Security AI agent skills

3,127 skills in the archive. Read a skill’s instructions or open its original repository.

• Grove

  by @simota

  Designing and auditing repository structure for humans and LLM agents: layouts, monorepos, docs/tests/scripts, progressive disclosure, prompt-cache topology, and safe migrations.

• Gateway

  by @simota

  Designing and reviewing APIs: OpenAPI spec generation, versioning strategy, breaking change detection, REST/GraphQL best practices. Use for API design or OpenAPI specs.

• Oracle

  by @simota

  Designing and evaluating AI/ML systems: prompt engineering, RAG design, LLM application patterns, AI safety, evaluation frameworks, MLOps, cost optimization. Use for AI pipelines or eval harnesses.

• Project Management

  by @vanillagreencom

  Load to plan a cycle, audit issues, build a roadmap, or decompose research into issues.

• Guardian

  by @simota

  Gatekeeping Git/PR by classifying change essence and recommending granularity, naming, and strategy. Use when PR preparation or commit strategy is needed.

• Flux

  by @simota

  Refracting thinking by challenging assumptions, combining cross-domain knowledge, and shifting perspectives to reframe problems. Use for stuck situations or paradigm shifts. Does not write code.

• Radar

  by @simota

  Adding edge-case tests, repairing flaky tests, and improving coverage. Use when test gaps need filling or regressions need guarding. Supports JS/TS, Python, Go, Rust, and Java.

• Canvas

  by @simota

  Visualizing code, specs, or context as Mermaid, ASCII, or draw.io diagrams: flowcharts, sequence/state/class/ER, Journey Maps, personas, coverage heatmaps. Use to reverse-document systems visually.

• Beacon

  by @simota

  Engineering observability and reliability: SLO/SLI design, distributed tracing, alerting, dashboards, capacity planning, toil automation, reliability review. Use for instrumentation or SLO definition.

• Muse

  by @simota

  Defining and managing design tokens, applying token systems to existing codebases, building design system foundations. Use for spacing, color, typography, dark mode, cross-platform output.

• Cast

  by @simota

  Casting personas: rapid generation from diverse inputs, registry-based persistence and lifecycle, data-driven evolution, inter-agent sync. Not for UI walkthroughs (Echo) or user research (Field).

• Gauge

  by @simota

  Auditing SKILL.md normalization and compliance: scans the 21-item checklist, classifies violations, produces fix snippets. Use when auditing SKILL.md compliance or ecosystem health.

• Probe

  by @simota

  Integrating OWASP ZAP/Burp Suite/Nuclei, planning penetration tests, executing DAST, and scanning for vulnerabilities. For runtime vulnerability validation. Complements Sentinel static analysis.

• Chain

  by @simota

  Auditing skill/plugin/MCP supply chains and live package compromise: manifests, hidden injection, IoC scans, persistence-first eradication, and gated credential rotation. Not for app SAST (Sentinel).

• Flow

  by @simota

  Implementing CSS/JS animations for hover effects, loading states, modal transitions, and gesture interactions. Use for meaningful motion, interaction feedback, or performance-safe animation.

• Pixel

  by @simota

  Generating pixel-accurate HTML/CSS code from image mockups (PNG/JPG/screenshots) and performing visual verification for faithful reproduction. Use when mockup-to-code generation is needed.

• Experiment

  by @simota

  Designing A/B tests: hypothesis docs, sample size, feature flags, significance analysis, CUPED, SRM detection, switchback experiments. Use when hypothesis validation is needed.

• Omen

  by @simota

  Enumerating failure modes via pre-mortem analysis. Systematically identifies failure scenarios for plans, designs, and features, scoring them with RPN/AP. Does not write code.

• Chisel

  by @simota

  Converting a supplied prompt into an executable specification: detects vague quality/quantity/explanation/style/design/technical/judgment wording, role and persona theater, and self-contradiction, then replaces each with a…

• Frame

  by @simota

  Extracting and structuring design context from Figma via MCP Server for downstream implementation agents. Use for Figma-to-code bridging or Code Connect management.

• Mend

  by @simota

  Remediating known failure patterns automatically from Triage diagnoses and Beacon alerts: runbooks with safety-tier classification, staged verification, rollback. Use for automated remediation.

• Rally

  by @simota

  Orchestrating multi-session parallel execution via Claude Code Agent Teams API and Codex CLI Subagents — launch, manage, coordinate concurrent tasks. Use when parallel work is needed.

• Breach

  by @simota

  Designing red team attack scenarios, threat models, MITRE ATT&CK/OWASP application, Purple Team exercises, and AI/LLM red teaming. Use when adversarial security validation is needed.

• Compass

  by @simota

  Navigating the skill ecosystem and guiding onboarding. Lists agents, recommends best fit for tasks. Don't use for task execution (Nexus), agent design (Architect).

• Ink

  by @simota

  Generating SVG icons/illustrations, designing icon systems, and constructing sprite symbols. Use when vector assets are needed.

• Cloak

  by @simota

  Engineering privacy and data governance: PII detection, data flow mapping, consent patterns, GDPR/CCPA-compliant implementation, DPIA. Use when privacy-by-design is needed.

• Pdm

  by @simota

  Navigating delivery status read-only: reconciles planned scope (specs/roadmap/PRD) against implemented code for what's built vs left. Not for priority scoring (Rank) or AC conformance (Attest).

• Prune

  by @simota

  Cleaning up the skill ecosystem: auditing the agent roster for overlap and inactivity, proposing merges and sunset plans. Propose-only. Not for ecosystem strategy (Darwin) or code YAGNI (Void).

• Crypt

  by @simota

  Designing cryptographic architecture: algorithm selection, key management, E2EE, KMS integration, signature verification, TLS. Use when designing crypto protocols or key rotation flows.

• Rank

  by @simota

  Quantifying priority by scoring competing items with ICE/RICE/WSJF/MoSCoW/Cost of Delay/Kano. No code. Use to prioritize features/bugs/initiatives or arbitrate Must vs Should at MVP scoping.

• Atelier

  by @simota

  Orchestrating design-to-implementation pipelines (code to visual to code closed loop), persisting a project design system across agents. Not for a single prototype (Forge) or direction only (Vision).

• Antigravity Manager

  by @reason-machines

  AI coding agent skill for Antigravity Manager — a Tauri v2 + Rust desktop app and Docker service that manages multiple Google/Anthropic accounts and proxies them as standard OpenAI/Anthropic/Gemini API endpoints with intelligent…

• Email

  by @JinFanZheng

  Email operations via IMAP/SMTP. Trigger for inbox checking, reading, drafting, or sending emails. Requires `.config/email.json` setup.

• Aube Package Manager

  by @reason-machines

  Expert guidance for using aube, a fast Rust-based Node.js package manager compatible with pnpm, npm, yarn, and bun lockfiles.

• Ai Scanner Garak

  by @reason-machines

  AI model safety scanner built on NVIDIA garak for testing LLMs against 179 security probes across 35 vulnerability families

• Lucid Dreamer

  by @jiaxiaojunQAQ

  Nightly AI memory reasoning system. Lucid runs every night while you sleep — it reads your daily notes and memory files, detects stale facts, unresolved todos, recurring problems, and forgotten decisions, then generates a review…

• Qa Expert

  by @zhaono1

  Quality assurance expert for testing strategies and quality gates. Use when planning test coverage, setting up QA processes, or improving quality standards.

• Security Auditor

  by @zhaono1

  Security vulnerability expert covering OWASP Top 10 and common security issues. Use when conducting security audits or reviewing code for vulnerabilities.

• Isms Audit Expert

  by @jiaxiaojunQAQ

  Senior ISMS Audit Expert for internal and external information security management system auditing. Provides ISO 27001 audit expertise, security audit program management, security control assessment, and compliance verification.…

• Code Reviewer

  by @zhaono1

  Reviews pull requests and code changes for quality, security, and best practices. Use when user asks for code review, PR review, or mentions reviewing changes.

• Api Documenter

  by @zhaono1

  API documentation specialist for OpenAPI/Swagger specifications. Use when documenting REST or GraphQL APIs.

• Deps Mgmt

  by @jiaxiaojunQAQ

  Deep dependency management workflow—inventory, upgrade policy, security patches, licensing, lockfiles, and supply-chain hygiene. Use when upgrading frameworks, resolving CVEs, or standardizing how teams pin dependencies.

• Agentic Jujutsu

  by @jiaxiaojunQAQ

  Quantum-resistant, self-learning version control for AI agents with ReasoningBank intelligence and multi-agent coordination

• Mentor

  by @mcouthon

  Guide through problems with questions, not answers using Socratic teaching style. Use when asked to teach, explain concepts through discovery, help learn, or guide understanding without giving direct solutions. Triggers on: 'use…

• Asp Net Core Identity Patterns

  by @wshaddix

  Production-grade patterns for ASP.NET Core Identity in Razor Pages and web apps. Covers setup, customization, security hardening, auth flows, roles/claims, external providers, and integration best practices for .NET 8+ / .NET…

• Security Review

  by @mcouthon

  Security-focused code review with attack surface mapping and risk classification. Use when reviewing PRs for security, auditing code changes, or analyzing potential vulnerabilities. Triggers on: 'security review', 'use security…

• Architecture

  by @mcouthon

  Use when documenting architecture, understanding system structure, creating diagrams, or analyzing component relationships. Focuses on interfaces and high-level design. Triggers on: 'use architecture mode', 'architecture',…

• Tech Debt

  by @mcouthon

  Use when finding code smells, auditing TODOs, removing dead code, cleaning up unused imports, or assessing code quality. Triggers on: 'use tech-debt mode', 'tech debt', 'code smells', 'clean up', 'remove dead code', 'delete…

• Data Protection

  by @wshaddix

  ASP.NET Core Data Protection API patterns for encryption, key management, and secure data handling in web applications. Use when protecting sensitive data at rest or in transit, managing encryption keys in ASP.NET Core…

• Skill Router

  by @zhaono1

  Routes an agent request to the narrowest matching portable skill when the user asks which skill to use or needs help selecting one across supported hosts.

• Dotnet Api Security

  by @wshaddix

  Implementing API auth. Identity, OAuth/OIDC, JWT bearer, passkeys (WebAuthn), CORS, rate limiting.

• Dotnet Blazor Auth

  by @wshaddix

  Adding auth to Blazor. AuthorizeView, CascadingAuthenticationState, Identity UI, per-model flows.

• Dotnet Cryptography

  by @wshaddix

  Choosing crypto algorithms, hashing, encryption, or key derivation. AES-GCM, RSA, ECDSA, PQC.

• Dotnet Agent Gotchas

  by @wshaddix

  Generating or modifying .NET code. Common agent mistakes: async, NuGet, deprecated APIs, DI.

• Dotnet Api Versioning

  by @wshaddix

  Versioning HTTP APIs. Asp.Versioning.Http/Mvc, URL segment, header, query string, sunset.

• Php Best Practices

  by @AsyrafHussin

  PHP 8.x modern patterns, PSR standards, and SOLID principles. Use when reviewing PHP code, checking type safety, auditing code quality, or ensuring PHP best practices. Triggers on "review PHP", "check PHP code", "audit PHP", or…

• Technical Debt

  by @AsyrafHussin

  Technical debt inventory, prioritization, and audit for PHP/Laravel (MySQL) and Node/TypeScript/React projects. Use when assessing code health, identifying refactoring candidates, planning debt paydown, or auditing a codebase…

• Api Design Patterns

  by @AsyrafHussin

  RESTful API design, error handling, versioning, and best practices. Use when designing APIs, reviewing endpoints, implementing error responses, or setting up API structure. Triggers on "design API", "review API", "REST best…

• State Management

  by @AsyrafHussin

  React Query and Zustand patterns for state management. Use when implementing data fetching, caching, mutations, or client-side state. Triggers on tasks involving useQuery, useMutation, Zustand stores, caching, or state management.

• Project Docs

  by @AsyrafHussin

  Project documentation lifecycle for PHP/Laravel and Node/TypeScript/React projects — bootstrapping essential docs, naming and folder conventions, freshness, and cleanup of AI-generated junk and stale files. Use when starting a…

• Zoom Oauth

  by @zoom

  Zoom OAuth authentication and authorization. Covers four authorization flows: Account (S2S), User (authorization code), Device (device flow), and Client (chatbot). Use when implementing authentication for Zoom APIs, managing…

• Zoom Meeting Sdk Electron

  by @zoom

  Zoom Meeting SDK for Electron desktop applications. Use when embedding Zoom meetings in an Electron app with the Node addon wrapper, JWT auth, join/start flows, settings controllers, and raw data integration.

• Laravel Owasp Security

  by @AsyrafHussin

  OWASP Top 10 security audit and secure coding guidelines for Laravel + React/Inertia.js applications. Use when auditing for vulnerabilities ("run OWASP audit", "security review", "check my app security") or writing secure…

• Zoom Websockets

  by @zoom

  Zoom WebSockets for real-time event notifications via persistent connection. Alternative to webhooks with lower latency, bidirectional communication, and enhanced security. Use when you need real-time event updates, are in…

• Mapbox Token Security

  by @mapbox

  Security best practices for Mapbox access tokens, including scope management, URL restrictions, rotation strategies, and protecting sensitive data. Use when creating, managing, or advising on Mapbox token security.

• Zoom Mcp/Team Chat

  by @zoom

  Zoom Team Chat MCP server guidance for channel, message, contact, session, and file search/read workflows plus write-capable message and channel operations. Use for Team Chat MCP endpoints, OAuth scopes, tools/list, and…

• Security Operations

  by @serac-labs

  Build ServiceNow Security Operations — sn_si_incident with NIST-aligned state transitions, sn_vul_vulnerable_item with CVSS/risk scoring, sn_ti_indicator IOC matching, and containment playbooks.

• Instance Security

  by @serac-labs

  Harden a ServiceNow instance — password complexity, session timeout, MFA enforcement, input sanitization for XSS/injection, security properties, syslog events, and security health checks.

• Code Review

  by @serac-labs

  Review ServiceNow server-side scripts for ES5 violations, ACL/injection/XSS issues, N+1 queries, missing setLimit/error handling, hard-coded sys_ids, and business-rule recursion risks.

• Grc Compliance

  by @serac-labs

  Build ServiceNow GRC — sn_compliance_policy lifecycle, sn_compliance_control tests, sn_risk_risk assessment with inherent/residual scoring, audit engagements, and findings remediation.

• Ivangrynenko Cursorrules Drupal

  by @grasmash

  Drupal development and security patterns from Ivan Grynenko's cursor rules. Covers OWASP Top 10, authentication, access control, injection prevention, cryptography, configuration, database standards, file permissions, and more.

• Code Reviewer

  by @nahisaho

  Copilot agent that assists with comprehensive code review focusing on code quality, SOLID principles, security, performance, and best practices Trigger terms: code review, review code, code quality, best practices, SOLID…

• Security Auditor

  by @nahisaho

  security-auditor skill Trigger terms: security audit, vulnerability scan, OWASP, security analysis, penetration testing, security review, threat modeling, security best practices, CVE Use when: User requests involve security…

• Traceability Auditor

  by @nahisaho

  Validates complete requirements traceability across EARS requirements → design → tasks → code → tests. Trigger terms: traceability, requirements coverage, coverage matrix, traceability matrix, requirement mapping, test coverage,…

• Database Administrator

  by @nahisaho

  Copilot agent that assists with database operations, performance tuning, backup/recovery, monitoring, and high availability configuration Trigger terms: database administration, DBA, database tuning, performance tuning, backup…

• Project Manager

  by @nahisaho

  Copilot agent that assists with project planning, scheduling, risk management, and progress tracking for software development projects Trigger terms: project management, project plan, WBS, Gantt chart, risk management, sprint…

• Api Designer

  by @nahisaho

  AI agent supporting REST/GraphQL/gRPC API design, OpenAPI specification generation, and API best practices Trigger terms: API design, REST API, GraphQL, OpenAPI, API specification, endpoint design, API contract, API…

• Database Schema Designer

  by @nahisaho

  Copilot agent for database schema design, ER diagrams, normalization, DDL generation, and performance optimization Trigger terms: database design, schema design, ER diagram, normalization, DDL, database modeling, relational…

• Bug Hunter

  by @nahisaho

  Copilot agent that assists with bug investigation, root cause analysis, and fix generation for efficient debugging and issue resolution Trigger terms: bug fix, debug, troubleshoot, root cause analysis, error investigation, fix…

• Parallel Mcp Setup

  by @parallel-web

  Use when installing, configuring, or troubleshooting an authenticated Parallel Search MCP connection in Bifrost, including gateway-level search settings and downstream tool access.

• Design Reviewer

  by @nahisaho

  Copilot agent that assists with systematic design review using ATAM (Architecture Tradeoff Analysis Method), SOLID principles, design patterns, coupling/cohesion analysis, error handling, and security requirements Trigger terms:…

• Computer

  by @vm0-ai

  Computer connector for exposing local services to remote sandboxes via authenticated ngrok tunnels. Use when user mentions "computer use", "tunnel", "ngrok", "expose local", or needs to bridge local services to a sandbox.

• Finicity

  by @vm0-ai

  Use the platform-managed banking gateway backed by Finicity to list enabled bank accounts, balances, and transactions. Use when the user mentions Finicity, connected bank accounts, banking balances, or bank transactions.

• Cloudflare Tunnel

  by @vm0-ai

  Cloudflare Tunnel API for secure tunnels. Use when user mentions "Cloudflare tunnel", "argo tunnel", or secure connectivity.

• Issue Triage

  by @vm0-ai

  Triage support issues by severity, duplicates, ownership, and first-response approach.

• Express Production

  by @bobmatnyc

  Production-ready Express.js development covering middleware architecture, error handling, security hardening, testing strategies, and deployment patterns

• Better Auth Authentication

  by @bobmatnyc

  Better Auth authentication flows for TypeScript apps. Use when enabling email/password auth, configuring social providers, or implementing sign-up, sign-in, and verification flows.

• Spring Boot

  by @bobmatnyc

  Spring Boot 3.x - Java framework for production-ready applications with dependency injection, REST APIs, data access, security, and actuator monitoring

• Linkedin

  by @bobmatnyc

  LinkedIn automation via the Linked API CLI - fetch profiles, search people and companies, send messages, manage connections, create posts, react, comment, and run Sales Navigator and custom workflows. Use when the user wants to…

• Nextjs

  by @bobmatnyc

  Next.js environment variable management with file precedence, variable types, and deployment configurations. Use when configuring Next.js applications, managing environment-specific settings, or deploying to Vercel/Railway/Heroku.

• Wordpress Advanced Architecture

  by @bobmatnyc

  Advanced WordPress development with REST API endpoints, WP-CLI commands, performance optimization, and caching strategies for scalable applications.

• Odoo Service

  by @ahmed-lakosha

  Complete Odoo server lifecycle manager — run, deploy, initialize, and manage Odoo across local venv, Docker, and any IDE. Handles server startup/shutdown, environment initialization, database management, Docker orchestration,…

• Odoo Security

  by @ahmed-lakosha

  Comprehensive Odoo security auditor for model access rules, HTTP route authentication, sudo() usage, SQL injection risks, and record rule completeness across Odoo 14-19. <example> Context: User wants a full security audit user:…

• Paperclip

  by @IncomeStreamSurfer

  Interact with the Paperclip control plane API to manage tasks, coordinate with other agents, and follow company governance. Use when you need to check assignments, update task status, delegate work, post comments, or call any…

• Python Backend Architecture Review

  by @rknall

  Comprehensive design architecture review for Python backend applications. Use this skill when users ask you to review, analyze, or provide feedback on backend architecture designs, system design documents, or Python application…

• Docker Configuration Validator

  by @rknall

  Comprehensive Docker and Docker Compose validation following best practices and security standards. Use this skill when users ask to validate Dockerfiles, review Docker configurations, check Docker Compose files, verify…

• GitLab Stack Secrets Manager

  by @rknall

  Manages Docker secrets for GitLab stack projects, ensuring secrets are never in .env or docker-compose.yml, properly stored in ./secrets directory, and securely integrated with Docker secrets. Use when users need to create…

• GitLab Stack Validator

  by @rknall

  Validates GitLab stack projects before deployment, ensuring proper architecture patterns, directory structure, secrets management, .env configuration, and Docker best practices. Use when users ask to validate a stack, check…

• Apex Profile

  by @tonone-ai

  Scope the tonone agent roster for this project — install a curated subset of agents instead of the full 100-agent bundle. Use when "cut down the agent list", "profile for this project", "too many agents", "only need the…

• Brace Kb

  by @tonone-ai

  Build or audit knowledge base -- article structure, coverage gaps, deflection rate, and maintenance process. Use when asked to "build a knowledge base", "what docs are missing", "improve our self-serve rate", or "audit our help…