1,110 skills found Ā· Page 22 of 37
LeoYeAI / agentic-loop-upgradeEnhanced agentic loop with planning, parallel execution, confidence gates, semantic error recovery, and observable state machine. Includes Mode dashboard UI for easy configuration.
LeoYeAI / openclaw-security-hardeningComplete OpenClaw Agent Security Hardening - Protects against data leaks (storage security) and prompt injection (runtime security). Use for initial setup, security audits, and ongoing maintenance. Covers file permissions, sensitive data isolation, Git protection, and command execution safety.
LeoYeAI / agent-security-hardeningSecurity hardening patterns for production AI agents. Covers prompt injection defense (7 rules), data boundary enforcement, read-only defaults for external integrations, WAL protocol for data integrity, health check scripts, integrity gates, rule escalation ladder, and session memory security
LeoYeAI / agent-teams-simplify-and-hardenImplementation + audit loop using parallel agent teams with structured simplify, harden, and document passes. Spawns implementation agents to do the work, then audit agents to find complexity, security gaps, and spec deviations, then loops until code compiles cleanly, all tests pass, and auditors fiā¦
LeoYeAI / agentaudit-skillAutomatic security gate that checks packages against a vulnerability database before installation. Use before any npm install, pip install, yarn add, or package manager operation.
LeoYeAI / skill-scannerScan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis ā no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more.
LeoYeAI / Justin RooschComprehensive compliance and security self-assessment for AI agents. 14-check framework producing a structured threat model + compliance report with RED/AMBER/GREEN ratings across security, governance, EU AI Act readiness, oversight quality, and NIST alignment domains.
mcp-router / mcp-routerMCP Router ā development, support and security updates ended 2026-09-18. Historical source and final release for existing users.
Leanmcp / vuln-reproEnd-to-end methodology for reproducing AND patching publicly disclosed, already-fixed vulnerabilities: sourcing the advisory and the fix commit, reading the patch diff, rebuilding a pinned offline lab, building a vulnerable-vs-patched contrast harness with proper controls, minimizing the trigger, deā¦
Leanmcp / security-reproBuild safe, local, defensive reproductions of ALREADY-PATCHED, publicly disclosed security vulnerabilities (CVEs, vendor advisories, AI-agent incidents) for whitepapers, control testing, and education.
CYB3RMX / Qu1cksc0peAll-in-One malware analysis tool.
uber / ADRADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.
maxritter / upstream-auditAudit and update Pilot Shell upstream dependencies in installer/upstreams.yaml. Checks npm, PyPI, brew, and curl-pipe entries for newer stable versions, known security advisories, and sha256 drift. Verifies each update installs successfully before committing
vmoranv / jshookmcpA search-first, profile-aware reverse-engineering workspace for AI agents ā 735 tools across 36 domains in one MCP server.
mcollina / oauthImplements OAuth 2.0/2.1 authorization flows in Fastify applications ā configures authorization code with PKCE, client credentials, device flow, refresh token rotation, JWT validation, and token introspection/revocation endpoints
mcollina / octocatUse this skill whenever the prompt contains any `github.com` URL, even if the user only pastes a link and gives no GitHub-specific keywords. Handles git and GitHub operations using the gh CLI.
mcollina / fastify-best-practicesGuides development of Fastify Node.js backend servers and REST APIs using TypeScript or JavaScript
aipoch / file-security-toolkitEncrypt/decrypt local files, redact sensitive information in documents, and validate password strength when handling private data or preparing files for sharing.
aipoch / sci-paper-reviewerSimulates a strict SCI peer-review workflow; trigger when a user uploads or pastes a manuscript (PDF/DOC/DOCX/TXT) and requests an innovation score (1ā12) plus experimental-logic vulnerability checks and revision suggestions.
stripe / stripe-best-practicesGuides Stripe integration decisions across development and test environment planning (separate sandboxes vs the shared test mode sandbox), API selection (Checkout Sessions vs PaymentIntents), Connect platform setup (Accounts v2, controller properties), billing/subscriptions, tax and registrations (Sā¦
OpenOSINT / OpenOSINTOpen-source engine for passive OSINT checks: 21 tools as CLI, MCP server and web UI. Hosted Monitor & Diligence at app.openosint.tech.
benchflow-ai / senior-javaWorld-class Java and Spring Boot development skill for enterprise applications, microservices, and cloud-native systems. Expertise in Spring Framework, Spring Boot 3.x, Spring Cloud, JPA/Hibernate, and reactive programming with WebFlux.
benchflow-ai / senior-securityComprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation
a5c-ai / mcp-csp-investigationComprehensive Content Security Policy audit for MCP Apps in sandboxed iframes. Discovers all network origins, traces them to source, and generates CSP configuration for registerAppResource.
0xSteph / pentest-aiOpen-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
miscusi-peek / cheatengine-mcp-bridgeConnect your favorite AI agents directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and memory analysis using natural language.
cbrock84 / chief-legal-and-risk-officerOwns legal, contracts, intellectual property, regulatory compliance, privacy, security governance, enterprise risk, and audit readiness.
cbrock84 / chief-information-security-officerOwns the security posture of the organization ā architecture, program strategy, risk acceptance, incident command, and the authority to stop work that creates unacceptable exposure.
cbrock84 / identity-lifecycle-administrationExecutes joiner, mover and leaver processes ā provisioning, group membership, access changes on role change, and complete deprovisioning.
cbrock84 / incident-responseRuns a security incident from detection to closure ā triage, containment, investigation, communication, and the review afterward.
