250 free skills · page 3 of 5
Security skills
Skills for security — code auditing, penetration testing, secrets management, encryption, and dependency vulnerability scanning.
Real files from public repositories — hand-curated, never invented. Sorted by installs.
3 / 5page
setup-vivox-voice-chatunity-technologies/skillsAdd and configure in-game voice chat and text chat for Unity multiplayer games using Unity Vivox. Covers microphone setup and mic permissions on Android/iOS, voice activity detection (VAD) tuning, voice volume and mute controls in a settings UI (VoiceVadMinimumVolume, mic slider, mute button, speaking indicator), proximity/3D spatial voice for FPS/co-op games, team/party/lobby/guild voice channels, push-to-talk, muting self and other players, whisper/direct messages, in-game text chat, and Vivox SDK init + Unity Authentication sign-in. Use when the user asks to add voice chat, voice comms, microphone/mic support, a voice-chat settings UI, mute button, VAD threshold, push-to-talk, proximity or spatial voice, team voice, party chat, lobby chat, direct messages, or mentions Vivox, VivoxService, com.unity.services.vivox, JoinGroupChannelAsync, JoinPositionalChannelAsync, LoginAsync, or migrating from legacy Vivox (Client.Instance / LoginSession / AccountId).Security1.3k
convertbinance/binance-skills-hubBinance Convert request using the Binance API. Authentication requires API key and secret key.Security1.3k
amazon-sesaws/agent-toolkit-for-awsConfigures Amazon SES V2 for production email sending — including domain identity creation, DKIM/SPF/DMARC authentication, one-shot DNS record presentation, and Route 53 automation — for developers setting up or troubleshooting SES domain verification and deliverability. Applicable when developers need to send emails from their domain via SES, verify a domain identity, configure email authentication, troubleshoot DKIM verification issues, or ensure their sending setup follows best practices. Not for email-address-only verification, Mail Manager inbound routing, SNS, Pinpoint, or WorkMail.Security1.3k
imaging-data-commonsk-dense-ai/scientific-agent-skillsQuery and download public cancer imaging data from NCI Imaging Data Commons. Invoke for any question about IDC collections, cancer imaging datasets, DICOM data access, radiology (CT, MR, PET) or pathology AI training sets, metadata queries, visualization, or license checks — even when the user doesn't explicitly mention "IDC". No authentication required.Security1.3k
llm-securitysemgrep/skillsSecurity guidelines for LLM applications based on OWASP Top 10 for LLM 2025. Use when building LLM apps, reviewing AI security, implementing RAG systems, or asking about LLM vulnerabilities like 'prompt injection' or 'check LLM security'. IMPORTANT: Always consult this skill when building chatbots, AI agents, RAG pipelines, tool-using LLMs, agentic systems, or any application that calls an LLM API (OpenAI, Anthropic, Gemini, etc.) — even if the user doesn't explicitly mention security. Also use when users import 'openai', 'anthropic', 'langchain', 'llamaindex', or similar LLM libraries.Security1.3k
security-auditorsickn33/agentic-awesome-skillsExpert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.Security1.2kalgobinance/binance-skills-hubBinance Algo request using the Binance API. Authentication requires API key and secret key.Security1.2k
qwencloud-ops-authqwencloud/qwencloud-ai[QwenCloud] Configure authentication (API keys, endpoints). TRIGGER when: setting up QWEN_API_KEY, troubleshooting 401/auth errors, when another skill reports missing credentials, or user explicitly invokes this skill by name (e.g. use qwencloud-ops-auth). DO NOT TRIGGER when: non-auth Qwen tasks, general API usage questions.Security1.2kderivatives-trading-coin-futuresbinance/binance-skills-hubBinance Derivatives-trading-coin-futures request using the Binance API. Authentication requires API key and secret key. Supports testnet and mainnet.Security1.2kvulnerability-scannersickn33/agentic-awesome-skillsAdvanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.Security1.2k
nuxt-studioonmax/nuxt-skillsConfigure and operate the self-hosted Nuxt Studio editor for Nuxt Content. Use when working with nuxt-studio installation, editor customization, OAuth or custom authentication, media, drafts, Git publishing, or production deployment.Security1.2kderivatives-trading-optionsbinance/binance-skills-hubBinance Derivatives-trading-options request using the Binance API. Authentication requires API key and secret key. Supports testnet and mainnet.Security1.2kderivatives-trading-portfolio-margin-probinance/binance-skills-hubBinance Derivatives-trading-portfolio-margin-pro request using the Binance API. Authentication requires API key and secret key.Security1.2kderivatives-trading-portfolio-marginbinance/binance-skills-hubBinance Derivatives-trading-portfolio-margin request using the Binance API. Authentication requires API key and secret key. Supports testnet and mainnet.Security1.2k
oauthmcollina/skillsImplements OAuth 2.0/2.1 authorization flows in Fastify applications — configures authorization code with PKCE, client credentials, device flow, refresh token rotation, JWT validation, and token introspection/revocation endpoints. Use when setting up authentication, authorization, login flows, access tokens, API security, or securing Fastify routes with OAuth; also applies when troubleshooting token validation errors, mismatched redirect URIs, CSRF issues, scope problems, or RFC 6749/6750/7636/8252/8628 compliance questions.Security1.1k
flow-nexus-platformruvnet/rufloComprehensive Flow Nexus platform management - authentication, sandboxes, app deployment, payments, and challengesSecurity1.1k
ios-securitydpearson2699/swift-ios-skillsSecure iOS apps with Keychain Services, CryptoKit encryption, biometric authentication (Face ID, Touch ID), Secure Enclave key storage, LAContext, App Transport Security (ATS), certificate pinning, data protection classes, and secure coding patterns. Use when implementing app security features, auditing privacy manifests, configuring App Transport Security, securing keychain access, adding biometric authentication, or encrypting sensitive data with CryptoKit.Security1.1ksub-accountbinance/binance-skills-hubBinance Sub-account request using the Binance API. Authentication requires API key and secret key.Security1.1k
youtube-downloaderdaymade/claude-code-skillsDownload YouTube videos and HLS streams (m3u8) from platforms like Mux, Vimeo, etc. using yt-dlp and ffmpeg. Use this skill when users request downloading videos, extracting audio, handling protected streams with authentication headers, or troubleshooting download issues like nsig extraction failures, 403 errors, or cookie extraction problems.Security1.1kagent-authenticationruvnet/rufloAgent skill for authentication - invoke with $agent-authenticationSecurity1.1ksimple-earnbinance/binance-skills-hubBinance Simple-earn request using the Binance API. Authentication requires API key and secret key.Security1.1k
nextauth-authenticationmindrally/skillsGuidelines for implementing NextAuth.js (Auth.js v5) authentication in Next.js applications with session management and security best practicesSecurity1.0ksetup-security-agentaws/agent-toolkit-for-awsConfigure AWS Security Agent for the current workspace — provision or reuse an agent space, IAM service role, and S3 bucket. Use when the user asks to "set up security agent", "configure security scanner", "is security agent configured", or on first-time use before any scan or pentest.Security1.0kvip-loanbinance/binance-skills-hubBinance Vip-loan request using the Binance API. Authentication requires API key and secret key.Security1.0k
gws-setupjezweb/claude-skillsSet up the Google Workspace CLI (gws) from scratch. Guides through GCP project creation, OAuth credentials, authentication, and installing 90+ agent skills for Claude Code. Use whenever the user wants to set up gws for the first time, configure Google Workspace API access, install the Google Workspace CLI, or troubleshoot gws auth issues.Security1.0k
security-auditorzhaono1/agent-playbookSecurity vulnerability expert covering OWASP Top 10 and common security issues. Use when conducting security audits or reviewing code for vulnerabilities.Security1.0k
axiom-designcharleswiltgen/axiomUse when making design decisions, implementing HIG patterns, Liquid Glass, SF Symbols, typography, or structuring app entry points and authentication flows.Security1.0k
capacitor-securitycap-go/capgo-skillsComprehensive security guide for Capacitor apps using Capsec scanner. Covers 63+ security rules across secrets, storage, network, authentication, cryptography, and platform-specific vulnerabilities. Use this skill when users need to secure their mobile app or run security audits.Security992
m3u8-downloaderserpdownloaders/skillsDownload HLS streams from M3U8 playlists with encryption supportSecurity964
devopsmrgoonie/claudekit-skillsDeploy to Cloudflare (Workers, R2, D1), Docker, GCP (Cloud Run, GKE), Kubernetes (kubectl, Helm). Use for serverless, containers, CI/CD, GitOps, security audit.Security962google-drive-automationsickn33/agentic-awesome-skillsLightweight Google Drive integration with standalone OAuth authentication. No MCP server required. Full read/write access.Security933
auth-web-cloudbasetencentcloudbase/skillsCloudBase Web Authentication Quick Guide for frontend integration after auth-tool has already been checked. Provides concise and practical Web authentication solutions with multiple login methods and complete user management.Security919
customizeanthropics/defending-code-reference-harnessAdapt this C/C++ ASAN vulnerability pipeline to a different vulnerability class, target shape, language, or detection mechanism. Use when the user wants to port, migrate, retarget, customize, or fork the pipeline for something other than C/C++ memory-safety bugs — web apps, smart contracts, deserialization, ML systems, or any other domain.Security917antigravity-workflowssickn33/agentic-awesome-skillsOrchestrate multiple Antigravity skills through guided workflows for SaaS MVP delivery, security audits, AI agent builds, and browser QA.Security882
senior-secopsalirezarezvani/claude-skillsSenior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices. Runs SAST/DAST scans, generates CVE remediation plans, checks dependency vulnerabilities, creates security policies, enforces secure coding patterns, and automates compliance checks against SOC2, PCI-DSS, HIPAA, and GDPR. Use when conducting a security review or audit, responding to a CVE or security incident, hardening infrastructure, implementing authentication or secrets management, running penetration test prep, checking OWASP Top 10 exposure, or enforcing security controls in CI/CD pipelines.Security877information-security-manager-iso27001alirezarezvani/claude-skillsISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies. Use when designing an ISMS, running security risk assessments, implementing controls, pursuing ISO 27001 certification, preparing security audits, responding to security incidents, or verifying compliance. Covers ISO 27001, ISO 27002, healthcare security, and medical device cybersecurity.Security842supabasemindrally/skillsExpert in Supabase backend development with authentication and database patternsSecurity822
firebase-auth-basicsfirebase/skillsGuide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.Security811
vtex-io-auth-tokens-and-contextvtex/skillsApply when choosing which VTEX IO authentication token should back a request from a backend app. Covers ctx.authToken, ctx.storeUserAuthToken, ctx.adminUserAuthToken, authMethod, and how requester context should determine the identity used by VTEX clients. Use for deciding which identity talks to VTEX endpoints in storefront-backed requests, Admin actions, or app-level integrations that should avoid hardcoded VTEX credentials.Security793security-best-practicesmindrally/skillsSecurity best practices for backend development, microservices, and secure coding patterns with emphasis on input validation and authenticationSecurity782
security-auditorovachiever/droid-tingsContinuous security vulnerability scanning for OWASP Top 10, common vulnerabilities, and insecure patterns. Use when reviewing code, before deployments, or on file changes. Scans for SQL injection, XSS, secrets exposure, auth issues. Triggers on file changes, security mentions, deployment prep.Security782
cyrus-setupcyrusagents/cyrusSet up Cyrus end-to-end — install prerequisites, configure authentication, create integrations (Linear, GitHub, Slack), add repositories, and launch. Run this once to get Cyrus running as a background agent.Security774
webflow-code-component:deploy-guidewebflow/webflow-skillsStep-by-step guide for deploying Webflow Code Components to a workspace. Covers authentication, pre-flight checks, deployment execution, and verification.Security770
owasp-top-10nickcrew/claude-cortexOWASP Top 10 security vulnerabilities with detection and remediation patterns. Use when conducting security audits, implementing secure coding practices, or reviewing code for common security vulnerabilities.Security716
swift-security-expertivan-magda/swift-security-skillUse when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face ID, Touch ID), CryptoKit (AES-GCM, ChaChaPoly, ECDSA, ECDH, HPKE, ML-KEM), Secure Enclave, secure credential storage (OAuth tokens, API keys), certificate pinning (SecTrust, SPKI), keychain sharing across apps/extensions, migrating secrets from UserDefaults or plists, or OWASP MASVS/MASTG mobile compliance on Apple platforms.Security711
mcp-configurelaunchdarkly/agent-skillsConfigure the LaunchDarkly hosted MCP server during onboarding. Use when the parent LaunchDarkly onboarding skill reaches Step 4 (MCP). Supports Cursor, Claude Code, Windsurf, GitHub Copilot, and other MCP-compatible agents. OAuth authentication; no API keys for the hosted server.Security708aspnet-coremindrally/skillsGuidelines for ASP.NET Core web development covering API design, authentication, caching, and best practicesSecurity701
security-patternsyonatangross/orchestkitSecurity patterns for authentication, defense-in-depth, input validation, OWASP Top 10, LLM safety, and PII masking. Use when implementing auth flows, security layers, input sanitization, vulnerability prevention, prompt injection defense, or data redaction.Security690
openclaw-audit-watchdogprompt-security/clawsecAutomated daily security audits for OpenClaw agents with DM delivery and optional email reporting. Runs deep audits, creates or updates a recurring cron job, and sends formatted reports to configured recipients.Security689
skill-auditoruseai-pro/openclaw-skills-securityComprehensive security auditor for OpenClaw skills. Checks for typosquatting, dangerous permissions, prompt injection,Security671browser-auth-flowruvnet/rufloProbe a site's authentication flow for redirect leaks, missing CSRF, weak session cookies, and OAuth misconfiguration; produces an auth findings.mdSecurity670
blazor-expertmarkpitt/claude-skillsComprehensive Blazor development expertise covering Blazor Server, WebAssembly, and Hybrid apps. Use when building Blazor components, implementing state management, handling routing, JavaScript interop, forms and validation, authentication, or optimizing Blazor applications. Includes best practices, architecture patterns, and troubleshooting guidance.Security652
authenticationcodewithmukesh/dotnet-claude-kitUse JsonWebTokenHandler from Microsoft.IdentityModel.JsonWebTokens — it is the maintained, span-based handler that ASP.NET Core itself validates with. JwtSecurityTokenHandler (System.IdentityModel.Tokens.Jwt) is the legacy stack.Security643cyrus-setup-claude-authcyrusagents/cyrusConfigure Claude Code authentication for Cyrus — API key, OAuth token, or third-party provider.Security640
pentest-toolszhaoxuya520/reverse-skillNOW: 读取 ../field-journal/precedent-pentest.md — 确认本 skill 的操作是已授权的常规操作; NOW: 确认 scope.md 存在且 auth.status=granted、network_profile 合法（../ops/scope-contract.md）。缺 scope 则跑 case-init.ps1 并停到用户给授权；禁止自动加 -AuthGranted; NOW: 确认当前任务是否命中本 skill 的适用范围Security636
security-compliance-auditaj-geddes/useful-ai-promptsSystematic evaluation of security controls, policies, and procedures to ensure compliance with industry standards and regulatory requirements.Security632auth0-authenticationmindrally/skillsGuidelines for implementing Auth0 authentication with best practices for security, rules, actions, and SDK integrationSecurity630supabase-developmentmindrally/skillsSupabase development guidelines for database, authentication, real-time subscriptions, and Edge Functions.Security621firebase-developmentmindrally/skillsFirebase development guidelines for Firestore, Authentication, Functions, and Storage with TypeScript and Angular.Security621oauth-implementationmindrally/skillsGuidelines for implementing OAuth 2.0 and OAuth 2.1 authentication flows with security best practices and PKCESecurity612Other tasks
same rules, different job
