Skill catalog
412security agent skills synced from skills.sh, with their install counts. Read them here, or let your agent fetch the right one through the Graph-of-Skills MCP server.
Want your agent to use these? Set up Graph-of-Skills
or get a free key.
How these skills are sourced and what we check.
Cannot find one? Your agent can write a skill for your own library.
Have skills of your own? Install one on another machine.
A skill that comes from GitHub shows its npx skills add command on its page.
- database-security zhaoxuya520/reverse-skill
Use for authorized database security assessment covering PostgreSQL/MySQL/MSSQL/Mongo/Redis exposure, authz, UDF/command paths, and misconfiguration review.
1,164 installs - iam-recommendations-fetcher google/skills
Fetches raw IAM recommendations and associated security insights from Google Cloud for a specified target scope (Organization, Folder, or Project). Use when you need to retrieve security recommendations before analyzing…
1,162 installs - wifi-wireless zhaoxuya520/reverse-skill
Use for authorized wireless security assessment including Wi-Fi capture, WPA handshake analysis, rogue AP detection research, and lab-only deauth testing.
1,162 installs - supply-chain-security zhaoxuya520/reverse-skill
Use for software supply-chain security assessment covering SBOM, SCA, CI/CD pipelines, container images, build integrity, dependency provenance, and vulnerability reachability.
1,157 installs - vtex-io-auth-and-policies vtex/skills
Apply when deciding or implementing permissions and authorization boundaries for VTEX IO apps. Covers manifest policies, outbound-access rules, least-privilege design, and how service routes or integrations map to expli…
1,156 installs - identity-federation zhaoxuya520/reverse-skill
Use for authorized assessment of federated identity systems including SAML, OIDC, OAuth2 flows, SSO misconfiguration, and token confusion issues.
1,154 installs - email-security zhaoxuya520/reverse-skill
Use for authorized email security review including phishing analysis, header authentication (SPF/DKIM/DMARC), BEC patterns, and mailbox token abuse research.
1,152 installs - vuln-scan anthropics/defending-code-reference-harness
Static source-code vulnerability scan. Reads a target directory (and THREAT_MODEL.md if present), spawns parallel review subagents per focus area, and writes VULN-FINDINGS.json + .md for /triage to consume. Read-only —…
1,152 installs - windows-ad zhaoxuya520/reverse-skill
Use for authorized Active Directory and Windows identity attacks including Kerberos, AD CS, BloodHound paths, NTLM relay, and domain privilege escalation research.
1,151 installs - ot-ics zhaoxuya520/reverse-skill
Use for authorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation.
1,148 installs - supabase-audit-rls yoanbernabeu/supabase-pentest-skills
Test Row Level Security (RLS) policies for common bypass vulnerabilities and misconfigurations.
1,148 installs - cloud-k8s zhaoxuya520/reverse-skill
Use for authorized cloud, container, and Kubernetes security assessment including metadata SSRF, IAM misconfig, container escape paths, and cluster RBAC review.
1,147 installs - triage anthropics/defending-code-reference-harness
Triage a batch of raw security findings. Verify each is real, collapse duplicates, re-rank by derived exploitability, and tag with an owner. Takes a directory or file of scanner output and writes TRIAGE.json + TRIAGE.md…
1,132 installs - skill-vetter skills.volces.com
Security vetting protocol before installing any AI agent skill. Red flag detection for credential theft, obfuscated code, exfiltration. Risk classification LOW/MEDIUM/HIGH/EXTREME. Produces structured vetting reports. N…
1,126 installs - agent-security-manager ruvnet/ruflo
Agent skill for security-manager - invoke with $agent-security-manager
1,125 installs - agent-v3-security-architect ruvnet/ruflo
Agent skill for v3-security-architect - invoke with $agent-v3-security-architect
1,123 installs - patch anthropics/defending-code-reference-harness
Generate candidate fixes for verified security findings. Consumes TRIAGE.json (preferred), VULN-FINDINGS.json, INCIDENTS.json, or a vuln-pipeline results directory. Pipeline input is delegated to the execution-verified…
1,123 installs - claims ruvnet/ruflo
Claims-based authorization for agents and operations. Grant, revoke, and verify permissions for secure multi-agent coordination. Use when: permission management, access control, secure operations, authorization checks.…
1,121 installs - v3 security overhaul ruvnet/ruflo
Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation.
1,120 installs - vibe-security-skill reason-machines/security-skills
Agent skill that audits vibe-coded apps for common security vulnerabilities introduced by AI coding assistants
1,118 installs - vtex-io-security-boundaries vtex/skills
Apply when reviewing or designing security-sensitive boundaries in VTEX IO apps. Covers public versus private exposure, trust assumptions at route and integration boundaries, sensitive data handling, validating what cro…
1,118 installs - openclaw-security-hardening reason-machines/security-skills
Deploy and manage security hardening for high-privilege autonomous AI agents (OpenClaw) using zero-trust architecture and automated defense matrices
1,113 installs - vibesec-skill behisecc/vibesec-skill
This skill helps Claude write secure web applications. Use this when working on any web application or when a user requests a scan or audit to ensure security best practices are followed.
1,111 installs - dt-sec-contextualization dynatrace/dynatrace-for-ai
Resolve security signals, IoC matches, or Smartscape nodes to runtime Dynatrace entities and connect findings on different entity levels through a shared runtime entity. Covers identity-to-Smartscape mapping (incl. cont…
1,110 installs - ios-security dpearson2699/swift-ios-skills
Secure iOS apps with Keychain Services, CryptoKit encryption, biometric authentication (Face ID, Touch ID), Secure Enclave key storage, LAContext, App Transport Security (ATS), certificate pinning, data protection class…
1,106 installs - autopentestx-automated-pentesting reason-machines/security-skills
Automated penetration testing toolkit for security assessment, vulnerability scanning, and automated security reporting
1,105 installs - dt-sec-ioc-hunting dynatrace/dynatrace-for-ai
Hunt threat-intelligence indicators of compromise (IoCs) across Dynatrace logs and spans and produce a 0-100 threat-exposure score. Extracts and normalizes IoCs — IPs, Domains (hostnames included), URLs, Emails, CVEs, F…
1,101 installs - malware-detection-awareness reason-machines/security-skills
Understanding security risks in software distribution and recognizing illegitimate software packages
1,101 installs - mcp-security-audit github/awesome-copilot
Audit MCP (Model Context Protocol) server configurations for security issues. Use this skill when: - Reviewing .mcp.json files for security risks - Checking MCP server args for hardcoded secrets or shell injection patte…
1,099 installs - slowmist-agent-security-framework reason-machines/security-skills
Comprehensive security review framework for AI agents to audit skills, repositories, URLs, on-chain addresses, and services in adversarial environments
1,098 installs - avast-premium-security-analysis reason-machines/security-skills
Analyze and understand Avast Premium Security components, antivirus protection mechanisms, and security software implementation patterns
1,086 installs - malware-warning-avast-keygen reason-machines/security-skills
WARNING - This repository distributes malware disguised as Avast Premium Security cracks and keygens
1,085 installs - penetration-testing aj-geddes/useful-ai-prompts
Ethical hacking and security testing methodologies using penetration testing tools, exploit frameworks, and manual security validation. Use when assessing application security posture and identifying exploitable vulnera…
1,079 installs - palisade-security-nexus-bitdefender reason-machines/security-skills
Deploy and configure BitDefender Total Security 2026 with advanced threat detection, sandboxing, VPN integration, and AI-powered heuristic analysis
1,077 installs - avast-security-awareness reason-machines/security-skills
Recognize and avoid malicious software distribution repositories disguised as legitimate security tools
1,073 installs - malware-warning-avast-piracy reason-machines/security-skills
WARNING - This repository distributes pirated software and potential malware disguised as Avast Premium Security
1,073 installs - wordpress-penetration-testing sickn33/agentic-awesome-skills
Assess WordPress installations for common vulnerabilities and installed core/plugin REST permission boundaries.
1,070 installs - report-malicious-repository reason-machines/security-skills
Identify and report potentially malicious software repositories masquerading as legitimate security tools
1,067 installs - brand-protection kostja94/marketing-skills
When the user faces brand impersonation, fake websites, phishing sites, or trademark infringement. Also use when the user mentions "fake site," "impersonation," "phishing site," "trademark infringement," "domain squatti…
1,066 installs - wxmini-security-audit reason-machines/security-skills
Automated WeChat mini-program security auditing framework using Claude Code Agent Teams with 7 specialized agents for comprehensive static analysis
1,062 installs - avast-premium-security-detection reason-machines/security-skills
Identify and analyze suspicious software distribution repositories claiming to offer cracked or pirated security software
1,057 installs - payment-pci-security vtex/skills
Apply when handling credit card data, implementing secureProxyUrl flows, or working with payment security and proxy code. Covers PCI DSS compliance, Secure Proxy card tokenization, sensitive data handling rules, X-PROVI…
1,057 installs - security-auditor zhaono1/agent-playbook
Security vulnerability expert covering OWASP Top 10 and common security issues. Use when conducting security audits or reviewing code for vulnerabilities.
1,053 installs - security-awareness-malicious-repository-detection reason-machines/security-skills
Detect and analyze potentially malicious repositories disguising as legitimate software cracks or pirated tools
1,047 installs - avast-premium-security-malware-analysis reason-machines/security-skills
Analyze and understand Avast Premium Security features, protection mechanisms, and security architecture for antivirus research and educational purposes
1,044 installs - cli-policy-audit cheaper-inference/omniroute
Inspect audit logs, manage access policies, view telemetry data, and review request history from the CLI. Filter by event type, user, or time range for compliance workflows.
1,040 installs - avast-premium-security-awareness reason-machines/security-skills
Identify and analyze potentially malicious software distribution repositories disguised as legitimate security software
1,035 installs - avast-security-analysis reason-machines/security-skills
Analyze and understand Avast antivirus security mechanisms, behavior shields, and protection components for security research
1,035 installs - mantis-advise google/mantis
Proactive security advisor and architectural remediation assistant for secure code development. Use to query threat models, historical vulnerability lineages, verified patch patterns, triaged false positives, and learne…
1,035 installs - sumsub-conformance sumsub/agent-skills
Check whether a tenant's DEPLOYED Sumsub config actually satisfies a regulation/policy document — tracing each requirement to where it is collected, scored, and ENFORCED, and flagging "collected-but-not-enforced" gaps.…
1,034 installs