250 free skills · page 5 of 5
Security skills
Skills for security — code auditing, penetration testing, secrets management, encryption, and dependency vulnerability scanning.
Real files from public repositories — hand-curated, never invented. Sorted by installs.
5 / 5page
supabase-reportyoanbernabeu/supabase-pentest-skillsGenerate a comprehensive Markdown security audit report with executive summary, findings, and remediation guidance.Security375
testing-api-authentication-weaknessesmukul975/anthropic-cybersecurity-skillsTests API authentication mechanisms for weaknesses including brokenSecurity374analyzing-kubernetes-audit-logsmukul975/anthropic-cybersecurity-skillsParses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod,Security374
safe-action-better-authnext-safe-action/skillsUse when adding authentication or authorization to safe actions with Better Auth -- covers betterAuth() middleware setup, typed session context (BetterAuthContext), custom authorize callbacks (AuthorizeFn), unauthorized() handling, nextCookies() configuration, and Next.js authInterrupts setupSecurity374
vulnerability-triage-brocardstrailofbits/skillsSystematically evaluate incoming vulnerability reports against 7 principled criteria before committing resources to deeper analysis. Each brocard is a falsifiable test: if a report fails any brocard, document the reason and dismiss or request clarification. If a report survives all 7, escalate it.Security371supabase-audit-auth-usersyoanbernabeu/supabase-pentest-skillsTest for user enumeration vulnerabilities through various authentication endpoints.Security366
owasp-mobile-security-checkerharishwarrior/flutter-claude-skillsUse when performing security audits, vulnerability assessments, or compliance checks on Flutter or mobile applications. Covers OWASP Mobile Top 10 (2024) — hardcoded secrets (M1), insecure storage (M9), weak cryptography (M10), network issues (M5), and 6 more categories with automated scanners and remediation guidance.Security365analyzing-sbom-for-supply-chain-vulnerabilitiesmukul975/anthropic-cybersecurity-skillsParses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSONSecurity363
security-headers-configurationsecondsky/claude-skillsConfigures HTTP security headers to protect against XSS, clickjacking, and MIME sniffing attacks. Use when hardening web applications, passing security audits, or implementing Content Security Policy.Security362
frontend-securityschalkneethling/webdev-agent-skillsAudit frontend codebases for security vulnerabilities and bad practices. Use when performing security reviews, auditing code for XSS/CSRF/DOM vulnerabilities, checking Content Security Policy configurations, validating input handling, reviewing file upload security, or examining Node.js/NPM dependencies. Target frameworks include web platform (vanilla HTML/CSS/JS), React, Astro, Twig templates, Node.js, and Bun. Based on OWASP security guidelines.Security359Other tasks
same rules, different job
