Claude Code Skills·Claude Skills·The open SKILL.md registry for Claude
ClaudSkills › Security › Page 102

Claude Security Skills (Page 102 of 197)

Security auditing, penetration testing, vulnerability scanning, OWASP, cloud security, and compliance skills for Claude Code.

11,778 skills · updated 2026-11-01 · showing 6061–6120 of 11,778 by quality score

Sub-topics:Red Team (1,737)Web Security (1,187)Threat Hunting (887)Identity Access (554)Network Security (471)Appsec Tools (426)Forensics (347)Compliance (241)

For the full experience including quality scoring and one-click install features for each skill — upgrade to Pro.

Browse, filter, and download life sciences, biology, and medical preprints from bioRxiv and medRxiv. Supports fetching paper metadata by DOI, and browsing by date range with…
Litestream is a streaming replication tool for SQLite databases that continuously replicates changes to S3, Azure, GCS, SFTP, or local storage.
Litigation und Disputes DD: prüft Prozesse, Schiedsverfahren, Verwaltungsverfahren, Threatened Claims, Rueckstellungen und SPA-Risikotransfer.
Litigation und Disputes DD: prüft Prozesse, Schiedsverfahren, Verwaltungsverfahren, Threatened Claims, Rueckstellungen und SPA-Risikotransfer: Litigation und Disputes DD: — from…
Control Little Snitch firewall on macOS. View logs, manage profiles and rule groups, monitor network traffic.
Comprehensive live site audit orchestrating performance, accessibility, security, and code quality specialists in parallel.
Für Live: Sonderfall und Edge-Case-Prüfung: prüft Ergebnis, Beweislast und Gegenposition; Ergebnis: Gegenprüfung mit Beweis- und Fristencheck.
Use when verifying service health, deployed state, cluster objects, credentials, or automation results where the wrong auth context can produce false empty results.
Patentanwälte: lizenzvertragsberatung grenzen - Rechtsprechungscheck, stärkste Gegenansicht und Red-Team-Korrektur; mit Live-Normencheck, Kammerlogik, Verhältnismäßigkeit,…
DeFi fundamentals and cross-chain analytics using DefiLlama-style data. Use when you want to find undervalued protocols, screen by TVL/revenue growth vs token price, comp — from…
DeFi fundamentals and cross-chain analytics using DefiLlama-style data. Use when you want to find undervalued protocols, screen by TVL/revenue growth vs token price, comp — from…
Structural security design principles for building LLM agents, autonomous systems, and self-improving harnesses.
Hunt vulnerabilities in LLM-powered applications — direct/indirect prompt injection, system prompt extraction, ASCII smuggling, RCE via code tools, agentic AI exploits…
Master modern LLM application engineering patterns. Use when designing prompt chains, evaluating output quality, managing token limits, streaming responses, or integrating LLMs…
LLM is a Python CLI tool and library by Simon Willison for accessing OpenAI, Anthropic Claude, Google Gemini, Meta Llama, and dozens of other language models from the terminal.
Reduce LLM API and infrastructure costs through model selection, prompt caching, batching, caching, quantization, and self-hosting strategies.
Set up infrastructure for fine-tuning LLMs with QLoRA, LoRA, and full fine-tuning using Hugging Face TRL, Axolotl, and distributed training with DeepSpeed or FSDP.
Comprehensive security auditing framework for LLM applications covering OWASP Top 10 for LLMs, threat modeling, penetration testing, and compliance with NIST AI RMF and ISO…
Comprehensive guide to securing LLM applications including prompt injection prevention, jailbreak detection, guardrails, and red teaming methodologies
Security testing for LLM-powered applications including prompt injection, jailbreak detection, data leakage prevention, and AI safety testing.
中文优先:用于LLMtrading智能体安全相关任务,帮助识别、设计、实现或验证对应工作流。English keywords: Security patterns for autonomous trading agents with wallet or transaction authority.
OWASP Top 10 for LLM Applications (2025) vulnerability knowledge base for identifying, assessing, and remediating security risks in large language model systems.
Manage crypto wallets and make x402 micropayments with USDC stablecoins on Polygon
Router skill for LLMQuant equity derivatives workflows. Use when the user needs single-stock derivative, convertible, warrant, structured payoff, or hybrid security analysis.
Use when creating or verifying one project runtime on a prepared VPS, including god-session, provider credentials, and local dispatcher setup.
Checks hardcoded secrets, SQL injection, XSS, insecure deps, input validation. Use when auditing security.
Checks application security boundaries: secrets, injection, XSS, input validation, and sensitive env defaults. Use when auditing exploitable code paths.
Checks outdated packages, unused deps, reinvented wheels, CVE/CVSS vulnerability scan. Use when auditing dependencies. — from security/appsec-tools
Checks outdated packages, unused deps, reinvented wheels, CVE/CVSS vulnerability scan. Use when auditing dependencies. — from majiayu000/claude-skill-registry
Sets up security scanning for secrets and dependency vulnerabilities. Use when adding security infrastructure to a project.
Scans codebase for hardcoded secrets with severity classification and remediation guidance. Use when auditing a project for leaked credentials.
Bake, inspect, and manage lnd macaroons for least-privilege agent access. Use when an agent needs scoped credentials — pay-only, invoice-only, read-only, or custom permissions.
Architecture/security/performance claims need >=2 independent sources or escalate. Load-bearing = wrong cascades downstream.
Use mbox-to-sqlite when an agent needs to work across an email archive as structured data instead of parsing one message at a time.
Fallback for missing credentials — loads the secrets managed in Skill Studio (for example OPENAI_API_KEY, GITHUB_TOKEN) into your environment.
MemGPT-style virtual context-load egy 11.11 session indulásakor. B-2 sprint Week 3 rewrite (2026-05-13): a klasszikus aggressive 15-20K token-os cat-jel helyett **lean ~5K token**…
Run constant-rate HTTP attacks, capture binary results, and generate reports or plots before capacity changes and releases.
Audit, prune, and improve agent guidance markdown files in repositories. Use when the user asks to check, audit, update, improve, or fix AGENTS.md, CLAUDE.md, or related guidance…
Reviews Indian loan and facility agreements from the borrower, lender, guarantor or security-provider perspective, integrating commercial terms, interest and charges, covenants,…
Drafts a U.S. secured Loan and Security Agreement with UCC Article 9 security interests, perfection mechanics, covenants, and enforcement remedies.
Drafts a U.S. commercial Loan Modification Agreement amending existing loan terms (interest rates, payment schedules, maturity dates, covenants) while preserving enforceability of…
Register ICANN domains with crypto payments (USDC/USDT/ETH/BTC) via API — built for AI agents
Drafts irrevocable standby letters of credit serving as security deposits in commercial lease transactions.
Install, configure, and validate local ClickHouse for gapless-crypto-clickhouse development and backtesting.
Query the local Postgres database — credentials via server/.env, psql one-liners, TypeORM table/column naming, dev vs test DB.
Use when users say "is this legal AI app local-first", "what leaves the machine", "BYOK privacy", "audit network calls", "where are documents stored", or need a legal AI workspace…
Use when the user wants to find, read, write, move or organize files in OneDrive (personal or work) on macOS or Windows.
本地资源库导航——字典库(Dic)、Payload库、POC库的结构和使用方法。当需要使用 ffuf/spray 目录爆破、密码爆破、或构造 Fuzz payload 时必读。覆盖字典选择策略、payload 模板调用、POC 库搜索方法。字典库统一安装在 /pentest 目录下
Read-only hygiene audit of secret-bearing FILES by NAME (.env*, *.pem, *.key, id_rsa*, *_keys.env, credentials*.json, secrets.*): per-file verdict TRACKED-SECRET (already in the…
Drafts U.S. IPO/secondary offering lock-up agreements restricting securityholder transfers and hedging during the post-offering period.
· Handle authorized privesc, CTFs, post-exploitation on Linux, containers, K8s. Triggers: 'privesc', 'CTF', 'pentest', 'post-exploitation', 'container escape', 'SUID', 'GTFOBins'.
Locus payment infrastructure for AI agents — send USDC payments, call 30+ pay-per-use APIs, order prepaid cards, manage email inboxes, hire freelancers, and more.
Implement centralized logging with ELK Stack, Loki, or Splunk for log collection, parsing, storage, and analysis across infrastructure.
Analyze application logs to identify errors, performance issues, and security anomalies. Use when debugging issues, monitoring system health, or investigating incidents.
Log Analysis Security - Auto-activating skill for Security Advanced. Triggers on: log analysis security, log analysis security Part of the Security Advanced skill category.
Analyze system, application, and security logs for forensic investigation. Use when investigating security incidents, insider threats, system compromises, or any scenario…
Use when apply log transformation when peak intensity distributions are right-skewed with heteroscedastic variance (intensity-dependent noise), particularly in QC-based batch…
Log a daily body-weight reading into the nutrition SQLite DB (weights table). Use whenever the user reports their weight, e.g.
Prüft Logdaten von Beschäftigten rechts- und beweissicher im Nis2 Cybersecurity Compliance.
Logfiles und technische Beweise: SIEM, Access Logs, Admin-Aktivitäten, Zeitstempel, Retention und Integrität als Beweise bewerten. Normanker: DSGVO Art.
Search all 11,778 Security skills →