Claude Code Skills·Claude Skills·The open SKILL.md registry for Claude
ClaudSkillsSecurity › Page 140

Claude Security Skills (Page 140 of 176)

Security auditing, penetration testing, vulnerability scanning, OWASP, cloud security, and compliance skills for Claude Code.

10,533 skills · updated 2026-08-26 · showing 8341–8400 of 10,533 by quality score

Sub-topics:Red Team (1,582)Web Security (1,094)Threat Hunting (754)Identity Access (496)Network Security (414)Appsec Tools (381)Forensics (295)Malware Analysis (207)

For the full experience including quality scoring and one-click install features for each skill — upgrade to Pro.

Guides SOC 2 Type II Privacy Trust Services Criteria preparation and audit execution. Covers AICPA TSP Section 100 Privacy criteria P1-P8 including notice, choice/consent,…
SOC 2 readiness for Rails apps — the 5 Trust Services Criteria (Security, Availability, Processing Integrity, Confidentiality, Privacy), audit log requirements, access reviews,…
Social engineering and phishing for authorized security assessments. Use when testing human attack vectors, conducting
Social engineering testing - phishing, pretexting, vishing, and physical security assessment techniques.
How individuals think about, influence, and relate to one another. Covers conformity (Asch line experiments, informational vs.
Use when targeting 《社会保障评论》(Social Security Studies) or deciding whether a Chinese social-science/econ/management manuscript fits this journal.
Inspect and manage Socket.dev organizations, repositories, scans, dependency and supply-chain alerts, policies, resolutions, reports, SBOMs, analytics, audit logs, and safe API…
Prüft Software-IP, OSS, Datenschutz, Security, Verträge, Kundenlizenzen, Mitarbeiter/Freelancer und technische Schulden im Deal.
Baut interne Software-Legal-Policy für Engineering: OSS, AI Tools, Repositories, Security, Export, Verträge und Releases im Softwarerecht De Eu Us.
Baut SBOM-Prozess für eigene Software und Lieferanten im Nis2 Cybersecurity Compliance.
Project CodeGuard-based secure-by-default coding rules (23 rule files spanning injection, authentication/MFA, cryptography, secrets, authorization, sessions, cloud/Kubernetes,…
Adversarial last-line verification for completed software and releases. Reconstruct impact, attack risks, build meaningful oracles, execute authorized checks, and issue a…
Operate the Solana Attestation Service verification layer vendored under /attestation — create credentials, generate schemas, issue attestations for skills/agents/plugins, verify…
Interact with Solana blockchain via Helius APIs. Create/manage wallets, check balances (SOL + tokens), send transactions, swap tokens via Jupiter, and monitor addresses.
Use when user asks to "build a Solana dapp", "write an Anchor program", "create a token", "debug Solana errors", "set up wallet connection", "test my Solana program", "deploy to…
End-to-end Solana development playbook (Jan 2026). Prefer Solana Foundation framework-kit (@solana/client + @solana/react-hooks) for React/Next.js UI.
Audit Solana programs (Anchor or native Rust) for security vulnerabilities. Use when reviewing smart contract security, finding exploits, analyzing attack vectors, performing…
Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing.
Drafts U.S. solar site lease agreements between landowners and solar developers for long-term ground leases of solar PV facilities.
Solidity smart contract security auditor. Detect reentrancy, overflow, access control issues. 50+ vulnerability patterns. CI/CD ready. Free CLI tool.
Expert in Solidity smart contract development with security and gas optimization
Solidity development standards and security auditing. TRIGGER when: working with .sol files, foundry.toml, hardhat.config.*, smart contract auditing, security review, or — from…
Solidity development standards and security auditing. TRIGGER when: working with .sol files, foundry.toml, hardhat.config.*, smart contract auditing, security review, or — from…
Deep expertise in Solidity language features, patterns, and best practices for secure smart contract development.
Smart contract security analysis skill. Detect vulnerabilities, suggest fixes, generate audit reports. Supports Hardhat/Foundry projects.
Solidity language server providing smart contract development support including compilation, linting, security analysis, and code intelligence for .sol files.
Master smart contract security best practices, vulnerability prevention, and secure Solidity development patterns.
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns.
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns.
Advanced Solidity smart contract development, security hardening, vulnerability defense, and testing framework using Foundry (Forge, Cast, Anvil).
Run an automated solo D&D 5e (2014 rules) game with Claude as the Dungeon Master. Grounded adjudication (real dice, real DCs committed to disk before rolls), independent NPC…
Search 50,000+ smart contract vulnerabilities from Cyfrin Solodit. 8 MCP tools with intelligent caching for searching, filtering, and analyzing blockchain security findings.
Specialized knowledge for developing Java applications with the Solon framework. Covers core concepts, web, data, security, remoting, AI, flow orchestration, cloud-native,…
Product fitness and solution validation for bootstrapped founders. Assesses whether THIS specific solution is the right way to address a validated problem — value proposition…
Expert solutions architecture covering technical requirements, solution design, integration planning, and enterprise architecture alignment.
Solves CTF challenges by performing first-pass triage, identifying the dominant category, and routing execution to the right specialized ctf-* skill.
SonarQube-style quality gate analyzer + auto-fix. Inspects code for Bugs · Vulnerabilities · Security Hotspots · Code Smells · Duplication · Coverage with severity…
Arbeite gezielt mit SonarCloud Security Hotspots und normalen Issues für `smart-village-app_sva-studio`.
Use when when you have a GitHub-hosted Python project (or other supported language) with an existing test suite and want to gate code contributions on multiple quality dimensions…
Triage SonarCloud issues and hotspots via the SonarCloud Web API — check gate status, list open BLOCKER/CRITICAL bugs + vulns, group hotspots by rule, bulk-mark hotspots Safe per…
Run SonarQube static analysis scans via the SonarQube Web API and sonar-scanner CLI. Detects code smells, bugs, and security vulnerabilities with configurable quality gates and…
Runs SonarQube static analysis via the SonarQube Web API and sonar-scanner CLI. Detects code smells, bugs, and security vulnerabilities across 30+ languages with quality gate…
Automated code quality scanning using SonarQube REST API and SonarScanner CLI. Detects code smells, bugs, and vulnerabilities across 30+ languages with configurable quality gates.
Enforces SonarQube quality gates in pull request workflows using the SonarQube Web API and ce/task endpoint.
Fetches the latest SonarQube project analysis result, explains why the Quality Gate failed in plain English, and links to specific issues.
Integrates with SonarQube Web API and sonar-scanner CLI to enforce code quality gates across pull requests.
Run SonarQube/SonarCloud static code analysis to check code quality, detect security vulnerabilities, code smells, and bugs.
Wirtschaftsprüfer: sonderpruefung aktienrecht - Rechtsprechungscheck, stärkste Gegenansicht und Red-Team-Korrektur; mit Live-Normencheck, Kammerlogik, Verhältnismäßigkeit,…
Planowanie projektów dodatków dla platformy enova365/Soneta Enterprise. Tworzy kompletną dokumentację projektową obejmującą: strukturę danych (tabele, relacje), elementy…
Silnik REJESTRU KONFIGURACJI (ConfigReg, "rejestr konfiguracji") platformy Soneta (enova365, Triva) — od strony kodu C#: drzewo węzłów `ConfigReg`, providery `IConfigRegProvider`…
Klasy ORM i wzorce kodu biznesowego enova365 / Soneta Enterprise / Triva: Row/Table/Module, sesja i transakcje (Session, Commit/CommitUI, Save, optimistic lock),…
Design system Soneta / enova365 do budowania aplikacji webowych spójnych wizualnie z enova365 ERP: palety kolorów (jasny/ciemny), typografia, layout, komponenty UI (przyciski,…
Add a new machine's age public key to .sops.yaml and re-encrypt all files. Use for multi-machine setups.
Decrypt SOPS-encrypted YAML files back to .env format. Finds *.enc.yaml files, decrypts, and converts YAML back to dotenv.
Encrypt .env files using SOPS + age. Converts dotenv to YAML format (avoids SOPS bug #1435), then encrypts. Auto-detects unencrypted .env files.
SOPS (Secrets OPerationS) is an editor of encrypted files that supports YAML, JSON, ENV, INI, and BINARY formats.
SOPS manages encrypted YAML, JSON, ENV, INI, and binary files with KMS, age, and PGP. It is a tight fit for secrets handling, rotation, and encrypted configuration workflows.
Set up SOPS + age encryption for sharing .env files securely across machines. Detects existing state, installs tools, generates age keys, creates .sops.yaml, and encrypts .env…
Use when writing, reviewing, or troubleshooting Apex queries that may expose SOQL injection or CRUD/FLS issues.
State-of-the-art PHP engineering (2026 baseline, PHP 8.3+ floor, 8.5 current) for both writing new PHP and auditing existing PHP code.
Search all 10,533 Security skills →