security-best-practices
openai
Secure defaults and focused vulnerability reviews.
Application security
Security skills for AI agents
These Skills look at software the way an attacker or an auditor would. The biggest groups review code for injection and broken access rules, probe systems in penetration tests and audit cloud accounts against best practices; smaller sets cover sign-in, malware analysis and forensics.
Sort by
Most installed
794 Skills
Showing Skills in Security.- 7.9k
7.8ksemgrep
trailofbits
Find security flaws in your code with Semgrep.
Application security
7.7kctf-web
ljagiello
Find the web flaw that unlocks a CTF flag.
Web security
+1
7.7kweb-app-penetration-testing
usestrix
Prove real web vulnerabilities before attackers do.
Application security
- 7.6k
find-security-vulnerabilities-in-code
usestrix
Get a short list of exploit-validated code vulnerabilities.
Code security
- 7.6k
owasp-top-10-testing
usestrix
See which OWASP risks your application can actually prove.
Application security
- 7.6k
api-security-testing
usestrix
Find API vulnerabilities with reproducible proof.
API security
- 7.5k
application-security-testing
usestrix
Turn whole-product security testing into one ranked plan.
Application security
- 7.5k
ctf-pwn
ljagiello
Turn vulnerable CTF binaries into working exploits.
Binary exploitation
7.5kaws-iam
aws
Avoid common mistakes in AWS access policies.
Cloud security
7.4kbaoyu-electron-extract
jimliuReadable source from your Electron desktop apps.
Software reverse engineering
- 7.3k
ctf-osint
ljagiello
Find CTF clues across public online sources.
Open-source intelligence
+3 - 7.2k
supply-chain-risk-auditor
trailofbits
Find supply-chain risks in your dependencies.
Software supply-chain security
+4 - 7.2k
differential-review
trailofbits
Find security regressions before they spread.
Code security
7.1kskill-security
superagent-ai
Check agent skills before you trust their code.
Security auditing
- 7.1k
ci-cd-security
superagent-ai
Find exploitable workflow flaws and concrete fixes.
CI/CD security
- 7k
codeql
trailofbits
Find security flaws across your code with CodeQL.
Application security
+1 - 6.9k
ctf-ai-ml
ljagiello
Solve AI and machine-learning CTF challenges.
CTF security
- 6.9k
secure-workflow-guide
trailofbits
Secure your smart contracts from scan to action plan.
Smart contract security
- 6.8k
security-threat-model
openai
Get a threat model grounded in your repository.
Application security
- 6.7k
code-maturity-assessor
trailofbits
Know how mature your smart-contract codebase is.
Smart contract security
- 6.6k
penetration-testing-with-strix
usestrix
Find proven vulnerabilities in your web app.
Penetration testing
6.6knextjs-supabase-auth
sickn33
Secure your Next.js routes with Supabase authentication.
Web authentication
6.5kquery-token-audit
binance
Check token risks before you trade.
Cryptocurrency security
A Skill only gives the agent instructions and tools; it carries no permission of its own. Penetration testing and reverse engineering Skills are written for systems you own or are authorised to test, and the agent works with the access you give it.
A review reads the code or configuration and points out weaknesses. A penetration test runs the system and tries to exploit them, which shows whether a weakness can actually be used.
Tests check that the code does what it should; security Skills check what it should never do, such as letting one user read another's data. The two catch different mistakes.