Security Skills
1,461 Security skills for Claude Code, ranked by installs
Sponsors
Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthly
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any language
Agent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any languageShowing 1 to 80 of 1,461
skills.sh installs1
owasp-securityhoodini/ai-agents-skillsImplement secure coding practices following OWASP Top 10. Use when preventing security vulnerabilities, implementing authentication, securing APIs, or conductin3.1Kskills.sh installs
owasp-securityhoodini/ai-agents-skillsImplement secure coding practices following OWASP Top 10. Use when preventing security vulnerabilities, implementing authentication, securing APIs, or conductin3.1Kskills.sh installs2
security-and-hardeningaddyosmani/agent-skillsHardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that a81.4Kskills.sh installs
security-and-hardeningaddyosmani/agent-skillsHardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that a81.4Kskills.sh installs3
laravel-owasp-securityasyrafhussin/agent-skillsOWASP Top 10 security audit and secure coding guidelines for Laravel + React/Inertia.js applications. Use when auditing for vulnerabilities ("run OWASP audit", 1.1Kskills.sh installs
laravel-owasp-securityasyrafhussin/agent-skillsOWASP Top 10 security audit and secure coding guidelines for Laravel + React/Inertia.js applications. Use when auditing for vulnerabilities ("run OWASP audit", 1.1Kskills.sh installs4
api-security-hardeningaj-geddes/useful-ai-promptsSecure REST APIs with authentication, rate limiting, CORS, input validation, and security middleware. Use when building or hardening API endpoints against commo868skills.sh installs
api-security-hardeningaj-geddes/useful-ai-promptsSecure REST APIs with authentication, rate limiting, CORS, input validation, and security middleware. Use when building or hardening API endpoints against commo868skills.sh installs5
api-security-hardeningsecondsky/claude-skillsREST API security hardening with authentication, rate limiting, input validation, security headers. Use for production APIs, security audits, defense-in-depth, 506skills.sh installs
api-security-hardeningsecondsky/claude-skillsREST API security hardening with authentication, rate limiting, input validation, security headers. Use for production APIs, security audits, defense-in-depth, 506skills.sh installs6
owasp-mobile-security-checkerharishwarrior/flutter-claude-skillsUse when performing security audits, vulnerability assessments, or compliance checks on Flutter or mobile applications. Covers OWASP Mobile Top 10 (2024) — hard494skills.sh installs
owasp-mobile-security-checkerharishwarrior/flutter-claude-skillsUse when performing security audits, vulnerability assessments, or compliance checks on Flutter or mobile applications. Covers OWASP Mobile Top 10 (2024) — hard494skills.sh installs
8
security-scanning-security-hardeningsickn33/antigravity-awesome-skillssecurity scanning security hardening507skills.sh installs
security-scanning-security-hardeningsickn33/antigravity-awesome-skillssecurity scanning security hardening507skills.sh installs
10
owasp-security-checksergiodxa/agent-skillsSecurity audit guidelines for web applications and REST APIs based on OWASP Top 10 and web security best practices. Use when checking code for vulnerabilities, 1.7Kskills.sh installs
owasp-security-checksergiodxa/agent-skillsSecurity audit guidelines for web applications and REST APIs based on OWASP Top 10 and web security best practices. Use when checking code for vulnerabilities, 1.7Kskills.sh installs11
openclaw-security-hardeningaradotso/security-skillsopenclaw security hardening971skills.sh installs
openclaw-security-hardeningaradotso/security-skillsopenclaw security hardening971skills.sh installs12
authentication-authorization-clerkharperaa/secure-claude-skillsImplement secure authentication and authorization using Clerk. Use this skill when you need to authenticate users, protect routes, check permissions, implement 187skills.sh installs
authentication-authorization-clerkharperaa/secure-claude-skillsImplement secure authentication and authorization using Clerk. Use this skill when you need to authenticate users, protect routes, check permissions, implement 187skills.sh installs13
unit-test-security-authorizationgiuseppe-trisciuoglio/developer-kitProvides patterns for unit testing Spring Security with `@PreAuthorize`, `@Secured`, `@RolesAllowed`. Validates role-based access control and authorization poli3.9Kskills.sh installs
unit-test-security-authorizationgiuseppe-trisciuoglio/developer-kitProvides patterns for unit testing Spring Security with `@PreAuthorize`, `@Secured`, `@RolesAllowed`. Validates role-based access control and authorization poli3.9Kskills.sh installs14frontend-mobile-security-xss-scansickn33/antigravity-awesome-skillsfrontend mobile security xss scan444skills.sh installs
frontend-mobile-security-xss-scansickn33/antigravity-awesome-skillsfrontend mobile security xss scan444skills.sh installs15
security-hardeningancoleman/ai-design-componentsReduces attack surface across OS, container, cloud, network, and database layers using CIS Benchmarks and zero-trust principles. Use when hardening production i180skills.sh installs
security-hardeningancoleman/ai-design-componentsReduces attack surface across OS, container, cloud, network, and database layers using CIS Benchmarks and zero-trust principles. Use when hardening production i180skills.sh installs16
better-auth-security-best-practicesbetter-auth/skillsConfigure rate limiting, manage auth secrets, set up CSRF protection, define trusted origins, secure sessions and cookies, encrypt OAuth tokens, track IP addres50.7Kskills.sh installs
better-auth-security-best-practicesbetter-auth/skillsConfigure rate limiting, manage auth secrets, set up CSRF protection, define trusted origins, secure sessions and cookies, encrypt OAuth tokens, track IP addres50.7Kskills.sh installs17
golang-securitysamber/cc-skills-golangSecurity best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookie44.2Kskills.sh installs
golang-securitysamber/cc-skills-golangSecurity best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookie44.2Kskills.sh installs18
security-reviewgetsentry/skillsSecurity code review for vulnerabilities. Use when asked to "security review", "find vulnerabilities", "check for security issues", "audit security", "OWASP rev23Kskills.sh installs
security-reviewgetsentry/skillsSecurity code review for vulnerabilities. Use when asked to "security review", "find vulnerabilities", "check for security issues", "audit security", "OWASP rev23Kskills.sh installs19
security-reviewaffaan-m/everything-claude-codeComprehensive security checklist and patterns for authentication, input validation, secrets management, and sensitive operations.11.5Kskills.sh installs
security-reviewaffaan-m/everything-claude-codeComprehensive security checklist and patterns for authentication, input validation, secrets management, and sensitive operations.11.5Kskills.sh installs20
security-threat-modelopenai/skillsRepository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown8.9Kskills.sh installs
security-threat-modelopenai/skillsRepository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown8.9Kskills.sh installs21laravel-securityaffaan-m/eccLaravel security best practices — authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and secure deployment configurations.6.6Kskills.sh installs
laravel-securityaffaan-m/eccLaravel security best practices — authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and secure deployment configurations.6.6Kskills.sh installs24
security-reviewgithub/awesome-copilotAI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching5.8Kskills.sh installs
security-reviewgithub/awesome-copilotAI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching5.8Kskills.sh installs25quarkus-securityaffaan-m/eccQuarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security.5.4Kskills.sh installs
quarkus-securityaffaan-m/eccQuarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security.5.4Kskills.sh installs26spring-boot-security-jwtgiuseppe-trisciuoglio/developer-kitProvides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 4.3Kskills.sh installs
spring-boot-security-jwtgiuseppe-trisciuoglio/developer-kitProvides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 4.3Kskills.sh installs27typescript-security-reviewgiuseppe-trisciuoglio/developer-kitProvides security review capability for TypeScript/Node.js applications, validates code against XSS, injection, CSRF, JWT/OAuth2 flaws, dependency CVEs, and sec4.1Kskills.sh installs
typescript-security-reviewgiuseppe-trisciuoglio/developer-kitProvides security review capability for TypeScript/Node.js applications, validates code against XSS, injection, CSRF, JWT/OAuth2 flaws, dependency CVEs, and sec4.1Kskills.sh installs28
swift-securitydpearson2699/swift-ios-skillsUse when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face ID, Touch ID), Crypto3.2Kskills.sh installs
swift-securitydpearson2699/swift-ios-skillsUse when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face ID, Touch ID), Crypto3.2Kskills.sh installs29
code-securitysemgrep/skillsSecurity guidelines for writing secure code. Use when writing code, reviewing code for vulnerabilities, or asking about secure coding practices like 'check for 2.8Kskills.sh installs
code-securitysemgrep/skillsSecurity guidelines for writing secure code. Use when writing code, reviewing code for vulnerabilities, or asking about secure coding practices like 'check for 2.8Kskills.sh installs30
redis-securityredis/agent-skillsRedis security guidance covering authentication (requirepass and ACL users), TLS, ACL-based least-privilege access control, restricting network exposure via bin2.6Kskills.sh installs
redis-securityredis/agent-skillsRedis security guidance covering authentication (requirepass and ACL users), TLS, ACL-based least-privilege access control, restricting network exposure via bin2.6Kskills.sh installs31github-actions-hardeninggithub/awesome-copilotSecurity hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and genera2.6Kskills.sh installs
github-actions-hardeninggithub/awesome-copilotSecurity hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and genera2.6Kskills.sh installs32
securitycognitedata/builder-skillsMUST be used whenever fixing security issues in a Flows app, or before shipping any feature that handles credentials, user input, or external data. This skill f1.9Kskills.sh installs
securitycognitedata/builder-skillsMUST be used whenever fixing security issues in a Flows app, or before shipping any feature that handles credentials, user input, or external data. This skill f1.9Kskills.sh installs33llm-securitysemgrep/skillsSecurity guidelines for LLM applications based on OWASP Top 10 for LLM 2025. Use when building LLM apps, reviewing AI security, implementing RAG systems, or ask1.7Kskills.sh installs
llm-securitysemgrep/skillsSecurity guidelines for LLM applications based on OWASP Top 10 for LLM 2025. Use when building LLM apps, reviewing AI security, implementing RAG systems, or ask1.7Kskills.sh installs34
security-auditruvnet/rufloComprehensive security scanning and vulnerability detection. Includes input validation, path traversal prevention, CVE detection, and secure coding pattern enfo1.4Kskills.sh installs
security-auditruvnet/rufloComprehensive security scanning and vulnerability detection. Includes input validation, path traversal prevention, CVE detection, and secure coding pattern enfo1.4Kskills.sh installs35
oauthmcollina/skillsImplements OAuth 2.0/2.1 authorization flows in Fastify applications — configures authorization code with PKCE, client credentials, device flow, refresh token r1.4Kskills.sh installs
oauthmcollina/skillsImplements OAuth 2.0/2.1 authorization flows in Fastify applications — configures authorization code with PKCE, client credentials, device flow, refresh token r1.4Kskills.sh installs36
gke-securitygoogle/skillsPlans, configures, and hardens Google Kubernetes Engine (GKE) security. Covers Workload Identity Federation, Secret Manager integration, RBAC hardening, Binary 1.4Kskills.sh installs
gke-securitygoogle/skillsPlans, configures, and hardens Google Kubernetes Engine (GKE) security. Covers Workload Identity Federation, Secret Manager integration, RBAC hardening, Binary 1.4Kskills.sh installs37ios-securitydpearson2699/swift-ios-skillsSecure iOS apps with Keychain Services, CryptoKit encryption, biometric authentication (Face ID, Touch ID), Secure Enclave key storage, LAContext, App Transport1.1Kskills.sh installs
ios-securitydpearson2699/swift-ios-skillsSecure iOS apps with Keychain Services, CryptoKit encryption, biometric authentication (Face ID, Touch ID), Secure Enclave key storage, LAContext, App Transport1.1Kskills.sh installs38pentest-agents-bug-bounty-frameworkaradotso/security-skillspentest agents bug bounty framework1Kskills.sh installs
pentest-agents-bug-bounty-frameworkaradotso/security-skillspentest agents bug bounty framework1Kskills.sh installs39
swift-security-expertivan-magda/swift-security-skillUse when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face ID, Touch ID), Crypto875skills.sh installs
swift-security-expertivan-magda/swift-security-skillUse when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face ID, Touch ID), Crypto875skills.sh installs40
security-pen-testingalirezarezvani/claude-skillsUse when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security assessments. Covers s862skills.sh installs
security-pen-testingalirezarezvani/claude-skillsUse when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security assessments. Covers s862skills.sh installs41
netsuite-owasp-secure-codingoracle/netsuite-suitecloud-sdkPlatform-agnostic OWASP secure coding practices with JavaScript/Node.js patterns and NetSuite SuiteScript examples. Covers Open Worldwide Application Security P838skills.sh installs
netsuite-owasp-secure-codingoracle/netsuite-suitecloud-sdkPlatform-agnostic OWASP secure coding practices with JavaScript/Node.js patterns and NetSuite SuiteScript examples. Covers Open Worldwide Application Security P838skills.sh installs42skill-security-auditoralirezarezvani/claude-skillsSecurity audit and vulnerability scanner for AI agent skills before installation. Use when: (1) evaluating a skill from an untrusted source, (2) auditing a skil817skills.sh installs
skill-security-auditoralirezarezvani/claude-skillsSecurity audit and vulnerability scanner for AI agent skills before installation. Use when: (1) evaluating a skill from an untrusted source, (2) auditing a skil817skills.sh installs43
security-auditorovachiever/droid-tingsContinuous security vulnerability scanning for OWASP Top 10, common vulnerabilities, and insecure patterns. Use when reviewing code, before deployments, or on f781skills.sh installs
security-auditorovachiever/droid-tingsContinuous security vulnerability scanning for OWASP Top 10, common vulnerabilities, and insecure patterns. Use when reviewing code, before deployments, or on f781skills.sh installs44
oauth-implementationmindrally/skillsGuidelines for implementing OAuth 2.0 and OAuth 2.1 authentication flows with security best practices and PKCE747skills.sh installs
oauth-implementationmindrally/skillsGuidelines for implementing OAuth 2.0 and OAuth 2.1 authentication flows with security best practices and PKCE747skills.sh installs45
security-patternsyonatangross/orchestkitSecurity patterns for authentication, defense-in-depth, input validation, OWASP Top 10, LLM safety, and PII masking. Use when implementing auth flows, security 738skills.sh installs
security-patternsyonatangross/orchestkitSecurity patterns for authentication, defense-in-depth, input validation, OWASP Top 10, LLM safety, and PII masking. Use when implementing auth flows, security 738skills.sh installs47
spatie-securityspatie/guidelines-skillsApply Spatie's security guidelines when configuring applications, databases, or servers, or when reviewing code for security concerns; use for SSL setup, CSRF p678skills.sh installs
spatie-securityspatie/guidelines-skillsApply Spatie's security guidelines when configuring applications, databases, or servers, or when reviewing code for security concerns; use for SSL setup, CSRF p678skills.sh installs48
security-fuzzingeyadkelleh/awesome-skills-securityEssential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.626skills.sh installs
security-fuzzingeyadkelleh/awesome-skills-securityEssential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.626skills.sh installs49
docker-security-guidejosiahsiegel/claude-plugin-marketplaceComprehensive Docker security guidelines and threat mitigation. PROACTIVELY activate for: (1) container security review, (2) running as non-root user, (3) read-619skills.sh installs
docker-security-guidejosiahsiegel/claude-plugin-marketplaceComprehensive Docker security guidelines and threat mitigation. PROACTIVELY activate for: (1) container security review, (2) running as non-root user, (3) read-619skills.sh installs50
wordpress-security-validationbobmatnyc/claude-mpm-skillsSecurity-first WordPress development with nonces, sanitization, validation, and escaping to prevent XSS, CSRF, and SQL injection vulnerabilities.618skills.sh installs
wordpress-security-validationbobmatnyc/claude-mpm-skillsSecurity-first WordPress development with nonces, sanitization, validation, and escaping to prevent XSS, CSRF, and SQL injection vulnerabilities.618skills.sh installs51vulnerability-scanningaj-geddes/useful-ai-promptsAutomated vulnerability detection using OWASP tools, CVE databases, and security scanners. Use when performing security audits, compliance checks, or continuous617skills.sh installs
vulnerability-scanningaj-geddes/useful-ai-promptsAutomated vulnerability detection using OWASP tools, CVE databases, and security scanners. Use when performing security audits, compliance checks, or continuous617skills.sh installs52security-testingaj-geddes/useful-ai-promptsIdentify security vulnerabilities through SAST, DAST, penetration testing, and dependency scanning. Use for security test, vulnerability scanning, OWASP, SQL in607skills.sh installs
security-testingaj-geddes/useful-ai-promptsIdentify security vulnerabilities through SAST, DAST, penetration testing, and dependency scanning. Use for security test, vulnerability scanning, OWASP, SQL in607skills.sh installs53
oauth2-authenticationmanutej/luxor-claude-marketplaceComprehensive OAuth2 authentication skill covering authorization flows, token management, PKCE, OpenID Connect, and security best practices for modern authentic603skills.sh installs
oauth2-authenticationmanutej/luxor-claude-marketplaceComprehensive OAuth2 authentication skill covering authorization flows, token management, PKCE, OpenID Connect, and security best practices for modern authentic603skills.sh installs54api-authenticationsecondsky/claude-skillsSecure API authentication with JWT, OAuth 2.0, API keys. Use for authentication systems, third-party integrations, service-to-service communication, or encounte549skills.sh installs
api-authenticationsecondsky/claude-skillsSecure API authentication with JWT, OAuth 2.0, API keys. Use for authentication systems, third-party integrations, service-to-service communication, or encounte549skills.sh installs55security-headers-configurationaj-geddes/useful-ai-promptsConfigure HTTP security headers including CSP, HSTS, X-Frame-Options, and XSS protection. Use when hardening web applications against common attacks.519skills.sh installs
security-headers-configurationaj-geddes/useful-ai-promptsConfigure HTTP security headers including CSP, HSTS, X-Frame-Options, and XSS protection. Use when hardening web applications against common attacks.519skills.sh installs56
api-security-best-practicesdavila7/claude-code-templatesImplement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities466skills.sh installs
api-security-best-practicesdavila7/claude-code-templatesImplement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities466skills.sh installs57security-headers-configurationsecondsky/claude-skillsConfigures HTTP security headers to protect against XSS, clickjacking, and MIME sniffing attacks. Use when hardening web applications, passing security audits, 454skills.sh installs
security-headers-configurationsecondsky/claude-skillsConfigures HTTP security headers to protect against XSS, clickjacking, and MIME sniffing attacks. Use when hardening web applications, passing security audits, 454skills.sh installs58
code-review-securityhieutrtr/ai1-skillsSecurity-focused code review checklist and automated scanning patterns. Use when reviewing pull requests for security issues, auditing authentication/authorizat440skills.sh installs
code-review-securityhieutrtr/ai1-skillsSecurity-focused code review checklist and automated scanning patterns. Use when reviewing pull requests for security issues, auditing authentication/authorizat440skills.sh installs59oauth-implementationsecondsky/claude-skillsOAuth 2.0 and OpenID Connect authentication with secure flows. Use for third-party integrations, SSO systems, token-based API access, or encountering authorizat422skills.sh installs
oauth-implementationsecondsky/claude-skillsOAuth 2.0 and OpenID Connect authentication with secure flows. Use for third-party integrations, SSO systems, token-based API access, or encountering authorizat422skills.sh installs60
owasp-llm-top10mastepanoski/claude-skillsSecurity audit for LLM and GenAI applications using OWASP Top 10 for LLM Apps 2025. Assess prompt injection, data leakage, supply chain, and 7 more critical vul409skills.sh installs
owasp-llm-top10mastepanoski/claude-skillsSecurity audit for LLM and GenAI applications using OWASP Top 10 for LLM Apps 2025. Assess prompt injection, data leakage, supply chain, and 7 more critical vul409skills.sh installs61vulnerability-scannerdavila7/claude-code-templatesAdvanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.394skills.sh installs
vulnerability-scannerdavila7/claude-code-templatesAdvanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.394skills.sh installs62cloudflare-workers-securitysecondsky/claude-skillsCloudflare Workers security with authentication, CORS, rate limiting, input validation. Use for securing APIs, JWT/API keys, or encountering auth failures, CORS369skills.sh installs
cloudflare-workers-securitysecondsky/claude-skillsCloudflare Workers security with authentication, CORS, rate limiting, input validation. Use for securing APIs, JWT/API keys, or encountering auth failures, CORS369skills.sh installs63
auth-security-reviewerpatricio0312rev/skillsReviews authentication and authorization implementation for session management, CSRF, cookie security, and auth flow vulnerabilities with findings, severity ass352skills.sh installs
auth-security-reviewerpatricio0312rev/skillsReviews authentication and authorization implementation for session management, CSRF, cookie security, and auth flow vulnerabilities with findings, severity ass352skills.sh installs64
ln-621-security-auditorlevnikolaevich/claude-code-skillsChecks hardcoded secrets, SQL injection, XSS, insecure deps, input validation. Use when auditing security.337skills.sh installs
ln-621-security-auditorlevnikolaevich/claude-code-skillsChecks hardcoded secrets, SQL injection, XSS, insecure deps, input validation. Use when auditing security.337skills.sh installs65
pentest-expertduck4nh/antigravity-kitPenetration testing methodology expert. OWASP, PTES, reconnaissance, scanning, exploitation, reporting. Use for security assessments.332skills.sh installs
pentest-expertduck4nh/antigravity-kitPenetration testing methodology expert. OWASP, PTES, reconnaissance, scanning, exploitation, reporting. Use for security assessments.332skills.sh installs66
accelint-security-best-practicesgohypergiant/agent-skillsComprehensive security audit and vulnerability detection for JavaScript/TypeScript applications following OWASP Top 10. Use when (1) Users say 'audit security',323skills.sh installs
accelint-security-best-practicesgohypergiant/agent-skillsComprehensive security audit and vulnerability detection for JavaScript/TypeScript applications following OWASP Top 10. Use when (1) Users say 'audit security',323skills.sh installs67api-security-reviewbobmatnyc/claude-mpm-skillsAPI security checklist for reviewing endpoints before deployment. Use when creating or modifying API routes to ensure proper authentication, authorization, and 257skills.sh installs
api-security-reviewbobmatnyc/claude-mpm-skillsAPI security checklist for reviewing endpoints before deployment. Use when creating or modifying API routes to ensure proper authentication, authorization, and 257skills.sh installs68
appsec-expertmartinholovsky/claude-skills-generatorElite Application Security engineer specializing in secure SDLC, OWASP Top 10 2025, SAST/DAST/SCA integration, threat modeling (STRIDE), and vulnerability remed240skills.sh installs
appsec-expertmartinholovsky/claude-skills-generatorElite Application Security engineer specializing in secure SDLC, OWASP Top 10 2025, SAST/DAST/SCA integration, threat modeling (STRIDE), and vulnerability remed240skills.sh installs69
angular-securityoguzhan18/angular-ecosystem-skillsALWAYS use when working with Angular Security, XSS prevention, CSRF protection, Content Security Policy, or sanitization in Angular applications.211skills.sh installs
angular-securityoguzhan18/angular-ecosystem-skillsALWAYS use when working with Angular Security, XSS prevention, CSRF protection, Content Security Policy, or sanitization in Angular applications.211skills.sh installs70security-promptsharperaa/secure-claude-skillsLibrary of battle-tested security prompt templates for secure feature implementation. Use when implementing forms, endpoints, authentication, authorization, fil193skills.sh installs
security-promptsharperaa/secure-claude-skillsLibrary of battle-tested security prompt templates for secure feature implementation. Use when implementing forms, endpoints, authentication, authorization, fil193skills.sh installs71
application-securitytravisjneuman/.claudeOWASP Top 10 with code examples, SAST/DAST tools, dependency scanning, CSP headers, and input validation patterns. Use when hardening applications, reviewing se177skills.sh installs
application-securitytravisjneuman/.claudeOWASP Top 10 with code examples, SAST/DAST tools, dependency scanning, CSP headers, and input validation patterns. Use when hardening applications, reviewing se177skills.sh installs72
security-audits-hiraoku/synapse-a2aGeneral-purpose security auditing guide. Covers OWASP Top 10, dependency vulnerabilities, authentication, authorization, input validation, and secret management160skills.sh installs
security-audits-hiraoku/synapse-a2aGeneral-purpose security auditing guide. Covers OWASP Top 10, dependency vulnerabilities, authentication, authorization, input validation, and secret management160skills.sh installs73
security-patternscloudai-x/claude-workflow-v2Implements authentication, authorization, encryption, secrets management, and security hardening patterns. Use when designing auth flows, managing secrets, conf132skills.sh installs
security-patternscloudai-x/claude-workflow-v2Implements authentication, authorization, encryption, secrets management, and security hardening patterns. Use when designing auth flows, managing secrets, conf132skills.sh installs74
security-reviewcodeaholicguy/ai-devkitAI DevKit · Review code, skills, and prompts for security vulnerabilities — OWASP Top 10, prompt injection, business logic flaws, and insecure defaults. Use whe0skills.sh installs
security-reviewcodeaholicguy/ai-devkitAI DevKit · Review code, skills, and prompts for security vulnerabilities — OWASP Top 10, prompt injection, business logic flaws, and insecure defaults. Use whe0skills.sh installs75
security-analyzerCornjebus/security-analyzerComprehensive security vulnerability analysis for codebases and infrastructure. Scans dependencies (npm, pip, gem, go, cargo), containers (Docker, Kubernetes), 0skills.sh installs
security-analyzerCornjebus/security-analyzerComprehensive security vulnerability analysis for codebases and infrastructure. Scans dependencies (npm, pip, gem, go, cargo), containers (Docker, Kubernetes), 0skills.sh installs76
Security Engineerdaffy0208/ai-dev-standardsImplement security best practices across the application stack. Use when securing APIs, implementing authentication, preventing vulnerabilities, or conducting s0skills.sh installs
Security Engineerdaffy0208/ai-dev-standardsImplement security best practices across the application stack. Use when securing APIs, implementing authentication, preventing vulnerabilities, or conducting s0skills.sh installs77mcp-implementation-security-reviewgithub/awesome-copilotReview the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline — authentication, sessions0skills.sh installs
mcp-implementation-security-reviewgithub/awesome-copilotReview the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline — authentication, sessions0skills.sh installs78
advanced-redteamhypnguyen1209/offensive-claudeOffensive security toolkit for Claude Code covering red team, exploit dev, AD attacks, EDR bypass, mobile pentest0skills.sh installs
advanced-redteamhypnguyen1209/offensive-claudeOffensive security toolkit for Claude Code covering red team, exploit dev, AD attacks, EDR bypass, mobile pentest0skills.sh installs79web-pentesthypnguyen1209/offensive-claudeFull-spectrum web application penetration testing — OWASP Top 10, API security, authentication attacks, business logic, WAF bypass, race conditions0skills.sh installs
web-pentesthypnguyen1209/offensive-claudeFull-spectrum web application penetration testing — OWASP Top 10, API security, authentication attacks, business logic, WAF bypass, race conditions0skills.sh installs80
MCP OAuth Cloudflarejezweb/claude-skillsAdd OAuth authentication to MCP servers on Cloudflare Workers. Uses @cloudflare/workers-oauth-provider with Google OAuth for Claude.ai-compatible authentication0skills.sh installs
MCP OAuth Cloudflarejezweb/claude-skillsAdd OAuth authentication to MCP servers on Cloudflare Workers. Uses @cloudflare/workers-oauth-provider with Google OAuth for Claude.ai-compatible authentication0skills.sh installsQuestions
Can Claude Code find security vulnerabilities?
With security skills installed, Claude can scan your code for common vulnerabilities like XSS, SQL injection, insecure authentication, and missing input validation. Skills teach Claude the specific patterns to look for.
Are security skills suitable for production code review?
Security skills are a strong first pass. They catch common issues and enforce best practices. For production applications, combine them with dedicated security tools and manual review.