Security AI agent skills

3,127 skills in the archive. Read a skill’s instructions or open its original repository.

• Cross Wave Delta Analysis

  by @uphiago

  Compare recon waves to find NEW, REGRESSED, PERSISTENT findings.

• Deep Invade

  by @uphiago

  Deep pentest WP: SSRF, plugin CVE, JS mine, port scan chain.

• Firebase Supabase Attack

  by @uphiago

  Exploit Firebase/Supabase for data via JS config leak probe.

• Iot Camera Recon

  by @uphiago

  Attack cameras via RTSP, ONVIF, Axis config when 554 open.

• Phpinfo To Rce

  by @uphiago

  Chain phpinfo to RCE via exec check when info.php exposed.

• Wordpress Plugin Hunt

  by @uphiago

  Hunt WP plugins via REST, exploit CVEs when version known.

• Zimbra Attack

  by @uphiago

  Zimbra SOAP user enum, CVE-2022-37042, SSRF when webmail.

• Gitlab Public Recon

  by @uphiago

  Mine GitLab for secrets, CI tokens when subdomain found.

• Agent Context Audit

  by @AI-Builder-Club

  Audit a repo's agent context — CLAUDE.md files, codebase docs, skills, and tool/MCP designs — against Anthropic's Claude 5 context-engineering guidance ("unhobbling": Anthropic cut ~80% of Claude Code's system prompt with no…

• Langgraph Decision Models

  by @langchain-ai

  INVOKE THIS SKILL when routing a LangGraph agent with a decision model (TypeSafe Jev, SemIf) instead of an LLM, or when auditing an existing agent for LLM calls that only produce a routing decision. Covers langchain-typesafe…

• Wp Guard

  by @amElnagdy

  Review generated or changed WordPress code — plugins, themes, and blocks — before it ships. Best used reactively after an agent writes, edits, or reviews code touching WordPress APIs: add_action/add_filter, shortcodes, meta…

• Woo Guard

  by @amElnagdy

  Review generated or changed WooCommerce code — extensions, payment and shipping integrations, checkout customizations, and order/product logic — before it ships. Best used reactively after an agent writes, edits, or reviews code…

• Digikey

  by @aklofas

  Search DigiKey for electronic components and download datasheets — primary source for prototype orders and the preferred API method for fetching datasheets. Find parts by keyword or MPN, check pricing/stock, download datasheets…

• Element14

  by @aklofas

  Search Newark, Farnell, and element14 for electronic components — find parts by MPN or distributor part number, check pricing/stock, download datasheets, analyze specifications. One unified API covers all three storefronts…

• Mouser

  by @aklofas

  Search Mouser Electronics for electronic components — secondary source for prototype orders. Find parts, check pricing/stock, download datasheets, analyze specifications. Use with KiCad for BOM creation and part selection. Also…

• Databricks Migration

  by @microsoft

  Ports existing Databricks notebooks and jobs to Fabric, covering dbutils to notebookutils, secret scopes to Key Vault, DBFS to OneLake, Unity Catalog mapping to schema-enabled Lakehouses, Jobs and Delta Live Tables to Spark Job…

• Ccs Submission

  by @brycewang-stanford

  Use when auditing an ACM CCS submission for HotCRP readiness, dual-cycle abstract registration and full-paper deadlines, the 12-page ACM sigconf body, anonymization, the ethics considerations appendix, artifact-availability…

• Ccs Workflow

  by @brycewang-stanford

  Use when planning an ACM CCS project timeline across the two HotCRP review cycles, from venue fit through abstract registration, full-paper upload, rebuttal, notification, revision, artifact evaluation, ACM camera-ready, and…

• Aaai Writing Style

  by @brycewang-stanford

  Use when revising an AAAI manuscript for broad-AI-audience fit, a first-page contribution statement legible to non-specialist Phase-1 reviewers, two-column readability, concise novelty claims, reproducibility-checklist…

• Ccs Experiments

  by @brycewang-stanford

  Use when designing or auditing ACM CCS experiments, attack demonstrations, adaptive-attack defense evaluations, security measurements, baselines, overhead and cost reporting, ablations, and claim-to-evidence fit, with emphasis…

• Ccs Related Work

  by @brycewang-stanford

  Use when positioning an ACM CCS submission against the security big-four and specialist literature, including arXiv preprints, prior CCS/S&P/USENIX/NDSS papers, concurrent disclosures, CVE and advisory records, and the…

• Ccs Supplementary

  by @brycewang-stanford

  Use when preparing ACM CCS appendices and supplementary material, including the ethics considerations appendix, protocol transcripts, formal proofs, measurement tables, and anonymized supporting material under the 12-page body…

• Ccs Author Response

  by @brycewang-stanford

  Use when drafting an ACM CCS rebuttal during the HotCRP author-response window, covering threat-model defenses, adaptive-attack objections, ethics and disclosure questions, anonymity constraints, adversarial reviewer pushback…

• Ccs Review Process

  by @brycewang-stanford

  Use when explaining or planning around ACM CCS peer review, the two-cycle HotCRP workflow, decision categories including minor revision, the rebuttal window, the adversarial reviewer pool, ethics and disclosure scrutiny,…

• Ccs Writing Style

  by @brycewang-stanford

  Use when revising an ACM CCS paper for a precise threat model, calibrated attack/defense claims, 12-page ACM sigconf compression, double-blind wording, adaptive-evaluation honesty, and the security house style that survives an…

• Ccs Topic Selection

  by @brycewang-stanford

  Use when deciding whether a security project fits ACM CCS versus IEEE S&P, USENIX Security, NDSS, PETS, or a crypto/theory venue, identifying the security contribution type, and sharpening the threat model and attacker…

• Moai

  by @modu-ai

  MoAI unified orchestrator for autonomous development. Routes natural language or subcommands (plan, run, sync, project, fix, loop, mx, feedback, review, clean, codemaps, gate, e2e, harness, goal, gtd, todo) to specialized agents.

• Moai Ref Secops

  by @modu-ai

  DevSecOps, container, and API operational defensive security reference: CI/CD pipeline hardening, secret scanning, IaC misconfiguration detection, SAST/DAST integration, container image scanning, Kubernetes RBAC hardening,…

• Moai Workflow Docs Claim Check

  by @modu-ai

  Read-only check of whether the claims a public-facing document makes (README, release notes, install and usage guides) are supported by user-supplied evidence. Runs Preflight, Claim Triage, and Validation, splits composite…

• Moai Ref Seo

  by @modu-ai

  Search-visibility and crawlability reference for web output: canonical URL discipline, per-page title and meta description uniqueness, robots.txt and sitemap.xml as host-derived artifacts, JSON-LD structured data with entity…

• Moai Ref Supply Chain

  by @modu-ai

  Software supply-chain defensive security reference: SBOM generation and verification (SPDX / CycloneDX), dependency-confusion defense, malicious-package triage playbook, SLSA provenance levels, Sigstore / cosign signing and…

• Moai Ref Llm Security

  by @modu-ai

  AI/LLM defensive security reference: prompt-injection defense, OWASP LLM Top 10 defensive mapping, MCP and agentic tool-call hardening, training-data poisoning detection, model-output validation and guardrails, MITRE ATLAS…

• Moai Ref Api Patterns

  by @modu-ai

  REST/GraphQL API design patterns, error handling conventions, and input validation reference for backend development. Agent-extending skill that amplifies backend domain work (spawned via Agent(general-purpose) with backend…

• Moai Ref Owasp Checklist

  by @modu-ai

  OWASP Top 10 security checklist, authentication patterns, input validation, and HTTP security headers reference. Agent-extending skill that amplifies backend-implementation and security-audit workflows with production-grade…

• Moai Ref Testing Pyramid

  by @modu-ai

  Test pyramid strategy, coverage targets, test patterns, and quality metrics reference. Agent-extending skill that amplifies manager-develop test-creation and quality-validation work with production-grade testing patterns. NOT…

• Moai Domain Backend

  by @modu-ai

  Backend development specialist covering API design, database integration, microservices architecture, and modern backend patterns. Use when designing APIs, implementing server logic, authentication, or authorization.

• Solidity Auditor

  by @pashov

  Security audit of Solidity code while you develop. Trigger on "audit", "check this contract", "review for security", "loop mode", "run the auditor in loop mode", "run 3 passes". Modes - default (full repo) or a specific…

• X Ray

  by @pashov

  Generates an x-ray.md pre-audit report covering overview, enhanced threat model (protocol-type profiling, git-weighted attack surfaces, temporal risk analysis, composability dependency mapping), invariants, integrations, docs…

• Skill Author

  by @laude-institute

  Create new ShellLM skills. Use when the user asks to write, author, build, or scaffold a new skill, or when an agent needs to extend its own capabilities by creating a new SKILL.md file.

• Security

  by @sipyourdrink-ltd

  Security review - OWASP, auth, secrets, input validation.

• Bernstein Run

  by @sipyourdrink-ltd

  Run a verified multi-agent goal with Bernstein. Use when a task is too large for a single agent session: Bernstein decomposes the goal into tasks, spawns CLI coding agents in parallel git worktrees, verifies their output, and…

• Bernstein Plan

  by @sipyourdrink-ltd

  Create and manage multi-step execution plans in Bernstein. Plans decompose complex goals into stages with dependencies. Use when the user wants to plan a complex feature, break down a large task, or review an execution plan…

• Ad To Landing Page Auditor

  by @gooseworks-ai

  Analyze the message match between your ads and landing pages. Checks if the promise in the ad copy carries through to the landing page headline, body, and CTA. Flags disconnects that kill conversion rates. Works with Google,…

• Analyst

  by @sipyourdrink-ltd

  Evaluate proposals - feasibility, engineering payoff, risk.

• Learn Mcp

  by @fancyboi999

  AI Engineering from Scratch 中 Model Context Protocol (MCP) 路线的专注交互 tutor。 学习者想构建、保护、调试、验证或运行 MCP clients、servers、transports、gateways、 registries 或 conformance gates 时，开始或续学此路线。每次调用教学一课，并将 wire evidence 记录到 MCP-LEARNING.md。Start…

• Litcoin Miner

  by @BankrBot

  Mine, stake, claim, and manage LITCOIN end-to-end through Bankr. Hosted mining via @bankrbot: 'start a research miner for me' deploys a server-side Sentinel that uses the Bankr key as the LLM key against llm.bankr.bot, so no…

• Smart Contract Audit

  by @BankrBot

  500+ item EVM smart contract audit system across 19 domains. Runs parallel specialist agents, synthesizes findings, and files GitHub issues. Separate from the security skill — this is for auditing contracts you did not write.

• Security

  by @BankrBot

  Solidity vulnerabilities, defensive code patterns, and a pre-deployment audit checklist. Covers reentrancy, oracle manipulation, token decimals, SafeERC20, ERC-4626 inflation, infinite approvals, and MEV.

• Dotnet Devcert Trust

  by @Aaronontheweb

  Diagnose and fix .NET HTTPS dev certificate trust issues on Linux. Covers the full certificate lifecycle from generation to system CA bundle inclusion, with distro-specific guidance for Ubuntu, Fedora, Arch, and WSL2.

• Retro

  by @huytieu

  CP-7 retrospective: audit checkpoints, evidence quality, action items, and harvest candidates. Closes the V-model cycle and feeds the next run. Use via /retro after ship, escalate, or significant session.

• 1claw

  by @BankrBot

  HSM-backed secret management for AI agents. Store API keys (including Bankr `bk_` keys), passwords, and credentials in an encrypted vault; retrieve them at runtime via MCP without keeping secrets in chat context. Bankr Dynamic…

• Berry Juicer

  by @BankrBot

  Single-sided token-supply yield on Base, paid as AI inference. Use when an agent or user wants to deposit a portion of an ERC-20 token's supply into a Berry Juicer vault to earn trading fees, check a Juicer position or inference…

• Aeon Skill Security Scan

  by @BankrBot

  Audit installed Bankr skills before you run them — scan SKILL.md and companion scripts for shell injection, secret exfiltration, path traversal, prompt-override payloads, destructive commands, and 2026-era obfuscation…

• Aeon Vuln Scanner

  by @BankrBot

  Audit trending repos for real exploitable vulnerabilities and disclose responsibly — Private Vulnerability Reporting for code flaws and verified secrets, public PRs only for already-disclosed dependency CVEs. Semgrep +…

• Darksol Random Oracle

  by @BankrBot

  Bankr-compatible skill for DARKSOL Random Oracle, an on-chain verifiable RNG API on Base. Use when an agent needs random numbers, coin flips, dice rolls, random sequences, shuffles, raffles, loot drops, games, simulations,…

• Blueagent X402

  by @BankrBot

  Security OS for autonomous agents and builders on Base. 31 pay-per-use tools across Quantum Security, Agent Safety, Research, Data, and Earn. Built for AI agents, Zero-Human Companies (ZHC), and Base ecosystem builders. Pay USDC…

• Axiom Integration

  by @CharlesWiltgen

  Use when work crosses into Apple's system surfaces rather than your own UI or data — Siri and Shortcuts, widgets, Live Activities, in-app purchase, localization, privacy prompts, alarms, timers, calendar, reminders, contacts,…

• Axiom Data

  by @CharlesWiltgen

  Use when working with ANY data persistence, database, storage, CloudKit, migration, or serialization in an Apple app. Covers SwiftData, Core Data, GRDB, SQLite, Realm, CloudKit sync, file storage, Codable, migrations.

• Axiom Security

  by @CharlesWiltgen

  Use when storing credentials securely, encrypting data, implementing passkeys, securing AI/agentic features against prompt injection, code signing, or managing certificates and provisioning profiles.

• Axiom Shipping

  by @CharlesWiltgen

  Use when preparing an app for App Store submission, handling rejections or appeals, managing App Store Connect and Xcode Cloud, or triaging TestFlight/Sentry crash corpora. Covers checklists, metadata, privacy manifests, age…

• Axiom Macos

  by @CharlesWiltgen

  Use when building ANY macOS app — windows, menus, sandboxing, distribution, AppKit bridging or modernization (control events, state restoration, concentric corners), or macOS-specific SwiftUI patterns.

• Axiom Health

  by @CharlesWiltgen

  Use when working with HealthKit, WorkoutKit, health data, workouts, or fitness features on iOS or watchOS. Covers permissions, queries, background delivery, custom workouts, multidevice coordination.

• Axiom Build

  by @CharlesWiltgen

  Use when ANY iOS or macOS build fails, a crash log needs diagnosing, a test run crashes, Xcode misbehaves, or an environment issue blocks work before code is the suspect. Covers build failures, dependency conflicts, simulator…

• Axiom Networking

  by @CharlesWiltgen

  Use when implementing or debugging ANY network connection, API call, or socket in an Apple app. Covers URLSession, Network.framework, NetworkConnection, connection diagnostics.

• Axiom Resolve Spm

  by @CharlesWiltgen

  Use when the user mentions SPM resolution failures, "no such module" errors, duplicate symbol linker errors, version conflicts between packages, or Swift 6 package compatibility issues.

• Axiom Audit Grdb Performance

  by @CharlesWiltgen

  Use when the user mentions GRDB performance review, slow GRDB queries, app-group database setup audit, a ValueObservation that stopped updating, or pre-release GRDB scan.

• Axiom Scan Security Privacy

  by @CharlesWiltgen

  Use when the user mentions security review, App Store submission prep, Privacy Manifest requirements, hardcoded credentials, or sensitive data storage.

• Axiom Audit Testing

  by @CharlesWiltgen

  Use when the user wants to audit test quality, find flaky test patterns, speed up test execution, or prepare for Swift Testing migration.

• Axiom Swift Simplifier

  by @CharlesWiltgen

  Use when the user wants to simplify Swift code, reduce boilerplate, or make Swift more readable and idiomatic without changing behavior.

• Axiom Health Check

  by @CharlesWiltgen

  Use when the user wants a comprehensive project-wide audit, full health check, or scan across all domains.

• Axiom Audit Storage

  by @CharlesWiltgen

  Use when the user mentions file storage issues, data loss, backup bloat, or asks to audit storage usage.

• Axiom Optimize Build

  by @CharlesWiltgen

  Use when the user mentions slow builds, build performance, or build time optimization.

• Supabase Cli

  by @fcakyon

  This skill should be used when user asks to "use supabase CLI", "supabase init", "supabase start", "run migrations", "deploy edge functions", "manage Supabase project", or works with the supabase command-line tool for local…

• Site Architecture

  by @fcakyon

  Use when planning or restructuring what pages a site has and how they connect: hierarchy, navigation, URL patterns, breadcrumbs, and internal linking. Not for XML sitemaps, which are in seo-audit.

• Skill Installation

  by @uvwt

  审查、安装、配置、验证、更新和移除 AgentDock Skill 时使用；负责来源校验、安全评估、环境配置、content digest、精确 skill_ref 与当前 managed 内容验收。

• Ecs

  by @itsmostafa

  AWS ECS container orchestration for running Docker containers. Use when deploying containerized applications, configuring task definitions, setting up services, managing clusters, or troubleshooting container issues.

• Swift Security

  by @dpearson2699

  Use when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face ID, Touch ID), CryptoKit (AES-GCM, ChaChaPoly, ECDSA, ECDH, HPKE, ML-KEM), Secure…

• Authentication

  by @dpearson2699

  Implement iOS authentication flows with AuthenticationServices and LocalAuthentication. Use when building Sign in with Apple, passkey/WebAuthn registration or sign-in with ASAuthorizationPlatformPublicKeyCredentialProvider,…

• Cryptotokenkit

  by @dpearson2699

  Access security tokens and smart cards using CryptoTokenKit. Use when building TKTokenDriver or TKSmartCardTokenDriver extensions, communicating with smart cards via TKSmartCard/TKSmartCardSlotManager, using iOS 26+ NFC…

• Cryptokit

  by @dpearson2699

  Use Apple CryptoKit for Swift cryptographic primitives. Use when hashing with SHA-2 or SHA-3, generating HMACs, encrypting with AES-GCM or ChaChaPoly, signing with P256/P384/P521/Curve25519 or ML-DSA keys, performing ECDH, HPKE,…

• Test Audit

  by @udecode

  Audit existing tests for low-value, duplicated or implementation-coupled cases and the test-only code they keep alive, then remove or rewrite them on evidence. Use for test-audit, /test-audit <scope>, a test sweep, or pruning…

• Autoresearch

  by @OpenLAIR

  Autonomous Goal-directed Iteration. Apply Karpathy's autoresearch principles to ANY task. Loops autonomously — modify, verify, keep/discard, repeat. 9 subcommands: plan, debug, fix, security, ship, scenario, predict, learn.

• Aris Serverless Modal

  by @OpenLAIR

  Run GPU workloads on Modal — training, fine-tuning, inference, batch processing. Zero-config serverless: no SSH, no Docker, auto scale-to-zero. Use when user says "modal run", "modal training", "modal inference", "deploy to…

• Matlab Review Code

  by @matlab

  Review MATLAB code for quality, performance, maintainability, and adherence to MathWorks coding standards. Uses check_matlab_code and matlab_coding_guidelines. Use when reviewing code, checking style, finding code smells,…

• Himalaya

  by @mateaix

  CLI to manage emails via IMAP/SMTP. Use himalaya to list, read, write, reply, forward, search, and organize emails from the terminal. Supports multiple accounts and message composition with MML (MIME Meta Language).

• X Intel

  by @mateaix

  Read X (Twitter) posts, search, timelines and user profiles via the official xurl CLI.

• Hetzner Deploy

  by @fcakyon

  This skill should be used when user asks to "deploy to Hetzner", "create Hetzner server", "manage Hetzner Cloud", "hcloud CLI", or works with Hetzner Cloud infrastructure including servers, networks, firewalls, load balancers,…

• Azure Usage

  by @fcakyon

  This skill should be used when user asks to "query Azure resources", "list storage accounts", "manage Key Vault secrets", "work with Cosmos DB", "check AKS clusters", "use Azure MCP", or interact with any Azure service.

• Setup

  by @fcakyon

  This skill should be used when the user asks "how to setup GitHub CLI", "configure gh", "gh auth not working", "GitHub CLI connection failed", "gh CLI error", or needs help with GitHub authentication.

• Vc Security

  by @withkynam

  STRIDE + OWASP-based security audit with optional auto-fix. Scans code for vulnerabilities, categorizes by severity, and can iteratively fix findings using vc-autoresearch pattern.

• Vc Risk Evidence Pack

  by @withkynam

  Define and generate the manual-first evidence pack for high-risk work. Covers 6 high-risk class definitions and the 5-artifact schema required before finalizing, pushing, or handing off.

• Guardrail Tester

  by @RyanAlberts

  Guardrail tester that checks whether the permission rules and PreToolUse hooks already set up in Claude Code, Codex, Gemini CLI, OpenCode, or Cursor stop a battery of dangerous commands, including wrapped, reordered, and…

• Sandbox Check

  by @RyanAlberts

  Sandbox audit that probes, from inside a live coding-agent session, what the agent can really reach: secret files it can open, secret-like environment variables, files that git, the shell, the editor, or the harness later run…

• Kubernetes Ops

  by @BagelHole

  Deploy, scale, and manage Kubernetes workloads. Create deployments, services, and configurations, manage cluster resources, troubleshoot pods, and implement production-ready Kubernetes patterns. Use when working with Kubernetes…

• Prometheus Grafana

  by @BagelHole

  Set up metrics collection and visualization with Prometheus and Grafana. Configure scrape targets, create PromQL queries, build dashboards, and implement alerting. Use when implementing monitoring, metrics collection, or…

• Terraform Aws

  by @BagelHole

  Provision AWS infrastructure with Terraform. Create modules, manage state, and implement IaC best practices. Use when deploying AWS resources declaratively.

• Terraform Azure

  by @BagelHole

  Provision Azure infrastructure with Terraform. Configure providers, manage state, and deploy resources. Use when implementing IaC for Azure.

• Terraform Gcp

  by @BagelHole

  Provision GCP infrastructure with Terraform. Configure providers and deploy Google Cloud resources. Use when implementing IaC for GCP.

• Elk Stack

  by @BagelHole

  Deploy and manage the ELK Stack (Elasticsearch, Logstash, Kibana) for log aggregation and analysis. Configure log pipelines, create visualizations, and implement log-based monitoring. Use when centralizing logs, implementing…

• Docker Compose

  by @BagelHole

  Define and run multi-container Docker applications using Docker Compose. Create compose files, manage service dependencies, configure networks and volumes, and orchestrate local development environments. Use when setting up…