affaan-m
Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.
asking-questions
by oaustegard
Guidance for asking clarifying questions when user requests are ambiguous, have multiple valid approaches, or require critical decisions. Use when implementation choices exist that could significantly affect outcomes.
gke-basics
by google
"Plan, create, and configure production-ready Google Kubernetes Engine (GKE) clusters using the golden path Autopilot configuration. Covers Day-0 checklist, Autopilot vs Standard, networking (private clusters, VPC-native, Gateway API), security (Workload Identity, Secret Manager, RBAC hardening), observability, scaling, cost optimization, and AI/ML inference. WHEN: create GKE cluster, provision GKE environment, design GKE networking, secure GKE, optimize GKE cost, GKE autoscaling, GKE inference, GKE upgrade, GKE observability, GKE multi-tenancy, GKE batch, GKE HPC, GKE compute class."
strategic-planning
by ognjengt
Analyzes the founder's business context to deliver the 3 highest-impact next moves for growth (marketing or sales). Asks up to 10 diagnostic questions when needed to uncover bottlenecks, struggles, and opportunities. Use when user needs strategic guidance, next steps, growth planning, or actionable business strategy.
ads
by AgriciDaniel
Comprehensive paid advertising audit and optimization for any business type. Performs full multi-platform audits (Google Ads, Meta Ads, LinkedIn Ads, TikTok Ads, Microsoft Ads), single-platform deep analysis, conversion tracking health checks, creative quality assessment, budget allocation optimization, bidding strategy evaluation, and compliance verification. Industry detection for SaaS, e-commerce, local service, B2B enterprise, info products, mobile app, real estate, healthcare, finance, and agency. Triggers on: "ads", "PPC", "paid advertising", "Google Ads", "Meta Ads", "Facebook Ads", "LinkedIn Ads", "TikTok Ads", "Microsoft Ads", "Bing Ads", "ad audit", "campaign audit", "ROAS", "conversion tracking", "creative fatigue", "bid strategy".
n8n-security-testing
by proffesor-for-testing
"Credential exposure detection, OAuth flow validation, API key management testing, and data sanitization verification for n8n workflows. Use when validating n8n workflow security."
security-review
by affaan-m
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
agent-agentic-payments
by ruvnet
Agent skill for agentic-payments - invoke with $agent-agentic-payments
skill-claw
by nyldn
OpenClaw instance administration — manage hosts across macOS, Ubuntu/Debian, Docker, OCI, and Proxmox. Use when: AUTOMATICALLY ACTIVATE when user asks about:. "manage openclaw" or "openclaw status" or "openclaw health". "update openclaw" or "upgrade openclaw" or "openclaw doctor"
agent-agentic-payments
by ruvnet
Agent skill for agentic-payments - invoke with $agent-agentic-payments
secure-code-review
by Ed1s0nZ
安全代码审查的专业技能和方法论
incident-response
by Ed1s0nZ
安全事件响应的专业技能和方法论
agent-challenges
by ruvnet
Agent skill for challenges - invoke with $agent-challenges
agent-code-analyzer
by ruvnet
Agent skill for code-analyzer - invoke with $agent-code-analyzer
AnnualReports
by danielmiessler
Annual security report aggregation and analysis. USE WHEN annual reports, security reports, threat reports, industry reports, update reports, analyze reports, vendor reports, threat landscape.
agent-code-review-swarm
by ruvnet
Agent skill for code-review-swarm - invoke with $agent-code-review-swarm
docs-writing
by mblode
Writes and audits technical documentation using Diataxis, Stripe-style clarity, and the Eight Rules. 52 rules across 9 categories covering voice, structure, clarity, code examples, formatting, navigation, scanability, content hygiene, and review. Use when writing docs, creating READMEs, documenting APIs, writing tutorials, building a docs site, or auditing documentation quality.
cto-advisor
by borghei
Technical leadership advisor for CTOs on architecture decisions, engineering strategy, team scaling, technical debt management, and technology evaluation.
senior-security
by borghei
Expert security engineering covering application security, infrastructure security, threat modeling, penetration testing, and compliance.
octopus-quick-review
by nyldn
Fast pre-commit code review using multi-AI consensus. Use when: Use this skill when the user says "review this code", "check this PR",. "quality check the implementation", "review my changes", or "what's wrong with this code".