913 skills found · Page 27 of 31
hypnguyen1209 / windows-boundariesUse when crossing a Windows security boundary or escaping a sandbox — kernel/user crossing (win32k/dxgkrnl UAF CVE-2025-24983), BYOVD kernel R/W, UAC/COM elevation, AppContainer/LPAC & Chromium-Mojo sandbox escape (CVE-2025-2783), PPL bypass, RPC/ALPC & named-pipe impersonation
hypnguyen1209 / using-offensive-claudeUse when starting any offensive-security engagement or task — establishes how to find and invoke the right skill before any action (including clarifying questions, recon, exploitation, or reporting)
spencermarx / github-workflow-automationAdvanced GitHub Actions workflow automation with AI swarm coordination, intelligent CI/CD pipelines, and comprehensive repository management
spencermarx / Pair ProgrammingAI-assisted pair programming with multiple modes (driver/navigator/switch), real-time verification, quality monitoring, and comprehensive testing. Supports TDD, debugging, refactoring, and learning sessions.
spencermarx / code-review-swarmDeploy specialized AI agents to perform comprehensive, intelligent code reviews that go beyond traditional static analysis.
spencermarx / V3 Swarm Coordination15-agent hierarchical mesh coordination for v3 implementation. Orchestrates parallel execution across security, core, and integration domains following 10 ADRs with 14-week timeline.
spencermarx / github-code-reviewComprehensive GitHub code review with AI-powered swarm coordination
giuseppe-trisciuoglio / spring-boot-security-jwtProvides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based access control using Spring Security 6.x
giuseppe-trisciuoglio / aws-cloudformation-cloudfrontProvides AWS CloudFormation patterns for CloudFront distributions, origins (ALB, S3, Lambda@Edge, VPC Origins), CacheBehaviors, Functions, SecurityHeaders, parameters, Outputs and cross-stack references
giuseppe-trisciuoglio / spring-boot-openapi-documentationProvides patterns to generate comprehensive REST API documentation using SpringDoc OpenAPI 3.0 and Swagger UI in Spring Boot 3.x applications
giuseppe-trisciuoglio / unit-test-security-authorizationProvides patterns for unit testing Spring Security with `@PreAuthorize`, `@Secured`, `@RolesAllowed`. Validates role-based access control and authorization policies
giuseppe-trisciuoglio / react-patternsProvides comprehensive React 19 patterns for Server Components, Server Actions, useOptimistic, useActionState, useTransition, concurrent features, Suspense boundaries, and TypeScript integration.
giuseppe-trisciuoglio / aws-cloudformation-securityProvides AWS CloudFormation patterns for security infrastructure including KMS encryption, Secrets Manager, IAM security, VPC security, ACM certificates, parameter security, outputs, and secure cross-stack references
giuseppe-trisciuoglio / aws-cli-beastProvides advanced AWS CLI patterns for managing EC2, Lambda, S3, DynamoDB, RDS, VPC, IAM, and CloudWatch. Generates bulk operation scripts, automates cross-service workflows, validates security configurations, and executes JMESPath queries for complex filtering.
giuseppe-trisciuoglio / typescript-security-reviewProvides security review capability for TypeScript/Node.js applications, validates code against XSS, injection, CSRF, JWT/OAuth2 flaws, dependency CVEs, and secrets exposure
giuseppe-trisciuoglio / spring-boot-rest-api-standardsProvides REST API design standards and best practices for Spring Boot projects
giuseppe-trisciuoglio / aws-cloudformation-ec2Provides AWS CloudFormation patterns for EC2 instances, Security Groups, IAM roles, and load balancers
giuseppe-trisciuoglio / aws-cloudformation-elasticacheProvides AWS CloudFormation patterns for ElastiCache Redis or Memcached infrastructure, including subnet groups, parameter groups, security controls, and cross-stack outputs
giuseppe-trisciuoglio / aws-cloudformation-iamProvides AWS CloudFormation patterns for IAM roles, policies, managed policies, permission boundaries, and trust relationships
giuseppe-trisciuoglio / aws-cloudformation-task-ecs-deploy-ghProvides patterns to deploy ECS tasks and services with GitHub Actions CI/CD
agamm / owasp-securityReviews code for security vulnerabilities and guides secure implementation using OWASP Top 10:2025, ASVS 5.0, the OWASP Top 10 for LLM Applications (2026), and the OWASP Top 10 for Agentic Applications (2026)
tanviet12 / vbsecSecurity scanning skill for Claude Code, Codex and Antigravity. Finds the 21 most common vulnerabilities in AI-written code and shows how to fix each one.
Hainrixz / cyber-neoOpen-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabilities across all OWASP 2025 Top 10 and CWE Top 25 categories. 11 security domains, 60+ secret patterns, parallel subagent analysis, professional report generation. Built by tododeia.com
SepineTam / mcp-for-stataStata-MCP: A MCP server for integrating Stata into your agent loop with a safety-first design.
cordwainersmith / Claudoscopenative macOS app that gives you a real-time dashboard for your Claude Code and Cowork sessions, with analytics, conversation history, security hardening, real time secrets detection and project insights.
AgriciDaniel / pyaPYA (Protect Your Ass): security audit plugin for Claude Code. 9 specialist agents, a dated threat feed, verified findings, offline by default.
azrtydxb / procoderSenior-developer discipline for AI coding agents. A commit gate that counts unchecked as failing, quality controllers that refuse to call unfinished work done, and a lessons loop that closes each escaped bug's class. One Go binary, no runtime deps, works with 20+ agents.
bjgreenberg / senior-engineering-partnerA stack-agnostic Claude Code skill: strict code reviewer, pair programmer, debugger, and mentor (Python/Bash/Apps Script/JS/Swift). Security-first, phase-aware engineering discipline with a spec→plan→TDD→verify workflow.
VibePod / vibepod-cliUnified CLI for running AI coding agents in isolated containers. Includes built-in local metrics collection, HTTP traffic tracking, and an analytics dashboard to track agent actions.
x-glacier / kali-pentestKali Linux penetration testing skill for AI agents (Claude Code, OpenClaw, Hermes Agent). 200+ CLI tools, 15 scenario playbooks. Autonomously plans attack paths, selects tools, and integrates results across phases to adapt the penetration strategy — with human approval gates for high-risk actions.
