security-guidance
alirezarezvani
Catch risky code before it reaches your files.
Application security
Security skills for AI agents
These Skills look at software the way an attacker or an auditor would. The biggest groups review code for injection and broken access rules, probe systems in penetration tests and audit cloud accounts against best practices; smaller sets cover sign-in, malware analysis and forensics.
Sort by
Most installed
794 Skills
Showing Skills in Security.- 544
543laravel-security-audit
sickn33
Find security weaknesses in your Laravel app.
Application security
542arcjet
arcjet
Protect your API and agent tools from abuse.
Application security
541web-security-review
owasp
Find security gaps in your web application.
Application security
540encore-go-auth
encoredev
Require login on your Encore Go endpoints.
API authentication
538supabase-audit-auth-config
yoanbernabeu
Find security gaps in your Supabase sign-in.
Authentication security
536credential-scanner
useai-pro
Find exposed secrets before skills read your code.
Credential security
536sap-btp-cloud-identity-services
secondsky
Set up identity and access for SAP BTP apps.
Identity and access
SC
536security-fuzzing
eyadkelleh
Ready-to-use payloads for injection testing.
Security testing
- 536
security-patterns
eyadkelleh
Find sensitive data in your code and logs.
Security testing
535analyzing-active-directory-acl-abuse
mukul975
Find risky permissions in Active Directory.
Identity security
AD- 535
analyzing-certificate-transparency-for-phishing
mukul975
Spot phishing domains in certificate records.
Threat intelligence
531pentestcompanion-workspace
reason-machines
Keep security test findings and reports together.
Penetration testing
+1
530security
parcadei
Find security flaws in your code and check fixes.
Code security
528huawei-cloud-skill-audit
huaweicloud
Security audit reports for Huawei Cloud skills.
Security auditing
525docker-sandboxes-network-credentials
docker
Control your Docker Sandboxes network access.
Sandbox security
DS
522reverse-engineering-tools
gmh5225
Turn game binaries into evidence-backed findings.
Reverse engineering
521owasp-audit
briiirussell
Find security weaknesses in your app's code.
Application security
520sql-injection-prevention
aj-geddes
Protect your database queries from SQL injection.
Database security
- 519
analyzing-dns-logs-for-exfiltration
mukul975
Find signs of hidden data theft in DNS logs.
Security operations
- 519
api-authentication
secondsky
Build safer sign-in and access for your APIs.
API security
- 518
security-payloads
eyadkelleh
Test security controls with curated payloads.
Security testing
- 517
analyzing-apt-group-with-mitre-navigator
mukul975
See where your defenses miss threat group attacks.
Threat intelligence
MA - 515
testing-jwt-token-security
mukul975
Find authentication flaws in JWT-based apps.
Application security
A Skill only gives the agent instructions and tools; it carries no permission of its own. Penetration testing and reverse engineering Skills are written for systems you own or are authorised to test, and the agent works with the access you give it.
A review reads the code or configuration and points out weaknesses. A penetration test runs the system and tries to exploit them, which shows whether a weakness can actually be used.
Tests check that the code does what it should; security Skills check what it should never do, such as letting one user read another's data. The two catch different mistakes.