security-agent-skills

In the author's own words, from each skill's SKILL.md — showing the first 30 of 194 files.

• adjudicating-dependency-cve-reachability

  Decide whether a CVE in a dependency actually exposes your application before you scramble to patch: is the vulnerable function on a real call path from your code, do the trigger preconditions hold, and can an attacker control the input that reaches it. Use when an advisory, SCA scan, or dependency bot flags a CVE and you must separate a genuine exposure from unreachable noise, or justify why you…

  skills/adjudicating-dependency-cve-reachability/SKILL.md on GitHub (opens in a new tab)

• adjudicating-taint-paths

  Decide whether a whitebox lead is a real bug by tracing taint from an untrusted source to a dangerous sink and confirming every hop against live source. Use after a scanner, a candidate list, or your own reading surfaces a "this looks dangerous" sink (SQL exec, system/exec, file open, deserialize, template render, redirect target, memcpy) and you must decide whether attacker- controlled input act…

  skills/adjudicating-taint-paths/SKILL.md on GitHub (opens in a new tab)

• auditing-account-abstraction-and-paymaster-trust

  Audit an ERC-4337 account-abstraction deployment for trust misplaced in the user-operation lifecycle: a smart account whose validation accepts a signature or nonce it should reject, a paymaster that agrees to sponsor gas for operations it should not so an attacker drains its deposit, a bundler or entry-point assumption that lets a user operation be replayed or reordered for gain, and validation l…

  skills/auditing-account-abstraction-and-paymaster-trust/SKILL.md on GitHub (opens in a new tab)

• auditing-account-recovery-and-reset-trust

  Audit password reset and account recovery flows for the trust that lets an attacker take over an account: a reset token that is guessable, long-lived, reusable, or not bound to the account it was issued for, a recovery path that verifies a weaker factor than login and bypasses multi-factor, a reset link whose host comes from an attacker-controllable header so the token leaks, and a recovery that…

  skills/auditing-account-recovery-and-reset-trust/SKILL.md on GitHub (opens in a new tab)

• auditing-admission-control-policy-gaps

  Audit cluster admission control for gaps that let a non-compliant or hostile workload through: a validating webhook that fails open when its backend is unreachable, a policy that scopes by namespace or label and misses the namespaces that matter, a mutating webhook whose changes are trusted downstream, and an ordering or exemption that lets a privileged pod bypass the checks meant to stop it. Cov…

  skills/auditing-admission-control-policy-gaps/SKILL.md on GitHub (opens in a new tab)

• auditing-ai-agent-permissions

  Audit what an AI agent is actually allowed to do versus what its task needs. Covers excessive agency (tools, scopes, and autonomy beyond the job), missing human-in-the-loop gates on irreversible actions, over-broad credentials and their blast radius, sandbox and code-interpreter escape, unfiltered egress, and unbounded resource or spend (denial-of-wallet). Use when granting an agent a tool or sco…

  skills/auditing-ai-agent-permissions/SKILL.md on GitHub (opens in a new tab)

• auditing-android-component-exposure

  Audit an Android app for components another app on the device can reach and drive, after the manifest export flags and permission gates are resolved. Covers an activity, service, broadcast receiver, or content provider exported without a permission gate, an intent filter that makes a component implicitly exported, a provider that grants URI access or exposes files across the app boundary, a permi…

  skills/auditing-android-component-exposure/SKILL.md on GitHub (opens in a new tab)

• auditing-android-intent-redirection-and-pendingintent

  Audit Android privilege and access leaks through intent redirection and mutable pending intents, where a privileged component receives an intent carrying a nested intent it then launches, or hands out a pending intent an untrusted app can fill in, so the untrusted caller reaches a protected component or acts with the privileged app's identity, because the component forwards an attacker-supplied i…

  skills/auditing-android-intent-redirection-and-pendingintent/SKILL.md on GitHub (opens in a new tab)

• auditing-ansible-become-and-vault-trust

  Audit configuration-management privilege escalation and secret handling for trust that runs as root on every managed host: a task that escalates with become across a whole play when only one step needs it, a role or variable sourced from an untrusted place that runs under that escalation, a vault-encrypted secret whose decryption key is exposed to the runner or logged, and a templated value or mo…

  skills/auditing-ansible-become-and-vault-trust/SKILL.md on GitHub (opens in a new tab)

• auditing-api-key-and-token-lifecycle

  Audit the lifecycle of API keys and access tokens for weaknesses that let one keep working past its intended bounds: a key issued with broader scope than the caller needs so a leak grants far more than one function, a key or token with no expiry that stays valid indefinitely, a revocation path that does not actually stop the key so a rotated or compromised credential keeps authenticating, a key t…

  skills/auditing-api-key-and-token-lifecycle/SKILL.md on GitHub (opens in a new tab)

• auditing-ble-and-gatt-authorization

  Audit a Bluetooth Low Energy device for missing authorization on its GATT attributes: a characteristic performing a sensitive action or revealing sensitive data readable or writable by any peer, pairing or bonding that is not required or falls back to an unauthenticated Just Works mode with no link encryption, an authorization decision the device pushes to the mobile app instead of enforcing on t…

  skills/auditing-ble-and-gatt-authorization/SKILL.md on GitHub (opens in a new tab)

• auditing-break-glass-account-trust

  Audit emergency break-glass and privileged-access accounts for the ways their standing power outlives the emergency they exist for: a break-glass account with a static, shared, or never-rotated credential that is a permanent superuser login rather than a sealed last resort, an emergency account excluded from the MFA, conditional-access, or logging controls covering other admins so its use is easy…

  skills/auditing-break-glass-account-trust/SKILL.md on GitHub (opens in a new tab)

• auditing-browser-extension-trust

  Audit a browser extension (Manifest V3) for a trust boundary another web page or extension can cross to reach a privileged capability, after the permission scope and the message-sender checks are resolved. Covers an externally_connectable or onMessageExternal handler that verifies an origin but not the calling script, a content-script-to-background message handler with no sender validation, host…

  skills/auditing-browser-extension-trust/SKILL.md on GitHub (opens in a new tab)

• auditing-cicd-oidc-trust

  Audit continuous-integration pipelines for the trust they extend to untrusted input: workflows that run on incoming change requests from forks while holding repository secrets, steps that let attacker-controlled content reach a privileged command, and cloud role trust conditions that accept a pipeline's short-lived token too broadly. Covers secret and token exposure on fork-triggered runs, poison…

  skills/auditing-cicd-oidc-trust/SKILL.md on GitHub (opens in a new tab)

• auditing-clickjacking-and-ui-redressing

  Audit a web application for UI-redressing attacks where an attacker frames the real site and tricks a user into acting on it unknowingly: a sensitive page that can be embedded in an attacker's iframe because it lacks frame-ancestors or X-Frame-Options, a state-changing action reachable by a single click that an overlay or transparent frame steers, a drag-and-drop or keystroke redressing that capt…

  skills/auditing-clickjacking-and-ui-redressing/SKILL.md on GitHub (opens in a new tab)

• auditing-container-image-build-hardening

  Audit container image build definitions (Dockerfile, containerfile, and the compose or run config that sets runtime flags) for an image that ships over-privileged or carrying a secret, after multi-stage discards and deploy-time overrides are accounted for. Covers an image that runs as root, a secret baked into a layer, remote content pulled unpinned or unverified, a mutable or untagged base, an o…

  skills/auditing-container-image-build-hardening/SKILL.md on GitHub (opens in a new tab)

• auditing-container-image-provenance

  Audit how a cluster decides which container images to trust and run: an image referenced by a mutable tag rather than a content digest, a workload pulling from a registry that admits unsigned or unverified images, a signature or attestation policy that is configured but not enforced at admission, and a base image or layer whose origin the pipeline never verified. Covers Kubernetes and container p…

  skills/auditing-container-image-provenance/SKILL.md on GitHub (opens in a new tab)

• auditing-container-runtime-and-socket-exposure

  Audit whether a workload can reach the container runtime and thereby control the host: the container runtime socket mounted into a pod or bound into a build or CI container, a privileged sidecar that talks to the runtime to launch or inspect containers, a runtime API exposed over a reachable port, and tooling that needs the runtime and is given it far more broadly than the one operation requires.…

  skills/auditing-container-runtime-and-socket-exposure/SKILL.md on GitHub (opens in a new tab)

• auditing-cors-and-cross-origin-trust

  Audit the code and configuration that decide cross-origin access, for trust a browser turns into a read of authenticated data. Covers a response that reflects an arbitrary request origin into the allow-origin header alongside allow-credentials, an allowlist that accepts the null origin, allowlist matching by prefix, suffix, substring, or an unanchored pattern that a lookalike origin satisfies, th…

  skills/auditing-cors-and-cross-origin-trust/SKILL.md on GitHub (opens in a new tab)

• auditing-cross-account-role-trust-boundaries

  Audit cross-account IAM role assumption for trust policies that let the wrong principal assume a role: a trust policy with a wildcard or overbroad principal, a missing or unverifiable external ID on a third-party role, a confused-deputy path where a vendor assumes your role on any customer's behalf, and a role chain that reaches privileges the origin principal should never hold. Covers AWS assume…

  skills/auditing-cross-account-role-trust-boundaries/SKILL.md on GitHub (opens in a new tab)

• auditing-cross-chain-bridge-and-message-trust

  Audit a cross-chain bridge or messaging protocol for misplaced trust in messages that cross chains: a destination contract that accepts a mint or release on a forged or unverified proof of a source-chain event, a message whose signer set or validator quorum can be spoofed or is too small, a message that can be replayed on the destination or across chains for a repeated withdrawal, and a lock-and-…

  skills/auditing-cross-chain-bridge-and-message-trust/SKILL.md on GitHub (opens in a new tab)

• auditing-csrf-and-unsafe-state-changes

  Audit state-changing endpoints for cross-site request forgery, where a request that rides the victim's ambient cookies is authorized on that session alone with no unpredictable, session-bound proof the request came from the app, letting an attacker page trigger the change as the victim. Use when reviewing forms and actions that modify data, change settings, move funds, or alter access, and how ea…

  skills/auditing-csrf-and-unsafe-state-changes/SKILL.md on GitHub (opens in a new tab)

• auditing-datastore-exposure-and-abuse

  Audit in-memory and cache datastores such as Redis and memcached for exposure and command abuse: an instance reachable without authentication, a request that composes datastore commands from untrusted input, or server-side scripting and module or config commands that reach code execution or a file write. Covers unauthenticated network exposure, command injection where input becomes a command rath…

  skills/auditing-datastore-exposure-and-abuse/SKILL.md on GitHub (opens in a new tab)

• auditing-declarative-authorization

  Audit authorization expressed as configuration or framework convention rather than inline code: row-level security and policy rules, framework before-action and middleware filters that must be attached to every protected route, serverless and gateway access rules, and object-ownership checks. Covers routes that skip the filter, policies with a permissive default, rules that check authentication b…

  skills/auditing-declarative-authorization/SKILL.md on GitHub (opens in a new tab)

• auditing-declared-vs-used-permissions

  Find the consent gap in an agent skill or MCP server: the distance between the permissions and capabilities it declares and what its bundled code and instructions actually exercise. Covers over-broad grants a skill requests but never uses, capabilities it exercises without declaring, and grants that are used but still wider than the task needs. Read the declared surface in frontmatter or manifest…

  skills/auditing-declared-vs-used-permissions/SKILL.md on GitHub (opens in a new tab)

• auditing-device-code-and-pkce-flows

  Audit the server side of the authorization-code-with-proof-key and device-authorization grants for bugs that let a stolen or guessed code become a token. Covers a token endpoint that issues without checking the proof-key verifier at all, that accepts the plain challenge method or a challenge-absent downgrade, or that binds the verifier to the client rather than to the specific code; and a device…

  skills/auditing-device-code-and-pkce-flows/SKILL.md on GitHub (opens in a new tab)

• auditing-directory-sync-trust

  Audit bulk directory synchronization (LDAP, HR-system, IdP, or cross-directory feeds) between an external identity source and an application for trust misplaced in the sync feed: a sync that trusts a source attribute (group, department, an admin-like flag) to set local privilege or tenancy without validating it, a connector authenticated by a broad credential that can read and reshape the whole d…

  skills/auditing-directory-sync-trust/SKILL.md on GitHub (opens in a new tab)

• auditing-ecs-task-metadata-boundaries

  Audit container task credential and metadata boundaries in orchestrated compute such as ECS: a workload that can reach the container credential endpoint or the host instance metadata service to obtain a role broader than the task needs, a task role over-scoped for the workload, a sidecar or co-located container sharing the same credentials, and a server-side request path inside the task that reac…

  skills/auditing-ecs-task-metadata-boundaries/SKILL.md on GitHub (opens in a new tab)

• auditing-editor-extension-workspace-trust

  Audit an editor or IDE extension for actions it runs on untrusted workspace contents, after the workspace-trust capability and activation events are resolved. Covers a task, debug preLaunchTask, or command that auto-runs on folder open, a tool path or command template read from workspace settings and executed, a workspace-trust bypass where a risky operation runs in restricted mode, a language se…

  skills/auditing-editor-extension-workspace-trust/SKILL.md on GitHub (opens in a new tab)

• auditing-electron-ipc-trust

  Audit an Electron desktop app for untrusted renderer content that reaches a Node or operating-system capability, after the webPreferences and the preload bridge surface are resolved. Covers nodeIntegration enabled with contextIsolation off, a preload that exposes raw ipcRenderer or a generic invoke passthrough, an ipcMain handler that trusts renderer input as a path, command, or URL, remote or at…

  skills/auditing-electron-ipc-trust/SKILL.md on GitHub (opens in a new tab)

No skill matches that filter.

Similar skills

• planning-with-filesby OthmanAdi Persistent file-based planning for AI coding agents and long-running tasks. Crash-proof markdown plans, session recovery after /clear and c… 27.8k stars · 6 skills
• replica-skillby Jakeschincariol Eleven free Claude skills that clone any app: reverse-engineer it, rebuild it, test it for bugs, then fix what its users hate. Free, MIT. 6.8k stars · 11 skills
• appllama-skillsby Appllama A builder, not just a researcher. Agent skills that turn top-grossing app patterns into native-quality mobile screens. 3.9k stars · 2 skills
• ponytailby DietrichGebert Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote. 182k stars · 6 skills
• archifyby tt-a1i Turn any idea, plan, or codebase into a beautiful interactive diagram. An agent skill for Claude Code, Codex, and more. 92.2k stars · 5 skills
• awesome-claude-skillsby ComposioHQ A curated list of awesome Claude Skills, resources, and tools for customizing Claude AI workflows 78.4k stars