Skill catalog
398security agent skills synced from skills.sh, with their install counts. Read them here, or let your agent fetch the right one through the Graph-of-Skills MCP server.
Want your agent to use these? Set up Graph-of-Skills
or get a free key.
How these skills are sourced and what we check.
Cannot find one? Your agent can write a skill for your own library.
Have skills of your own? Install one on another machine.
A skill that comes from GitHub shows its npx skills add command on its page.
- triage anthropics/defending-code-reference-harness
Triage a batch of raw security findings. Verify each is real, collapse duplicates, re-rank by derived exploitability, and tag with an owner. Takes a directory or file of scanner output and writes TRIAGE.json + TRIAGE.md…
1,118 installs - vibe-security-skill reason-machines/security-skills
Agent skill that audits vibe-coded apps for common security vulnerabilities introduced by AI coding assistants
1,118 installs - patch anthropics/defending-code-reference-harness
Generate candidate fixes for verified security findings. Consumes TRIAGE.json (preferred), VULN-FINDINGS.json, INCIDENTS.json, or a vuln-pipeline results directory. Pipeline input is delegated to the execution-verified…
1,116 installs - openclaw-security-hardening reason-machines/security-skills
Deploy and manage security hardening for high-privilege autonomous AI agents (OpenClaw) using zero-trust architecture and automated defense matrices
1,113 installs - supply-chain-security zhaoxuya520/reverse-skill
Use for software supply-chain security assessment covering SBOM, SCA, CI/CD pipelines, container images, build integrity, dependency provenance, and vulnerability reachability.
1,113 installs - identity-federation zhaoxuya520/reverse-skill
Use for authorized assessment of federated identity systems including SAML, OIDC, OAuth2 flows, SSO misconfiguration, and token confusion issues.
1,111 installs - email-security zhaoxuya520/reverse-skill
Use for authorized email security review including phishing analysis, header authentication (SPF/DKIM/DMARC), BEC patterns, and mailbox token abuse research.
1,109 installs - windows-ad zhaoxuya520/reverse-skill
Use for authorized Active Directory and Windows identity attacks including Kerberos, AD CS, BloodHound paths, NTLM relay, and domain privilege escalation research.
1,108 installs - ios-security dpearson2699/swift-ios-skills
Secure iOS apps with Keychain Services, CryptoKit encryption, biometric authentication (Face ID, Touch ID), Secure Enclave key storage, LAContext, App Transport Security (ATS), certificate pinning, data protection class…
1,106 installs - autopentestx-automated-pentesting reason-machines/security-skills
Automated penetration testing toolkit for security assessment, vulnerability scanning, and automated security reporting
1,105 installs - ot-ics zhaoxuya520/reverse-skill
Use for authorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation.
1,105 installs - cloud-k8s zhaoxuya520/reverse-skill
Use for authorized cloud, container, and Kubernetes security assessment including metadata SSRF, IAM misconfig, container escape paths, and cluster RBAC review.
1,104 installs - malware-detection-awareness reason-machines/security-skills
Understanding security risks in software distribution and recognizing illegitimate software packages
1,101 installs - vtex-io-security-boundaries vtex/skills
Apply when reviewing or designing security-sensitive boundaries in VTEX IO apps. Covers public versus private exposure, trust assumptions at route and integration boundaries, sensitive data handling, validating what cro…
1,100 installs - security-testing petrkindlmann/qa-skills
Test application security against OWASP Top 10 (2025) with automated CI tooling: OWASP ZAP (DAST), dependency/supply-chain scanning (OSV-Scanner, SBOM, provenance), Semgrep SAST, auth/session tests (JWT, OAuth, RBAC), a…
1,098 installs - slowmist-agent-security-framework reason-machines/security-skills
Comprehensive security review framework for AI agents to audit skills, repositories, URLs, on-chain addresses, and services in adversarial environments
1,098 installs - mcp-security-audit github/awesome-copilot
Audit MCP (Model Context Protocol) server configurations for security issues. Use this skill when: - Reviewing .mcp.json files for security risks - Checking MCP server args for hardcoded secrets or shell injection patte…
1,088 installs - avast-premium-security-analysis reason-machines/security-skills
Analyze and understand Avast Premium Security components, antivirus protection mechanisms, and security software implementation patterns
1,086 installs - malware-warning-avast-keygen reason-machines/security-skills
WARNING - This repository distributes malware disguised as Avast Premium Security cracks and keygens
1,085 installs - vibesec-skill behisecc/vibesec-skill
This skill helps Claude write secure web applications. Use this when working on any web application or when a user requests a scan or audit to ensure security best practices are followed.
1,082 installs - palisade-security-nexus-bitdefender reason-machines/security-skills
Deploy and configure BitDefender Total Security 2026 with advanced threat detection, sandboxing, VPN integration, and AI-powered heuristic analysis
1,077 installs - penetration-testing aj-geddes/useful-ai-prompts
Ethical hacking and security testing methodologies using penetration testing tools, exploit frameworks, and manual security validation. Use when assessing application security posture and identifying exploitable vulnera…
1,076 installs - avast-security-awareness reason-machines/security-skills
Recognize and avoid malicious software distribution repositories disguised as legitimate security tools
1,073 installs - malware-warning-avast-piracy reason-machines/security-skills
WARNING - This repository distributes pirated software and potential malware disguised as Avast Premium Security
1,073 installs - report-malicious-repository reason-machines/security-skills
Identify and report potentially malicious software repositories masquerading as legitimate security tools
1,067 installs - wordpress-penetration-testing sickn33/agentic-awesome-skills
Assess WordPress installations for common vulnerabilities and WordPress 7.0 attack surfaces.
1,066 installs - wxmini-security-audit reason-machines/security-skills
Automated WeChat mini-program security auditing framework using Claude Code Agent Teams with 7 specialized agents for comprehensive static analysis
1,062 installs - avast-premium-security-detection reason-machines/security-skills
Identify and analyze suspicious software distribution repositories claiming to offer cracked or pirated security software
1,057 installs - dt-sec-contextualization dynatrace/dynatrace-for-ai
Resolve security signals, IoC matches, or Smartscape nodes to runtime Dynatrace entities and connect findings on different entity levels through a shared runtime entity. Covers identity-to-Smartscape mapping (incl. cont…
1,056 installs - brand-protection kostja94/marketing-skills
When the user faces brand impersonation, fake websites, phishing sites, or trademark infringement. Also use when the user mentions "fake site," "impersonation," "phishing site," "trademark infringement," "domain squatti…
1,052 installs - security-awareness-malicious-repository-detection reason-machines/security-skills
Detect and analyze potentially malicious repositories disguising as legitimate software cracks or pirated tools
1,047 installs - security-auditor zhaono1/agent-playbook
Security vulnerability expert covering OWASP Top 10 and common security issues. Use when conducting security audits or reviewing code for vulnerabilities.
1,046 installs - dt-sec-ioc-hunting dynatrace/dynatrace-for-ai
Hunt threat-intelligence indicators of compromise (IoCs) across Dynatrace logs and spans and produce a 0-100 threat-exposure score. Extracts and normalizes IoCs — IPs, Domains (hostnames included), URLs, Emails, CVEs, F…
1,045 installs - avast-premium-security-malware-analysis reason-machines/security-skills
Analyze and understand Avast Premium Security features, protection mechanisms, and security architecture for antivirus research and educational purposes
1,044 installs - payment-pci-security vtex/skills
Apply when handling credit card data, implementing secureProxyUrl flows, or working with payment security and proxy code. Covers PCI DSS compliance, Secure Proxy card tokenization, sensitive data handling rules, X-PROVI…
1,040 installs - avast-premium-security-awareness reason-machines/security-skills
Identify and analyze potentially malicious software distribution repositories disguised as legitimate security software
1,035 installs - avast-security-analysis reason-machines/security-skills
Analyze and understand Avast antivirus security mechanisms, behavior shields, and protection components for security research
1,035 installs - mantis-advise google/mantis
Proactive security advisor and architectural remediation assistant for secure code development. Use to query threat models, historical vulnerability lineages, verified patch patterns, triaged false positives, and learne…
1,007 installs - openclaw-security-watchdog reason-machines/security-skills
OpenClaw security scanning skill that performs comprehensive system security audits and generates human-friendly reports
994 installs - malware-analysis-dragonflytomb-avast reason-machines/security-skills
Analyze and understand malware distribution techniques disguised as legitimate security software installers
991 installs - security-threat-awareness reason-machines/security-skills
Recognize and warn against malicious software distribution repositories masquerading as legitimate security tools
990 installs - senior-security davila7/claude-code-templates
Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and sec…
984 installs - avast-premium-security-malware-detection reason-machines/security-skills
Detect and analyze potential malware distribution repositories masquerading as legitimate security software
976 installs - mcp-security-hub reason-machines/security-skills
Deploy and orchestrate 38 MCP servers for offensive security tools (Nmap, Nuclei, Ghidra, SQLMap, etc.) via Docker
972 installs - identify-malicious-repository reason-machines/security-skills
Detect and analyze fraudulent software distribution repositories masquerading as legitimate security products
961 installs - bitdefender-total-security-malware-analysis reason-machines/security-skills
Analyze and understand malware distribution tactics, cracked software risks, and security threat detection patterns
956 installs - malware-warning-bitdefender-crack reason-machines/security-skills
WARNING - This repository distributes malware disguised as pirated Bitdefender antivirus software
956 installs - gdpr-dsgvo-expert alirezarezvani/claude-skills
GDPR and German DSGVO compliance automation. Scans codebases for privacy risks, generates DPIA documentation, tracks data subject rights requests with Art. 12(3) one-month deadlines. Use when running GDPR compliance ass…
946 installs