1,102 skills found · Page 28 of 37
taracodlabs / securityheadersHTTP security header audit (A+ to F) with fix recommendations
taracodlabs / ssllabsTLS/SSL audit via Qualys SSL Labs — grade ciphers, chains, vulns
taracodlabs / urlscanSubmit URLs to urlscan.io — safety verdict + screenshot retrieval
borghei / cloud-securityCloud posture security across AWS, Azure, and GCP — IAM least privilege, public exposure, encryption, logging coverage, landing-zone guardrails
borghei / google-workspace-cliThis skill should be used when the user asks to "audit Google Workspace", "check GWS security settings", "set up Google Workspace authentication", "diagnose Workspace issues", or "review Google admin configurations".
borghei / ai-securityThis skill should be used when the user asks to "scan AI systems for security threats", "check for prompt injection vulnerabilities", "assess model security posture", "detect data poisoning risks", or "audit AI/ML pipeline security".
borghei / security-auditMulti-agent source security audit with a coverage ledger, independently verified findings, and machine-checked records
borghei / pdf-toolkitAudit PDF files for metadata leakage, page count, encryption, JavaScript, embedded files, and version. Use before sending a PDF externally, when redacting sensitive metadata, or running a PDF security review.
borghei / terraform-patternsThis skill should be used when the user asks to "analyze Terraform modules", "scan IaC for security issues", "review Terraform configurations", "check infrastructure code for misconfigurations", or "audit cloud resources".
borghei / threat-detectionThis skill should be used when the user asks to "analyze logs for threats", "detect suspicious activity", "scan for brute force attempts", "identify injection attacks", or "audit access patterns for anomalies".
borghei / dependency-auditorScan project dependencies for vulnerabilities, license issues, and upgrade opportunities across Python, Node.js, Go, and Rust
borghei / env-secrets-managerEnvironment and secrets management lifecycle: .env scaffolding, validation, leak detection, and rotation across Vault, AWS SSM, 1Password, and Doppler
borghei / red-teamThis skill should be used when the user asks to "plan a red team engagement", "scope a penetration test", "design a security assessment methodology", "create rules of engagement", or "plan an adversary simulation".
borghei / secrets-vault-managerThis skill should be used when the user asks to "generate Vault configurations", "plan secret rotation", "analyze vault audit logs", "manage secrets lifecycle", or "set up HashiCorp Vault".
borghei / skill-security-auditorSecurity audit and vulnerability scanning for AI agent skills before install. Detects prompt injection, dangerous code, exfiltration, credential harvesting, and supply chain risks
borghei / senior-cloud-architectUse when the user asks to "design cloud architecture", "set up Terraform infrastructure", "optimize cloud costs", "plan disaster recovery", "configure multi-region failover", "audit IAM policies", "migrate to cloud", "set up VPC networking", "compare AWS vs GCP vs Azure", or "right-size cloud instan…
borghei / senior-secopsSecOps for application security, vulnerability management, compliance, and secure development
borghei / senior-securitySTRIDE threat modeling, DREAD risk scoring, secret detection, and secure architecture design
borghei / tech-stack-evaluatorEvaluate and compare technology stacks with TCO analysis, security assessment, and ecosystem health scoring
zinja-coder / jadx-mcp-serverMCP server for JADX-AI Plugin
asaotomo / FofaMap一款证据驱动的 FOFA 资产测绘智能体：支持自然语言侦察、AI 反思、CLI / MCP / Skill / REST API，以及经人工审批的 Nuclei 扫描。
decebals / security-auditJava security checklist covering OWASP Top 10, input validation, injection prevention, and secure coding. Works with Spring, Quarkus, Jakarta EE, and plain Java
decebals / maven-dependency-auditAudit Maven dependencies for outdated versions, security vulnerabilities, and conflicts
staruhub / security-audit全面的代码安全检查和服务器安全审计skill。适用于：(1) 代码漏洞扫描 - 检测SQL注入、XSS、SSRF等OWASP Top 10漏洞，(2) 依赖安全检查 - 识别过时或有漏洞的第三方库，结合实时搜索确认最新CVE，(3) 服务器配置审计 - 检查SSH、防火墙、权限等安全配置，(4) 敏感信息泄露检测 - API密钥、密码、令牌等硬编码检测，(5) 容器安全扫描 - Docker镜像和Kubernetes配置审计，(6) CI/CD安全检查。触发关键词："安全检查"、"漏洞扫描"、"代码审计"、"security audit"、"vulnerability scan"、"SAST"…
staruhub / solution-architect解决方案架构师助手。当用户要设计新系统架构、评审现有架构、做技术选型决策、诊断性能/可扩展性/可用性问题、规划架构演进或重构时使用。覆盖微服务、事件驱动、云原生等架构模式，技术趋势通过实时搜索获取而非依赖内置知识。不用于：具体功能的代码实现、安全漏洞审计（用security-audit）、产品需求分析（用product-manager）、只需一句话回答的技术常识问题。
nexscope-ai / amazon-competitor-analysisFull-spectrum Amazon competitor analysis. Compare listings, pricing, reviews, advertising strategy, and market positioning against direct competitors. Identify weaknesses to exploit and strengths to counter
shinpr / recipe-front-reviewReviews completed frontend implementation for governing-source compliance, scope economy, repository quality, and security, then applies user-approved React corrections.
shinpr / recipe-reviewReviews completed implementation for governing-source compliance, scope economy, repository quality, and security, then applies user-approved corrections.
evanca / firebase-app-checkUse when implementing app attestation, configuring App Check providers, setting up debug tokens, enabling backend enforcement, or managing token refresh.
evanca / firebase-cloud-firestoreUse when setting up Firestore, designing schemas, doing CRUD, creating listeners, paginating queries, configuring indexes, enabling offline persistence, or writing security rules.
