supabase-extract-url
yoanbernabeu
Find the Supabase URL behind your web app.
Security testing
Security skills for AI agents
These Skills look at software the way an attacker or an auditor would. The biggest groups review code for injection and broken access rules, probe systems in penetration tests and audit cloud accounts against best practices; smaller sets cover sign-in, malware analysis and forensics.
Sort by
Most installed
794 Skills
Showing Skills in Security.- 457
456sumsub-create-workflow
sumsub
Turn verification rules into live Sumsub routing.
Identity verification
- 456
supabase-extract-jwt
yoanbernabeu
Find exposed Supabase tokens in your web app.
Application security
455analyzing-indicators-of-compromise
mukul975
Triage suspicious addresses and file hashes.
Threat intelligence
+2
455session-management
aj-geddes
Secure user sessions from login to logout.
Authentication security
455threat-modeling
bobmatnyc
Turn software security risks into tasks and tests.
Software security
453ghidra-headless
trailofbits
Turn compiled binaries into readable C code.
Reverse engineering
453network-watcher
useai-pro
Spot risky network access in OpenClaw skills.
Network security
453owasp-mobile-security-checker
harishwarrior
Find security weaknesses in your Flutter app.
Mobile security
452security-research
code-yeongyu
Find code vulnerabilities backed by safe proofs.
Security auditing
- 451
analyzing-campaign-attribution-evidence
mukul975
Assess who is behind a cyberattack campaign.
Threat intelligence
- 451
analyzing-linux-system-artifacts
mukul975
Find signs of compromise in Linux system files.
Digital forensics
- 449
reverse-engineering-android-malware-with-jadx
mukul975
Uncover data theft in suspicious Android apps.
Malware analysis
448agentic-sdlc-controls
securityskills
Find control gaps in AI development pipelines.
Development security
- 447
secrets-rotation
aj-geddes
Automate secret rotation without downtime.
Secrets management
444infisical-terraform
infisical
Keep Infisical secrets out of Terraform state.
Infrastructure security
- 444
security-documentation
aj-geddes
Security policies and guidance for your applications.
Security documentation
441code-security-audit
leonmelamud
Find exploitable security flaws in code changes.
Code security
- 440
analyzing-disk-image-with-autopsy
mukul975
Turn disk images into visual evidence reports.
Digital forensics
+1 
414active-directory-attacks
sickn33
Find attack paths in your Active Directory.
Penetration testing
AD- 414
pentest-commands
sickn33
Find commands for authorized security testing.
Penetration testing
- 357
aws-penetration-testing
sickn33
Find security weaknesses in your AWS setup.
Cloud security
13openclaw-secure-linux-cloud
xixu-me
Keep your cloud-hosted OpenClaw private by default.
Server security
Next.js Security Scan
sugarforever
Find security risks in your Next.js code.
Application security
A Skill only gives the agent instructions and tools; it carries no permission of its own. Penetration testing and reverse engineering Skills are written for systems you own or are authorised to test, and the agent works with the access you give it.
A review reads the code or configuration and points out weaknesses. A penetration test runs the system and tries to exploit them, which shows whether a weakness can actually be used.
Tests check that the code does what it should; security Skills check what it should never do, such as letting one user read another's data. The two catch different mistakes.