Security & Compliance
Threat reviews, dependency and secret audits, hardening checklists and the paperwork regulated work asks for.
51 skills
AllAgent EngineeringBusiness & ProductivityCode ReviewsCoding WorkflowsDatabases & DataDevOps & InfrastructureDocuments & OfficeFrontend & DesignMarketing & SEOMedia & CreativeResearch & ScienceSecurity & ComplianceTests & DebuggingWriting & Content
- 01
install-guard
SkillLooks a package up in its registry before it gets installed.Repo stars: —Score:0Security & Compliance - 02
scope-guard
SkillCatches an edit that lands outside the project you are in.Repo stars: —Score:0Security & Compliance - 03
GitHub Actions Hardening
SkillReviews workflow YAML for the ways CI specifically gets compromised.Repo stars: 38KScore:0DevOps & Infrastructure - 04
CodeQL Code Scanning
SkillSets up CodeQL scanning through Actions or the CLI, and unsticks it when it fails.Repo stars: 38KScore:0DevOps & Infrastructure - 05
MCP Security Audit
SkillChecks .mcp.json entries before an agent is allowed to load them.Repo stars: 38KScore:0Agent Engineering - 06
Security and Hardening
SkillThreat-models the trust boundaries before writing a single control.Repo stars: —Score:0Security & Compliance - 07
Dependency Auditor
SkillReads lockfiles across eight ecosystems for vulnerable packages, licence conflicts and upgrade order.Repo stars: 25KScore:0DevOps & Infrastructure - 08
Skill Security Auditor
SkillScans a third-party agent skill for hostile code before it is installed.Repo stars: 25KScore:0Agent Engineering - 09
SAST Configuration
SkillSets up Semgrep, CodeQL and SonarQube so the pipeline blocks real findings.Repo stars: —Score:0DevOps & Infrastructure - 10
Auth Implementation Patterns
SkillChooses between sessions, JWT and OAuth2 before any login page exists.Repo stars: 39KScore:0Coding Workflows - 11
Threat Model Analyst
SkillBuilds a STRIDE-A threat model of a repository and keeps it current as code moves.Repo stars: 38KScore:0Security & Compliance - 12
Security Guidance
SkillSecurity review of agent-written code at three points: on edit, on stop, and at commit.Repo stars: —Score:0Code Reviews - 13
Claude Security
SkillDeep vulnerability scan of your own code, with every finding challenged before it is reported.Repo stars: —Score:0Code Reviews - 14
StackHawk HawkScan
SkillConfigures and runs HawkScan against your own running app, then turns findings into ordered fix tasks.Repo stars: 15Score:0DevOps & Infrastructure - 15
Protect MCP
SkillGates every tool call through a Cedar policy and signs the decision into a hash-chained receipt.Repo stars: 39KScore:0Agent Engineering - 16
Review Agent Governance
SkillBlocks an agent from posting PR reviews, merges or CI edits until a human opens an approval window.Repo stars: 39KScore:0Code Reviews - 17
Signed Audit Trails
SkillA single cookbook skill that explains signed tool-call receipts before you commit to running them.Repo stars: 39KScore:0Security & Compliance - 18
Dependency Management
SkillAudits every manifest in a polyglot repository for vulnerabilities, licence conflicts and stale versions.Repo stars: 39KScore:0DevOps & Infrastructure - 19
Security Scanning
SkillPackages SAST setup, dependency scanning and STRIDE threat modeling as one Claude Code plugin.Repo stars: 39KScore:0Code Reviews - 20
Backend API Security
SkillTwo backend agents that write secure API code rather than audit it after the fact.Repo stars: 39KScore:0Coding Workflows - 21
Frontend & Mobile Security
SkillXSS, CSP and mobile storage security handled by three agents plus a sink-pattern scanner.Repo stars: 39KScore:0Coding Workflows - 22
Blockchain & Web3
SkillSolidity security, ERC token standards and Hardhat or Foundry testing for smart contract work.Repo stars: 39KScore:0Coding Workflows - 23
CrowdSec
SkillInstalls, tunes and debugs CrowdSec on bare metal, Docker and Kubernetes, fail2ban migration included.Repo stars: 23Score:0DevOps & Infrastructure - 24
secret-guard
SkillStops a write that carries a live credential.Repo stars: —Score:0Security & Compliance