fp-check
trailofbits
Find out whether a suspected security bug is real.
Security verification
794 Skills
Showing Skills in Security.fp-check
trailofbits
Find out whether a suspected security bug is real.
Security verification
seeker-genesis-token
solana-mobile
Gate app rewards to verified Seeker owners.
Mobile authentication
fix-security-vulnerabilities-with-strix
usestrix
Patch validated findings and prove each fix closes the exploit.
Security remediation
integration-privy
solana-mobile
Add wallet-backed sign-in to your Solana Android app.
Mobile authentication

agentic-actions-auditor
trailofbits
Catch prompt injection risks in GitHub Actions.
CI/CD security
managed-pentesting-with-strix
usestrix
Managed security testing without local infrastructure.
Security testing
securing-s3-buckets
aws
Secure your S3 buckets and find security gaps.
Cloud security
audit-context-building
trailofbits
Know what unfamiliar code assumes before an audit.
Security auditing
ci-security-scanning-with-strix
usestrix
Check pull requests for security flaws with Strix.
CI security
sharp-edges
trailofbits
Find security traps in APIs and app settings.
Security review
platform-permission-set-generate
forcedotcom
Salesforce permission sets ready to deploy.
Access management
neon-auth
neondatabase
Add login without replacing identity that already works.
App authentication
creating-secrets-using-best-practices
aws
Create AWS secrets with built-in safeguards.
Cloud security
variant-analysis
trailofbits
Find where else a known bug hides in your code.
Code security auditing
platform-sharing-rules-generate
forcedotcom
Manage who can see your Salesforce records.
Access control
dx-org-permission-set-assign
forcedotcom
Give Salesforce users the permission sets they need.
Access management
security-reviewer
jeffallan
Find security flaws in your code and infrastructure.
Security auditing
setting-up-ec2-instance-profiles
aws
Give your EC2 instances access without saved keys.
Cloud access management
okx-cex-auth
okx
Connect your OKX account to the command line.
Account authentication
detection-engineering-coverage-evaluation
Find gaps in your Google SecOps threat rules.
Detection engineering
sarif-parsing
trailofbits
Make sense of your security scan results.
Security analysis
setting-up-cloudtrail-multi-region
aws
Centralize AWS activity logs across all regions.
Security monitoring
signing-in-to-aws
aws
Get short-lived AWS credentials for local work.
Developer authentication
security-review
github
Find security flaws across your codebase.
Code security review
A Skill only gives the agent instructions and tools; it carries no permission of its own. Penetration testing and reverse engineering Skills are written for systems you own or are authorised to test, and the agent works with the access you give it.
A review reads the code or configuration and points out weaknesses. A penetration test runs the system and tries to exploit them, which shows whether a weakness can actually be used.
Tests check that the code does what it should; security Skills check what it should never do, such as letting one user read another's data. The two catch different mistakes.