978 skills found ¡ Page 21 of 33
LeoYeAI / openclaw-security-hardeningComplete OpenClaw Agent Security Hardening - Protects against data leaks (storage security) and prompt injection (runtime security). Use for initial setup, security audits, and ongoing maintenance. Covers file permissions, sensitive data isolation, Git protection, and command execution safety.
LeoYeAI / agent-security-hardeningSecurity hardening patterns for production AI agents. Covers prompt injection defense (7 rules), data boundary enforcement, read-only defaults for external integrations, WAL protocol for data integrity, health check scripts, integrity gates, rule escalation ladder, and session memory security
LeoYeAI / agent-teams-simplify-and-hardenImplementation + audit loop using parallel agent teams with structured simplify, harden, and document passes. Spawns implementation agents to do the work, then audit agents to find complexity, security gaps, and spec deviations, then loops until code compiles cleanly, all tests pass, and auditors fiâĻ
LeoYeAI / agentaudit-skillAutomatic security gate that checks packages against a vulnerability database before installation. Use before any npm install, pip install, yarn add, or package manager operation.
LeoYeAI / skill-scannerScan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis â no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more.
LeoYeAI / Justin RooschComprehensive compliance and security self-assessment for AI agents. 14-check framework producing a structured threat model + compliance report with RED/AMBER/GREEN ratings across security, governance, EU AI Act readiness, oversight quality, and NIST alignment domains.
Leanmcp / vuln-reproEnd-to-end methodology for reproducing AND patching publicly disclosed, already-fixed vulnerabilities: sourcing the advisory and the fix commit, reading the patch diff, rebuilding a pinned offline lab, building a vulnerable-vs-patched contrast harness with proper controls, minimizing the trigger, deâĻ
Leanmcp / security-reproBuild safe, local, defensive reproductions of ALREADY-PATCHED, publicly disclosed security vulnerabilities (CVEs, vendor advisories, AI-agent incidents) for whitepapers, control testing, and education.
maxritter / upstream-auditAudit and update Pilot Shell upstream dependencies in installer/upstreams.yaml. Checks npm, PyPI, brew, and curl-pipe entries for newer stable versions, known security advisories, and sha256 drift. Verifies each update installs successfully before committing
mcollina / oauthImplements OAuth 2.0/2.1 authorization flows in Fastify applications â configures authorization code with PKCE, client credentials, device flow, refresh token rotation, JWT validation, and token introspection/revocation endpoints
mcollina / octocatUse this skill whenever the prompt contains any `github.com` URL, even if the user only pastes a link and gives no GitHub-specific keywords. Handles git and GitHub operations using the gh CLI.
mcollina / fastify-best-practicesGuides development of Fastify Node.js backend servers and REST APIs using TypeScript or JavaScript
aipoch / file-security-toolkitEncrypt/decrypt local files, redact sensitive information in documents, and validate password strength when handling private data or preparing files for sharing.
aipoch / sci-paper-reviewerSimulates a strict SCI peer-review workflow; trigger when a user uploads or pastes a manuscript (PDF/DOC/DOCX/TXT) and requests an innovation score (1â12) plus experimental-logic vulnerability checks and revision suggestions.
stripe / stripe-best-practicesGuides Stripe integration decisions across development and test environment planning (separate sandboxes vs the shared test mode sandbox), API selection (Checkout Sessions vs PaymentIntents), Connect platform setup (Accounts v2, controller properties), billing/subscriptions, tax and registrations (SâĻ
benchflow-ai / senior-javaWorld-class Java and Spring Boot development skill for enterprise applications, microservices, and cloud-native systems. Expertise in Spring Framework, Spring Boot 3.x, Spring Cloud, JPA/Hibernate, and reactive programming with WebFlux.
benchflow-ai / senior-securityComprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation
a5c-ai / mcp-csp-investigationComprehensive Content Security Policy audit for MCP Apps in sandboxed iframes. Discovers all network origins, traces them to source, and generates CSP configuration for registerAppResource.
cbrock84 / chief-legal-and-risk-officerOwns legal, contracts, intellectual property, regulatory compliance, privacy, security governance, enterprise risk, and audit readiness.
cbrock84 / chief-information-security-officerOwns the security posture of the organization â architecture, program strategy, risk acceptance, incident command, and the authority to stop work that creates unacceptable exposure.
cbrock84 / identity-lifecycle-administrationExecutes joiner, mover and leaver processes â provisioning, group membership, access changes on role change, and complete deprovisioning.
cbrock84 / incident-responseRuns a security incident from detection to closure â triage, containment, investigation, communication, and the review afterward.
cbrock84 / security-architecture-reviewReviews a design or change for security before it ships â authentication and authorization, data handling, secrets, dependencies, and the secure-development practices around it.
cbrock84 / vulnerability-managementRuns the loop from discovering a weakness to confirming it is fixed â scanning, triage, prioritization by real exploitability, remediation tracking, and patch policy.
rmyndharis / code-review-ai-ai-reviewCombine static analysis with model-assisted code review to assess security, performance, correctness, and architecture
rmyndharis / deployment-pipeline-designDesign multi-stage CI/CD pipelines with approval gates, security checks, and deployment orchestration
rmyndharis / firmware-analystExpert firmware analyst specializing in embedded systems, IoT
rmyndharis / error-debugging-multi-agent-reviewCoordinate specialized code, security, architecture, and performance reviewers and consolidate their results
rmyndharis / backend-security-coderExpert in secure backend coding practices specializing in input
rmyndharis / cloud-architectExpert cloud architect specializing in AWS/Azure/GCP multi-cloud
