Навыков: 4 624. Сортировка по числу звёзд.
Security: review git changes for vulnerabilities, threat-model a system's attack surface, audit supply-chain risks.
Enforce Elixir/Phoenix security — auth, OAuth, sessions, CSRF, XSS, SQL injection, input validation, secrets. Use when e...
Security best practices for secure coding, authentication, authorization, and data protection. Use when developing featu...
Seguridad de la app: revisión y hardening con evidencia (OWASP), control de acceso, auth, secretos y cabeceras, segurida...
Security-focused review from the perspective of a Principal Security Engineer. Use when the user asks for a security rev...
Vulnerability scanning, encryption, and secure coding practices.
This document provides guidance on security best practices
Security category index for Apple platforms. Routes to the privacy-manifests skill. General secure-storage/biometrics/AT...
Application security practices — OWASP Top 10 mitigations, secret management, dependency scanning, and secure coding pat...
Teaches DevOps/AppSec: OWASP, WAF/ModSecurity, CSP/HSTS/CORS, JWT/OAuth/mTLS, IAM/RBAC, secrets, Vault/Infisical, and su...
Security review and guidance for iOS, macOS, and watchOS apps. Covers secure storage, biometric authentication, network...
Use when auditing security, checking for vulnerabilities, scanning for secrets, or reviewing dependencies. OWASP Top 10...
Apply security best practices to code, architecture, and workflows. Trigger whenever the user mentions authentication, a...
Defensive security engineering judgment, distilled from a stronger model - invoke when THREAT MODELING a system or featu...
Security guidelines and OWASP Top 10. Use when reviewing security, implementing authentication or authorization, hardeni...
OpenStack security operations skill for hardening, certificate management, and security posture assessment of cloud infr...
Information security expertise for cybersecurity frameworks (NIST, ISO 27001), security architecture, incident response,...
read-only security audit. Primary owner: secrets, OWASP, CVE and PII findings. Do not use for: security remediation. Use...
Security validation, vulnerability scanning, and compliance checking for development environments. Auto-activates on key...
Security review skill: comprehensive security checklist and patterns. Use when adding authentication, handling user inpu...
Authorized offensive and defensive security assessments, one router over per-surface playbooks: API, cloud/K8s, code aud...
Solidity vulnerabilities, defensive code patterns, and a pre-deployment audit checklist. Covers reentrancy, oracle manip...
Security review and threat work — threat modeling, vulnerability assessment, penetration test, incident response, OWASP...
Route and endpoint audit for authentication, authorization, IDOR, JWT, and CORS vulnerabilities
Audit for PII in logs, verbose error responses, sensitive data in URLs, and overly broad API responses
Dependency audit for vulnerable packages, lockfile changes, postinstall scripts, and supply chain risks
Mandatory core-4 reviewer with P0-P3 severity classification and specialist escalation
This skill should be used when the user asks to "perform vulnerability scanning", "scan networks for open ports", "asses...
Checklist for security-sensitive coding, ensuring MaiHouses guards and policies are respected.
Maintains the ansible/roles/security_hardening Ansible role that verifies Secure Boot/FIPS state, sets kernel lockdown m...
This skill enables Claude to conduct a security-focused code review using the security-agent plugin. It analyzes code fo...
Deep security analysis with high reasoning effort for threat detection
Automatically triages security alerts from AWS GuardDuty, CloudTrail, and other cloud security services. Classifies each...
Perform static security review of modified code, identifying vulnerabilities and recommending mitigations
Security audit patterns including OWASP Top 10, secret scanning, and language-specific vulnerabilities.
Comprehensive security vulnerability analysis for codebases and infrastructure. Scans dependencies (npm, pip, gem, go, c...
Use when reviewing or changing code that handles untrusted input, authentication, authorization, sensitive data, externa...
Use when the user explicitly requests a security audit, threat model, or hardening analysis, or when an active owner ide...
Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integratio...
Threat-models and hardens an application, API, data flow, dependency, or deployment against authentication and authoriza...
Optional, opt-in STRIDE threat pass for a sensitive feature — invoked deliberately via /threat-model, never forced on or...
Vulnerability review, OWASP patterns, secure coding practices, and threat modeling approaches. Use when reviewing code s...
Comprehensive security auditing for Clawdbot deployments. Scans for exposed credentials, open ports, weak configs, and v...
Perform security audits on codebases for projects. Use when checking for vulnerabilities, security review, or when user...
Identify and fix security vulnerabilities in code and infrastructure
Automated security posture check of the AI Harness system. Checks credentials, tokens, file permissions, git hygiene, he...
Run a comprehensive security audit combining automated SAST scanning, STRIDE threat modeling, and attack tree analysis....
Review security of command execution, tool permissions, and API key handling. Use when user mentions "security review",...