secure-code-guardian
jeffallan
Build safer logins and protect user input.
Application security
Security skills for AI agents
These Skills look at software the way an attacker or an auditor would. The biggest groups review code for injection and broken access rules, probe systems in penetration tests and audit cloud accounts against best practices; smaller sets cover sign-in, malware analysis and forensics.
Sort by
Most installed
794 Skills
Showing Skills in Security.- 4.7k
4.7kburpsuite-project-parser
trailofbits
Find security evidence in Burp Suite captures.
Security auditing
4.7kghost-scan-code
ghostsecurity
Find and verify security flaws across your codebase.
Application security
4.5kgha-security-review
getsentry
Find exploitable GitHub Actions flaws before attackers do.
CI security
4.5ksecret-scanning
github
Keep leaked secrets out of your GitHub repos.
Repository security
- 4.3k
zeroize-audit
trailofbits
Find secrets your code leaves behind in memory.
Security auditing
SE 
4.1ksecurity monitoring
claude-office-skills
Catch security threats and coordinate your response.
Security operations
4.1kgke-platform-security
google
Stronger security for your GKE clusters.
Kubernetes security
+1- 4k
suspicious email analyzer
claude-office-skills
Spot phishing signs in your suspicious emails.
Email security
- 4k
gke-workload-security
google
Harden your GKE workloads against unwanted access.
Workload security
+2 
4k1password
openclaw
Use 1Password secrets in commands, not chat.
Secrets management
3.9kspring-boot-security-jwt
giuseppe-trisciuoglio
Secure your Spring Boot API with JWT tokens.
Backend security
- 3.9k
ghost-scan-deps
ghostsecurity
Find exploitable dependency flaws and practical fixes.
Dependency security
+1 
3.8kreverse-engineer-anything
morluto
Find out how shipped apps work, with evidence.
Reverse engineering
RE- 3.7k
typescript-security-review
giuseppe-trisciuoglio
Find security risks in your TypeScript app.
Application security
3.7ksecurity-case-management
elastic
Keep SOC investigations organized in one case queue.
Security case management
3.7kauthentication
dpearson2699
Build iOS sign-in with secure credential handling.
IOS authentication
3.6kwaf
aws
Protect your web app with carefully tuned AWS WAF.
Web application security
+1
3.6kcode-obfuscation-deobfuscation
yaklang
Recover readable logic from obfuscated native binaries.
Reverse engineering
- 3.6k
sqli-sql-injection
yaklang
Probe SQL flaws from first signal through escalation.
Application security
- 3.6k
trailmark
trailofbits
Map your code's attack surface with graphs.
Security analysis
- 3.6k
unit-test-security-authorization
giuseppe-trisciuoglio
Test who gets access in your Spring Security app.
Authorization testing
- 3.6k
audit-augmentation
trailofbits
See audit findings in the context of your code.
Security auditing
- 3.6k
nextjs-authentication
giuseppe-trisciuoglio
Secure sign-in and protected pages for Next.js.
Web authentication
A Skill only gives the agent instructions and tools; it carries no permission of its own. Penetration testing and reverse engineering Skills are written for systems you own or are authorised to test, and the agent works with the access you give it.
A review reads the code or configuration and points out weaknesses. A penetration test runs the system and tries to exploit them, which shows whether a weakness can actually be used.
Tests check that the code does what it should; security Skills check what it should never do, such as letting one user read another's data. The two catch different mistakes.