63 skills found · Page 1 of 3
DietrichGebert / ponytail-gainShow ponytail's measured savings (code, cost, speed) from the benchmark. One-shot display. Use for /ponytail-gain, "what does ponytail save", "ponytail impact".
nexu-io / html-ppt-obsidian-claude-gradientOpenDesign's enterprise AI-adoption brief: local-first agents at work, the risk controls, the ROI, and the rollout plan. Built as a decision-grade AI literacy deck for leadership, IT, security.
sickn33 / ai-coding-agent-guardrailsSecure AI coding agents (Claude Code, Cursor, Codex, Copilot) with permission
sickn33 / ai-engineering-toolkitOverview of six AI engineering workflows: prompt evaluation (8-dimension scoring), context budget planning, RAG pipeline design, agent security audit (65-point checklist), eval harness building, and product sense coaching.
sickn33 / agentic-actions-auditorAudits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines.
anthropics / claude-securityClaude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you choose)
trailofbits / testing-handbook-generatorGenerates Claude Code skills from the Trail of Bits Testing Handbook (appsec.guide), analyzing handbook pages and emitting SKILL.md files with the structure each skill type requires
trailofbits / agentic-actions-auditorAudits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference.
davepoon / launch-checkPassive pre-launch report card for a live URL of an app or site built with AI (Lovable, Bolt, Replit, Cursor, v0, Claude).
davepoon / agentwhy-session-auditChecks which private files (.env, keys, secrets) Claude Code and its subagents reached in this project, whether a value came into an agent's context, and which key to change, by running the open source agentwhy CLI over the session records Claude Code already keeps on disk
davepoon / aurakitSonnet Amplified fullstack engine. 34 modes, SEC-01~15 OWASP security, 13 runtime hooks, 75% token reduction. Install: npx @smorky85/aurakit
jeremylongshore / abridge-security-basicsReview Abridge deployment controls across data handling, identity, devices, EHR workflows, support, auditability, and incident response
jeremylongshore / apify-security-basicsSecure Apify API tokens, configure proxy access, and protect Actor data. Use when hardening API key management, setting up environment-specific tokens, rotating a leaked token, or auditing Apify security configuration.
jeremylongshore / alchemy-security-basicsAnalyze and secure Alchemy credentials, browser access, wallet authority, webhook verification, and untrusted chain data
jeremylongshore / analyzing-dependenciesAudit selected project dependency reports and review declared license
jeremylongshore / apollo-enterprise-rbac'Enterprise role-based access control for Apollo.io.
LeoYeAI / agentaudit-skillAutomatic security gate that checks packages against a vulnerability database before installation. Use before any npm install, pip install, yarn add, or package manager operation.
LeoYeAI / skill-scannerScan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis — no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more.
rmyndharis / code-review-ai-ai-reviewCombine static analysis with model-assisted code review to assess security, performance, correctness, and architecture
daymade / marketplace-health-checkRuns an evidence-based health audit of this skills marketplace repo — code safety, docs/SSOT, security/PII, PR/issue triage, manifest integrity — via a parallel workflow, then verifies findings by priority.
MyuriKanao / src-hunter-skill实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 HackerOne 真实案例、88,636 WooYun 案例统计
7onez / cti-expertCTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.
oliver-kriska / phx-reviewReview changed Elixir/Phoenix code read-only. Check requirements, cite
vibeeval / config-security-scanScan .claude/ directory for security misconfigurations, exposed secrets, unsafe permissions
Masriyan / 03-exploit-developmentProof-of-concept development, payload crafting, shellcode analysis, and
Masriyan / 05-malware-analysisStatic and dynamic malware analysis, YARA rule generation, sandbox configuration,
Masriyan / 06-threat-huntingIOC extraction, threat intelligence correlation, MITRE ATT&CK mapping,
Masriyan / 07-incident-responseIR playbook execution, evidence collection, forensic timeline analysis,
Masriyan / 08-network-securityNetwork traffic analysis, PCAP parsing, IDS/IPS rule creation, firewall
Masriyan / 09-web-securityOWASP Top 10 testing, injection vulnerability detection, API security
