Security First
Skills with the best security audit scores
Showing 9,301–9,360 of 13,196 skills · Page 156 of 220
jsmastery-pro / architect
1.3kRun /architect when choosing between approaches, designing a feature or page, picking a tech stack, or when /develop says a decision is owed, anytime a load bearing technical decision is unmade. Asks deep questions, recommends an answer, and writes a build spec to docs/specs/. Owns all spec files.
jsmastery-pro / audit
1.3kRun /audit on a greenfield project, an existing codebase with missing docs, or one area (/audit src/auth) to bootstrap the project's AI context, the AGENTS.md files every later skill reads.
onvoyage-ai / audit-website-aeo
1.3kAudits a live website for AI-engine discoverability (AEO/GEO). Crawls the site, runs 16 deterministic checks plus a 6-dimension content evaluation, and produces a scored report (A-F) with prioritized fixes. Use to get a baseline before improve-aeo-geo, or to measure progress after changes.
uphiago / google-dorks-catalog
1.3kHigh-precision Google dorks for exposed configs, secrets, and credentials -- real-world validated
uphiago / subdomain-takeover-hunt
1.3kDetect and verify subdomain takeover via dangling CNAME to unclaimed services.
uphiago / vhost-enumeration
1.3kDiscover hidden virtual hosts via Host header fuzzing and SSL certificate parsing.
uphiago / hunt-django
1.3kHunt Django-specific vulnerabilities: DRF permission gaps, ORM injection, and admin exploitation.
AI-Builder-Club / karaoke-captions
1.3kGenerate TikTok/Shorts-style karaoke captions using MLX Whisper, ASS subtitles, and FFmpeg libass
ai-evals-course / error-discovery
1.3kRun error analysis on a dataset. Build a review UI, select diverse samples, monitor annotations, and organize failure modes.
ai-evals-course / generate-synthetic-data
1.3kCreate diverse synthetic test inputs for LLM pipeline evaluation using dimension-based tuple generation
huytieu / no-ai-slop
1.2kEdit drafts into sharper, more human writing while preserving the writer's personal voice, or detect AI-slop patterns without rewriting
huytieu / team-brief
1.2kGenerate daily team intelligence brief by cross-referencing GitHub, Linear, Slack, PostHog, meetings, and braindumps with two-way Linear sync-back
huytieu / update-cog
1.2kCheck for and apply upstream COG framework updates (skills, docs, scripts) without touching personal content
BankrBot / aero-stock-lp
1.2kLP tokenized stocks onchain — range-LP Coinbase tokenized equities (NVDA, AAPL, GOOGL, META) and AERO/USDC on Aerodrome Slipstream (Base) for trading-fee + AERO emission yield
BankrBot / autoboy
1.2kAutoBoy by The Firm — the pre-launch order book for Bankr launches on Base
BankrBot / token-scam-analysis
1.2kDeep on-chain scam / rug / soft-rug analysis for EVM tokens (especially Clanker, Doppler, Bankr-style single-admin ERC-20s)
BankrBot / coffer
1.2kEarn fees by depositing ETH into the Coffer Vault, a multi-strategy managed liquidity vault. Query and transact Coffer, run by Soteria Labs on Robinhood (4663) - one share over several Uniswap V3 legs (volatile + stock pairs).
BankrBot / erc-8004
1.2kRegister AI agents on Ethereum mainnet using ERC-8004 (Trustless Agents)
BankrBot / gem-miner
1.2kStake $GEM tokens on Gem Miner (gemminer.app) to earn yield and unlock the in-game earn/cashout system
BankrBot / gmfarcaster
1.2kAnswer questions about the GM Farcaster podcast archive (Farcaster, Base, and the wider crypto-social ecosystem) using the paid Warpee Knowledge API.
BankrBot / harness-capu
1.2kFund OpenCAP inference from Capminal with staked CAPU on Base. Buy or mint CAPU, stake it for daily inference credit, create a wallet-owned OpenCAP API key through Ethereum sign-in, check quota, and recover or rotate the key
BankrBot / metr-merchant-payments
1.2kClaim and withdraw payments from Metr (metrpay.com) merchant account.
BankrBot / papertrade
1.2kTrade Papertrade's synthetic BTC and ETH perps (HyperEVM, priced from Hyperliquid) from a Bankr wallet with REAL USDC, and earn USDC from the PAPER that losing trades mint.
BankrBot / symbiosis
1.2kCross-chain token swaps across 54+ blockchains via Symbiosis protocol
microsoft / fabriciq
1.2kAnswers natural-language business questions over existing Power BI reports and semantic models through the FabricIQ MCP endpoint, discovering artifacts, resolving entities, generating the DAX itself, and returning a plain-language answer
xuzhougeng / word-zotero-citations
1.2kBuild, audit, authorize, recover, or finalize dynamic Zotero citations and bibliographies in Microsoft Word DOCX files with a protected-source, digest-bound workflow.
fcakyon / openai-frontend-design
1.2kUse for new frontend applications, dashboards, games, creative websites, hero sections, and visually driven UI from scratch, or when the user explicitly asks for a redesign/restyle/modernization.
fcakyon / mongodb-atlas-stream-processing
1.2kManages MongoDB Atlas Stream Processing (ASP) workflows. Handles workspace provisioning, data source/sink connections, processor lifecycle operations, debugging diagnostics, and tier sizing.
fcakyon / mongodb-connection
1.2kOptimize MongoDB client connection configuration (pools, timeouts, patterns) for any supported driver language. Use this skill when working/updating/reviewing on functions that instantiate or configure a MongoDB client (eg, when calling `connect()`), configuring connection pools, troubleshooting con…
gamedev-skills / router
1.1kRoutes any game-development request to the right specialized skill(s): it detects the engine (Godot, Unity, Unreal, Bevy, Phaser, PixiJS, three.js, LÖVE, pygame, Roblox) and the task, then reads the chosen skill before acting.
TencentCloudBase / git-workflows
1.1kReusable git delivery workflows derived from local slash commands (commit, push, PR, release notes, GitHub Actions failure triage with worktree-based fixes, and isolating your own changes from a shared dirty workspace).
TencentCloudBase / cloudbase-sites-runtime
1.1kUse when the user wants to develop, run, preview, save, deploy, or roll back a CloudBase Web app in this conversation as a Lovable/Codex-Sites-like vibe- coding session — i.e. any request that maps to "spin up a React+Vite project, see it live in the browser, iterate, save versions, deploy".
higgsfield-ai / higgsfield-websites
1.1kBuild, edit, and deploy full-stack websites, apps and games via the Higgsfield CLI (`higgsfield website …`). Each is a React 19 + TanStack Start SSR app in one Cloudflare Worker (D1/R2/KV/DO/Containers).
matlab / matlab-interpret-machine-learning-model
1.1kInterpret and explain a trained tabular machine-learning model (classification or regression) in MATLAB. Find which predictors, features, or columns matter most; explain why the model made a specific prediction, including diagnosing predictions it got wrong; show how a predictor affects the output;…
matlab / matlab-use-visual-inspection
1.1kBuild machine vision inspection systems with MATLAB Visual Inspection Toolbox. Covers the full arc from problem selection through deployment: anomaly detection (Student-Teacher, PatchCore, FastFlow, FCDD), object detection (YOLOX), counting (CounTR, shape matching), gauging and measurement (caliper,…
matlab / matlab-model-serdes-systems
1.1kModel, simulate, and optimize Serializer/Deserializer (SerDes) systems — serial and parallel links — using MATLAB SerDes Toolbox.
matlab / matlab-build-industrial-hmi
1.1kBuild industrial-grade SCADA/HMI dashboards in MATLAB following industrial-HMI conventions (ISA-101-aligned): gray-field philosophy, alarms at source, write safeguards, fixed-range trends, drill-down layout.
michaelshimeles / evidence-driven-testing
1.1kRecords visual proof while testing UI behavior — the agent tests the app hands-on via computer use while a screen recording with structured test/assertion annotations captures the session — then posts the video and a results summary to the PR and tracker issue
hoangsonww / file-headers
1.0kMANDATORY for every coding agent (Claude Code, Codex, or any other) on every change-set — every applicable source file the agent creates or updates MUST start with the project's copyright/authorship header (file overview + exact author line).
nexscope-ai / profit-margin-calculator-tiktok
983TikTok Shop profit margin calculator for sellers. Calculate cost breakdowns including affiliate commissions, platform fees, and FBT costs. Includes return rate analysis for impulse buying patterns. No API key required.
microsoft / add-connector
919Adds any Power Platform connector to a Power Apps code app. Generic fallback for connectors not covered by a specific skill.
Sushegaad / ccpa
916California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) compliance advisor — business threshold analysis, consumer rights fulfillment (access, delete, correct, opt-out of sale/sharing, limit SPI, ADMT opt-out), privacy notice drafting, service provider vs. contractor vs.
Sushegaad / cis-controls
916Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, access control, continuous vulnerability management, audit log…
Sushegaad / cmmc
916Expert CMMC 2.0 (Cybersecurity Maturity Model Certification) advisor for US defense contractors and subcontractors in the Defense Industrial Base (DIB).
Sushegaad / csrd
916Expert CSRD (Corporate Sustainability Reporting Directive, EU 2022/2464) compliance advisor. Use this skill whenever a user asks about CSRD, European Sustainability Reporting Standards (ESRS), double materiality assessment, sustainability reporting obligations, ESG disclosure, CSRD scope and thresho…
Sushegaad / dora
916Expert DORA (Regulation (EU) 2022/2554 — Digital Operational Resilience Act) compliance advisor for EU financial entities.
Sushegaad / dpdpa
916Expert India Digital Personal Data Protection Act, 2023 (DPDPA) compliance advisor. Use this skill whenever a user asks about the DPDPA, DPDP Act, DPDP Rules 2025, India data privacy law, Data Fiduciary obligations, Data Principal rights, Significant Data Fiduciary, Data Protection Board of India, c…
Sushegaad / ear
916Export Administration Regulations (EAR, 15 CFR Parts 730-774) compliance advisor — ECCN classification across all 10 CCL categories and 5 product groups (A-E), EAR99 determination, jurisdiction analysis (EAR vs ITAR order of review), license requirement analysis via Country Chart, all license except…
Sushegaad / eu-ai-act
916EU AI Act (Regulation (EU) 2024/1689) compliance advisor — risk classification across all four tiers, all 9 prohibited practices (Art. 5, including the nudification/CSAM prohibition from Dec 2, 2026), all 8 Annex III high-risk use case areas, provider and deployer obligations (Arts.
Sushegaad / ism
916Expert Australian Information Security Manual (ISM) advisor for government entities and their supply chains. Use for ISM control selection, gap analysis, system authorisation, IRAP assessment preparation, security documentation, and ASD compliance.
Sushegaad / iso27701
916Expert ISO 27701 Privacy Information Management System (PIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 27701:2025, ISO/IEC 27701:2019, privacy information management, PIMS certification, PII controller or processor obligations, privacy risk assessment, Statement of Appli…
Sushegaad / itar
916Expert ITAR compliance advisor for US defense contractors, exporters, and manufacturers. Use this skill for any question about 22 CFR Parts 120-130, the United States Munitions List (USML), DDTC registration, export license applications (DSP-5/73/94), Technical Assistance Agreements (TAA), Manufactu…
Sushegaad / lgpd
916Expert LGPD compliance advisor for Brazil's Lei Geral de Proteção de Dados (Law 13,709/2018). Use this skill whenever a user asks about LGPD, Brazilian data protection, ANPD, personal data processing in Brazil, data subject rights under Brazilian law, legal bases for processing, sensitive data handl…
Sushegaad / nis2
916EU NIS2 Directive (Directive (EU) 2022/2555) compliance advisor for essential and important entities: entity classification, Art. 21 risk management measures, Art. 23 incident reporting timelines (24h/72h/1 month), Art. 20 governance obligations, supply chain security (Art.
Sushegaad / nist-ai-rmf
916Expert NIST AI Risk Management Framework (AI RMF 1.0) advisor covering all four functions: GOVERN, MAP, MEASURE, MANAGE. Use this skill whenever a user asks about NIST AI RMF, AI risk management, AI trustworthiness, GOVERN function, MAP function, MEASURE function, MANAGE function, AI RMF Playbook, A…
Sushegaad / nist-csf
916Expert NIST Cybersecurity Framework (CSF) advisor covering CSF 2.0 and CSF 1.1. Use this skill whenever a user asks about NIST CSF, cybersecurity risk management, the six CSF functions (Govern, Identify, Protect, Detect, Respond, Recover), CSF profiles, implementation tiers, gap assessments, organiz…
Sushegaad / nzism
916Expert New Zealand Information Security Manual (NZISM) advisor for NZ government agencies and their supply chains. Use for NZISM control guidance, gap analysis, agency security obligations, classification framework (Unclassified through Top Secret), security risk management, system certification, an…
Sushegaad / pci-compliance
916Expert PCI DSS compliance advisor covering PCI DSS v4.0.1 (current) and v4.0. Use this skill whenever a user asks about PCI DSS, payment card security, cardholder data protection, CDE scoping, SAQ types (A, A-EP, B, B-IP, C, C-VT, P2PE, D), ROC, AOC, QSA assessments, ASV scans, merchant levels, serv…
Sushegaad / swift-csp
916Expert SWIFT Customer Security Programme (CSP) advisor covering the Customer Security Controls Framework (CSCF v2026). Use this skill whenever a user asks about SWIFT CSP, CSCF controls, SWIFT security attestation, KYC-SA portal, SWIFT architecture types (A1/A2/A3/A4/B), mandatory vs advisory contro…
Sushegaad / tsa-compliance
916Expert TSA cybersecurity compliance advisor for critical infrastructure owners and operators. Use this skill whenever a user asks about TSA Security Directives for pipelines, freight railroads, passenger rail, public transit, or bus operators; the TSA Cyber Risk Management Program (CRMP); Cybersecur…