supabase-extract-db-string
yoanbernabeu
Catch exposed database passwords in client code.
Application security
Security skills for AI agents
These Skills look at software the way an attacker or an auditor would. The biggest groups review code for injection and broken access rules, probe systems in penetration tests and audit cloud accounts against best practices; smaller sets cover sign-in, malware analysis and forensics.
Sort by
Most installed
794 Skills
Showing Skills in Security.- 469
- 469
supabase-extract-service-key
yoanbernabeu
Catch Supabase admin keys exposed in your app.
Application security
469yourvpndead-vpn-detection
reason-machines
Find exposed VPN proxies on your Android device.
VPN security
468setup-auditor
useai-pro
Find security gaps in your OpenClaw setup.
Environment security
- 467
config-hardener
useai-pro
Find weak spots in your OpenClaw security.
Configuration security
467dd-audit-key-compromise
datadog-labs
Trace a suspect Datadog key's audit history.
Security investigation
- 467
dd-audit-security-investigation
datadog-labs
Find who changed what in Datadog audit logs.
Security investigation
466csrf-protection
aj-geddes
Protect your web forms from forged requests.
Web security
466security-review
davila7
Catch security flaws in your web app code.
Application security
- 466
senior-secops
davila7
Security guidance for your application code.
Application security
- 466
supabase-audit-buckets-list
yoanbernabeu
Spot exposed storage buckets in Supabase.
Storage security
465sql-injection-testing
sickn33
Find SQL injection flaws in your web app.
Web application security
465testing-api-authentication-weaknesses
mukul975
Find authentication gaps in your API.
API security
463binary-ninja-reverse
zhaoxuya520
Evidence-backed binary analysis with Binary Ninja.
Reverse engineering
463safe-action-better-auth
next-safe-action
Protect your Next.js actions with Better Auth.
Application authentication
- 463
supabase-audit-buckets-read
yoanbernabeu
Find exposed files in your Supabase storage.
Storage security
- 462
analyzing-azure-activity-logs-for-threats
mukul975
Spot suspicious activity in your Azure logs.
Cloud security
- 462
api-security-best-practices
davila7
Build APIs that guard access and sensitive data.
API security
- 462
supabase-audit-auth-signup
yoanbernabeu
Find abuse risks in your Supabase signup flow.
Authentication security
- 461
cloud-security-configuration
aj-geddes
Layered security for your cloud environments.
Cloud security
460fivem-security
germanfndez
Harden FiveM server code against player exploits.
Game server security
- 460
supabase-report-compare
yoanbernabeu
See which security flaws were fixed or added.
Security audit review
- 459
agentic-security-scanner
reason-machines
Find security flaws in your code and fix them.
Application security
+2 
459security-scan
jwynia
Find security flaws in your code before deployment.
Application security
A Skill only gives the agent instructions and tools; it carries no permission of its own. Penetration testing and reverse engineering Skills are written for systems you own or are authorised to test, and the agent works with the access you give it.
A review reads the code or configuration and points out weaknesses. A penetration test runs the system and tries to exploit them, which shows whether a weakness can actually be used.
Tests check that the code does what it should; security Skills check what it should never do, such as letting one user read another's data. The two catch different mistakes.