Security First
Skills with the best security audit scores
Showing 10,921–10,980 of 13,187 skills · Page 183 of 220
nWave-ai / nw-buddy
617nWave concierge — ask any question about methodology, project state, commands, migration, or troubleshooting. Read-only, contextual answers.
nWave-ai / nw-bugfix
617Bug fix workflow: root cause analysis → user review → regression test + fix via TDD
nWave-ai / nw-continue
617Detects current wave progress for a feature and resumes at the next step. Scans docs/feature/ for artifacts.
nWave-ai / nw-deliver-orchestration
617DELIVER wave orchestration workflow -- 9 phases from baseline to finalization. Load when user invokes *deliver command. Covers state tracking, smart skip logic, retry, resume, and quality gate enforcement.
nWave-ai / nw-discovery-methodology
617Question-first approach to understanding user journeys. Load when starting a new journey design or when the discovery phase needs deepening.
nWave-ai / nw-document
617Creates evidence-based documentation following DIVIO/Diataxis principles
nWave-ai / nw-dr-review-criteria
617Critique dimensions, severity framework, verdict decision matrix, and review output format for documentation assessment reviews
nWave-ai / nw-fast-forward
617Fast-forwards through remaining waves end-to-end without stopping for review between waves.
nWave-ai / nw-hotspot
617Git change frequency hotspot analysis — find the most-changed files in your codebase
nWave-ai / nw-mikado-method
617Enhanced Mikado Method for complex architectural refactoring - systematic dependency discovery, tree-based planning, and bottom-up execution
nWave-ai / nw-new
617Guided wizard to start a new feature. Asks what you want to build, recommends the right starting wave, and launches it.
nWave-ai / nw-platform-engineering-foundations
617Foundational platform engineering knowledge from key references -- Continuous Delivery, SRE, Accelerate, Team Topologies, Chaos Engineering, and Secure Delivery. Load when contextual grounding in platform engineering theory is needed.
nWave-ai / nw-por-review-criteria
617Review dimensions and bug patterns for journey artifact reviews
nWave-ai / nw-refactor
617Applies the Refactoring Priority Premise (RPP) levels L1-L6 for systematic code refactoring
nWave-ai / nw-sa-critique-dimensions
617Architecture quality critique dimensions for peer review. Load when invoking solution-architect-reviewer or performing self-review of architecture documents.
nWave-ai / nw-shared-artifact-tracking
617Shared artifact registry, common artifact patterns, and integration validation. Load when tracking data that flows across journey steps or validating horizontal coherence.
tzachbon / communication-style
550Output rules for all agents - concise, scannable, actionable. Based on Matt Pocock's planning principles.
tzachbon / smart-ralph
550Core Smart Ralph skill defining common arguments, execution modes, and shared behaviors across all Ralph plugins.
vibeeval / accessibility-patterns
535WCAG 2.2 AA compliance, ARIA patterns, keyboard navigation, screen reader optimization
vibeeval / browser-automation
535AI browser automation - navigate, interact, extract, verify via browser-use MCP
vibeeval / changelog-automation
535Git history'den otomatik changelog, semantic versioning, release notes, conventional commits
vibeeval / ci-pipeline-patterns
535GitHub Actions workflow templates, matrix builds, caching, and monorepo CI strategies
vibeeval / coding-standards
535Universal coding standards - naming, formatting, error handling, immutability, SOLID principles
vibeeval / component-library-patterns
535Design system token management, component API design, Storybook, and visual regression testing patterns
vibeeval / config-security-scan
535Scan .claude/ directory for security misconfigurations, exposed secrets, unsafe permissions
vibeeval / contract-testing-patterns
535Pact consumer-driven contracts, provider verification, schema evolution
vibeeval / cost-optimization-patterns
535Cloud cost optimization, token/API cost tracking, build time optimization, and FinOps patterns
vibeeval / design-system-generator
535Generate design systems with color palettes, typography, spacing scales, component tokens, and Tailwind config
vibeeval / eval-harness
535Formal evaluation framework for Claude Code sessions implementing eval-driven development (EDD) principles
vibeeval / frontend-patterns
535React, Next.js, TypeScript frontend patterns - component design, state management, performance
vibeeval / gcp-patterns
535Cloud Run deployment, BigQuery optimization, Pub/Sub patterns, IAM best practices
vibeeval / graphql-patterns
535Schema design, resolver patterns, DataLoader, N+1 prevention, and subscription patterns for GraphQL APIs.
vibeeval / harvest-deep-crawl
535Multi-page deep crawling - documentation sites, wikis, knowledge bases
vibeeval / incident-response-patterns
535Incident severity classification, runbook templates, root cause analysis, and post-incident review
posit-dev / review-testing
521Review test code for quality, design, and completeness after implementing a feature or fixing a bug
posit-dev / r-lifecycle
521Guidance for managing R package lifecycle according to tidyverse principles using the lifecycle package
bitwize-music-studio / album-dashboard
512Shows a structured progress dashboard for an album with percentage complete per phase, blocking items, and status breakdown. Use for a quick visual overview of album progress.
bitwize-music-studio / clipboard
512Copies track content (lyrics, style prompts, streaming lyrics) to the system clipboard
bitwize-music-studio / import-art
512Places album art files in the correct audio and content directory locations
bitwize-music-studio / rename
512Renames an album or track, updating slugs, titles, and all mirrored paths
bitwize-music-studio / researchers-financial
512Researches SEC filings, earnings calls, analyst reports, and market data
bitwize-music-studio / researchers-legal
512Researches court documents, indictments, plea agreements, and sentencing records
bitwize-music-studio / researchers-primary-source
512Researches the subject's own words from tweets, blogs, forums, and chat logs
bitwize-music-studio / researchers-security
512Researches malware analysis, CVEs, attribution reports, and hacker community sources
bitwize-music-studio / verify-sources
512Captures human source verification for tracks, timestamps it, and updates track files
harshaneel / humanize
496Use whenever the user asks to "humanize", "make this sound more human", "rewrite to avoid AI detection", "make this less AI-sounding", "add a human voice", or "write like a person".
mxyhi / diagram-design
491Create branded architecture, architecture delta, IT current-state, flowchart, sequence, state machine, ER/data model, timeline, swimlane, quadrant, radar/spider, polar chart (polar/radial lollipop), loop/flywheel, nested, tree, org chart, layer stack, exploded axonometric, axonometric plan, Venn, py…
mxyhi / huashu-design
491花叔Design——用HTML做高保真原型、幻灯片、动画、可视化与专家评审。任何新设计100%先出三个方向初稿给用户选（指定风格/品牌也不豁免），选定后才执行。触发词：做原型、PPT、幻灯片、动画、设计风格、评审、做个HTML页面、UI mockup、导出MP4/GIF、做个好看的。生产级Web App/需后端的系统不适用。
boshu2 / rpi
445Drive one accepted change through implementation and checks to done, with one fresh review only where a mistake is costly
aiskillstore / auv-computer-control
428Incorporate moeru-ai/AUV into native desktop app control through its CLI or connected MCP for observation, targeted input, reusable operations, and verification. Use for native app automation, repeated desktop workflows, or explicit AUV requests.
aiskillstore / ot-project-description-builder
428Trigger for: OT project description, OTA scope, Research OT under 10 U.S.C. 4021, Prototype OT under 10 U.S.C. 4022, follow-on production scope under 10 U.S.C.
aiskillstore / sow-pws-builder
428Trigger for: writing, revising, converting, or descoping a federal Statement of Work, Performance Work Statement, SOW, PWS, or SOO; develop executable requirements; define contract scope; create measurable performance standards; or prepare requirements before an IGCE.
tobihagemann / simplify-code
405Run a multi-agent review of changed files for scope, reuse, quality, efficiency, clarity, and altitude issues followed by fixes
prekuter / migration
402Bring an existing codebase into Dryforge, once. Reads the code, asks what code cannot show — business rules, security policy, what is intentional — and writes the project docs at the entry points agents already read
hypnguyen1209 / windows-boundaries
377Use when crossing a Windows security boundary or escaping a sandbox — kernel/user crossing (win32k/dxgkrnl UAF CVE-2025-24983), BYOVD kernel R/W, UAC/COM elevation, AppContainer/LPAC & Chromium-Mojo sandbox escape (CVE-2025-2783), PPL bypass, RPC/ALPC & named-pipe impersonation
AlpacaLabsLLC / ffe-spec-book
361Assemble an ordered FF&E specification book from selected product cut sheets, with every product accounted for and verified package receipts. Use for grouped sheets or a combined FF&E book; use spec-writer for Project Manual sections.
AlpacaLabsLLC / product-cut-sheet
361Create a source-faithful single-product FF&E cut sheet or spec book entry from a supplied PDF or product URL. Preserve selected identity and source limits; use ffe-spec-book for a complete FF&E book and spec-writer for Project Manual requirements.
AlpacaLabsLLC / slide-deck-generator
361Generate a self-contained HTML slide deck from a topic, outline, report, or data. Use for presentations and slide decks; not for editing PowerPoint files.
VoltAgent / awesome-agent-skills
36.3kA curated collection of 1000+ agent skills from official dev teams and the community, compatible with Claude Code, Codex, Gemini CLI, Cursor, and more.
stacklok / toolhive
2.3kToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.