В каталоге 183 730 навыков в 14 категориях.
Comprehensive security scanning for code, dependencies, and infrastructure. Detects vulnerabilities, misconfigurations,...
Run security vulnerability scan
Run comprehensive security audits including SAST, dependency scanning, and secret detection
Main security scanning orchestration. Detects language, runs OWASP Top 10 patterns, identifies vulnerabilities, generate...
Orchestrate comprehensive security scanning using self-hosted tools.
Schneller Security-Scan der Speicher Analyse Tauri-App (React + TypeScript Frontend). Prüft Command Injection, XSS, Path...
使用AgentShield扫描您的Claude代码配置（.claude/目录），以发现安全漏洞、配置错误和注入风险。检查CLAUDE.md、settings.json、MCP服务器、钩子和代理定义。
Run a comprehensive security scan across all systems
Scan TriStar codebase for security vulnerabilities. Checks secrets, dependencies, injection vectors, authentication, Azu...
Run full security scans on the codebase using Ruflo security tools
Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection...
Audits code security against OWASP Top 10. Validates user ID from session, detects sensitive data leaks, verifies Zod va...
Run full security scans on the codebase using Ruflo security tools. Use when reviewing PRs for security regressions, aud...
セキュリティスキャンを実行。RECON→SCAN→REPORT→LEARNワークフローで脆弱性を検出。「セキュリティスキャン」「security scan」「脆弱性チェック」「セキュリティ診断」「OWASPチェック」で起動。Do NOT u...
Scan your OpenAI Codex configuration (.codex/ directory) for security vulnerabilities, misconfigurations, and injection...
Proactive security scanning. Triggers when modifying auth, API endpoints, user data, or sensitive operations.
Scans the codebase for security vulnerabilities including injection flaws, authentication issues, hardcoded secrets, and...
Run security scans locally (Semgrep, Trivy, Gitleaks) to detect vulnerabilities, secrets, and code issues before pushing...
Trivyで依存関係/コンテナの脆弱性をスキャンし、重大度順に潰す。リリース前チェックで使う。
Run security scans including SAST, dependency scanning, and secret detection
Automatically scan code for security vulnerabilities when user asks if code is secure or shows potentially unsafe code....
Scans DAPR projects for security issues including plain-text secrets, missing ACLs, insecure configurations, and securit...
CI security scanning: secrets, deps, SAST, triage, expiring exceptions
Automated security scanning for dependencies and code. Use when running npm audit, pip-audit, Semgrep, secret detection,...
Security vulnerability scanning, secret detection, dependency auditing, and OWASP best practices. Use when performing se...
You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security....
Use when working with security scanning security hardening
Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.
Comprehensive security analysis including SAST, DAST, dependency scanning, secret detection, and vulnerability assessmen...
Perform practical security review for code, diffs, dependencies, configuration, auth flows, data handling, and deploymen...
按名称、代码或拼音搜索标的。必填 --query，可选 --limit。接口：GET /api/v1/market/security/search/。
Buscar secretos (claves, JWT, keystores, cuentas de servicio, contraseñas) en árbol e historial sin mostrar valores; no...
Security sentinel that analyzes ASTs for injection risks, verifies file path sandboxing, and prevents command tampering.
Performs security audits for vulnerabilities, input validation, auth/authz, hardcoded secrets, and OWASP compliance. Use...
Debug and troubleshoot ettametta's SecuritySentinel — system integrity monitoring, threat detection, audit logging, and...
Configure and manage Claude Code security protections for sensitive files, credentials, and data. Use when the user invo...
**SECURITY SHIELD**: '보안', '인증', '로그인', '비밀번호', 'JWT', '토큰', '암호화', '취약점', 'SQL 인젝션', 'XSS', '보안 검사' 요청 시 자동 발동. .env/au...
Use when reviewing code for security issues.
Application security patterns - authentication, secrets management, input validation, OWASP Top 10. Use when: auth, JWT,...
Security Skill Creator
Implement authentication, authorization, data protection, vulnerability checks, and security best practices. Use when ad...
Security auditing, vulnerability identification, secure coding practices, and secrets management. Use when asked to audi...
Runs security audits on codebases — full scans, diff reviews, threat models, vulnerability triage, remediation guidance,...
安全专家。专注于应用安全、威胁建模、安全合规和数据保护。提供安全审查、漏洞扫描、安全配置和合规检查。用于构建安全可靠的应用系统。
提供安全审计、风险评估和合规检查能力。当需要进行安全审查、风险评估或合规验证时使用。
Security standards for credential handling and authentication
Security audit for SvelteKit, Neon/Drizzle, WorkOS, Stripe, Vercel, Doppler, and GoHighLevel. First gate of the Ship Gat...
Activate when conducting security analysis using STRIDE threat modeling, vulnerability assessment, and security architec...
Run composable security analysis.
Use when asked to security-audit a repository, find vulnerabilities and prescribe fixes, check for leaked secrets, revie...
Composite skill — full security pass across secrets, dependencies, code paths, and OWASP risks. Chains security-audit (b...
Sécurité & RGPD - Atoll Tourisme. Use when reviewing security, implementing auth, or hardening code.
基于NFR安全要求，生成STRIDE/OWASP威胁模型和测试场景。L3级别专用，当设计和需求确认后使用。
Plan security testing strategies including OWASP testing, penetration test scoping, SAST/DAST integration, and threat-ba...
Governs supplied benign security-test tool artifacts through purpose, authority, provenance, artifact integrity, safety-...
Use this skill when you need to design security testing around OWASP risks, vulnerability scanning, and penetration scen...
Test application security against OWASP Top 10 (2025) with automated CI tooling: OWASP ZAP (DAST), dependency/supply-cha...
Use when selecting and configuring security testing tools for your CI/CD pipeline. Covers SAST, DAST, SCA, container sca...
Automate vulnerability scans.
Test security features and verify implementation before deployment. Use this skill when you need to test CSRF protection...
Use when analyzing a specific security threat from a referenced source (CVE, GHSA, security advisory, blog post, or writ...
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mi...
Threat-model product features, APIs, data flows, secrets, permissions, supply-chain changes, auth boundaries, and risky...
Write a STRIDE-based threat model for a service or feature. Use when asked to produce a threat model, document security...
Security threat model: scan toolkit for attack surface, supply-chain risks.
Perform repository-grounded threat modeling by enumerating trust boundaries, assets, attacker capabilities, abuse paths,...
Conducts systematic security analyses using methodologies like STRIDE to identify vulnerabilities in software architectu...
Review features, systems, and code for threat models, abuse cases, and security controls.
Security scanning toolkit for BFF boundaries and CI/CD. Use when setting up or running gitleaks, semgrep, bandit, trivy,...
Triage OpenClaw security advisories, drafts, and GHSA reports with shipped-tag and trust-model proof.
Triage MarketingClaw security advisories, drafts, and GHSA reports with shipped-tag and trust-model proof.
Use when the user supplies existing security findings or vulnerability reports — SARIF results, CVE/GHSA or advisory tex...
Secure boot and firmware update workflows for Zephyr RTOS. Covers MCUboot integration, production image signing, DFU pro...
Top username lists for enumeration: common usernames, default credentials, names. Curated essentials for authorized test...
Pre-merge security validation detecting secrets, user-specific paths, insecure SSH configurations, and security-weakenin...
Runtime security validation including secret scanning, PII detection, prompt injection defense, audit logging, and outpu...
Security protocols and vendor management expertise from Marcus covering emergency response codes, vendor relations, and...
Security-first visual testing combining URL validation, PII detection, and visual regression with parallel viewport supp...
Vite security audit patterns. Load when reviewing Vite apps (vite.config.ts present). Covers VITE_* exposure, build-time...
Workflow for auditing security vulnerabilities using Trunk (Trivy and OSV-scanner). Use when checking for project vulner...
Respond to security vulnerability reports. Use when a researcher reports a security issue or asks about bug bounty polic...
Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and de...
Use when you need wordlists for fuzzing, password cracking, content discovery, username enumeration, or pattern matching...
Document security research, CTF solutions, and malware analysis. Includes REPORT.md and STATUS.md templates.
Run an OWASP ZAP baseline security scan locally using Docker. Checks for the ZAP baseline script, executes the scan, and...
Input Validation security skill
Security Code Review security skill
Terminal Security security skill
Threat Modeling security skill
Automate Securitytrails tasks via Rube MCP (Composio). Always search tools first for current schemas.
Sed processing - use when working on related tasks
Expert GNU sed one-liner generation and transformation. Use this skill whenever the user asks to transform text, edit fi...
Stream editor for text substitution, line operations, and file transformations.
与用户多轮对话，对齐林奇分类、归篮（篮子折现率）、专属属性、假设与可演算主尺后，再把估值框架沉淀落盘。 在用户要求「写估值框架」「按林奇分类」「沉淀框架」「更新框架」「财报后修订假设」「归篮」、 「入库标的」、说出 /sediment-fr...
使用外部视觉服务或本地 OCR 分析本地图片、截图、视频及明确提供的媒体 URL，输出 Markdown。用户明确要求 see，或当前主模型缺少完成媒体分析所需的视觉能力时使用。不拦截普通文本、任意 URL 或已有原生视觉可以直接完成的任务...