Claude Code Skills·Claude Skills·The open SKILL.md registry for Claude
ClaudSkills › Security › Page 130

Claude Security Skills (Page 130 of 197)

Security auditing, penetration testing, vulnerability scanning, OWASP, cloud security, and compliance skills for Claude Code.

11,778 skills · updated 2026-11-01 · showing 7741–7800 of 11,778 by quality score

Sub-topics:Red Team (1,737)Web Security (1,187)Threat Hunting (887)Identity Access (554)Network Security (471)Appsec Tools (426)Forensics (347)Compliance (241)

For the full experience including quality scoring and one-click install features for each skill — upgrade to Pro.

preventive-control-mapper
Turn failing Security Hub controls and Prowler checks into the preventive controls that stop the same misconfiguration coming back: an SCP statement, an account or…
prezentace
Stálý průvodce prezentační platformou v `c:\github\presentations`. Pomáhá autorům (mluvčím + organizátorům) navigovat celý ekosystém — od založení nového eventu, přes import…
Price Manipulation Vulnerability
Detects e-commerce logic that trusts client-submitted prices instead of server-side calculation.
price-monitor
Track crypto and stock prices in real-time with configurable alerts and multi-currency support.
priceforagent
Get real-time prices for crypto, stocks, and commodities. Use when the user asks about asset prices, market data, or needs to check the value of Bitcoin, Ethereum, stocks like…
primer-x402
Make HTTP-native crypto payments using the x402 protocol. Pay for APIs, access paid resources, and handle 402 Payment Required responses with USDC on Base and other EVM chains.
primr-strategy
Generate strategy documents from completed Primr research. Use when the user wants AI, CX, security, or data strategy deliverables from an existing report.
principal-reviewer
Senior holistic review gate for the ATS Platform — the SINGLE, accountable review and sign-off before a change is proposed for merge.
principle-attack-the-premise
Apply when two or more fixes that share one premise have failed the same gate. Take a census of which actors hold the imbalance before the next fix, then question the premise…
principle-security
Security design principles — trust boundaries and input validation, authentication vs authorization, secrets handling, secure defaults and defense in depth, lightweight threat…
prior-art-sanktionen
Patentanwälte: prior art fehler und meldepflicht - Rechtsprechungscheck, stärkste Gegenansicht und Red-Team-Korrektur; mit Live-Normencheck, Kammerlogik, Verhältnismäßigkeit,…
prioritizing-vulnerabilities-with-cvss-scoring
The Common Vulnerability Scoring System (CVSS) is the industry standard framework maintained by FIRST (Forum
prism-3way
Three orthogonal analytical operations (WHERE/WHEN/WHY) + cross-operation synthesis. Each operation attacks the problem from a fundamentally different angle.
prism-discover
Discover all possible analysis domains for an artifact. Finds obvious and non-obvious angles — architecture, security, but also marketing positioning, user psychology, regulatory…
prism-full
Full Prism: multi-pass structural analysis with mandatory adversarial self-correction. Designs custom analytical passes, executes them with chaining, then attacks its own findings…
prisma-database-setup
Guides for configuring Prisma with different database providers (PostgreSQL, MySQL, SQLite, MongoDB, etc.).
prisma-expert
You are an expert in Prisma ORM with deep knowledge of schema design, migrations, query optimization, relations modeling, and database operations across PostgreSQL, MySQL, and…
prisma-next-contract
Edit the Prisma Next data contract — add models, fields, relations, indexes, enums, value objects (composite types), type aliases, namespaces (Postgres schemas), cross-contract…
prisma-next-queries
Write Prisma Next queries for Postgres, SQLite, or Mongo — pick a lane (Postgres/SQLite `db.orm.` + `db.sql.`; Mongo `db.orm.` + `db.query.from(...)` pipeline…
prisma-next-runtime
Wire the Prisma Next runtime — `db.ts` setup using `postgres(...)` from `@prisma-next/postgres/runtime`, `sqlite(...)` from `@prisma-next/sqlite/runtime`, or…
prisma-orm-setup
Set up Prisma ORM in an application, connect its database, or troubleshoot the connection of an existing Prisma 6, 7, or 8 app.
privacy-by-design
Use when building apps that collect user data. Ensures privacy protections are built in from the start—data minimization, consent, encryption.
privacy-consent-lgpd-gdpr-compliance-evertonfernandes3321-wq
Compliance operacional de privacidade (LGPD/GDPR/CCPA) para qualquer stack com dados pessoais — consentimento em camada dupla (provider + log local imutavel append-only),…
agentic-security:privacy-data-flow
Privacy review before handling user data. Activate on PII/PHI/PCI shapes (email, SSN, CC, MRN). Writes DATA_FLOW.md.
privacy-data-security
Design and operate privacy and data security programs for SEC-registered firms under Reg S-P, Reg S-ID, and SEC cybersecurity expectations.
privacy-engineering
Privacy engineering patterns — PII classification and inventory, GDPR consent flows, data minimization, right-to-erasure implementation, pseudonymization/encryption,…
privacy-guardian
Security and privacy specialist for differential privacy, encryption, and complianceUse when "privacy, encryption, differential privacy, PII, GDPR, CCPA, access control, audit…
privacy-mask
Mask, redact, anonymize and censor sensitive information (PII) in screenshots and images — phone numbers, emails, IDs, API keys, crypto wallets, credit cards, passwords, and more.
u05300-privacy-preserving-data-brokering-for-disaster-response-networks
Build and operate the "Privacy-Preserving Data Brokering for disaster response networks" capability for disaster response networks.
private-fixtures
Push, pull and use private test fixtures — real recordings, inboxes or other PII-bearing files that must never enter git — through the encrypted `test-fixtures` R2 bucket with…
privesc-linux
Use when escalating privileges on a Linux host — SUID/SGID & GTFOBins, sudo LPE (CVE-2025-32462/32463), capabilities & LD_PRELOAD, kernel LPE (CVE-2024-1086, Dirty Pipe,…
privesc-windows
Use when escalating privileges on a Windows host — SeImpersonate Potato chains (GodPotato/PrintNotifyPotato), service & DLL hijacking, UAC bypass (fodhelper/ICMLuaUtil), kernel…
privilege-escalation-knowledge
Comprehensive knowledge about Linux privilege escalation. Provides methodologies for enumerating and exploiting privesc vectors including SUID binaries, sudo permissions,…
privilege-escalation-methods
Provide comprehensive techniques for escalating privileges from a low-privileged user to root/administrator access on compromised Linux and Windows systems.
privileged-access-review
Review privileged Microsoft Entra ID role holders from read-only Graph exports and score each admin account, reporting permanent privileged assignments, never-activated PIM…
privy
Create and manage agentic wallets with Privy. Use for autonomous onchain transactions, wallet creation, policy management, and transaction execution on Ethereum, Solana, and other…
prl-revision
Use when responding to Physical Review Letters referee reports or editor decisions — point-by-point reply, resubmission, and the APS appeal route.
proactive-agent
Transform AI agents from task-followers into proactive partners that anticipate needs and continuously improve.
proactive-agent
Transform AI agents from task-followers into proactive partners that anticipate needs and continuously improve.
proactive-agent
Transform AI agents from task-followers into proactive partners that anticipate needs and continuously improve.
proactive-agent
Transform AI agents from task-followers into proactive partners. Implements WAL Protocol, Working Buffer, Compaction Recovery, Unified Search, Security Hardening, and Relentless…
probabilistic-market-forecast
Estimate realistic price/return distributions, target and downside probabilities, and probability-weighted scenarios for stocks, funds/ETFs, futures, warrants, crypto,…
probe
OWASP ZAP/Burp Suite/Nuclei integration, penetration test planning, DAST execution, and vulnerability scanning.
probe-kubernetes-clusters-for-exposed-attack-paths-with-kube-hun
Assess a Kubernetes cluster from the attacker viewpoint when an agent needs exposure-focused findings instead of a general cluster scanner listing.
probe-ml-and-llm-systems-for-regressions-and-vulnerabilities-wit
Run automated red-team and failure scans against an LLM or RAG app before users find the breakage.
probe-public-tls-endpoints-for-protocol-cipher-and-certificate-w
Run a thorough TLS preflight against a host before launch, certificate renewal, or incident review.
probo
Work with Probo SOC-2 compliance platform via MCP tools. Manage risks, documents (policies), controls, vendors, and evidence.
process-pdf
Handles full PDF lifecycle — extracts text/tables, merges/splits, rotates, watermarks, fills forms, encrypts/decrypts, and OCRs scanned pages.
processing-stix-taxii-feeds
Processes STIX 2.1 threat intelligence bundles delivered via TAXII 2.1 servers, normalizing objects into platform-native
processor-ropa-creation
Creates GDPR Article 30(2) Records of Processing Activities for data processors with all four mandatory fields: processor and controller names and contact details, categories of…
procore-security-basics
Procore security basics — construction management platform integration. Use when working with Procore API for project management, RFIs, or submittals.
procurement-analysis
Audit procurement and procure-to-pay systems for spend analytics (Pareto analysis, tail spend visibility), supplier consolidation opportunities, Kraljic matrix category…
procurer
Grounded procurement research for any real-world need. Turn a problem ("reduce bedroom noise from the avenue", "add air conditioning", "hire an accountant", "buy a TV mount",…
prod-readiness-coach
Scans repository controls and scripts, not user journeys: access control on request handlers, CI/CD pipeline, structured logging, error tracking, secrets management,…
production-excellence
Route cross-domain production evidence (readiness, migration, recovery, capacity/cost, incident-learning) into a launch or operational decision — go, no-go, defer, exception, or…
production-readiness
Comprehensive pre-deployment validation ensuring code is production-ready. Runs complete audit pipeline, performance benchmarks, security scan, documentation check, and generates…
ring:production-readiness-audit
Ring-standards-aligned production readiness audit across Structure, Security, Operations, Quality, and Infrastructure — 43 base dimensions + 1 conditional (multi-tenant) = up to…
production-ready-hardener
Ultimate production readiness skill that orchestrates all relevant skills (frontend, backend, security, performance, SEO, testing, DevOps) to harden applications before deployment…
production-system-audit
Comprehensive system audit methodology for production web applications. Use when auditing systems before launch, identifying technical debt, troubleshooting systematic issues,…
tray-produtos
API de Produtos da Tray. Utilize quando o desenvolvedor precisar listar, consultar, cadastrar, atualizar ou excluir produtos no catálogo de uma loja Tray.

Keep exploring Security

Sub-topics:Red Team (1,737)Web Security (1,187)Threat Hunting (887)Identity Access (554)Network Security (471)Appsec Tools (426)
Top tags:#type:audit (1,702)#type:review (1,670)#type:integration (742)#type:scanner (573)#ai:agent (446)#lang:python (174)#cloud:aws (169)#ai:claude (164)
Top authors:Klotzkette (1,586)mahipal (475)satoshistackalotto (337)Jeremy Longshore (319)majiayu000 (251)
Learn:Security audit use-caseSKILL.md referenceTop 100 skills
Search all 11,778 Security skills →

Categories

Use cases

Popular tags

Learn

Site