Security AI agent skills

3,127 skills in the archive. Read a skill’s instructions or open its original repository.

• Argocd Gitops

  by @BagelHole

  Implement GitOps with ArgoCD for declarative Kubernetes deployments. Configure applications, manage sync policies, implement progressive delivery, and automate deployments from Git repositories. Use when implementing GitOps…

• Github Actions

  by @BagelHole

  Build, test, and deploy applications using GitHub Actions workflows. Create CI/CD pipelines, configure runners, manage secrets, and automate software delivery. Use when working with GitHub repositories, automating builds,…

• Docker Management

  by @BagelHole

  Build, optimize, and troubleshoot Docker containers and images. Create efficient Dockerfiles, manage container lifecycle, configure networking and volumes, and debug container issues. Use when working with Docker,…

• Gitlab Ci

  by @BagelHole

  Configure GitLab CI/CD pipelines and runners for automated building, testing, and deployment. Create .gitlab-ci.yml configurations, manage runners, and implement DevOps workflows. Use when working with GitLab repositories or…

• Helm Charts

  by @BagelHole

  Create, manage, and deploy Helm charts for Kubernetes package management. Build reusable chart templates, manage releases, configure values, and use Helm repositories. Use when packaging Kubernetes applications or managing K8s…

• Datadog

  by @BagelHole

  Implement Datadog monitoring and APM for infrastructure and applications. Configure agents, create dashboards, set up alerts, and implement distributed tracing. Use when implementing enterprise monitoring, APM, or unified…

• Jenkins

  by @BagelHole

  Create and manage Jenkins CI/CD pipelines, configure agents, manage plugins, and automate builds. Use when working with Jenkins servers, creating Jenkinsfiles, or setting up build automation for enterprise environments.

• Aws Ec2

  by @BagelHole

  Manage EC2 instances, AMIs, and auto-scaling groups. Configure security groups, key pairs, and instance types. Use when deploying compute resources on AWS.

• Cloudformation

  by @BagelHole

  Deploy AWS resources with CloudFormation templates. Create stacks, use nested stacks, and implement drift detection. Use when deploying AWS-native IaC.

• Arm Templates

  by @BagelHole

  Deploy Azure resources with ARM templates and Bicep. Create modular deployments and manage dependencies. Use when deploying Azure-native IaC.

• Azure Vms

  by @BagelHole

  Manage Azure Virtual Machines and scale sets. Configure availability sets and managed disks. Use when deploying compute resources on Azure.

• Feature Flags

  by @BagelHole

  Implement feature flags for progressive feature rollout using LaunchDarkly, Unleash, or custom solutions. Control feature visibility, perform A/B testing, and enable trunk-based development. Use when implementing gradual…

• Kustomize

  by @BagelHole

  Customize Kubernetes manifests without templating using Kustomize. Create base configurations with environment overlays, manage configuration variants, and patch resources declaratively. Use when managing Kubernetes…

• Git Workflow

  by @BagelHole

  Implement Git branching strategies, PR workflows, and release management patterns. Configure GitFlow, trunk-based development, or GitHub Flow for team collaboration. Use when establishing version control workflows or improving…

• Blue Green Deploy

  by @BagelHole

  Configure zero-downtime deployment strategies including blue-green, canary, and rolling deployments. Implement traffic shifting, health checks, and rollback procedures. Use when implementing production deployment strategies or…

• Container Registries

  by @BagelHole

  Manage container registries including ECR, ACR, GCR, and Docker Hub. Push and pull images, configure authentication, set up repository policies, and implement image lifecycle management. Use when working with container image…

• Loki Logging

  by @BagelHole

  Configure Grafana Loki for log aggregation and analysis. Set up Promtail for log collection, write LogQL queries, and integrate with Grafana for visualization. Use when implementing lightweight log aggregation, especially in…

• New Relic

  by @BagelHole

  Configure New Relic observability platform for infrastructure and application monitoring. Set up APM agents, create dashboards, configure alerts, and implement distributed tracing. Use when implementing full-stack observability…

• Devcontainers Nix

  by @BagelHole

  Create reproducible development environments with Dev Containers, Nix flakes, and Devbox for consistent toolchains across teams. Use when onboarding developers, standardizing build environments, or eliminating "works on my…

• Vector Database Ops

  by @BagelHole

  Deploy, manage, and optimize vector databases for AI applications. Covers Qdrant, Weaviate, pgvector, and Pinecone — collection management, indexing strategies, backup, and performance tuning for production RAG and semantic…

• Sre Dashboards

  by @BagelHole

  Design and operationalize SRE dashboards that surface reliability, latency, error, saturation, and capacity signals across services. Use when building observability views for SLOs, incident response, and executive reliability…

• Circleci

  by @BagelHole

  Configure CircleCI workflows and orbs for continuous integration and deployment. Create config.yml pipelines, use orbs for reusable configurations, and optimize build performance. Use when working with CircleCI for CI/CD…

• Model Serving Kubernetes

  by @BagelHole

  Deploy ML models on Kubernetes with KServe (formerly KFServing) and NVIDIA Triton Inference Server. Includes canary deployments, autoscaling, model versioning, A/B testing, and GPU resource management for production model serving.

• Openshift

  by @BagelHole

  Manage Red Hat OpenShift clusters and deployments. Configure projects, routes, builds, and deploy applications using OpenShift-specific features. Use when working with OpenShift Container Platform or OKD for enterprise Kubernetes.

• Podman

  by @BagelHole

  Manage containers using Podman, the daemonless container engine. Run rootless containers, create pods, manage images, and use Docker-compatible commands. Use when working with Podman or requiring rootless container operations.

• Azure Devops

  by @BagelHole

  Set up Azure Pipelines for CI/CD, configure build and release pipelines, manage Azure DevOps projects, and integrate with Azure services. Use when working with Azure DevOps Services or Server for enterprise DevOps workflows.

• Semantic Versioning

  by @BagelHole

  Automate versioning and changelog generation using semantic versioning principles. Configure release automation, version bumping, and changelog tools. Use when implementing version management or automating release processes.

• Mdm Device Management

  by @BagelHole

  Manage and secure company devices with MDM solutions — enroll macOS, Windows, iOS, and Android devices, enforce security policies, and automate software deployment. Use when setting up device management for a growing team.

• Saas Security Posture

  by @BagelHole

  Audit and harden your SaaS tool stack — enforce SSO, review OAuth grants, manage shadow IT, and secure admin accounts across Slack, GitHub, Google Workspace, and AWS. Use when tightening security across company SaaS tools.

• Llm Inference Scaling

  by @BagelHole

  Auto-scale LLM inference clusters on Kubernetes using KEDA, custom GPU metrics, and horizontal pod autoscaling. Handle traffic spikes, implement queue-based scaling, and optimize cost with spot instances for AI workloads.

• Llm Caching

  by @BagelHole

  Implement multi-layer LLM caching with exact match, semantic similarity, and provider-side prompt caching. Reduce API costs by 30–70%, cut latency, and improve throughput using Redis, GPTCache, and provider caching APIs.

• Llm Fine Tuning

  by @BagelHole

  Set up infrastructure for fine-tuning LLMs with QLoRA, LoRA, and full fine-tuning using Hugging Face TRL, Axolotl, and distributed training with DeepSpeed or FSDP. Covers dataset prep, training runs, and model export.

• Ai Pipeline Orchestration

  by @BagelHole

  Orchestrate AI/ML pipelines for data ingestion, model training, batch inference, and RAG indexing using Prefect, Airflow, or Dagster. Build reliable, observable, and retriable workflows for production AI systems.

• Opentelemetry

  by @BagelHole

  Instrument applications and infrastructure with OpenTelemetry for unified traces, metrics, and logs. Use when implementing distributed tracing, service-level troubleshooting, or vendor-neutral observability.

• Identity Access Management

  by @BagelHole

  Set up and manage SSO, SCIM provisioning, and MFA for startup teams using Google Workspace, Okta, or Azure AD. Use when centralizing authentication, onboarding SSO, or meeting compliance requirements.

• Opentofu Migration

  by @BagelHole

  Migrate from Terraform to OpenTofu with state compatibility, provider registry setup, and CI/CD pipeline updates. Use when adopting the open-source Terraform fork or evaluating license-free IaC.

• Fedramp Compliance

  by @BagelHole

  Implement FedRAMP requirements for federal cloud services. Configure NIST 800-53 controls and continuous monitoring. Use when providing cloud services to US federal agencies.

• Aws Lambda

  by @BagelHole

  Build and deploy serverless functions on AWS Lambda. Configure triggers, manage permissions, and optimize performance. Use when implementing serverless applications.

• Policy As Code

  by @BagelHole

  Implement policy as code with OPA, Sentinel, and Kyverno. Automate policy enforcement in CI/CD and infrastructure. Use when enforcing compliance through automation.

• Runbook Creation

  by @BagelHole

  Create operational runbooks and standard operating procedures. Document troubleshooting guides and recovery procedures. Use when documenting operational knowledge.

• Ebpf Observability

  by @BagelHole

  Use eBPF for deep kernel-level observability — trace syscalls, network flows, and application behavior without code changes using Cilium, Tetragon, and bpftrace.

• Iso27001 Compliance

  by @BagelHole

  Implement ISO 27001 Information Security Management System. Configure ISMS controls and risk management. Use when implementing enterprise security frameworks.

• Aws Iam

  by @BagelHole

  Manage IAM users, roles, and policies. Implement least-privilege access and security best practices. Use when configuring AWS identity and access management.

• Gdpr Compliance

  by @BagelHole

  Implement GDPR data protection requirements. Configure consent management, data subject rights, and privacy by design. Use when processing EU personal data.

• Gcp Compute

  by @BagelHole

  Manage Compute Engine instances and instance templates. Configure managed instance groups and preemptible VMs. Use when deploying compute resources on GCP.

• Llmops Platform Engineering

  by @BagelHole

  Build production LLMOps platforms with CI/CD, model promotion workflows, evaluation gates, rollback, and governance across cloud and self-hosted inference.

• Audit Logging

  by @BagelHole

  Implement centralized audit logging and SIEM integration. Configure log retention and security monitoring. Use when implementing audit trail requirements.

• Azure Aks

  by @BagelHole

  Deploy and manage Azure Kubernetes Service clusters. Configure node pools, networking, and integrations. Use when running Kubernetes workloads on Azure.

• Platform Engineering

  by @BagelHole

  Build internal developer platforms (IDPs) with self-service infrastructure, golden paths, and developer portals using Backstage, Crossplane, and score.

• Database Backups

  by @BagelHole

  Implement database backup strategies. Configure automated backups, retention, and recovery testing. Use when designing backup and recovery procedures.

• Azure Networking

  by @BagelHole

  Configure Azure VNets, NSGs, and Azure Firewall. Implement hub-spoke topology and private endpoints. Use when designing Azure network infrastructure.

• Pci Dss Compliance

  by @BagelHole

  Implement PCI DSS requirements for payment card data. Configure cardholder data environment and security controls. Use when processing payment cards.

• Soc2 Compliance

  by @BagelHole

  Implement SOC 2 Trust Services Criteria. Configure security, availability, and processing integrity controls. Use when achieving SOC 2 certification.

• Azure Functions

  by @BagelHole

  Build serverless applications on Azure Functions. Configure triggers, bindings, and deployment. Use when implementing serverless workloads on Azure.

• Gcp Cloud Functions

  by @BagelHole

  Deploy serverless functions on Google Cloud Functions. Configure triggers and manage deployments. Use when implementing serverless workloads on GCP.

• Gpu Kubernetes Operations

  by @BagelHole

  Operate GPU-backed Kubernetes clusters for AI inference and training with scheduling, autoscaling, node health, MIG partitioning, and cost controls.

• Access Review

  by @BagelHole

  Conduct periodic access reviews and certifications. Implement access governance and recertification workflows. Use when managing access compliance.

• Disaster Recovery

  by @BagelHole

  Implement disaster recovery strategies and runbooks. Configure RPO/RTO targets and failover procedures. Use when planning for business continuity.

• Gcp Gke

  by @BagelHole

  Deploy and manage Google Kubernetes Engine clusters. Configure node pools, networking, and workload identity. Use when running Kubernetes on GCP.

• Aws Ecs Fargate

  by @BagelHole

  Deploy containers on ECS and Fargate. Configure task definitions, services, and load balancing. Use when running containerized workloads on AWS.

• Aws Vpc

  by @BagelHole

  Design and implement VPCs and networking. Configure subnets, route tables, and security groups. Use when setting up AWS network infrastructure.

• Gcp Networking

  by @BagelHole

  Configure VPCs, firewall rules, and Cloud NAT. Implement shared VPC and private service connect. Use when designing GCP network infrastructure.

• Asset Inventory

  by @BagelHole

  Maintain IT asset inventory and configuration management database. Track hardware, software, and cloud resources. Use when managing IT assets.

• Aws S3

  by @BagelHole

  Configure S3 buckets, policies, and lifecycle rules. Implement versioning, replication, and security. Use when managing object storage on AWS.

• Change Management

  by @BagelHole

  Implement change management processes. Configure CAB reviews, change windows, and rollback procedures. Use when managing production changes.

• Gcp Cloud Sql

  by @BagelHole

  Provision Cloud SQL and Spanner databases. Configure high availability, backups, and security. Use when deploying managed databases on GCP.

• Model Registry Governance

  by @BagelHole

  Establish model registry standards, governance controls, metadata schemas, approvals, and lifecycle policies for enterprise AI deployments.

• Redis

  by @BagelHole

  Configure Redis for caching and data storage. Set up clustering, persistence, and Sentinel. Use when implementing Redis caching or queues.

• Vendor Management

  by @BagelHole

  Implement vendor risk management programs. Assess third-party security and maintain vendor inventory. Use when managing supplier security.

• Aws Rds

  by @BagelHole

  Provision and manage RDS databases. Configure backups, replication, and security. Use when deploying managed relational databases on AWS.

• Azure Sql

  by @BagelHole

  Provision Azure SQL Database and Cosmos DB. Configure security, backups, and replication. Use when deploying managed databases on Azure.

• Azure Monitor Audit

  by @BagelHole

  Configure Azure Monitor and Activity Log for auditing. Set up diagnostic settings and log analytics. Use when auditing Azure activity.

• Postgresql

  by @BagelHole

  Administer PostgreSQL databases. Configure replication, backups, and performance tuning. Use when managing PostgreSQL deployments.

• Hipaa Compliance

  by @BagelHole

  Implement HIPAA security and privacy rules. Configure PHI protections and BAA requirements. Use when handling healthcare data.

• Aws Cloudtrail

  by @BagelHole

  Configure AWS CloudTrail for audit logging. Set up organization trails and event analysis. Use when auditing AWS activity.

• Gcp Audit Logs

  by @BagelHole

  Configure GCP Cloud Audit Logs for compliance. Set up log routing and BigQuery analysis. Use when auditing GCP activity.

• Mysql

  by @BagelHole

  Administer MySQL/MariaDB databases. Configure replication and optimize performance. Use when managing MySQL deployments.

• Planetscale

  by @BagelHole

  Operate MySQL-compatible databases on PlanetScale with branching workflows, safe migrations, and production rollouts.

• Cloudflare Workers

  by @BagelHole

  Build and deploy edge functions with Cloudflare Workers and Wrangler. Use for APIs, cron jobs, and edge middleware.

• Mongodb

  by @BagelHole

  Administer MongoDB databases. Configure replica sets, sharding, and backups. Use when managing MongoDB deployments.

• Cloudflare R2

  by @BagelHole

  Manage Cloudflare R2 buckets, lifecycle, and signed URLs. Use for low-egress object storage and media delivery.

• Cloudflare Pages

  by @BagelHole

  Deploy static sites and full-stack apps on Cloudflare Pages with previews, functions, and custom domains.

• Cloudflare Zero Trust

  by @BagelHole

  Protect internal apps with Cloudflare Access, device posture, and Zero Trust policies.

• Startup It Troubleshooting

  by @BagelHole

  Practical IT troubleshooting playbooks for small teams without dedicated IT staff.

• Code Reviewing

  by @huangjia2019

  Review code for quality, security, and best practices. Use when the user asks for code review, wants feedback on their code, mentions reviewing changes, or asks about code quality.

• Code Health Check

  by @huangjia2019

  Perform a comprehensive code health check on a directory. Use when the user asks to analyze code quality, find issues, or get a health report.

• Cloudbase Cli

  by @TencentCloudBase

  CloudBase CLI (tcb, 云开发CLI, Tencent CloudBase命令行) resource management skill. Use when deploying cloud functions, CloudRun, storage, NoSQL/MySQL, static hosting, permissions, CORS/domains via tcb; for CI/CD and batch ops; when…

• Minimal Web Baas Demo

  by @TencentCloudBase

  Fast path for a minimal CloudBase Web + database demo (最小前后端 / 最小可用 fullstack / Lovable-like BaaS). Defaults to @cloudbase/js-sdk client CRUD (NoSQL app.database / PG app.rdb), MCP-only schema, preview-first, and forbids cloud…

• Auth Nodejs Cloudbase

  by @TencentCloudBase

  CloudBase Node SDK auth guide for server-side identity, user lookup, and custom login tickets. This skill should be used when Node.js code must read caller identity, inspect end users, or bridge an existing user system into…

• Clawsec Scanner

  by @prompt-security

  Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and agent-specific static hook…

• Openclaw Audit Watchdog

  by @prompt-security

  Automated daily security audits for OpenClaw agents with DM delivery and optional email reporting. Runs deep audits, creates or updates a recurring cron job, and sends formatted reports to configured recipients.

• Picoclaw Security Guardian

  by @prompt-security

  Picoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance.

• Soul Guardian

  by @prompt-security

  Drift detection + baseline integrity guard for agent workspace files with automatic alerting support

• Openclaw Traffic Guardian

  by @prompt-security

  OpenClaw runtime traffic monitoring baseline for opt-in HTTP/HTTPS proxy inspection, egress detection, inbound injection detection, and social-account policy review.

• Picoclaw Traffic Guardian

  by @prompt-security

  Picoclaw runtime traffic monitoring baseline for lightweight AI gateway proxy inspection, egress detection, and posture integration.

• Hermes Traffic Guardian

  by @prompt-security

  Hermes runtime traffic monitoring baseline for opt-in proxy inspection, egress detection, and attestation-aware traffic posture.

• Nanoclaw Traffic Guardian

  by @prompt-security

  NanoClaw runtime traffic monitoring baseline for host-side proxy inspection with container-safe MCP and IPC status surfaces.

• Pentest

  by @AKCodez

  Security testing and OSINT toolkit wrapping 183+ tools from Z4nzu/hackingtool (nmap, sherlock, amass, subfinder, nuclei, httpx, holehe, maigret, trufflehog, sqlmap, impacket, netexec, and more). Use whenever the user asks to…

• Crowi Pr Received

  by @crowi

  外部から GitHub PR が来たときの triage → 分類 → 対応判断 → (承認後の)応答/取り込みを 定型化する skill。他人のコードは checkout もスクリプト実行もせず gh 経由の remote diff だけで triage を完結させ、merge / close / comment などの外向き操作は必ず sotarok の 承認を経る。supply chain 攻撃(lockfile poisoning /…

• Crowi Deps

  by @crowi

  Crowi の security 依存(GitHub Dependabot alerts)を本質的に対応する skill。 「最近 dependency 見てないな」というとき単発 (`/crowi-deps`) で手起動する。 alert 取得 → direct/transitive 分類 → 根本対応(direct は version bump、 transitive は親 bump、親が上げられないときだけ per-major…