Back to the catalog
Agent skills · Security & identity
50 tools
- vibe-securitySecurity intelligence for code analysis. Detects SQL injection, XSS, CSRF, authentication issues, crypto failures, and more. Actions: scan, 4 stars
- claude-code-hooksClaude Code hook system for pre/post tool execution. Triggers on: hooks, PreToolUse, PostToolUse, hook script, tool validation, audit loggin81 stars
- security-opsSecurity audit orchestrator - parallel dependency, SAST and auth/config agents consolidated into an OWASP-mapped severity report, plus PHP 881 stars
- obsidian-course-vaultBuild and maintain a semester-long Obsidian course vault with course overviews, lesson notes, concept pages, graph hubs, replay-sync tracker54 stars
- webflow-enterprise-apiWebflow Enterprise API endpoints for workspace management, audit logs, site activity, 301 redirects, robots.txt, and well-known files. Use w10 stars
- compliance-auditorSpecialized auditor for SOC2, HIPAA, GDPR, and regulatory compliance frameworks across industries
- risk-managerRisk management specialist who assesses, analyzes, and mitigates financial and operational risks with expertise in quantitative risk modelin
- security-auditorExpert in compliance frameworks (SOC2, ISO 27001), automated auditing, and risk management.
- security-auditSecurity auditing and vulnerability assessment specialist. Use when conducting4 stars
- security-auditScans code for security vulnerabilities including injection attacks, authentication flaws, exposed secrets, insecure dependencies, and data
- architect-calculatorSeven Python-based architectural calculators for common design computations: area and density calculations (GFA, NGA, unit count, population311 stars
- web-securityEnforce web security and avoid security vulnerabilities11 stars
- iam-identity-managementUse when writing IAM policies, troubleshooting permission denied errors, setting up dynamic groups, or implementing IDCS integration. Covers22 stars
- landing-zonesUse when designing multi-tenant OCI environments, setting up production landing zones, implementing compartment hierarchies, or establishing22 stars
- secrets-managementUse when storing credentials in OCI Vault, troubleshooting secret retrieval failures, implementing secret rotation, or setting up applicatio22 stars
- getting-startedUse when acli is not installed, authentication fails, or user needs to install and authenticate acli for the first time.10 stars
- security-updatesUse when user asks about fixing security vulnerabilities, composer audit failures, vulnerable Drupal packages, or CVE advisories in a Drupal10 stars
- brand-grid-videoCreate a short moving grid that shows a product's interface and visual identity together. Use for brand montages, design-system reels, and m45 stars
- security-and-hardeningHardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when buildin117,497 stars
- accessibilityAudit and improve web accessibility following WCAG 2.2 guidelines. Use when asked to "improve accessibility", "a11y audit", "WCAG compliance3,081 stars
- accessibility-fixScan an AEM Edge Delivery Services page for WCAG 2.1 AA accessibility violations and generate specific fixes. Identifies missing alt text, h326 stars
- flounderOperates Flounder, an autonomous white-hat security auditor. Use when a user asks for a security audit, bug-bounty review, vulnerability inv527 stars
- afa-brandDTC 品牌定位与识别——定位画布、品牌声音、品牌故事、视觉识别。触发词: 品牌定位, brand positioning, 品牌声音, 品牌故事, 视觉识别, 品牌规范, 品牌升级, brand voice, brand story, visual identity, rebr190 stars
- brand-discoveryRun a structured, resumable multi-session brand identity interview across 8 modules (purpose, positioning, audience, personality, voice, nar
- carrier-relationship-managementCodified expertise for managing carrier portfolios, negotiating freight rates, tracking carrier performance, allocating freight, and maintai
- customs-trade-complianceCodified expertise for customs documentation, tariff classification, duty optimization, restricted party screening, and regulatory complianc
- django-securityDjango security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deploym
- hipaa-complianceHIPAA-specific entrypoint for healthcare privacy and security work. Use when a task is explicitly framed around HIPAA, PHI handling, covered
- laravel-securityLaravel security best practices — authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and secure deployment
- openclaw-persona-forge为 OpenClaw AI Agent 锻造完整的龙虾灵魂方案。根据用户偏好或随机抽卡， 输出身份定位、灵魂描述(SOUL.md)、角色化底线规则、名字和头像生图提示词。 如当前环境提供已审核的生图 skill，可自动生成统一风格头像图片。 当用户需要创建、设计或定制 OpenC
- osint-investigationSparse-clue OSINT investigation methodology for extracting overlooked leads, connecting fragmented evidence, and testing explanations across
- quarkus-securityQuarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependenc
- quarkus-verificationVerification loop for Quarkus projects: build, static analysis, tests with coverage, security scans, native compilation, and diff review bef
- returns-reverse-logisticsCodified expertise for returns authorization, receipt and inspection, disposition decisions, refund processing, fraud detection, and warrant
- security-bounty-hunterHunt for exploitable, bounty-worthy security issues in repositories. Focuses on remotely reachable vulnerabilities that qualify for real rep
- skill-complyVisualize whether skills, rules, and agent definitions are actually followed — auto-generates scenarios at 3 prompt strictness levels, runs
- springboot-verificationVerification loop for Spring Boot projects: build, static analysis, tests with coverage, security scans, and diff review before release or P
- access-control-patternsEnterprise-grade access control patterns to prevent broken access control, IDOR, tenant data leaks, privilege escalation, and admin route ex3 stars
- owasp-securityReviews code for security vulnerabilities and guides secure implementation using OWASP Top 10:2025, ASVS 5.0, the OWASP Top 10 for LLM Appli446 stars
- helpContextual guidance and command discovery. Three modes — narrative (first-time), contextual (mid-task), compact (quick reference). Shows ava3,519 stars
- tutorialInteractive walkthrough for new users. Learn by doing — each step creates real content in your vault. Three tracks (researcher, manager, per3,519 stars
- api-auth-better-auth-drizzle-honoBetter Auth patterns, sessions, OAuth26 stars
- polymarket-apiPolymarket exchange mechanics — on-chain Polygon CTF, Gamma/CLOB/Data APIs, EIP-712 auth, identifier model, WebSocket, settlement, and geo/K533 stars
- cybersecurityUltimate AI-powered cybersecurity code review skill. Performs comprehensive security audit across 8 dimensions: vulnerability detection (OWA279 stars
- cybersecurityagricidaniel/pya · skills.sh
- sonarqube-quality-gate-playbookPlaybook iterativo para llevar proyectos Node y TypeScript (NestJS + React en monorepo) a cumplir Quality Gates de SonarQube sin romper buil
- web-app-security-auditUse when testing a web application for security vulnerabilities, before deployment or during security review — guides through a structured 16 stars
- erc8004ERC-8004 identity, reputation, and validation — register identities, retrieve identity info by agent ID, query reputation scores, submit pee11 stars
- identityERC-8004 on-chain agent identity management — register agent identities, update URI and metadata, manage operator approvals, set/unset agent11 stars
- brand-analyzerThis skill should be used when the user requests brand analysis, brand guidelines creation, brand audits, or establishing brand identity and464 stars
Looking for something else?QuestionsContact
