owasp-security
agamm
Know what is exploitable before you ship.
Application security
Security skills for AI agents
These Skills look at software the way an attacker or an auditor would. The biggest groups review code for injection and broken access rules, probe systems in penetration tests and audit cloud accounts against best practices; smaller sets cover sign-in, malware analysis and forensics.
Sort by
Most installed
794 Skills
Showing Skills in Security.- 2.1k
2.1kredis-security
redis
Lock down Redis access before production.
Database security
2.1kmanaging-users
celigo
Keep your Celigo account access under control.
Access management
2kcodeql
github
Find security issues in your code with CodeQL.
Code security
2ktigris-security-access-control
tigrisdata
Secure your Tigris keys and bucket access.
Storage security
TI
2kapi-auth-key-management
samberAPI keys designed for safe rotation and clear ownership.
API authentication
2ksecurity-scan
codewithmukesh
Find security weaknesses and get concrete fixes.
Application security
2kexperience-lwc-security-validate
forcedotcom
Find and fix security issues in your LWC components.
Component security
2ksemgrep
semgrep
Find code vulnerabilities and build tested detection rules.
Code security
- 2k
oauth2-provider-design
samberA safer access design for third-party apps.
Authorization design
- 2k
authentication
codewithmukesh
Build login and endpoint protection in ASP.NET Core.
Application security
2ksetup-zoom-oauth
anthropics
Get Zoom authentication and token refresh right.
Authentication
2ksecrets
goldsky-io
Manage your Goldsky pipeline credentials safely.
Credential management
- 2k
zoom-oauth
anthropics
Choose the right Zoom auth flow and troubleshoot tokens.
API authentication
1.9knuxt-better-auth
onmax
Add sign-in and protected pages to Nuxt apps.
Application authentication
1.9ksecurity
cognitedata
Security fixes for your Flows app, not just findings.
Application security
- 1.9k
setup-flows-auth
cognitedata
Your React app, wired for Flows authentication.
Frontend authentication
1.8ksecrets-in-git-history
useosint
Find the identities and exposures hidden in git history.
Security investigation
- 1.8k
managing-api-tokens
celigo
Choose safer access for your Celigo API tokens.
API access management
II 
1.8knetlify-access-control
netlify
Pick the right access controls for your Netlify site.
Website access control
1.8krev-struct
p4nda0s
Turn decompiled memory accesses into structure definitions.
Reverse engineering
- 1.7k
secrets-in-file-metadata
useosint
Find the provenance clues hidden inside your files.
Digital forensics
- 1.7k
hunt-a-handle
useosint
Turn a reused handle into a defensible account map.
Username OSINT
- 1.7k
rev-symbol
p4nda0s
Recover meaningful names for unidentified functions.
Reverse engineering
A Skill only gives the agent instructions and tools; it carries no permission of its own. Penetration testing and reverse engineering Skills are written for systems you own or are authorised to test, and the agent works with the access you give it.
A review reads the code or configuration and points out weaknesses. A penetration test runs the system and tries to exploit them, which shows whether a weakness can actually be used.
Tests check that the code does what it should; security Skills check what it should never do, such as letting one user read another's data. The two catch different mistakes.