785 skills found · Page 17 of 27
LeoYeAI / agent-teams-simplify-and-hardenImplementation + audit loop using parallel agent teams with structured simplify, harden, and document passes. Spawns implementation agents to do the work, then audit agents to find complexity, security gaps, and spec deviations, then loops until code compiles cleanly, all tests pass, and auditors fi…
LeoYeAI / agentaudit-skillAutomatic security gate that checks packages against a vulnerability database before installation. Use before any npm install, pip install, yarn add, or package manager operation.
LeoYeAI / skill-scannerScan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis — no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more.
LeoYeAI / Justin RooschComprehensive compliance and security self-assessment for AI agents. 14-check framework producing a structured threat model + compliance report with RED/AMBER/GREEN ratings across security, governance, EU AI Act readiness, oversight quality, and NIST alignment domains.
Leanmcp / vuln-reproEnd-to-end methodology for reproducing AND patching publicly disclosed, already-fixed vulnerabilities: sourcing the advisory and the fix commit, reading the patch diff, rebuilding a pinned offline lab, building a vulnerable-vs-patched contrast harness with proper controls, minimizing the trigger, de…
Leanmcp / security-reproBuild safe, local, defensive reproductions of ALREADY-PATCHED, publicly disclosed security vulnerabilities (CVEs, vendor advisories, AI-agent incidents) for whitepapers, control testing, and education.
maxritter / upstream-auditAudit and update Pilot Shell upstream dependencies in installer/upstreams.yaml. Checks npm, PyPI, brew, and curl-pipe entries for newer stable versions, known security advisories, and sha256 drift. Verifies each update installs successfully before committing
mcollina / oauthImplements OAuth 2.0/2.1 authorization flows in Fastify applications — configures authorization code with PKCE, client credentials, device flow, refresh token rotation, JWT validation, and token introspection/revocation endpoints
mcollina / octocatUse this skill whenever the prompt contains any `github.com` URL, even if the user only pastes a link and gives no GitHub-specific keywords. Handles git and GitHub operations using the gh CLI.
mcollina / fastify-best-practicesGuides development of Fastify Node.js backend servers and REST APIs using TypeScript or JavaScript
aipoch / file-security-toolkitEncrypt/decrypt local files, redact sensitive information in documents, and validate password strength when handling private data or preparing files for sharing.
stripe / stripe-best-practicesGuides Stripe integration decisions across development and test environment planning (separate sandboxes vs the shared test mode sandbox), API selection (Checkout Sessions vs PaymentIntents), Connect platform setup (Accounts v2, controller properties), billing/subscriptions, tax and registrations (S…
benchflow-ai / senior-javaWorld-class Java and Spring Boot development skill for enterprise applications, microservices, and cloud-native systems. Expertise in Spring Framework, Spring Boot 3.x, Spring Cloud, JPA/Hibernate, and reactive programming with WebFlux.
benchflow-ai / senior-securityComprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation
a5c-ai / mcp-csp-investigationComprehensive Content Security Policy audit for MCP Apps in sandboxed iframes. Discovers all network origins, traces them to source, and generates CSP configuration for registerAppResource.
cbrock84 / chief-legal-and-risk-officerOwns legal, contracts, intellectual property, regulatory compliance, privacy, security governance, enterprise risk, and audit readiness.
cbrock84 / chief-information-security-officerOwns the security posture of the organization — architecture, program strategy, risk acceptance, incident command, and the authority to stop work that creates unacceptable exposure.
cbrock84 / identity-lifecycle-administrationExecutes joiner, mover and leaver processes — provisioning, group membership, access changes on role change, and complete deprovisioning.
cbrock84 / incident-responseRuns a security incident from detection to closure — triage, containment, investigation, communication, and the review afterward.
cbrock84 / security-architecture-reviewReviews a design or change for security before it ships — authentication and authorization, data handling, secrets, dependencies, and the secure-development practices around it.
rmyndharis / code-review-ai-ai-reviewCombine static analysis with model-assisted code review to assess security, performance, correctness, and architecture
rmyndharis / deployment-pipeline-designDesign multi-stage CI/CD pipelines with approval gates, security checks, and deployment orchestration
rmyndharis / firmware-analystExpert firmware analyst specializing in embedded systems, IoT
rmyndharis / error-debugging-multi-agent-reviewCoordinate specialized code, security, architecture, and performance reviewers and consolidate their results
rohitg00 / verification-gatesCreates explicit validation checkpoints (verification gates) between project phases to catch errors early and ensure quality before proceeding
rohitg00 / structured-code-reviewPerforms a structured five-stage code review covering requirements compliance, correctness, code quality, testing, and security/performance. Each stage uses targeted checklists and categorized feedback (Blocker/Major/Minor/Nit) with actionable suggestions and rationale
daymade / qa-expertSets up QA testing processes: test strategies, Google Testing Standards test cases, P0-P4 bug tracking, quality metrics, progress reports, autonomous execution via master prompts, and OWASP security testing, with third-party QA handoff docs
daymade / marketplace-health-checkRuns an evidence-based health audit of this skills marketplace repo — code safety, docs/SSOT, security/PII, PR/issue triage, manifest integrity — via a parallel workflow, then verifies findings by priority.
daymade / repomix-safe-mixerSafely package codebases with repomix by automatically detecting and removing hardcoded credentials before packing
CloudAI-X / security-patternsImplements authentication, authorization, encryption, secrets management, and security hardening patterns
