Updated 2w ago
by ghostsecurity
skills
Ghost Security's collection of AppSec skills for AI coding agents
413 GitHub stars (413)
+5 in 20 days
| Period | New stars |
|---|---|
| Sep 27 | 0 |
| Sep 28 | 0 |
| Sep 29 | 0 |
| Sep 30 | 0 |
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | +1 |
| Oct 7 | −1 |
| Oct 8 | 0 |
| Oct 9 | +1 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | +2 |
| Oct 13 | 0 |
| Oct 14 | +1 |
| Oct 15 | 0 |
| Oct 16 | +1 |
- 8 skills (8 skills found in its SKILL.md files)
- 26 forks (26 forks)
- 2w ago last update (Last updated 2w ago)
Install
Skills CLI
npx skills add ghostsecurity/skills
Asks which skills and agents to install. Just one: npx skills add ghostsecurity/skills --skill ghost-exo — add -g for every project.
Claude Code
git clone https://github.com/ghostsecurity/skillscp -r "skills/plugins/exo/skills/exo" ~/.claude/skills/
Copies the ghost-exo skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add ghostsecurity/skills
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
ghost-exo
The single interface for building, improving, and debugging exo workflows. Routes to one of three intents. BUILD takes a rough idea, or an agent template slug from the ghostsecurity.ai catalog, through interrogation, assessment, resource creation in dependency order, and one manual run, then hands off. IMPROVE runs the observe-and-iterate loop over recent runs, proposing and applying changes behi…
plugins/exo/skills/exo/SKILL.md on GitHub (opens in a new tab) -
ghost-proxy
Starts and controls the reaper MITM proxy to capture, inspect, search, and replay HTTP/HTTPS traffic between clients and servers. Capabilities include starting/stopping the proxy scoped to specific domains, viewing captured request/response logs, searching traffic by method/path/status/host, and inspecting full raw HTTP entries for security analysis. Use when the user asks to "start the proxy", "…
plugins/ghost/skills/proxy/SKILL.md on GitHub (opens in a new tab) -
ghost-repo-context
Scans directory structure, detects projects, maps dependencies, and documents code organization into a repo.md file. Use when the user needs a codebase overview, project structure map, or repository context before security analysis.
plugins/ghost/skills/repo-context/SKILL.md on GitHub (opens in a new tab) -
ghost-report
Ghost Security — combined security report. Aggregates findings from all scan skills (scan-deps, scan-secrets, scan-code) into a single prioritized report focused on the highest risk, highest confidence issues. Use when the user requests a security overview, vulnerability summary, full security audit, or combined scan results.
plugins/ghost/skills/report/SKILL.md on GitHub (opens in a new tab) -
ghost-scan-code
Ghost Security - SAST code scanner. Finds security vulnerabilities in source code by planning and executing targeted scans for issues like SQL injection, XSS, BOLA, BFLA, SSRF, and other OWASP categories. Supports applications (backend, frontend, mobile) and libraries (prototype pollution, unsafe deserialization, ReDoS, path traversal, zip slip). Use when the user asks for a code security audit,…
plugins/ghost/skills/scan-code/SKILL.md on GitHub (opens in a new tab) -
ghost-scan-deps
Ghost Security - Software Composition Analysis (SCA) scanner. Scans dependency lockfiles for known vulnerabilities, identifies CVEs, and generates findings with severity levels and remediation guidance. Use when the user asks about dependency vulnerabilities, vulnerable packages, CVE checks, security audits of dependencies, or wants to scan lockfiles like package-lock.json, yarn.lock, go.sum, or…
plugins/ghost/skills/scan-deps/SKILL.md on GitHub (opens in a new tab) -
ghost-scan-secrets
Ghost Security - Secrets and credentials scanner. Scans codebase for leaked API keys, tokens, passwords, and sensitive data. Detects hardcoded secrets and generates findings with severity and remediation guidance. Use when the user asks to check for leaked secrets, scan for credentials, find hardcoded API keys or passwords, detect exposed .env values, or audit code for sensitive data exposure.
plugins/ghost/skills/scan-secrets/SKILL.md on GitHub (opens in a new tab) -
ghost-validate
This skill should be used when the user asks to "validate a finding", "check if a vulnerability is real", "triage a security finding", "confirm a vulnerability", "determine if a finding is a true positive or false positive", or provides a security finding for review. It validates security vulnerability findings by tracing data flows, verifying exploit conditions, analyzing security controls, and…
plugins/ghost/skills/validate/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.
Similar skills
-
reactive-resumeby reactive-resume A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Tr…
-
cogneeby topoteretes Cognee is the open-source AI memory platform for agents. Give your AI agents persistent long-term memory with small models for free
-
kubesphereby kubesphere The container platform tailored for Kubernetes multi-cloud, datacenter, and edge management ⎈ 🖥 ☁️
-
claude-adsby AgriciDaniel Claude-first paid-media operations skill for Claude Code across 12 ad platforms (Google, Meta, YouTube, LinkedIn, TikTok, Microsoft, Apple,…
-
deepchatby ThinkInAIXYZ 🐬DeepChat - A smart assistant that connects powerful AI to your personal world
-
superpowersby obra An agentic skills framework & software development methodology that works.