Security AI agent skills

3,127 skills in the archive. Read a skill’s instructions or open its original repository.

• Bkend Cookbook

  by @ww-w-ai

  bkend.ai practical project tutorials and troubleshooting guide. Covers 4 full-guide projects (blog, recipe-app, shopping-mall, social-network) with step-by-step implementation patterns including schema design, architecture…

• Bkend Security

  by @ww-w-ai

  bkend.ai security policies and encryption expert skill. Covers API key management (Public vs Secret), Row Level Security (RLS) with 4 roles (admin/user/guest/self), data encryption (Argon2id, AES-256-GCM, TLS 1.2+), and security…

• Bkend Guides

  by @ww-w-ai

  bkend.ai operational guides, troubleshooting, and platform comparison. Covers migration guides, performance optimization, testing strategy, common error solutions, and FAQ. Triggers: migration, troubleshoot, FAQ, performance,…

• Bkend Auth

  by @ww-w-ai

  bkend.ai authentication and security expert skill. Covers email signup/login, social login (Google, GitHub), magic link, JWT tokens (Access 1h, Refresh 30d), session management, RBAC (admin/user/self/guest), RLS policies,…

• Bkend Data

  by @ww-w-ai

  bkend.ai database expert skill. Covers table creation, CRUD operations, 7 column types, constraints, filtering (AND/OR, 10 operators), sorting, pagination, relations, joins, indexing, and schema management via MCP and REST API.…

• Bkend Quickstart

  by @ww-w-ai

  bkend.ai platform onboarding and core concepts guide. Covers MCP setup, resource hierarchy (Org->Project->Environment), Tenant vs User model, and first project creation. Use proactively when user is new to bkend or asks about…

• Zero Script Qa

  by @ww-w-ai

  Zero Script QA - Testing methodology without test scripts. Uses structured JSON logging and real-time Docker monitoring. Use proactively when user needs to verify features through log analysis. Triggers: zero script qa,…

• Development Pipeline

  by @ww-w-ai

  9-phase Development Pipeline complete knowledge. Use when user doesn't know development order or starts a new project. Triggers: development pipeline, phase, development order, where to start, what to do first, how to begin, new…

• Phase 8 Review

  by @ww-w-ai

  Skill for verifying codebase quality and gap analysis. Covers architecture consistency and convention compliance. Use proactively when implementation is complete and quality verification is needed. Triggers: code review,…

• Phase 6 Ui Integration

  by @ww-w-ai

  Skill for implementing UI and integrating with APIs. Covers frontend-backend integration and state management. Use proactively when user needs to connect frontend with backend. Triggers: UI implementation, API integration, state…

• Code Review

  by @ww-w-ai

  Code review skill for analyzing code quality, detecting bugs, and ensuring best practices. Use proactively when user requests code review, quality check, or bug detection. Triggers: code review, review code, check code, analyze…

• Phase 7 Seo Security

  by @ww-w-ai

  Skill for search optimization (SEO) and security hardening. Covers meta tags, semantic HTML, and security vulnerability checks. Use proactively when user asks about search ranking or security. Triggers: SEO, security, meta tags,…

• Emporia Energy

  by @viralcode

  Direct Emporia Vue energy queries via Emporia cloud (PyEmVue) or local ESPHome API, including guidance on choosing/configuring cloud vs local modes and running list/summary/circuit commands.

• Smtp Send

  by @viralcode

  Send emails via SMTP with support for plain text, HTML, and attachments. Use when the user asks to send an email, email someone, or compose and send a message. Supports single recipients and can include file attachments. Works…

• Zoho Email

  by @viralcode

  Complete Zoho Mail integration with OAuth2, REST API (5-10x faster), HTML emails, attachments, and batch operations. Perfect for email automation and workflows.

• Convex Self Heal

  by @get-convex

  Production error → triaged, root-caused, repaired, and certified (tsc + rehearsal + reproduce-then-gone) fix PR for a human to merge — then confirm the error stops recurring. Never auto-merges.

• Convex Reviewer

  by @get-convex

  Convex code reviewer — security, auth, validators, performance, and pattern checks for code in a convex/ directory. Use to review or audit Convex functions before shipping.

• Convex Optimize

  by @get-convex

  Audit and optimize an existing Convex app: security, scale, upgrades, observability.

• Postgres Writing Guidelines

  by @damusix

  Use when writing or reviewing PostgreSQL/PL-pgSQL, designing table schemas, writing functions and procedures, building migrations, defining domains, or architecting a Postgres application database. Also use when writing RAISE…

• Hurl

  by @damusix

  Write and run HTTP API tests in Hurl's plain-text format. Use when testing REST/GraphQL APIs, writing integration or smoke tests for HTTP endpoints, chaining requests with captured values, polling async APIs, converting curl…

• Rng Crypto Specialist

  by @egorfedorov

  Design, implement, and audit provably fair RNG and cryptographic seed workflows for casino games. Use when defining commit-reveal architecture, server/client seed lifecycle, nonce progression, hash/HMAC outcome derivation,…

• Api Connection

  by @rejot-dev

  Configure and use Backoffice API connections. Use when creating outbound HTTP API integrations, configuring OAuth or bearer authentication, starting API OAuth flows, checking auth status, or executing authenticated API requests…

• Api Webhooks

  by @rejot-dev

  Configure inbound API webhooks end to end. Use when the user needs a webhook/callback URL, provides webhook auth or sample payloads, defines provider events, or routes webhook.received deliveries into cataloged automation events.

• Slack Setup

  by @rejot-dev

  Set up or verify Slack in Backoffice for bot-token API calls, sending messages, Events API webhooks, app mentions, URL verification, signing-secret validation, or checking whether a Slack event arrived.

• Auth0

  by @auth0

  Use when adding, fixing, or improving how an app authenticates users or protects an API, or when using or configuring any Auth0 feature — signing users in and out, sessions and tokens, guarding routes and endpoints, MFA, SSO,…

• What Leaked About You

  by @UseOSINT

  Check and interpret data-breach exposure for an email, username, phone or name using Have I Been Pwned, the Pwned Passwords k-anonymity range API, DeHashed, IntelX and Snusbase. Use when checking breach or leak exposure, finding…

• Find Anyone

  by @UseOSINT

  Build a sourced, corroborated profile of a named individual from public records, social platforms, professional networks, court and property filings, licensing boards, patents, papers and obituaries — anchoring the name to a…