Trusted skills for AI agents from official vendors and established maintainers. Every skill is attributed to its author, scanned, and comes with install steps for your AI tool.
213 skills
Addy Osmani· Community
A comprehensive framework for building secure, hardened web applications through threat modeling and defensive coding practices.
CloudflareOfficial
A structured, source-first security audit and vulnerability research framework for codebases and services.
AnthropicOfficial
Claude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you choose). Use when the user asks to scan, audit or check code with Claude Security, to scan their changes with Claude Security, or to fix or patch Claude Security findings.
Seth Hobson· Community
Configure and optimize Static Application Security Testing (SAST) tools like Semgrep, SonarQube, and CodeQL for automated vulnerability detection.
Seth Hobson· Community
An expert firmware analyst providing structured guidance for embedded systems security, reverse engineering, and vulnerability research.
Seth Hobson· Community
An expert malware analysis assistant providing structured methodologies for defensive threat research and incident response.
Seth Hobson· Community
Expert guide for authoring and auditing Cedar authorization policies to secure Claude Code agent tool interactions.
Seth Hobson· Community
A specialized security auditor for identifying vulnerabilities in backend code and architecture during feature development.
Seth Hobson· Community
Master memory forensics and incident response using the Volatility framework and industry-standard acquisition tools.
Seth Hobson· Community
A comprehensive guide and template library for implementing mutual TLS (mTLS) to secure service-to-service communication in zero-trust environments.
Seth Hobson· Community
An expert security auditor providing comprehensive DevSecOps, compliance, and cybersecurity guidance.
Seth Hobson· Community
A systematic framework for identifying security threats using the STRIDE methodology.
Seth Hobson· Community
An expert agent for conducting security architecture reviews and threat modeling using established methodologies.
Seth Hobson· Community
Analyze and bypass software protection mechanisms, anti-debugging, and obfuscation techniques.
Seth Hobson· Community
A framework for mapping security threats to layered controls to ensure robust defense-in-depth and effective risk management.
Seth Hobson· Community
Expert security auditor for DevSecOps, cloud infrastructure, and regulatory compliance.
Seth Hobson· Community
Configure human-in-the-loop gating for AI agent actions using Cedar policies and signed receipts.
Seth Hobson· Community
Implement cryptographic governance and policy enforcement for Claude Code tool calls using Cedar and Ed25519 signatures.
Seth Hobson· Community
A cookbook for implementing cryptographically signed, tamper-evident audit trails for Claude Code tool calls.
Seth Hobson· Community
A comprehensive guide to capturing, analyzing, and documenting proprietary network protocols for security research and debugging.
Seth Hobson· Community
A guide to implementing secure secrets management in CI/CD pipelines using industry-standard tools and best practices.
Seth Hobson· Community
A comprehensive guide to implementing PCI DSS compliance for secure payment processing and cardholder data handling.
Seth Hobson· Community
A comprehensive guide to smart contract security, covering vulnerability prevention and secure Solidity development patterns.
Seth Hobson· Community
A structured approach to transforming threat models and business context into actionable, testable security requirements.