Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.
Derives security requirements from identified threats and business context. Supports writing security user stories and developing security test cases.
Audits code for injection, XSS, authentication, authorization, and cryptography issues. Supports OWASP-oriented security review and reports findings with confidence assessments.
Analyzes code for injection flaws, authentication and access control issues, exposed secrets, weak cryptography, insecure dependencies, and business logic vulnerabilities. Uses data flow and component reasoning across multiple programming languages.
Review Dom Based XSS Prevention concerns, trust boundaries, and operational assumptions against OWASP Dom Based XSS Prevention guidance.
安全审查 (Security Review) 专家，覆盖输入校验 (Input Validation)、认证授权 (Authentication/Authorization)、密钥泄漏 (Secret Leakage)、注入 (Injection) 与错误信息等；在涉及外部输入或安全敏感变更时使用。
Reviews code, infrastructure, dependencies, secrets, and cloud security for vulnerabilities. Produces structured reports, prioritized remediation recommendations, and compliance checklists.
Checks vulnerable packages, exposed secrets, OWASP code patterns, authentication configuration, CORS policies, and data protection. Produces severity-rated findings with specific remediation steps.
You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across ecosystems to identify vulnerabilities, assess risks, and recommend remediation.
Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.
Static Application Security Testing (SAST) for code vulnerability analysis across multiple languages and frameworks
Поиск секретов в рабочем дереве И git-истории — паттерны ключей, connection strings, git log -p по всем веткам. Use when нужно проверить утечку ключей/токенов/паролей или подозрение «ключ попал в коммит»; комплексный аудит с задачами — /security:vorcl (security)
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name