785 skills found · Page 2 of 27
sickn33 / alerting-oncallSet up alerting rules, configure on-call rotations, and manage incident
sickn33 / antigravity-workflowsUse when asked to ship a SaaS MVP, audit application security, build an AI agent, run browser QA, or design a domain model with multiple skills and verified checkpoints.
sickn33 / api-security-testingAPI security testing workflow for REST and GraphQL APIs covering authentication, authorization, rate limiting, input validation, and security best practices.
sickn33 / api-securityAuthorized security assessment of REST, GraphQL, WebSocket, and SOAP APIs: discovery, authentication and authorization flaws (BOLA/IDOR, JWT/OAuth), rate-limit testing, and a structured multi-phase methodology.
sickn33 / agentic-actions-auditorAudits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines.
sickn33 / anti-reversing-techniquesAnalyze anti-debugging, obfuscation, and anti-tamper techniques during authorized binary analysis and reverse engineering.
K-Dense-AI / pptx-postersCreates and audits editable scientific posters in macro-free PowerPoint (.pptx) from author-approved local content and assets.
anthropics / claude-securityClaude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you choose)
alibaba / open-code-reviewPerforms AI-powered code review on Git changes using the `ocr` CLI from alibaba/open-code-review
wshobson / protocol-reverse-engineeringMaster network protocol reverse engineering including packet analysis, protocol dissection, and custom protocol documentation
wshobson / k8s-security-policiesImplement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security
wshobson / team-composition-patternsDesign optimal agent team compositions with sizing heuristics, preset configurations, and agent type selection. Use this skill when deciding how many agents to spawn for a task, when choosing between a review team versus a feature team versus a debug team, when selecting the correct subagent_type fo…
wshobson / linkerd-patternsImplement Linkerd service mesh patterns for lightweight, security-focused service mesh deployments
wshobson / dependency-upgradeManage major dependency version upgrades with compatibility analysis, staged rollout, and comprehensive testing
wshobson / pci-complianceImplement PCI DSS compliance requirements for secure handling of payment card data and payment systems
wshobson / deployment-pipeline-designDesign multi-stage CI/CD pipelines with approval gates, security checks, and deployment orchestration. Use this skill when designing zero-downtime deployment pipelines, implementing canary rollout strategies, setting up multi-environment promotion workflows, or debugging failed deployment gates in C…
wshobson / sast-configurationConfigure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code
wshobson / threat-mitigation-mappingMap identified threats to appropriate security controls and mitigations
wshobson / security-requirement-extractionDerive security requirements from threat models and business context
wshobson / solidity-securityMaster smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns
wshobson / auth-implementation-patternsMaster authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems
wshobson / k8s-manifest-generatorCreate production-ready Kubernetes manifests for Deployments, Services, ConfigMaps, and Secrets following best practices and security standards
wshobson / anti-reversing-techniquesUnderstand anti-reversing, obfuscation, and protection techniques encountered during software analysis. Use this skill when analyzing malware evasion techniques, when implementing anti-debugging protections for CTF challenges, when reverse engineering packed binaries, or when building security resea…
github / codeqlComprehensive guide for setting up and configuring CodeQL code scanning via GitHub Actions workflows and the CodeQL CLI. This skill should be used when users need help with code scanning configuration, CodeQL workflow files, CodeQL CLI commands, SARIF output, security analysis setup, or troubleshoot…
github / dependabotComprehensive guide for configuring and managing GitHub Dependabot. Use this skill when users ask about creating or optimizing dependabot.yml files, managing Dependabot pull requests, configuring dependency update strategies, setting up grouped updates, monorepo patterns, multi-ecosystem groups, sec…
github / agent-owasp-complianceCheck any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks. Use this skill when: - Evaluating an agent system's security posture before production deployment - Running a compliance check against OWASP ASI 2026 standards - Mapping existing security controls to the 10…
github / azure-architecture-autopilotDesign Azure infrastructure using natural language, or analyze existing Azure resources to auto-generate architecture diagrams, refine them through conversation, and deploy with Bicep.
github / entra-agent-userCreate Agent Users in Microsoft Entra ID from Agent Identities, enabling AI agents to act as digital workers with user identity capabilities in Microsoft 365 and Azure environments.
github / d365-solution-blueprintAuthors a Dynamics 365 Finance and Supply Chain Management Solution Blueprint from scratch through a structured, section-by-section architect interview, establishing scope, target operating model, application and data architecture, integration landscape, migration strategy, security model, ALM, test…
github / github-actions-hardeningSecurity hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and general code linters miss — untrusted-input script injection, privileged triggers running fork code, mutable action references, and over-scoped to…
