Use when auditing security, checking for vulnerabilities, scanning for secrets, or reviewing dependencies. OWASP Top 10 audit with GitLeaks and dependency checks.

amanahmed22220

安全

Security Review Team

Parallel 3-agent security audit (code + infra + data)

DenysonJ0

安全

Authentication and authorization specialist covering Auth0, Clerk, and Firebase Auth. Use when implementing authentication, authorization, MFA, SSO, passkeys, WebAuthn, social login, or security features. Supports enterprise (Auth0), modern UX (Clerk), and mobile-first (Firebase) patterns.

AngeleyesTrue0

安全

1password

Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.

Angriff360

安全

Compliance Gdpr Hipaa

Principal Compliance Officer. GDPR (data mapping, DPIA, consent, erasure, portability, breach 72hr), HIPAA (PHI, BAA, encryption, audit trails), SOC 2 Type II, PCI-DSS, ISO 27001, privacy by design.

AniruddhaPKawarase0

安全

Openclaw Ui

Canvas UI capability for operating OpenClaw with resilient status, actions, and update-safe delivery.

Anoxy20

安全

Security Review

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns for secrets management, input validation, SQL injection prevention, XSS, CSRF, rate limiting, sensitive data exposure, and dependency security.

Ans-Maliktech0

安全

Security Compliance

Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR, HIPAA), conducting threat modeling and risk assessments, managing security operations and incident response, and embedding security throughout the SDLC.

eliferjunior0

安全

VibeCoding Security — Agent Skill

Comprehensive security skill for AI-assisted ("vibe-coded") projects. Operates in two modes: (1) AUDIT — runs a 50-point security checklist with quantitative scoring against an existing codebase, (2) PREVENTIVE — guides secure code generation by consulting vulnerability knowledge bases before writing. Covers OWASP Top 10, cloud-native security (Supabase RLS, Firebase Rules), payment security (Stripe), mobile security (React Native/Expo), AI/LLM security (prompt injection, usage caps), GraphQL, Docker/CI-CD, and production readiness (GDPR, logging, headers, dependency auditing). Activate when: writing or reviewing code involving auth, payments, database access, API keys, secrets, user data, file uploads, or deployment. Also activate when user says "security audit", "vulnerability check", "is this safe?", "check my code", "audit this", "review for vulnerabilities", "can someone hack this?", "vibe security", or any mention of security concerns.

antoniojvrf0

安全

Data Masking

Mask and redact sensitive data (PII, PCI, PHI) in databases, logs, and APIs. Use when protecting PII in dev/staging environments, redacting sensitive data from logs, or anonymizing data for analytics while preserving data structure.

eliferjunior0

安全

Security

Use when securing Rails applications - XSS, SQL injection, CSRF, file uploads, command injection prevention

apdarr0

安全

Bridges Cross Chain

Cross-chain bridge security guidance for message verification, replay prevention, and validator risk.

Apegurus0

安全

Extension Security

Security for VS Code extensions — SecretStorage, no hardcoded credentials, vsce ls verification, secret scanning

fabioc-aloha0

安全

Llm Security Review

Reviews LLM integration code for OWASP LLM Top 10 (2025) vulnerabilities per CSA §2.6. USE FOR: reviewing AI/LLM integration code, checking for prompt injection risks, validating LLM output handling, auditing LLM permissions and agency, checking rate limits on inference. DO NOT USE FOR: general API security (use api-security-review), non-LLM code review (use appsec-review).

arnaudlh0

安全

Form Validator

Form validation with Zod schemas for HR-IMS Server Actions and client forms

Arnutt-N0

安全

Security Review

Performs a comprehensive Laravel security audit of the codebase. Automatically activates when reviewing code for security vulnerabilities, auditing Laravel applications, or assessing attack surfaces. Use when the user asks for a security review, vulnerability assessment, or penetration testing analysis.

Ascend-Digital0

安全

Grc Knowledge

Senior GRC analyst expertise across 15 compliance frameworks — NIST 800-53, FedRAMP, FISMA, CMMC, SOC 2, ISO 27001, PCI DSS, HIPAA, CIS Controls, COBIT, CSA CCM, GDPR, SLSA, OSCAL. Control lookups, cross-framework mapping, document review, audit prep, and operational compliance workflows.

austinsonger0

安全

Data Anonymization

Anonymize datasets for analytics and ML while preserving utility — k-anonymity, l-diversity, and differential privacy. Use when sharing data with third parties, building analytics on user data, or achieving GDPR Article 4 anonymization (data no longer considered personal).

eliferjunior0

安全

Authentication Setup

Design and implement authentication and authorization systems. Use when setting up user login, JWT tokens, OAuth, session management, or role-based access control. Handles password security, token management, SSO integration.

autohandai0

安全

Configuring Aws Verified Access For Ztna

Configure AWS Verified Access to provide VPN-less zero trust network access to internal applications using identity and device posture verification with Cedar policy language.

autohandai0

安全

Detecting Api Enumeration Attacks

Detect and prevent API enumeration attacks including BOLA and IDOR exploitation by monitoring sequential identifier access patterns and authorization failures.

autohandai0

安全

Exploiting Ipv6 Vulnerabilities

Identifies and exploits IPv6-specific vulnerabilities including SLAAC spoofing, Router Advertisement flooding, and IPv6 tunneling during authorized assessments to test dual-stack security controls and IPv6-aware network defenses.

autohandai0

安全

Exploiting Server Side Request Forgery

Identifying and exploiting SSRF vulnerabilities to access internal services, cloud metadata, and restricted network resources during authorized penetration tests.

autohandai0

安全

Implementing Api Schema Validation Security

Implement API schema validation using OpenAPI specifications and JSON Schema to enforce input/output contracts and prevent injection, data exposure, and mass assignment attacks.

autohandai0

安全

Implementing Azure Ad Privileged Identity Management

Configure Microsoft Entra Privileged Identity Management to enforce just-in-time role activation, approval workflows, and access reviews for Azure AD privileged roles.

autohandai0

安全

Implementing Identity Verification For Zero Trust

autohandai0

安全

Implementing Network Access Control With Cisco Ise

Deploy Cisco Identity Services Engine for 802.1X wired and wireless authentication, MAC Authentication Bypass, posture assessment, and dynamic VLAN assignment for network access control.

autohandai0

安全

Implementing Rsa Key Pair Management

RSA (Rivest-Shamir-Adleman) is the most widely deployed asymmetric cryptographic algorithm, used for digital signatures, key exchange, and encryption. This skill covers generating, storing, rotating,

autohandai0

安全 | Skills Pool

安全

安全

Nsfw Video Generation

Aws Iam Policy Auditor

Security

Security Review Team

Ae Platform Auth

1password

Compliance Gdpr Hipaa

Openclaw Ui

Security Review

Security Compliance

VibeCoding Security — Agent Skill

Data Masking

Security

Bridges Cross Chain

Extension Security

Llm Security Review

Form Validator

Security Review

Grc Knowledge

Data Anonymization

Authentication Setup

Configuring Aws Verified Access For Ztna

Detecting Api Enumeration Attacks

Exploiting Ipv6 Vulnerabilities

Exploiting Server Side Request Forgery

Implementing Api Schema Validation Security

Implementing Azure Ad Privileged Identity Management

Implementing Identity Verification For Zero Trust

Implementing Network Access Control With Cisco Ise

Implementing Rsa Key Pair Management