Security AI agent skills & MCP servers

100 claude-md-improver SkillSecurity
Audit and improve CLAUDE.md files in repositories. Use when user asks to check, audit, update, improve, or fix CLAUDE.md files. Scans for all CLAUDE.md files, evaluates quality aga

100 claude-security SkillSecurity
Claude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings

100 ontoly-software-graph SkillSecurity
Use Ontoly Software Graph evidence, CLI reports, MCP, and official Ontoly Agent Skills before searching source files when reviewing architecture, dependencies, request flows, confi

100 review-work SkillSecurity
Quality gate: verify each acceptance criterion of a completed task/work unit, run quality checks, and create follow-up tasks for gaps. Use before merging or to audit delivered work

100 cis-aws-foundations-2.3 SkillSecurity
Ensure security contact information is registered

100 cis-aws-foundations-5.10 SkillSecurity
Ensure security group changes are monitored

100 cis-aws-foundations-6.3 SkillSecurity
Ensure no security groups allow ingress from 0.0.0.0/0 to remote server administration ports

100 cis-aws-foundations-6.4 SkillSecurity
Ensure no security groups allow ingress from ::/0 to remote server administration ports

100 cis-aws-foundations-6.5 SkillSecurity
Ensure the default security group of every VPC restricts all traffic

100 cis-aws-compute-2.7 SkillSecurity
Ensure Default EC2 Security groups are not being used

100 cis-aws-compute-5.11 SkillSecurity
Ensure your Windows Server based lightsail instances are updated with the latest security patches

100 cis-aws-database-10.9 SkillSecurity
Ensure to Review and Update the Security Configuration

100 cis-aws-database-3.11 SkillSecurity
Ensure to Regularly Review Security Configuration

100 cis-aws-database-4.6 SkillSecurity
Ensure DynamoDB Streams and AWS Lambda for Automated Compliance Checking is Enabled

100 cis-aws-database-4.7 SkillSecurity
Ensure Monitor and Audit Activity is enabled

100 cis-aws-database-5.10 SkillSecurity
Ensure Security Configurations are Reviewed Regularly

100 cis-aws-database-5.7 SkillSecurity
Ensure Security Configurations are Reviewed Regularly

100 cis-aws-database-6.5 SkillSecurity
Ensure Security Configurations are Reviewed Regularly

100 cis-aws-database-9.6 SkillSecurity
Ensure Security Configurations are Reviewed Regularly

100 cis-aws-euc-2.18 SkillSecurity
Ensure Radius server is using the recommended security protocol

100 cis-aws-storage-3.5 SkillSecurity
Ensure using Security Groups for VPC to control EFS traffic

100 cis-aws-storage-3.8 SkillSecurity
Ensure managing mount target security groups

100 cis-gcp-foundations-1.3 SkillSecurity
Ensure That Security Key Enforcement is Enabled for All Admin Accounts

100 cis-gcp-foundations-2.1 SkillSecurity
Ensure That Cloud Audit Logging Is Configured Properly

100 cis-gcp-foundations-2.5 SkillSecurity
Ensure That the Log Metric Filter and Alerts Exist for Audit Configuration Changes

100 api-endpoint-builder SkillSecurity
Builds production-ready REST API endpoints with validation, error handling, authentication, and documentation. Follows best practices for security and scalability.

100 accounting-audit-system-builder SkillSecurity
Routes an accounting or audit request to the right module skill, from software selection through monthly closing, asking only what is missing. Use for books of accounts or audit fi

100 analytics SkillSecurity
When the user wants to set up, improve, or audit analytics tracking and measurement.

100 api-fuzzing-bug-bounty SkillSecurity
Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements. Covers vulnerability discovery, authenticat

100 api-security-best-practices SkillSecurity
Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities

100 api-security SkillSecurity
Authorized security assessment of REST, GraphQL, WebSocket, and SOAP APIs: discovery, authentication and authorization flaws (BOLA/IDOR, JWT/OAuth), rate-limit testing, and a struc

100 nitrostack-auth-security SkillSecurity
Best practices for implementing JWT, API Keys, OAuth 2.1, and RBAC in a NitroStack application.

100 hyperflow-audit SkillSecurity
Hyperflow code review. Use when the user wants the current diff, a commit, branch, or PR reviewed — verbs like audit, review, "check for issues", "security check", "code review". M

100 hyperflow-deploy SkillSecurity
Hyperflow ship phase. Use when the user is ready to release — verbs like ship, push, release, deploy, "cut a release", "ready to push". Runs pre-push gates (lint + typecheck + buil

100 aaai-camera-ready SkillSecurity
Use when preparing an accepted AAAI paper for camera-ready source submission to AAAI Press, including proceedings page limits, two-column template compliance, copyright transfer, p

100 aaai-submission SkillSecurity
Use when auditing an AAAI main technical track submission for OpenReview readiness, double-blind anonymity, page limits, reproducibility checklist, supplementary material, author l

100 ccs-artifact-evaluation SkillSecurity
Use when packaging ACM CCS artifacts for the artifact-evaluation committee and the ACM badges — Artifacts Available, Artifacts Evaluated Functional, Artifacts Evaluated Reusable, a

100 ccs-author-response SkillSecurity
Use when drafting an ACM CCS rebuttal during the HotCRP author-response window, covering threat-model defenses, adaptive-attack objections, ethics and disclosure questions, anonymi

100 ccs-experiments SkillSecurity
Use when designing or auditing ACM CCS experiments, attack demonstrations, adaptive-attack defense evaluations, security measurements, baselines, overhead and cost reporting, ablat

100 ccs-related-work SkillSecurity
Use when positioning an ACM CCS submission against the security big-four and specialist literature, including arXiv preprints, prior CCS/S&P/USENIX/NDSS papers, concurrent disclosu

100 ccs-reproducibility SkillSecurity
Use when strengthening ACM CCS reproducibility evidence, including the artifact-availability posture, threat-model-to-evidence mapping, attack reproduction steps, defense overhead

100 ccs-supplementary SkillSecurity
Use when preparing ACM CCS appendices and supplementary material, including the ethics considerations appendix, protocol transcripts, formal proofs, measurement tables, and anonymi

100 ccs-topic-selection SkillSecurity
Use when deciding whether a security project fits ACM CCS versus IEEE S&P, USENIX Security, NDSS, PETS, or a crypto/theory venue, identifying the security contribution type, and sh

100 ccs-workflow SkillSecurity
Use when planning an ACM CCS project timeline across the two HotCRP review cycles, from venue fit through abstract registration, full-paper upload, rebuttal, notification, revision

100 ccs-writing-style SkillSecurity
Use when revising an ACM CCS paper for a precise threat model, calibrated attack/defense claims, 12-page ACM sigconf compression, double-blind wording, adaptive-evaluation honesty,

100 aejpol-robustness SkillSecurity
Use when an AEJ: Economic Policy manuscript's headline policy estimate needs to be shown stable and credible against specification, sample, inference, and identification threats. O

100 asplos-submission SkillSecurity
Use when running the final pre-upload audit of an ASPLOS submission — the 11-page limit covering figures/tables/footnotes with references excluded, the mandatory template, the no-"

100 aos-data-analysis SkillSecurity
Use when analyzing the material of an Accounting, Organizations and Society (AOS) manuscript — coding and interpreting qualitative field data, estimating experimental and survey mo

100 acr-fit-positioning SkillSecurity
Use when judging whether a manuscript's landing point is an ACCOUNTING issue (accounting information / disclosure / audit / standards) versus a corporate-finance mechanism, before

100 acr-implications SkillSecurity
Use when writing the contribution and implications section for a 《会计研究》 (Accounting Research) manuscript — articulating both the accounting-theory contribution (role of accounting

100 acr-literature-review SkillSecurity
Use when building or repairing the literature review for 《会计研究》 (Accounting Research) — entering the accounting research lineage (earnings quality, conservatism, audit quality, dis

100 acr-measurement SkillSecurity
Use when constructing or auditing accounting measures for 《会计研究》 (Accounting Research) — discretionary accruals (modified Jones), real earnings management (Roychowdhury), conservat

100 acr-mechanism SkillSecurity
Use when the mechanism analysis for a 《会计研究》 (Accounting Research) manuscript is missing or mis-specified — the channel must be an information mechanism (reduce information asymmet

100 amanthro-transparency-and-data SkillSecurity
Use when handling research ethics, consent, community accountability, and data/transparency for an American Anthropologist (AA) manuscript — informed consent, anonymization, protec

100 aerj-writing-style SkillSecurity
Use when drafting or polishing the prose of an American Educational Research Journal (AERJ) manuscript. AERJ is read across the whole field, follows APA 7th-edition style, and expe

100 007 SkillSecurity
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.

100 accessibility-compliance-accessibility-audit SkillSecurity
Audit pages and user journeys against a declared WCAG scope. Use when identifying keyboard, screen-reader, focus or contrast barriers and planning verified remediation.

100 accesslint-audit SkillSecurity
Find and fix WCAG 2.2 accessibility issues. Two modes — report (sweep a codebase or page, produce a prioritized written report, no edits) and fix (audit→edit→verify loop on a targe

100 accesslint-diff SkillSecurity
Diff a live page's accessibility violations against a baseline — by default compares uncommitted changes (stash-based), or pass --branch [<name>] to diff against a branch. Reports

100 accesslint-scan SkillSecurity
Audit a live page for accessibility issues, locate each WCAG violation precisely, and return a selector-grounded fix worklist without editing.

100 luna SkillSecurity
Reviews code for objective correctness, security, and reliability.

100 agents-md SkillSecurity
Create, revise, or audit AGENTS.md files from repository evidence, verified commands, and correctly scoped instructions without overwriting maintainer intent.

100 agenttrace-session-audit SkillSecurity
Audit local AI coding-agent sessions with agenttrace for cost, tool failures, latency, anomalies, health, diffs, and CI gates.

100 ai-agent-security SkillSecurity
Secure AI agents against prompt injection, tool abuse, and data exfiltration

100 ai-code-generation-guardrails SkillSecurity
Use when reviewing AI-generated code before merge or execution: plan AST/security checks, isolated behavior tests and evidence, with language-specific coverage limits.

100 ai-engineering-toolkit SkillSecurity
Overview of six AI engineering workflows: prompt evaluation (8-dimension scoring), context budget planning, RAG pipeline design, agent security audit (65-point checklist), eval har

100 ai-md SkillSecurity
Convert human-written CLAUDE.md into AI-native structured-label format. Battle-tested across 4 models. Same rules, fewer tokens, higher compliance.

100 ai-security-hardening SkillSecurity
Harden AI/LLM deployments against prompt injection, data exfiltration,

100 akf-trust-metadata SkillSecurity
The AI native file format. EXIF for AI — stamps every file with trust scores, source provenance, and compliance metadata. Embeds into 20+ formats (DOCX, PDF, images, code). EU AI A

100 analytics-tracking SkillSecurity
Design, audit, and improve analytics tracking systems that produce reliable, decision-ready data.

100 antigravity-workflows SkillSecurity
Use when asked to ship a SaaS MVP, audit application security, build an AI agent, run browser QA, or design a domain model with multiple skills and verified checkpoints.

100 api-security-testing SkillSecurity
API security testing workflow for REST and GraphQL APIs covering authentication, authorization, rate limiting, input validation, and security best practices.

100 attack-tree-construction SkillSecurity
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.

100 audit-agent-run-evidence SkillSecurity
Use when an agent, harness, gateway, MCP workflow, or multi-step automation claims completion and the available traces, checkpoints, approvals, tool calls, or deployment records mu

100 audit-context-building SkillSecurity
Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.

100 audit-log SkillSecurity
Audit trail register: timestamp, user, module, record, action, field changed, old and new value, and the reason for the change. Use for change history and control evidence.

100 audit-logging SkillSecurity
Implement centralized audit logging and SIEM integration. Configure log

100 audit-preparation SkillSecurity
Audit preparation register: required document, period covered, request and receipt dates, preparer and reviewer, auditor queries and adjustments. Use for assembling an audit file.

100 avoid-ai-writing SkillSecurity
Audit and rewrite prose for repetitive, vague, or formulaic wording while preserving meaning, evidence, and the writer's voice.

100 aws-cloudtrail SkillSecurity
Configure AWS CloudTrail for audit logging. Set up organization trails

100 aws-cost-operations SkillSecurity
AWS cost optimization, monitoring, and operational excellence expert. Use when analyzing AWS bills, estimating costs, setting up CloudWatch alarms, querying logs, auditing CloudTra

100 enterprise-agent-ops SkillSecurity
Operate long-lived agent workloads with observability, security boundaries, and lifecycle management.

100 darkmoon-pentest SkillSecurity
Use when the user wants to start or follow an autonomous penetration test with their own Darkmoon Pro instance, check the status of a Darkmoon run, list Darkmoon campaigns, or read

100 personal-data-protection SkillSecurity
Personal-data-protection compliance reference for engineers building applications subject to Singapore PDPA, Indonesia UU PDP, Thailand PDPA, Malaysia PDPA, Philippines DPA (RA 101

100 xedit-conflict-audit SkillSecurity
Use when auditing conflicts in a Bethesda plugin set — determining for a record (or a plugin's records) which override wins, what the conflict label is, what references it, and whe

100 seo-audit SkillSecurity
Full website SEO audit with parallel subagent delegation. Crawls up to 500 pages, detects business type, delegates to 10 specialists (7 core + 3 conditional), generates health scor

100 seo-backlinks SkillSecurity
Backlink profile analysis: referring domains, anchor text distribution, toxic link detection, competitor gap analysis. Works with free APIs (Moz, Bing Webmaster, Common Crawl) and

100 seo SkillSecurity
Comprehensive SEO analysis for any website or business type. Full site audits, single-page analysis, technical SEO (crawlability, indexability, Core Web Vitals with INP), schema ma

100 vidseeds-publishing SkillSecurity
Use for VidSeeds MCP publishing - platform connections, OAuth connect URLs, activate YouTube channel, update connection settings, preflight/confirm/cancel publish, publish status,

100 vidseeds-setup SkillSecurity
Use when connecting to VidSeeds.ai, getting AUTH_REQUIRED or SUBSCRIPTION_REQUIRED from the vidseeds MCP server, or setting up VIDSEEDS_PAT / OAuth for the connector. Not for workf

100 django-security SkillSecurity
Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.

100 django-verification SkillSecurity
Verification loop for Django projects: migrations, linting, tests with coverage, security scans, and deployment readiness checks before release or PR.

100 docker-patterns SkillSecurity
Docker and Docker Compose patterns for local development, container security, networking, volume strategies, and multi-service orchestration.

100 harness-audit SkillSecurity
Harness 能力面审计（7 维度评分 + 改进建议）。对角色覆盖、技能完整性、Hook 有效性、规则执行、命令覆盖、文档质量、集成深度进行全面评估，输出 Overall Score、Dimension Scores 和 Top Actions。适用于平台健康检查、季度能力审查、新增能力后的回归验证。关键词：harness-audit、平台审计、技能完整性

100 laravel-security SkillSecurity
Laravel security best practices for authn/authz, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure deployment.

100 laravel-verification SkillSecurity
Verification loop for Laravel projects: env checks, linting, static analysis, tests with coverage, security scans, and deployment readiness.

100 perl-security SkillSecurity
Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies

100 postgres-patterns SkillSecurity
PostgreSQL database patterns for query optimization, schema design, indexing, and security. Based on Supabase best practices.

97 compliance-sanktionen SkillSecurity
Für Compliance Sanktionen: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: AGB-Recht-Prüfer. Route: compliance-sanktio

97 haftung-sanktionen-grobe-fahrlaessigkeit SkillSecurity
Für Compliance Sanktionen: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: AGB-Recht-Prüfer. Route: haftung-sanktionen

97 security-incidents SkillSecurity
Für Security Incidents: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.

97 chronologie-compliance-dokumentation-und-akte SkillSecurity
Für Chronologie: Compliance-Dokumentation und Aktenvermerk: ordnet Akte, Belege und Lücken; Ergebnis: Chronologie mit Beleg- und Widerspruchsmatrix.

97 parteivortraege-compliance-dokumentation-und-akte SkillSecurity
Für Parteivorträge: Compliance-Dokumentation und Aktenvermerk: ordnet Akte, Belege und Lücken; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.

97 compliance-audit SkillSecurity
Performs regulatory gap analysis across 7 compliance frameworks with

97 convex-auth SkillSecurity
Add authentication (passkeys/OAuth) to the current Convex app, including the auth.config.ts wiring.

97 convex-authz SkillSecurity
Audit and harden a Convex app's authorization: identity-from-arg impersonation, missing per-document ownership checks, public queries leaking data by a client-supplied id, and writ

97 convex-launch-readiness SkillSecurity
Run every Convex audit (authz, reviewer, advisor, insights) into one scored, deduped readiness report with an ordered fix plan — Lighthouse for your backend.

97 convex-optimize SkillSecurity
Audit and optimize an existing Convex app: security, scale, upgrades, observability.

97 convex-performance-audit SkillSecurity
Audits Convex performance for reads, subscriptions, write contention, and

97 convex-reviewer SkillSecurity
Convex code reviewer — security, auth, validators, performance, and pattern checks for code in a convex/ directory. Use to review or audit Convex functions before shipping.

95 accessibility-compliance SkillSecurity
Implement WCAG 2.2 compliant interfaces with mobile accessibility, inclusive design patterns, and assistive technology support. Use when auditing accessibility, implementing ARIA p

95 code-review-patterns SkillSecurity
Multi-dimensional code assessment across security, quality, performance, and maintainability with confidence-gated reporting (>=80%) and Router Contract generation.

95 code-review-orchestration SkillSecurity
6-agent parallel code review orchestration covering architecture, security, performance, testing, quality, and documentation dimensions with weighted scoring.

95 code-review-pipeline SkillSecurity
Multi-dimensional code review across correctness, security, performance, and maintainability with confidence-gated reporting and remediation loops.

95 security-scanning SkillSecurity
AgentShield security audit with 5 scanning categories, 102 static analysis rules, and optional red-team simulation.

95 security-review SkillSecurity
Security vulnerability assessment identifying OWASP risks, injection vectors, authentication issues, and data exposure with severity classification.

95 mcp-csp-investigation SkillSecurity
Comprehensive Content Security Policy audit for MCP Apps in sandboxed iframes. Discovers all network origins, traces them to source, and generates CSP configuration for registerApp

95 deal-pipeline SkillSecurity
Design or audit B2B sales pipeline — define stage names, entry/exit criteria, qualification standards, and CRM field requirements. Use when asked to "design our pipeline", "audit o

95 warden-scan SkillSecurity
Automated SAST + dependency vulnerability scan. Runs Semgrep (code vulnerabilities) and pip-audit (CVE-matched dependencies) and writes a structured JSON report. Use when asked to

95 cad-dxf-agent SkillSecurity
Analyzes DXF drawings deterministically — ADA/IBC code compliance, drawing health and QA, quantity takeoff, plain-English summaries, RFI generation, and room/zone detection — with

95 mcporter SkillSecurity
Interact with MCP (Model Context Protocol) servers using the mcporter CLI. Use this skill when you need to list available MCP servers, view tool schemas, call MCP tools, manage OAu

95 wcag-audit-patterns SkillSecurity
Conduct WCAG 2.2 accessibility audits with automated testing, manual verification, and remediation guidance. Use when auditing websites for accessibility, fixing WCAG violations, o

95 solidity-security SkillSecurity
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contract

95 deployment-pipeline-design SkillSecurity
Design multi-stage CI/CD pipelines with approval gates, security checks, and deployment orchestration. Use when architecting deployment workflows, setting up continuous delivery, o

95 auth-implementation-patterns SkillSecurity
Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth sy

95 openapi-spec-generation SkillSecurity
Generate and maintain OpenAPI 3.1 specifications from code, design-first specs, and validation patterns. Use when creating API documentation, generating SDKs, or ensuring API contr

95 gdpr-data-handling SkillSecurity
Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when building systems that process EU personal data, implementing pr

95 k8s-manifest-generator SkillSecurity
Create production-ready Kubernetes manifests for Deployments, Services, ConfigMaps, and Secrets following best practices and security standards. Use when generating Kubernetes YAML

95 k8s-security-policies SkillSecurity
Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing netwo

95 pci-compliance SkillSecurity
Implement PCI DSS compliance requirements for secure handling of payment card data and payment systems. Use when securing payment processing, achieving PCI compliance, or implement

95 memory-forensics SkillSecurity
Master memory forensics techniques including memory acquisition, process analysis, and artifact extraction using Volatility and related tools. Use when analyzing memory dumps, inve

95 attack-tree-construction SkillSecurity
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.

95 sast-configuration SkillSecurity
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps

95 security-requirement-extraction SkillSecurity
Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building securit

95 stride-analysis-patterns SkillSecurity
Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.

95 threat-mitigation-mapping SkillSecurity
Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness

94 CloudSlash SkillSecurity
Use this skill when the user wants to perform AWS security forensics and analysis locally using CloudSlash.

94 CyberStrikeAI SkillSecurity
Use this skill when the user wants to use CyberStrikeAI for CyberStrikeAI is an AI-native security testing platform built in Go. It integrat.

94 MyJWT SkillSecurity
Use this skill when the user wants to cli for cracking testing vulnerabilities on json web token jwt security testing.

94 arjun SkillSecurity
Use this skill when the user wants to discover hidden HTTP parameters on web endpoints for security testing or API enumeration.

94 audit SkillSecurity
Use this skill when the user wants to audit collaborators hooks and deploy keys on github repositories.

94 bagel SkillSecurity
Use this skill when the user wants to scan their workstation for security risks, find leaked credentials, or scrub sensitive data from CLI session logs.

94 bandit SkillSecurity
Use this skill when the user wants to find security issues in Python code, scan for vulnerabilities, check for unsafe imports, or audit Python security.

94 bane SkillSecurity
Use this skill when the user wants to generate AppArmor profiles for Docker containers, secure Docker containers, or create container security policies.

94 anti-reversing-techniques SkillSecurity
AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: > 1.

94 accessibility-compliance-accessibility-audit SkillSecurity
You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive technology compatibility. Conduct audits, identify barriers, and provide remediatio

94 security-and-hardening SkillSecurity
Hardens code against vulnerabilities. Use when auditing an input

94 doubt-driven-development SkillSecurity
Subjects every non-trivial decision to a fresh-context adversarial review before it stands. Use when you want every assumption cross-examined before proceeding, when stress-testing

94 security-and-hardening SkillSecurity
Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or external integrations, or w

94 Adobe Firefly API Batch Image Generator SkillSecurity
Calls Adobe Firefly's text-to-image and generative fill APIs for batch asset creation. Manages Adobe IMS OAuth tokens and enforces Content Credentials (C2PA) metadata on all output

94 Aident Loadout SkillSecurity
Give Claude Code, Codex, Cursor, ChatGPT and other MCP clients 1,000+ apps and 400+ expert-built Skills through one reusable Aident Loadout setup, with credentials kept in Aident V

94 Analyze memory images for processes, modules, and malware indicators with Volatility 3 SkillSecurity
Inspect captured RAM images to enumerate processes, modules, handles, and suspicious in-memory behavior before escalation or evidence handoff.

94 Aperture Wallet Guide SkillSecurity
Answer Aperture Wallet questions from first-party product, security, network, release, app-screen, and Journal sources while enforcing explicit wallet-secret and no-transaction saf

94 Audit AI search citation readiness with GEO Optimizer SkillSecurity
Use GEO Optimizer from the CLI or MCP so agents can audit a site for AI search visibility, generate llms.txt/schema fixes, check bot access, and track citation readiness.

94 Audit and deploy cross-agent extensions with HarnessKit SkillSecurity
Use HarnessKit to inventory, audit, enable, disable, and deploy skills, MCP servers, plugins, hooks, CLIs, configs, memory, and rules across multiple coding agents.

94 Audit and fix website QA issues with Squirrelscan SkillSecurity
Run Squirrelscan from a coding agent to audit SEO, performance, security, accessibility, and agent-experience issues, then feed exact fixes into an agent repair loop.

94 Audit and maintain cross-agent skill libraries with Chops SkillSecurity
Use Chops to discover, search, edit, and organize local or remote agent skills across Claude Code, Cursor, Codex, Windsurf, Amp, Copilot, and Aider.

94 Audit and normalize SPDX license headers before releasing or open-sourcing a repository SkillSecurity
Use REUSE when an agent needs file-level licensing clarity instead of guessing from a single top-level LICENSE file. The agent checks compliance, adds or verifies SPDX headers, pul

94 Audit and rewrite AI-sounding prose with Avoid AI Writing SkillSecurity
Use Avoid AI Writing when an agent needs a repeatable audit, rewrite, or in-place edit workflow for removing AI writing patterns from draft prose.

94 Audit Apple-platform UI work against Human Interface Guidelines with HIG Doctor SkillSecurity
Run a repeatable HIG compliance audit over app code before shipping UI changes, then use the findings to guide remediation.

94 Audit AWS IAM policies for risky permissions with Cloudsplaining SkillSecurity
Use Cloudsplaining when an agent needs to flag privilege-escalation paths and overbroad IAM permissions before an AWS policy change reaches production.

94 Audit clickstream analytics with Retentioneering agents SkillSecurity
Use Retentioneering's Python toolkit, MCP server, and agent skills to run reproducible customer-journey and event-log analytics that agents can validate and cross-check.

94 Audit cloud accounts for security misconfigurations with Prowler SkillSecurity
Run targeted AWS, Azure, or GCP security and compliance audits when an agent needs actionable cloud findings instead of a generic cloud-security platform overview.

94 Audit Codex session duplicates and retry chains with AgentMeasure SkillSecurity
Inspect supported Codex rollout logs locally for duplicate records, retry amplification, and repeated tool failures, preserving unknown evidence and comparing before-and-after snap

94 Audit coding-agent instruction drift and verifier health with Waza SkillSecurity
Run a bounded, report-only audit of coding-agent settings, instruction reachability, hooks, MCP wiring, and verification evidence with actionable findings.

94 Audit coding-agent token spend with CodeBurn SkillSecurity
Run CodeBurn locally or as an MCP server so agents can inspect token usage, cost, model mix, project spend, and budget waste across coding tools.

94 Audit GitHub Actions for privilege and supply-chain risks with zizmor SkillSecurity
Run a focused security pass on GitHub Actions workflows before merge so token misuse, dangerous permissions, and unpinned actions are caught early.

94 Audit GitHub Actions workflows for insecure permissions and unpinned actions SkillSecurity
This ASE skill uses zizmor to audit GitHub Actions workflows and composite actions for security mistakes before they ship. An agent can scan local repos or remote GitHub repositori

94 Audit Go dependency licenses with go-licenses SkillSecurity
Produce a license inventory for Go module dependencies before release, procurement review, or open-source due diligence.

94 Audit Linux host hardening drift before exposing SSH or rolling to production SkillSecurity
Uses Lynis to run an on-host security audit and turn the findings into a prioritized hardening checklist for an agent or operator. Invoke it when a machine is about to become inter

94 Audit OpenClaw host security posture and hardening gaps SkillSecurity
This skill uses OpenClaw's healthcheck workflow to inspect the host running the assistant, surface risky exposure, and turn the findings into a staged hardening plan. It is for ope

94 Audit Python dependency declarations for unused, missing, and transitive imports before release SkillSecurity
Use Deptry when an agent needs to verify that a Python project's declared dependencies still match the imports the code actually uses. The agent scans the codebase, flags unused di

94 Audit Python dependency sets for known vulnerabilities before release or environment promotion with Safety SkillSecurity
Scan Python requirements and environments for known vulnerable or malicious packages before they move further through delivery or promotion workflows.

94 Audit Python environments and requirements files for known vulnerabilities with pip-audit SkillSecurity
Check Python environments and requirements files for published vulnerabilities before shipping, upgrading, or approving dependency changes.

94 Audit SSH servers and clients for weak algorithms and risky config drift with ssh-audit SkillSecurity
Inspect an SSH endpoint or config for outdated ciphers, key exchange choices, and hardening gaps before exposure or upgrades.

94 Audit Websites for AI Search Visibility with GEO SEO Claude SkillSecurity
Use GEO SEO Claude when Claude Code should run repeatable AI-search and SEO audits with citability, crawler, schema, platform, and report workflows.

94 Automattic WordPress Remote MCP SkillSecurity
Automattic WordPress Remote MCP connects MCP clients to live WordPress sites using OAuth, JWT, or application passwords. It is aimed at agents that need to read or operate against

94 AWS CloudFormation Drift Detector SkillSecurity
Monitors AWS CloudFormation stacks for configuration drift using the AWS SDK DetectStackDrift and DescribeStackResourceDrifts APIs. Generates remediation templates and integrates w

94 AWS IAM Privilege Escalation Audit SkillSecurity
Uses boto3 and the AWS IAM Access Analyzer API to enumerate all roles, policies, and users, then flags permission combinations that could allow privilege escalation to Administrato

94 Baseline and Review Repository Secret Findings with detect-secrets SkillSecurity
Scan a repository for secrets, keep an auditable baseline, and review only newly introduced findings during commits or CI checks.

94 Bearer CLI SAST Code Security and Privacy Scanner SkillSecurity
Bearer CLI is an open-source static application security testing (SAST) tool that scans source code to identify, filter, and prioritize security vulnerabilities and privacy risks.

94 Benchmark Kubernetes clusters against CIS controls with kube-bench SkillSecurity
Run CIS benchmark checks against cluster nodes and control planes when an agent needs a narrow Kubernetes hardening audit, not a general platform listing.

94 Better Auth Authentication Framework for TypeScript Applications SkillSecurity
Better Auth is an open source authentication framework for TypeScript apps. It gives agents a concrete way to wire sign-in, sessions, passkeys, OAuth providers, and plugins into mo

94 Betterleaks Next-Generation Secrets Scanner SkillSecurity
A fast, configurable secrets scanner built by the creator of Gitleaks and backed by Aikido Security. Betterleaks detects leaked passwords, API keys, and tokens in git repositories,

94 Browse search and cost-audit local coding-agent histories before resuming or standardizing workflows with agentsview SkillSecurity
Index local coding-agent sessions into a searchable SQLite-backed view so you can inspect usage, compare failures, and recover prior context quickly.

94 Build authenticated MCP tools and servers with Arcade MCP SkillSecurity
Use Arcade MCP to create custom MCP servers and tools with OAuth-aware authorization, evals, and deployment paths for agent tool-calling workflows.

94 Build deterministic SaaS API test worlds for agents with Backlot SkillSecurity
Run local Slack, Gmail, Google Drive, GitHub, Jira, Notion, S3, and other SaaS API emulators over a controlled corpus so agents and integrations can be tested without vendor accoun

94 Capture Linux runtime security events and suspicious behavior for live triage with Tracee SkillSecurity
Watch live Linux and container activity through eBPF so you can triage suspicious runtime behavior before it disappears into guesswork.

94 Capture network device config snapshots diffs and change attribution after edits with Oxidized SkillSecurity
Pull running configs from routers and switches on a schedule or after change events so you can diff drift, audit edits, and recover known-good state.

94 Cariddi Domain Crawler and Endpoint Secret Scanner SkillSecurity
Cariddi is a Go-based security tool that takes a list of domains, crawls their URLs, and scans for endpoints, secrets, API keys, file extensions, tokens, and errors. It supports co

94 Casdoor Open Source Identity and Access Management Platform SkillSecurity
Casdoor is an open source AI-first Identity and Access Management (IAM) platform and auth server supporting OAuth 2.1, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, and MCP gat

94 accesslint-audit SkillSecurity
Find and fix WCAG 2.2 accessibility issues. Two modes — report (sweep a codebase or page, produce a prioritized written report, no edits) and fix (audit→edit→verify loop on a targe

94 accesslint-scan SkillSecurity
Audit a live page for accessibility issues, locate each WCAG violation precisely, and return a selector-grounded fix worklist without editing.

94 agenttrace-session-audit SkillSecurity
Audit local AI coding-agent sessions with agenttrace for cost, tool failures, latency, anomalies, health, diffs, and CI gates.

94 akf-trust-metadata SkillSecurity
The AI native file format. EXIF for AI — stamps every file with trust scores, source provenance, and compliance metadata. Embeds into 20+ formats (DOCX, PDF, images, code). EU AI A

94 api-security-testing SkillSecurity
API security testing workflow for REST and GraphQL APIs covering authentication, authorization, rate limiting, input validation, and security best practices.

94 accesslint-diff SkillSecurity
Diff a live page's accessibility violations against a baseline — by default compares uncommitted changes (stash-based), or pass --branch [<name>] to diff against a branch. Reports

94 ack-reputation SkillSecurity
Peer-driven onchain reputation layer for AI agents enabling kudos across reliability, speed, accuracy, creativity, and security categories.

94 deploy SkillSecurity
Deploy Solidity contracts to MAINNET (or testnet) safely via the ChainGPT plugin. End-to-end: generate → audit → compile → estimate → build unsigned tx → user signs → verify on Eth