Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Supports security audits, threat modeling, vulnerability assessments, and dependency reviews. Provides OWASP checklists, STRIDE templates, vulnerability report structures, and dependency audit formats.
Reviews untrusted input, login flows, sessions, storage, and external integrations for vulnerabilities, including OWASP Top Ten risks. Covers dependency audits, supply-chain risk, and privacy compliance involving GDPR or CCPA.
Security architecture review, control validation, penetration testing guidance, and compliance verification for the CIA platform
Практический security-аудит Node/React — OWASP Top 10 с grep-паттернами и точками поиска, разбор npm audit (severity, false positives, overrides), чек-лист заголовков/CORS/cookie, severity-шкала и принципы доказательного отчёта. Use для аудита уязвимостей кода, проверки зависимостей на CVE и оформления security-findings.
Provides security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Covers focused reviews and vulnerability research, with complete workflows reserved for explicit comprehensive audits, penetration tests, or report requests.
Covers input validation, path traversal prevention, CVE detection, and secure coding patterns. Applies to authentication, authorization, payments, user data, APIs, uploads, database queries, and external integrations.
Provides a security auditing workflow spanning web application testing and API security. Covers penetration testing, vulnerability scanning, and security hardening.
Perform systematic codebase security audits covering regex secret scanning, dependency vulnerability audits (npm audit, pip-audit, cargo audit), injection vulnerability detection, and OWASP Top 10 mitigation.
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulnerability assessment, threat modeling, secure authentication (OAuth2/OIDC), OWASP standards, cloud security, and security automation. Handles DevSecOps integration, compliance (GDPR/HIPAA/SOC2), and incident response. Use PROACTIVELY for security audits, DevSecOps, or compliance i…
Provides security auditing expertise across cybersecurity and compliance frameworks. Includes a focus on DevSecOps.
Perform language- and framework-specific security reviews and suggest improvements. Covers explicit security guidance, reports, and secure-by-default coding help for Python, JavaScript/TypeScript, and Go.
Threat modeling before coding, STRIDE methodology, defense in depth, security controls in SDLC
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name