Security AI agent skills

3,127 skills in the archive. Read a skill’s instructions or open its original repository.

• Discord E2e

  by @openclaw

  Test Discord with Convex-leased QA bots: check credentials without a Gateway, exercise owned messages, or prove OpenClaw replies, files, threads, reactions, streaming, and typing. Distinguish API and Gateway evidence from manual…

• Release Openclaw Announcement

  by @openclaw

  Draft or post OpenClaw beta, stable, or extended-stable Discord release announcements from changelog, tag, registry, and validation evidence. Use when announcing a release, release candidate, or asking what users should test…

• Openclaw Secret Scanning Maintainer

  by @openclaw

  Triage, redact, clean up, and resolve OpenClaw GitHub Secret Scanning alerts in issues or PRs.

• Healthcheck

  by @openclaw

  Audit/harden OpenClaw hosts: SSH, firewall, updates, exposure, backups, disk encryption, gateway security.

• Add Model Provider

  by @openclaw

  Add and live-prove a model provider with non-interactive config one-liners, without exposing credentials.

• Openclaw Ghsa Maintainer

  by @openclaw

  Inspect, patch, validate, publish, or confirm OpenClaw GHSA security advisories and private-fork state.

• Security Triage

  by @openclaw

  Triage OpenClaw security advisories, drafts, and GHSA reports with shipped-tag and trust-model proof.

• Apple Notes

  by @openclaw

  Create, view, edit, delete, search, move, or export Apple Notes via the memo CLI on macOS.

• Diagnose Gateway

  by @openclaw

  Diagnose Gateway, config, secrets, channels, and port failures with read-only one-liners.

• Gog

  by @openclaw

  Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs.

• Bear Notes

  by @openclaw

  Create, search, and manage Bear notes via grizzly CLI.

• Test Collaboration

  by @affaan-m

  Inventory and govern a project's test assets. Connect requirements, business rules, risks, bugs, and cross-boundary contracts to stable TEST-IDs and executable evidence in the repository's existing test registry or TESTS.md. Use…

• Change Impact

  by @affaan-m

  Perform evidence-backed impact analysis before changing code, data, interfaces, or governance documents, then compare the planned impact with the actual diff after implementation. Covers call paths, data and schema, API…

• Product Capability

  by @affaan-m

  Translate PRD intent, roadmap asks, or product discussions into an implementation-ready capability plan that exposes constraints, invariants, interfaces, and unresolved decisions before multi-service work starts. Use when the…

• Springboot Security

  by @affaan-m

  Buenas prácticas de Spring Security para autenticación/autorización, validación, CSRF, secretos, cabeceras, limitación de velocidad y seguridad de dependencias en servicios Java Spring Boot.

• Quarkus Verification

  by @affaan-m

  Bucle de verificación para proyectos Quarkus: build, análisis estático, pruebas con cobertura, escaneos de seguridad, compilación nativa y revisión de diff antes del lanzamiento o PR.

• Agent Architecture Audit

  by @affaan-m

  エージェントおよび LLM アプリケーション向けのフルスタック診断。12 層のエージェントスタックにおけるラッパーリグレッション、メモリ汚染、ツール規律の失敗、隠れた修復ループ、レンダリング破損を監査します。重要度順の発見事項とコードファーストの修正を生成します。エージェントアプリケーション、自律ループ、または LLM を活用した機能を構築する開発者に必須です。

• Quarkus Security

  by @affaan-m

  Buenas prácticas de seguridad en Quarkus para autenticación, autorización, JWT/OIDC, RBAC, validación de entrada, CSRF, gestión de secretos y seguridad de dependencias.

• Quarkus Patterns

  by @affaan-m

  Patrones de arquitectura Quarkus 3.x LTS con Camel para mensajería, diseño de API RESTful, servicios CDI, acceso a datos con Panache y procesamiento asíncrono.

• Django Patterns

  by @affaan-m

  Patrones de arquitectura Django, diseño de API REST con DRF, buenas prácticas de ORM, caché, señales, middleware y aplicaciones Django de nivel producción.

• Antigravity Cli

  by @NousResearch

  Operate the Antigravity CLI (agy): plugins, auth, sandbox.

• Frontend Code Review

  by @langgenius

  Use only when the user explicitly requests a review or audit of frontend code under `web/` or `packages/dify-ui/`. Supports pending-change, file-focused, and pasted-diff reviews. Do not use for implementation-only requests,…

• Backend Code Review

  by @langgenius

  Use only when the user explicitly requests a review or audit of backend code under `api/`. Supports pending-change, file-focused, and pasted-diff reviews. Do not use for implementation-only requests, diagnosis without review…

• Command Development

  by @anthropics

  This skill should be used when the user asks to "create a slash command", "add a command", "write a custom command", "define command arguments", "use command frontmatter", "organize commands", "create command with file…

• Plugin Settings

  by @anthropics

  This skill should be used when the user asks about "plugin settings", "store plugin configuration", "user-configurable plugin", ".local.md files", "plugin state files", "read YAML frontmatter", "per-project plugin settings", or…

• Ponytail Audit

  by @DietrichGebert

  Whole-repo audit for over-engineering. Like ponytail-review, but scans the entire codebase instead of a diff: a ranked list of what to delete, simplify, or replace with stdlib/native equivalents. Use when the user says "audit…

• Mcp Apps Builder

  by @Shubhamsaboo

  **MANDATORY for ALL MCP server work** - mcp-use framework best practices and patterns. **READ THIS FIRST** before any MCP server work, including: - Creating new MCP servers - Modifying existing MCP servers (adding/updating…

• Dependency Doctor

  by @Shubhamsaboo

  Checks requirements.txt, pyproject.toml, and package.json dependency manifests for surface-level direct-dependency footguns: standard-library shadowing pins, abandoned backports, unpinned dependencies, and obvious intra-manifest…

• Cso

  by @garrytan

  Security audit: supported static findings; qualified profiles add reproduction and repair candidates. (gstack)

• Cavecrew

  by @JuliusBrussee

  When to delegate to `cavecrew-investigator` (locate code), `cavecrew-builder` (1-2 file edit) or `cavecrew-reviewer` (diff review) instead of working inline or using `Explore`. Their output is compressed, so main context lasts…

• Caveman Review

  by @JuliusBrussee

  Compressed code review - one line per finding with location, problem and fix. Use for /caveman-review, "review this PR", or "review the diff".

• V3 Security Overhaul

  by @ruvnet

  Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation.

• V3 Swarm Coordination

  by @ruvnet

  15-agent hierarchical mesh coordination for v3 implementation. Orchestrates parallel execution across security, core, and integration domains following 10 ADRs with 14-week timeline.

• Github Workflow Automation

  by @ruvnet

  Advanced GitHub Actions workflow automation with AI swarm coordination, intelligent CI/CD pipelines, and comprehensive repository management

• Review Homecore Server

  by @ruvnet

  Review Homecore server startup, restore, authentication, feature, and provider configuration.

• Stream Chain

  by @ruvnet

  Stream-JSON chaining for multi-agent pipelines, data transformation, and sequential workflows

• Github Code Review

  by @ruvnet

  Comprehensive GitHub code review with AI-powered swarm coordination

• Html Ppt Taste Brutalist

  by @nexu-io

  16:9 HTML deck in tactical-telemetry / CRT-terminal taste. Deactivated-CRT charcoal slides, white-phosphor monospace, hazard-red accent, scanline overlay, ASCII syntax, density over decoration. Distilled from…

• Security And Hardening

  by @addyosmani

  Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or external integrations, or when checking a login flow is safe against the…

• Source Driven Development

  by @addyosmani

  Grounds every implementation decision in official documentation. Use when you want to verify an approach against the official docs before implementing it, or when you want authoritative, source-cited code free from outdated…

• Shipping And Launch

  by @addyosmani

  Prepares production launches. Use when preparing to deploy to production, or when asking what needs to be in place before shipping. Use when you need a pre-launch checklist, when setting up monitoring, when planning a staged…

• Code Review And Quality

  by @addyosmani

  Conducts multi-axis code review. Use before merging any change. Use when reviewing code written by yourself, another agent, or a human. Use when you need to assess code quality across multiple dimensions before it enters the…

• Paperclip

  by @paperclipai

  Interact with the Paperclip control plane API for task coordination and governance. Use when checking assignments, updating issue status, posting comments, delegating work, managing routines, or calling Paperclip API endpoints.

• Prepare Mcp Integration

  by @paperclipai

  Prepare MCP/vendor integrations through cited research, a content PR, exact-revision human approval, and one governed Paperclip connector PR per approved connection. Use for new integration research and delivery; not for ad hoc…

• Paperclip Distill

  by @paperclipai

  Use when an operation issue is a Paperclip cursor-window, distill, or backfill. Turn source-bundled Paperclip activity into wiki-insightful project standups, durable project pages, decisions, and history without asset…

• Deal With Security Advisory

  by @paperclipai

  Handle confidential GitHub Security Advisory response for Paperclip. Use when coordinating advisory triage, private-fork fixes, CVE/publication steps, and immediate security releases.

• Paperclip Evals

  by @paperclipai

  Choose, inspect, validate, and report Paperclip Runner or Product E2E evaluations while preserving evidence, provenance, cost, and failure classification.

• Add Product E2e Eval

  by @paperclipai

  Add or extend a Paperclip full-stack runner E2E workflow, fixture, matcher, or report evidence path for local or Daytona execution.

• Ruview Advanced Sensing

  by @ruvnet

  Advanced RuView capabilities — RuvSense multistatic sensing (attention-weighted fusion, geometric diversity, persistent field model), cross-viewpoint fusion across multiple nodes, RF tomography (ISTA L1 solver, voxel grids),…

• Ruview Verify

  by @ruvnet

  Verify a RuView build — full Rust workspace tests, the deterministic Python pipeline proof (SHA-256 Trust Kill Switch), firmware hash manifest, and the ADR-028 witness bundle with one-command self-verification. Use after any…

• Version Bump

  by @thedotmack

  Automated semantic versioning and release workflow for Claude Code plugins. Handles version increments across package.json, marketplace.json, plugin.json manifests, build verification, git tagging, GitHub releases, and changelog…

• Cloud Sync

  by @thedotmack

  Set up or check claude-mem cloud sync with cmem.ai Pro. Use when the user says "set up cloud sync", "sync my memories", "cmem pro", "cloud backup", "sync status", or wants their memory database backed up or synced to their…

• Skill Reviewer

  by @bytedance

  Reviews DeerFlow skill packages for readiness, triggers, safety boundaries, resources, and evidence. Invoke when users ask to audit, grade, or production-check an existing skill.

• Ahrefs Automation

  by @ComposioHQ

  Automate SEO research with Ahrefs -- analyze backlink profiles, research keywords, track domain metrics history, audit organic rankings, and perform batch URL analysis through the Composio Ahrefs integration.

• Cross Origin Isolation

  by @thedaviddias

  Use when reviewing security-sensitive web apps, SharedArrayBuffer usage, worker-heavy apps, editors, or measurement features that require cross-origin isolation. Check both headers and real browser behavior.

• Accessible Authentication

  by @thedaviddias

  Use when reviewing sign-in, sign-up, MFA, CAPTCHA, recovery, and re-auth flows. Evaluate the full authentication path, including error handling and backup methods, not just the primary login form.

• Claims

  by @ruvnet

  Claims-based authorization for agents and operations. Grant, revoke, and verify permissions for secure multi-agent coordination. Use when: permission management, access control, secure operations, authorization checks. Skip…

• Embeddings

  by @ruvnet

  Vector embeddings with HNSW indexing, sql.js persistence, and hyperbolic support. 75x faster with agentic-flow integration. Use when: semantic search, pattern matching, similarity queries, knowledge retrieval. Skip when: exact…

• Agent Coordination

  by @ruvnet

  Agent spawning, lifecycle management, and coordination patterns. Manages 60+ agent types with specialized capabilities. Use when: spawning agents, coordinating multi-agent tasks, managing agent pools. Skip when: single-agent…

• Agentic Jujutsu

  by @ruvnet

  Quantum-resistant, self-learning version control for AI agents with ReasoningBank intelligence and multi-agent coordination

• Agent Byzantine Coordinator

  by @ruvnet

  Agent skill for byzantine-coordinator - invoke with $agent-byzantine-coordinator

• Agent V3 Security Architect

  by @ruvnet

  Agent skill for v3-security-architect - invoke with $agent-v3-security-architect

• Agent V3 Queen Coordinator

  by @ruvnet

  Agent skill for v3-queen-coordinator - invoke with $agent-v3-queen-coordinator

• Agent Memory Coordinator

  by @ruvnet

  Agent skill for memory-coordinator - invoke with $agent-memory-coordinator

• Agent Code Review Swarm

  by @ruvnet

  Agent skill for code-review-swarm - invoke with $agent-code-review-swarm

• Agent Github Pr Manager

  by @ruvnet

  Agent skill for github-pr-manager - invoke with $agent-github-pr-manager

• Agent Docs Api Openapi

  by @ruvnet

  Agent skill for docs-api-openapi - invoke with $agent-docs-api-openapi

• Agent Security Manager

  by @ruvnet

  Agent skill for security-manager - invoke with $agent-security-manager

• Agent Test Long Runner

  by @ruvnet

  Agent skill for test-long-runner - invoke with $agent-test-long-runner

• Agent Dev Backend Api

  by @ruvnet

  Agent skill for dev-backend-api - invoke with $agent-dev-backend-api

• Agent Authentication

  by @ruvnet

  Agent skill for authentication - invoke with $agent-authentication

• Agent Scout Explorer

  by @ruvnet

  Agent skill for scout-explorer - invoke with $agent-scout-explorer

• Agent Code Analyzer

  by @ruvnet

  Agent skill for code-analyzer - invoke with $agent-code-analyzer

• Agent Specification

  by @ruvnet

  Agent skill for specification - invoke with $agent-specification

• Agent User Tools

  by @ruvnet

  Agent skill for user-tools - invoke with $agent-user-tools

• Agent App Store

  by @ruvnet

  Agent skill for app-store - invoke with $agent-app-store

• Agent Reviewer

  by @ruvnet

  Agent skill for reviewer - invoke with $agent-reviewer

• Cross Host Federation

  by @ruvnet

  Join and operate a signed cross-host agentbbs federation, and coordinate work claims across nodes. Use when: connecting ruflo agents across machines, sharing status/tasks/results between hosts, propagating work claims across a…

• Browser Auth Flow

  by @ruvnet

  Probe a site's authentication flow for redirect leaks, missing CSRF, weak session cookies, and OAuth misconfiguration; produces an auth findings.md

• Browser Login

  by @ruvnet

  Drive an authentication flow once, sanitize cookies through AIDefence, and vault a reusable cookie handle in browser-cookies for future sessions

• Cost Benchmark

  by @ruvnet

  Run the corpus benchmark — booster locally, optional Gemini/Sonnet/Opus baselines — and persist a verifiable measured-vs-claimed table

• Discover Plugins

  by @ruvnet

  Discover and recommend ruflo plugins based on your workflow, installed MCP tools, and current task

• Cost Optimize

  by @ruvnet

  Analyze token usage patterns and recommend cost optimizations with estimated savings

• Security Research

  by @code-yeongyu

  Team Mode security research skill. Orchestrates 3 vulnerability hunters and 2 PoC engineers to audit a codebase in parallel, prove exploitability, classify root causes, and calibrate severity by actual exploitability. Use for…

• Publish

  by @code-yeongyu

  Publish oh-my-opencode to npm by triggering the GitHub Actions publish workflow and verifying its artifacts. Ship-only: never runs pre-publish-review or re-reviews merged code unless the user explicitly asks. Argument:…

• Review Work

  by @code-yeongyu

  Post-implementation gate review: run manual QA on the real surface yourself, then launch ONE gate reviewer (never a panel) to audit goal, constraints, code quality, security, missed context, and QA evidence. Use before a PR…

• Owasp Top 10 Testing

  by @usestrix

  Test an application against the OWASP Top 10 with Strix — autonomous AI agents that attempt real exploits for each category of the current OWASP Top 10:2025 (broken access control including SSRF, security misconfiguration,…

• Api Security Testing

  by @usestrix

  Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API…

• Application Security Testing

  by @usestrix

  Application security testing (AppSec) across a whole product with Strix — decide which asset needs which test (source code, running web app, API, CI pipeline), run it, and turn the results into a ranked remediation plan.…

• Find Security Vulnerabilities In Code

  by @usestrix

  Find security vulnerabilities in a codebase or repository with Strix — a white-box AI security review that reads your source, reasons about the actual data flow and authorization model, then exploits what it finds in a live…

• Penetration Testing With Strix

  by @usestrix

  Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves vulnerabilities (OWASP Top 10 and beyond — injection, XSS, SSRF, auth/access-control flaws,…

• Ci Security Scanning With Strix

  by @usestrix

  Add security scanning to CI/CD with Strix — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks vulnerable code before it merges, with results as PR comments and SARIF…

• Web App Penetration Testing

  by @usestrix

  Pentest a web app or website end to end — black-box testing of a live URL, staging environment, or local dev server that finds and exploits real vulnerabilities (auth bypass, broken access control, IDOR, injection, XSS, SSRF,…

• Fix Security Vulnerabilities With Strix

  by @usestrix

  Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause rather than the symptom, and re-run Strix to prove each fix actually closes the exploit.…

• Managed Pentesting With Strix

  by @usestrix

  Run a managed pentest of a web app, API, repository, or local workspace on the app.strix.ai platform with the `strix cloud` CLI or REST API — no local Docker or LLM key needed. Safely review and upload local source, register…

• Bmad Project Context

  by @bmad-code-org

  Set up, adopt, refresh, or audit a repository's agent instructions (the AGENTS.md block) so AI agents work well in that repo. Also records observed agent mistakes as pitfalls. Use when invoked by name

• Cookbook Audit

  by @anthropics

  Audit an Anthropic Cookbook notebook based on a rubric. Use whenever a notebook review or audit is requested.

• Cookie Debugging

  by @ChromeDevTools

  Uses Chrome DevTools MCP for inspecting, debugging, and testing cookies, session state, authentication issues, and cookie consent compliance. Use when diagnosing 401/403 errors, authentication redirects, session expiration,…

• Code Mate Hermes

  by @CherryHQ

  Runs Hermes Agent in one-shot mode for bounded local tasks. Use when the user explicitly asks to delegate work to Hermes and accepts its automatic tool approval behavior.

• Code Mate Pi

  by @CherryHQ

  Runs Pi non-interactively and parses its JSON event stream for repository tasks. Use when the user asks to delegate a bounded analysis or implementation task to Pi.