Agent Skills

Trusted skills for AI agents from official vendors and established maintainers. Every skill is attributed to its author, scanned, and comes with install steps for your AI tool.

Connect your AI tool (MCP)

Results

172 skills

  • Atheris

    Trail of BitsOfficial

    A coverage-guided fuzzer for Python code and C extensions based on libFuzzer.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0Low riskGitHub stars of the source repository8.1k
  • Trailmark Variant Neighborhood

    Trail of BitsOfficial

    Expands a confirmed vulnerability into a list of graph-derived variant candidates for security review.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0GitHub stars of the source repository8.1k
  • Cosmos Vulnerability Scanner

    Trail of BitsOfficial

    Automated security scanning for Cosmos SDK modules and CosmWasm contracts to detect consensus-critical vulnerabilities.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0GitHub stars of the source repository8.1k
  • Deep Security Scan

    OpenAIOfficial

    Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide or scoped-path Codex Security scan. Run repeated complete independent Standard scans with the Codex Security deep-scan tool, which aggregates their validated findings and prepares the canonical artifacts; then complete the same scan once. Do not use for PRs, commits, branch diffs, or working-tree diffs.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k
  • Verify Fix

    OpenAIOfficial

    Use only when the user explicitly requests verification that a security fix remediates a reported vulnerability. Do not invoke automatically while implementing fixes, reviewing ordinary code changes, or running tests. Do not use for non-security fixes, candidate finding validation, or full repository scans.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k
  • Security Diff Scan

    OpenAIOfficial

    Review a pull request, commit, branch diff, or working-tree patch for security vulnerabilities.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k
  • Validation

    OpenAIOfficial

    Use when Codex is already in the validation phase of a security scan or the user explicitly asks to determine whether one or more candidate security findings are valid. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k
  • Triage Finding

    OpenAIOfficial

    Triage supplied or imported security findings against a repository using its security policy and static code evidence. Accepts scanner reports, advisories, GitHub findings, and Jira or Linear tickets. Do not use for discovery, duplicate triage, runtime validation, or fixes.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k
  • Finding Discovery

    OpenAIOfficial

    Use when Codex is already in the finding-discovery phase of a security scan or the user explicitly asks to discover candidate security findings in a repository or code change. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k
  • Threat Model

    OpenAIOfficial

    Use when Codex is already in the threat-modeling phase of a security scan, the user explicitly invokes $threat-model, or the user explicitly asks to create, update, or persist a repository threat model. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k
  • Fix Finding

    OpenAIOfficial

    Use only when the user explicitly asks to fix and verify a validated or plausible security vulnerability. Do not use for ordinary bug fixes, correctness or design review findings, general validation, or full PR, commit, branch, patch, or repository scans.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k
  • Vulnerability Writeup

    OpenAIOfficial

    Turn vulnerability notes, disclosure reports, PoCs, source code, or Codex Security findings into self-contained, sceptically validated, natural-sounding vulnerability reports. Use for one vulnerability or a disclosure campaign; a Codex Security scan is optional.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k
  • Doca Argus

    NVIDIAOfficial

    Operational guidance for deploying and managing the DOCA Argus Service container for runtime security on NVIDIA BlueField DPUs.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Apache-2.0Medium riskGitHub stars of the source repository3.9k
  • Golang Security

    Samuel Berthe· Community

    A comprehensive security framework for Go, providing best practices, threat modeling, and automated auditing tools.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    MITMedium riskGitHub stars of the source repository3.8k
  • Automated workflow for executing and monitoring AWS Security Agent penetration tests against live web applications.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Apache-2.0GitHub stars of the source repository3.4k
  • Perform targeted security scans on code changes using AWS Security Agent.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Apache-2.0GitHub stars of the source repository3.4k
  • Automated threat modeling for AWS environments using STRIDE analysis on design and requirement documentation.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Apache-2.0GitHub stars of the source repository3.4k
  • Automate the discovery, triage, and remediation of AWS Security Agent penetration test and code review findings.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Apache-2.0GitHub stars of the source repository3.4k
  • Azure Compliance

    MicrosoftOfficial

    Perform Azure compliance scans and security audits using azqr and Key Vault monitoring.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    MITLow riskGitHub stars of the source repository3.2k
  • Owasp MCP

    MicrosoftOfficial

    A structured knowledge base for identifying, assessing, and remediating security risks within Model Context Protocol (MCP) implementations.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0Medium riskGitHub stars of the source repository1.6k
  • Supply Chain Security

    MicrosoftOfficial

    A comprehensive reference set for assessing software supply chain security posture and prioritizing remediation efforts.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    MITGitHub stars of the source repository1.6k
  • Vex

    MicrosoftOfficial

    OpenVEX v0.2.0 specification reference plus VEX management playbooks - Brought to you by microsoft/hve-core.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyLow riskHas scriptsGitHub stars of the source repository1.6k
  • Owasp LLM

    MicrosoftOfficial

    A structured knowledge base for identifying, assessing, and remediating the OWASP Top 10 security risks in LLM applications.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0GitHub stars of the source repository1.6k
  • Owasp Top 10

    MicrosoftOfficial

    A structured knowledge base of the OWASP Top 10 (2025) for identifying, assessing, and remediating web application security risks.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0Low riskGitHub stars of the source repository1.6k