Security
Security scanning and vulnerability detection
openai-security-best-practices
by trailofbits
Perform language and framework specific security best-practice reviews and suggest improvements.
security-awareness
by trailofbits
Teaches agents to recognize and avoid security threats during normal activity. Covers phishing detection, credential protection, domain verification, and social engineering defense. Use when building or operating agents that access email, credential vaults, web browsers, or sensitive data.
feature-flags
by BuilderIO
Declare, evaluate, manage, and remove framework feature flags. Use when shipping a capability gradually, targeting users or organizations, or replacing a compile-time rollout switch with a production-safe runtime flag.
agent-agentic-payments
by ruvnet
Agent skill for agentic-payments - invoke with $agent-agentic-payments
agent-app-store
by ruvnet
Agent skill for app-store - invoke with $agent-app-store
agent-challenges
by ruvnet
Agent skill for challenges - invoke with $agent-challenges
agent-code-review-swarm
by ruvnet
Agent skill for code-review-swarm - invoke with $agent-code-review-swarm
agent-arch-system-design
by ruvnet
Agent skill for arch-system-design - invoke with $agent-arch-system-design
agent-code-analyzer
by ruvnet
Agent skill for code-analyzer - invoke with $agent-code-analyzer
agent-byzantine-coordinator
by ruvnet
Agent skill for byzantine-coordinator - invoke with $agent-byzantine-coordinator
klausel-mindestlizenzen-meldungen-audit
by Klotzkette
"Für Klausel Mindestlizenzen, Meldungen, Audit: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt."
reviewing-python-libraries
by wdm0006
Comprehensively reviews Python libraries for quality across project structure, packaging, code quality, testing, security, documentation, API design, and CI/CD. Provides actionable feedback and improvement recommendations. Use when evaluating library health, preparing for major releases, or auditing dependencies.
tech-stack-evaluator
by alirezarezvani
Comprehensive technology stack evaluation and comparison tool with TCO analysis, security assessment, and intelligent recommendations for engineering teams
Probe
by simota
OWASP ZAP/Burp Suiteé£æºããããã¬ã¼ã·ã§ã³ãã¹ãè¨ç»ãDASTå®è¡ãèå¼±æ§ã¹ãã£ã³ãåçã»ãã¥ãªãã£ãã¹ããä¾µå ¥ãã¹ããå®è¡æèå¼±æ§æ¤è¨¼ãå¿ è¦ãªæã«ä½¿ç¨ãSentinelã®éçåæãè£å®ã
homelab-vlan-segmentation
by affaan-m
Segmenting home networks into VLANs for IoT, guest, trusted, and server traffic using UniFi, pfSense/OPNsense, and MikroTik — including switch trunk config, firewall rules, and wireless SSID mapping. Use when splitting a home network into IoT, guest, trusted, and server VLANs on UniFi, pfSense/OPNsense, or MikroTik.
defi-amm-security
by affaan-m
Security checklist for Solidity AMM contracts, liquidity pools, and swap flows. Covers reentrancy, CEI ordering, donation or inflation attacks, oracle manipulation, slippage, admin controls, and integer math. Use when auditing or writing Solidity AMM, liquidity pool, or swap code.
security-bounty-hunter
by affaan-m
Hunt for exploitable, bounty-worthy security issues in repositories. Focuses on remotely reachable vulnerabilities that qualify for real reports instead of noisy local-only findings. Use when hunting reportable, remotely reachable vulnerabilities in a repository.
hipaa-compliance
by affaan-m
HIPAA-specific entrypoint for healthcare privacy and security work. Use when a task is explicitly framed around HIPAA, PHI handling, covered entities, BAAs, breach posture, or US healthcare compliance requirements.
quarkus-security
by affaan-m
Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security. Use when reviewing Quarkus authn/authz, JWT or OIDC, RBAC, validation, or secrets.
perl-security
by affaan-m
Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies. Use when reviewing Perl input handling, process execution, DBI queries, or web-facing code.
github-workflow-automation
by ruvnet
Advanced GitHub Actions workflow automation with AI swarm coordination, intelligent CI/CD pipelines, and comprehensive repository management
V3 Security Overhaul
by ruvnet
"Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation."
agent-agentic-payments
by ruvnet
Agent skill for agentic-payments - invoke with $agent-agentic-payments
application-security
by travisjneuman
OWASP Top 10 with code examples, SAST/DAST tools, dependency scanning, CSP headers, and input validation patterns. Use when hardening applications, reviewing security posture, or implementing defensive coding practices.