982 skills found ยท Page 27 of 33
borghei / env-secrets-managerEnvironment and secrets management lifecycle: .env scaffolding, validation, leak detection, and rotation across Vault, AWS SSM, 1Password, and Doppler
borghei / red-teamThis skill should be used when the user asks to "plan a red team engagement", "scope a penetration test", "design a security assessment methodology", "create rules of engagement", or "plan an adversary simulation".
borghei / secrets-vault-managerThis skill should be used when the user asks to "generate Vault configurations", "plan secret rotation", "analyze vault audit logs", "manage secrets lifecycle", or "set up HashiCorp Vault".
borghei / skill-security-auditorSecurity audit and vulnerability scanning for AI agent skills before install. Detects prompt injection, dangerous code, exfiltration, credential harvesting, and supply chain risks
borghei / senior-cloud-architectUse when the user asks to "design cloud architecture", "set up Terraform infrastructure", "optimize cloud costs", "plan disaster recovery", "configure multi-region failover", "audit IAM policies", "migrate to cloud", "set up VPC networking", "compare AWS vs GCP vs Azure", or "right-size cloud instanโฆ
borghei / senior-secopsSecOps for application security, vulnerability management, compliance, and secure development
borghei / senior-securitySTRIDE threat modeling, DREAD risk scoring, secret detection, and secure architecture design
borghei / tech-stack-evaluatorEvaluate and compare technology stacks with TCO analysis, security assessment, and ecosystem health scoring
decebals / security-auditJava security checklist covering OWASP Top 10, input validation, injection prevention, and secure coding. Works with Spring, Quarkus, Jakarta EE, and plain Java
decebals / maven-dependency-auditAudit Maven dependencies for outdated versions, security vulnerabilities, and conflicts
staruhub / security-auditๅ จ้ข็ไปฃ็ ๅฎๅ จๆฃๆฅๅๆๅกๅจๅฎๅ จๅฎก่ฎกskillใ้็จไบ๏ผ(1) ไปฃ็ ๆผๆดๆซๆ - ๆฃๆตSQLๆณจๅ ฅใXSSใSSRF็ญOWASP Top 10ๆผๆด๏ผ(2) ไพ่ตๅฎๅ จๆฃๆฅ - ่ฏๅซ่ฟๆถๆๆๆผๆด็็ฌฌไธๆนๅบ๏ผ็ปๅๅฎๆถๆ็ดข็กฎ่ฎคๆๆฐCVE๏ผ(3) ๆๅกๅจ้ ็ฝฎๅฎก่ฎก - ๆฃๆฅSSHใ้ฒ็ซๅขใๆ้็ญๅฎๅ จ้ ็ฝฎ๏ผ(4) ๆๆไฟกๆฏๆณ้ฒๆฃๆต - APIๅฏ้ฅใๅฏ็ ใไปค็็ญ็กฌ็ผ็ ๆฃๆต๏ผ(5) ๅฎนๅจๅฎๅ จๆซๆ - Docker้ๅๅKubernetes้ ็ฝฎๅฎก่ฎก๏ผ(6) CI/CDๅฎๅ จๆฃๆฅใ่งฆๅๅ ณ้ฎ่ฏ๏ผ"ๅฎๅ จๆฃๆฅ"ใ"ๆผๆดๆซๆ"ใ"ไปฃ็ ๅฎก่ฎก"ใ"security audit"ใ"vulnerability scan"ใ"SAST"โฆ
staruhub / solution-architect่งฃๅณๆนๆกๆถๆๅธๅฉๆใๅฝ็จๆท่ฆ่ฎพ่ฎกๆฐ็ณป็ปๆถๆใ่ฏๅฎก็ฐๆๆถๆใๅๆๆฏ้ๅๅณ็ญใ่ฏๆญๆง่ฝ/ๅฏๆฉๅฑๆง/ๅฏ็จๆง้ฎ้ขใ่งๅๆถๆๆผ่ฟๆ้ๆๆถไฝฟ็จใ่ฆ็ๅพฎๆๅกใไบไปถ้ฉฑๅจใไบๅ็็ญๆถๆๆจกๅผ๏ผๆๆฏ่ถๅฟ้่ฟๅฎๆถๆ็ดข่ทๅ่้ไพ่ตๅ ็ฝฎ็ฅ่ฏใไธ็จไบ๏ผๅ ทไฝๅ่ฝ็ไปฃ็ ๅฎ็ฐใๅฎๅ จๆผๆดๅฎก่ฎก๏ผ็จsecurity-audit๏ผใไบงๅ้ๆฑๅๆ๏ผ็จproduct-manager๏ผใๅช้ไธๅฅ่ฏๅ็ญ็ๆๆฏๅธธ่ฏ้ฎ้ขใ
nexscope-ai / amazon-competitor-analysisFull-spectrum Amazon competitor analysis. Compare listings, pricing, reviews, advertising strategy, and market positioning against direct competitors. Identify weaknesses to exploit and strengths to counter
shinpr / recipe-front-reviewReviews completed frontend implementation for governing-source compliance, scope economy, repository quality, and security, then applies user-approved React corrections.
shinpr / recipe-reviewReviews completed implementation for governing-source compliance, scope economy, repository quality, and security, then applies user-approved corrections.
evanca / firebase-app-checkUse when implementing app attestation, configuring App Check providers, setting up debug tokens, enabling backend enforcement, or managing token refresh.
evanca / firebase-cloud-firestoreUse when setting up Firestore, designing schemas, doing CRUD, creating listeners, paginating queries, configuring indexes, enabling offline persistence, or writing security rules.
evanca / firebase-databaseUse when syncing real-time data, structuring JSON trees, reading/writing, creating listeners, enabling offline persistence, managing presence, sharding, or writing security rules.
evanca / firebase-data-connectUse when setting up Data Connect, writing GraphQL queries/mutations, configuring generated SDKs, handling offline, or applying security rules.
evanca / firebase-storageUse when setting up Storage, uploading/downloading files, managing metadata, handling errors, or applying security rules.
MyuriKanao / src-hunter-skillๅฎๆ SRC / ไผๆต / Bug bounty ๆผๆดๆๆ Claude Code skill โ 19 ไธชๆปๅป็ฑป playbookใ305 ไธช็ปๆๅ payloadใ263 ไธช WAF/EDR ็ป่ฟใ2887 ไปฝ HackerOne ็ๅฎๆกไพใ88,636 WooYun ๆกไพ็ป่ฎก
7onez / cti-expertCTI Expert โ Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.
nWave-ai / nw-infrastructure-and-observabilityInfrastructure as Code patterns (Terraform, Kubernetes), observability design (SLOs, metrics, alerting, dashboards), and pipeline security stages. Load when designing infrastructure, observability, or security scanning.
nWave-ai / nw-security-and-governanceDatabase security (encryption, access control, injection prevention), data governance (lineage, quality, MDM), and compliance frameworks (GDPR, CCPA, HIPAA)
nWave-ai / nw-security-by-designSecurity design principles, STRIDE threat modeling, OWASP Top 10 architectural mitigations, and secure patterns. Load when designing systems or reviewing architecture for security.
nWave-ai / nw-agent-testing5-layer testing approach for agent validation including adversarial testing, security validation, and prompt injection resistance
levnikolaevich / ln-42-dependency-upgraderUpgrades dependencies in reversible batches with version-specific compatibility and regression checks.
levnikolaevich / ln-54-codebase-auditorAudits cross-cutting codebase health, security and maintainability; not a single-change review or specialist audit.
oliver-kriska / deps-vetRecord a vetted Hex package version in hex_vet.exs after a security review โ manages the audit ledger, not the scanner. Use to approve a dep after /phx:deps-audit findings or to initialize hex_vet.exs.
oliver-kriska / reviewReview Elixir/Phoenix changes before committing โ bugs, security, Ecto, LiveView, and Oban anti-patterns, via parallel specialist agents
