Skills

C

clerk

membranedev / application-skills

Clerk integration. Manage Users, Organizations. Use when the user wants to interact with Clerk data.

C

compact

kali-decoder / midnight-skills

Write, reason about, and debug Compact smart contracts for the Midnight blockchain. Use this skill whenever a user asks about Compact syntax, ledger state, witnesses, circuits, disclosure, ZK patterns, data types, standard library functions, security patterns, nullifier design, Merkle trees, or anything related to writing .compact files. Also trigger for questions about compiling contracts, debugging circuit errors, choosing between ledger ADTs, and implementing privacy-preserving patterns like commitments, hash-based auth, and anonymous membership proofs.

E

Exploit Development & Payload Engineering

masriyan / claude-code-cybersecurity-skill

Proof-of-concept development, payload crafting, shellcode analysis, and exploitation technique research for authorized security testing

G

generic-code-reviewer

travisjneuman / .claude

Review code for bugs, security vulnerabilities, performance issues, accessibility gaps, and CLAUDE.md workflow compliance. Supports any tech stack - HTML/CSS/JS, React, TypeScript, Node.js, Python, NestJS, Next.js, and more. Use when completing features, before commits, or reviewing pull requests.

G

git-guardrails-claude-code

timschoch / mattpocock-skills

Set up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute. Use when user wants to prevent destructive git operations, add git safety hooks, or block git push/reset in Claude Code.

I

infisical-kubernetes-operator

infisical / ai-skills

Guide for the Infisical Kubernetes Operator — syncing secrets from Infisical into Kubernetes Secrets and ConfigMaps, pushing secrets from Kubernetes to Infisical, and managing dynamic secret leases in-cluster. Covers the v1beta1 CRDs (InfisicalConnection, InfisicalAuth, InfisicalStaticSecret) and the legacy v1alpha1 CRDs (InfisicalSecret, InfisicalDynamicSecret, InfisicalPushSecret), Helm installation cluster-wide or namespace-scoped, all 7 operator auth methods, sources and targets, creationPolicy Owner vs Orphan, refreshInterval, the secrets.infisical.com/auto-reload annotation for automatic Deployment rollouts, and Go templating of rendered secrets. Use this skill when someone asks about: Infisical Kubernetes Operator, InfisicalSecret CRD, InfisicalStaticSecret, syncing Infisical secrets into a Kubernetes Secret, auto-reloading pods on secret change, pushing Kubernetes secrets to Infisical, or 'how do I get Infisical secrets into my Kubernetes cluster'. Not for self-hosting Infisical on Kubernetes (infisical-self-host) — that is a different Helm chart — nor for rendering secrets to files (infisical-agent).

O

owasp-infrastructure

microsoft / hve-core

OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.

P

pentest-validation

proffesor-for-testing / agentic-qe

Use when validating security findings from SAST/DAST scans, proving exploitability of reported vulnerabilities, eliminating false positives, or running the 4-phase pentest pipeline (recon, analysis, validation, report).

S

skill-security-auditor

borghei / claude-skills

Security audit and vulnerability scanning for AI agent skills before install. Detects prompt injection, dangerous code, exfiltration, credential harvesting, and supply chain risks. Use when evaluating untrusted skills or gating installs.

T

threat-model-generation

factory-ai / factory-plugins

Generate a STRIDE-based security threat model for a repository. Use when setting up security monitoring, after architecture changes, or for security audits.

V

Vulnerability Scanning & Assessment

masriyan / claude-code-cybersecurity-skill

Dependency auditing, CVE detection, configuration security review, CVSS scoring, and prioritized vulnerability reporting

C

cloudflare

membranedev / application-skills

Cloudflare integration. Manage Accounts. Use when the user wants to interact with Cloudflare data

D

dotnet-api-security

wshaddix / dotnet-skills

Implementing API auth. Identity, OAuth/OIDC, JWT bearer, passkeys (WebAuthn), CORS, rate limiting.

G

github-actions-cicd

hack23 / homepage

GitHub Actions workflow structure, security scanning integration (CodeQL, ZAP), Lighthouse audits, minification, and deployment automation

P

pentest-commands

zebbern / claude-code-guide

Use this skill when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john", "scan web vulnerabilities with nikto", "enumerate networks", or needs essential penetration testing command references.

S

security-fastapi

igorwarzocha / opencode-workflows

Review FastAPI security audit patterns for dependencies and middleware. Use for auditing auth dependencies, CORS configuration, and TrustedHost middleware. Use proactively when reviewing FastAPI apps. Examples: - user: "Audit FastAPI route security" → check for Depends() and Security() usage - user: "Check FastAPI CORS setup" → verify origins when allow_credentials=True - user: "Review FastAPI middleware" → check TrustedHost and HTTPSRedirect config - user: "Secure FastAPI API keys" → move from query params to header schemes - user: "Scan for FastAPI footguns" → check starlette integration and dependency order

S

ship

riffingonsoftware / agent-skills

Commit and push local changes after scanning them for sensitive data, pruning affected tests, and splitting them into logical commits.

A

add-key

berriai / litellm-skills

Generate a new API key on a live LiteLLM proxy. Asks for alias, scope (user/team), budget, models, and expiry, then calls POST /key/generate. Use when the user wants to create, generate, or provision an API key on a LiteLLM proxy instance.

A

adding-project-secret-api-key-auth

posthog / posthog

How to gate a PostHog API endpoint with project secret API key (PSAK) auth — a project-scoped, user-less service credential. Use when adding PSAK support to a viewset action, allowing a new scope for PSAKs, handling synthetic users (ProjectSecretAPIKeyUser), or choosing PSAK-aware rate throttles. Trigger terms: PSAK, ProjectSecretAPIKey, project secret API key, phs_ token, service auth, programmatic endpoint auth.

A

authentication-patterns

travisjneuman / .claude

OAuth 2.0, JWT, SSO, MFA, NextAuth/Clerk/Supabase Auth implementation patterns

C

configuring-pfsense-firewall-rules

mukul975 / anthropic-cybersecurity-skills

'Configures pfSense firewall rules, NAT policies, IPsec/OpenVPN tunnels,

E

executing-red-team-exercise

mukul975 / anthropic-cybersecurity-skills

'Run a stealthy, MITRE ATT&CK-mapped adversary emulation against an organization's

K

karpathy-minimalism

learnprompt / andrej-karpathy-skills

Apply Karpathy-style minimalism and anti-dependency principles to code and system design. Use this skill when the user wants to reduce dependencies, avoid supply chain risks, rewrite something in pure Python or minimal code, audit a project for bloat, design agent-native CLI tools, or says "too many dependencies", "minimize deps", "pure python", "yoink this", "vibe code this", "no frameworks", "agent-native design". Based on 28k-like litellm attack post and 25k-like 243-line GPT post.

O

openai-platform-ops

fandhe-ai / agent-reference-skills

Operations and administration reference for the OpenAI API (developers.openai.com). Covers Administration API, admin API keys, RBAC, roles, groups, invites, projects, spend limits, audit logs, usage / costs API, Terraform provider (openai/openai), workload identity federation (WIF, OIDC / SPIFFE / X.509 / Idira), moderation API, misalignment monitoring, safety alerts / cases, safety best practices, under-18 guidance, ZDR Private Safety Processing (PSP), production best practices, deployment checklist, cost / latency optimization, fast / ultrafast mode, and Realtime API costs. For rate limits, error handling, prompt caching, and webhooks, see openai-api-core; for Codex WIF and administration, see openai-codex

O

openharmony-security-review

openharmonyinsight / openharmony-skills

Use when reviewing OpenHarmony C++ system service code for security vulnerabilities, particularly IPC handlers, multithreaded components, or code handling sensitive user data

A

audit-skills

sickn33 / agentic-awesome-skills

Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads across Windows, macOS, Linux/Unix, and Mobile (Android/iOS).

B

better-auth

pproenca / dot-skills

Better Auth in TypeScript — setting up the auth instance, picking adapters, wiring framework route handlers, configuring sessions and cookies, adding plugins (2FA, organization, admin, magicLink, JWT), or porting from NextAuth/Auth.js, Clerk, Auth0, or Supabase Auth. Covers Next.js, SvelteKit, Hono, Express, Nuxt, Astro, and React/Vue/Svelte clients. Trigger when writing, reviewing, or migrating Better Auth code — and even when the user doesn't explicitly mention Better Auth but is working on TypeScript authentication, session cookies, OAuth providers, or auth-library migration. Contains 42 rules organized by impact across 8 categories

C

Cloud Security & Container Hardening

masriyan / claude-code-cybersecurity-skill

AWS/Azure/GCP security auditing, container and Kubernetes hardening, Infrastructure as Code scanning, and cloud compliance assessment

C

cybersecurity

secondsky / claude-skills

OSS-only security for OWASP Top 10, pentest, vuln testing (XSS, SSRF, CSRF, business-logic, Host header), threat modeling (STRIDE, ATT&CK), Sigma rules, SAST, code audit, AI/LLM red-team, or replacing paid tools (Burp, Nessus, Splunk) with OSS.

D

detecting-typosquatting-packages-in-npm-pypi

mukul975 / anthropic-cybersecurity-skills

'Detects typosquatting attacks in npm and PyPI package registries by

I

infra-engineer

samhvw8 / dotfiles

Comprehensive infrastructure engineering covering DevOps, cloud platforms, FinOps, and DevSecOps. Platforms: AWS (EC2, Lambda, S3, ECS, EKS, RDS, CloudFormation), Azure basics, Cloudflare (Workers, R2, D1, Pages), GCP (GKE, Cloud Run, Cloud Storage), Docker, Kubernetes. Capabilities: CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins), GitOps, infrastructure as code (Terraform, CloudFormation), container orchestration, cost optimization, security scanning, vulnerability management, secrets management, compliance (SOC2, HIPAA). Actions: deploy, configure, manage, scale, monitor, secure, optimize cloud infrastructure. Keywords: AWS, EC2, Lambda, S3, ECS, EKS, RDS, CloudFormation, Azure, Kubernetes, k8s, Docker, Terraform, CI/CD, GitHub Actions, GitLab CI, Jenkins, ArgoCD, Flux, cost optimization, FinOps, reserved instances, spot instances, security scanning, SAST, DAST, vulnerability management, secrets management, Vault, compliance, monitoring, observability. Use when: deploying to AWS/Azure/GCP/Cloudflare, setting up CI/CD pipelines, implementing GitOps workflows, managing Kubernetes clusters, optimizing cloud costs, implementing security best practices, managing infrastructure as code, container orchestration, compliance requirements, cost analysis and optimization.

J

jailbreak-override

cisco-ai-defense / skill-scanner

A helpful assistant that removes unnecessary restrictions

P

privacy-compliance

dhruvjainin / absolute

Absolute skills to 10x your development lifecycle

P

privacy-compliance

maddhruv / absolute

Absolute skills to 10x your development lifecycle

S

secure-at-inception

snyk / studio-recipes

Proactive security scanning for newly generated or modified code. Intelligently detects changes, runs appropriate scans (SAST, SCA, IaC), filters to only NEW issues, and prevents vulnerabilities at the source. Use this skill when: - Agent generates new code files - Agent modifies existing code - User asks to "scan for security issues" or "check my changes" - Before committing changes - User mentions "secure at inception", "proactive scan", or "security check"

V

venice-api-keys

veniceai / skills

Manage Venice API keys. Covers GET/POST/PATCH/DELETE /api_keys, GET /api_keys/{id}, GET /api_keys/rate_limits, GET /api_keys/rate_limits/log, the two-step /api_keys/generate_web3_key wallet flow, INFERENCE vs ADMIN key types, per-key consumption limits (USD / DIEM) with EPOCH / MONTH / LIFETIME reset windows, and per-key modelPrivacy (ALL / PRIVATE_TEXT / PRIVATE_ONLY).

W

wix-auth

wix / skills

Authenticate with Wix to obtain an access token for calling Wix APIs. Use when an agent needs a valid Wix access token and has none, or when the stored token is expired.

A

auth-ops

0xdarkmatter / claude-mods

Authentication and authorization patterns — JWT, OAuth2, sessions, RBAC, ABAC, passkeys, MFA, identity-aware proxies, and Better Auth. Use for: authentication, jwt, oauth2, session, login, rbac, abac, passkey, mfa, totp, api key, token, cookie, csrf, bearer token, refresh token, oidc, cloudflare access, zero trust, Cf-Access-Jwt-Assertion, AUD tag, service auth, better auth.

K

kani-proof

workersio / skills

Writes Kani bounded model checker proofs for Rust programs. Proves conservation, isolation, arithmetic safety, and access control properties. Use when the user asks for Kani proofs, bounded model checking, or exhaustive formal verification -- or when code contains kani::, #[kani::proof], or #[kani::unwind]. Do NOT use for fuzzing (proptest, quickcheck, cargo-fuzz), property testing, or Miri.

M

managing-github-actions-secrets

posthog / posthog

Creates and updates GitHub Actions secrets for PostHog workflows. Use when adding a new CI secret, rotating an existing secret, wiring a workflow to an API token, package registry credential, deploy key, or any value referenced via `${{ secrets.* }}` in `.github/workflows/`.

M

multi-tenant-saas-architecture

peterbamuhigire / chwezi-dev-engine

Use when designing tenant isolation, panel boundaries, zero-trust authorization, audit trails, or tenant permission overrides.

P

performing-clickjacking-attack-test

mukul975 / anthropic-cybersecurity-skills

Testing web applications for clickjacking vulnerabilities by assessing

P

prompt-agent

prompt-security / clawsec

Security audit enforcement for AI agents. Automated security scans and health verification.

P

prove

membranedev / application-skills

Prove integration. Manage data, records, and automate workflows. Use when the user wants to interact with Prove data.

R

regression-sweep

transilienceai / communitytools

Re-validates every previously-confirmed finding against its current target — detects drift (patched, mitigated, re-introduced). Cron-driven weekly sweep across the org's validated finding tree.

T

triaging-vulnerabilities-with-ssvc-framework

mukul975 / anthropic-cybersecurity-skills

Triages and prioritizes vulnerabilities with CISA's Stakeholder-Specific

V

venice-auth

veniceai / skills

Authenticate to the Venice API with a Bearer API key or with an x402 / SIWX wallet (EVM on Base, including EIP-1271 smart wallets, or Ed25519 on Solana). Covers which endpoints accept which scheme, the SIGN-IN-WITH-X header format, the SIWE and Solana message fields, the enforced TTL / clock-skew / nonce rules, every X402_SIGN_IN_* error code, the venice-x402-client SDK, and how to choose between the two modes

W

web-security-expert

duck4nh / antigravity-kit

Web application security expert. OWASP Top 10, XSS, SQLi, CSRF, SSRF, authentication bypass, IDOR. Use for web app security testing.

W

windows-infra-admin

404kidwiz / claude-supercode-skills

Expert in Windows Server, Active Directory (AD DS), Hybrid Identity (Entra ID), and PowerShell automation.

C

code-review

luongnv89 / skills

Review or improve code — one skill, four modes: bug/security review (default), performance, clean-code audit, slop cleanup. Pass mode:review|perf|clean|cleanup or infer. Don't use for writing features or generating tests (use test-coverage).

C

code-reviewer

rightnow-ai / openfang

Code review specialist focused on patterns, bugs, security, and performance

C

cryptography

dhruvjainin / absolute

Absolute skills to 10x your development lifecycle

C

cryptography

maddhruv / absolute

Absolute skills to 10x your development lifecycle

C

CSOC Operations & Playbook Automation

masriyan / claude-code-cybersecurity-skill

SOC alert triage, incident playbook automation, escalation workflows, shift reporting, and SOC KPI tracking

D

drupal-simple-oauth

grasmash / drupal-claude-skills

Explains OAuth2 authentication in Drupal with the simple_oauth module - TokenAuthUser AND-permission logic, scope/role intersection, OAuth2 scope entities and the dynamic scope provider, mobile app password-grant token requests, field_permissions and JSON:API field access under a token, Bearer-token CSRF 403s, consumer TTLs, and debugging token permission denials. Use when an OAuth/Bearer token is denied a permission the user has, configuring consumers, clients or scopes, requesting tokens from a mobile or decoupled app, or getting 403s on JSON:API requests made with a Bearer token.

E

elastic

membranedev / application-skills

Elastic integration. Manage data, records, and automate workflows. Use when the user wants to interact with Elastic data.

M

misttrack-skills

slowmist / misttrack-skills

Use MistTrack OpenAPI for cryptocurrency address risk analysis, AML compliance checks, and transaction tracking. MistTrack is an anti-money laundering tracking tool developed by SlowMist. It supports risk scores, label lookups, and transaction investigations for addresses and transactions on major chains such as BTC, ETH, TRX, and BNB.

S

security-checklist

loxosceles-dev / dev-skills

Security rules for code generation including secret handling, credential storage, and environment files. Follow when generating code that handles secrets, credentials, or environment configuration.

S

splunk-cloud-admin-copilot

splunk / splunk-agent-skills

Read Splunk Cloud Platform ACS state, assess maintenance or restart readiness without changing it, and execute one explicitly approved IPv4 CIDR add or remove for one feature-specific IP allowlist through the documented public ACS provider. Use when a Cloud admin needs exact-target preflight, a minimal allowlist mutation, readback, rollback, and a sanitized receipt; route every other administration write and specialist domain.

S

strix-ci-setup

usestrix / strix

Wire Strix security scanning into CI/CD — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks vulnerable code. Covers both the self-hosted open-source CLI (runs in your runner) and the managed app.strix.ai platform (GitHub/GitLab app or API, no runner infra). Use when the user asks to add security scanning, pentesting, or Strix to their CI pipeline or PR workflow.