Claude Code Skills·Claude Skills·The open SKILL.md registry for Claude
ClaudSkills › Security › Page 185

Claude Security Skills (Page 185 of 197)

Security auditing, penetration testing, vulnerability scanning, OWASP, cloud security, and compliance skills for Claude Code.

11,778 skills · updated 2026-11-01 · showing 11041–11100 of 11,778 by quality score

Sub-topics:Red Team (1,737)Web Security (1,187)Threat Hunting (887)Identity Access (554)Network Security (471)Appsec Tools (426)Forensics (347)Compliance (241)

For the full experience including quality scoring and one-click install features for each skill — upgrade to Pro.

Generates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF).
Google Calendar and Gmail integration using your own GCP project credentials (BYoK — Bring Your Own Key). Direct OAuth2 auth against your own Google Cloud project.
This skill should be used when the user asks to "integrate goth with echo", "oauth echo framework", "echo authentication", "goth session management", "oauth security", "secure…
Define and enforce security protocols and user permissions within a project ecosystem. Use this skill whenever the user mentions access policy, permission enforcement, rbac, least…
Apply organizational ambidexterity theory to balance exploration and exploitation activities. Use this skill when the user needs to diagnose whether an organization is…
Apply Christensen's Disruptive Innovation theory to assess low-end and new-market threats to incumbents.
Apply the Efficient Market Hypothesis (Fama, 1970) to evaluate information incorporation in asset prices across weak, semi-strong, and strong forms.
Apply panel data analysis with fixed effects, random effects, and dynamic GMM to exploit longitudinal variation and control for unobserved heterogeneity.
Apply Smith and Lewis's paradox theory to identify and manage organizational tensions across performing, organizing, belonging, and learning dimensions.
Apply social capital theory (Putnam, Coleman, Bourdieu, Burt) to analyze how network structures and trust generate value or impose constraints.
Author the graph_os knowledge-graph internals — extractors, backends, indexers, queries. Use when adding a new node/edge type, writing a new extractor (Python AST, doc-headings,…
Use this skill when listing or creating M365 groups in CIPP — security groups, distribution lists, M365 groups, mail-enabled security groups.
Use when a human wants help to author or change a Gryph security policy that governs what an AI coding agent may do, often with an agent's help.
When the user wants to build GTM automation with code, design workflow architectures, use AI agents for GTM tasks, or implement the 'architecture over tools' principle.
Use this skill whenever asked about Guatemala income tax (ISR — Impuesto Sobre la Renta) for employees and self-employed individuals.
Use this skill whenever asked about Guatemala payroll processing for employed persons. Trigger on phrases like \"Guatemala payroll\", \"nómina Guatemala\", \"ISR Guatemala\",…
Use this skill whenever asked about Guatemala social-security contributions (IGSS) and payroll income-tax withholding (ISR sobre rentas del trabajo) for employees and employers.
Identify flaws at the firmware and silicon layer, covering firmware reverse engineering, secure-boot verification, TPM state attestation, supply-chain component auditing and…
Use this skill when you need to deploy HyperShift clusters on AWS infrastructure with proper STS credentials, IAM roles, and VPC configuration
This skill should be used when user asks to "deploy to Hetzner", "create Hetzner server", "manage Hetzner Cloud", "hcloud CLI", or works with Hetzner Cloud infrastructure…
Convert precise coordinates into parcel-level addresses and tax-lot identifiers using licensed cadastral and government databases.
This skill enables Claude to automatically check for HIPAA (Health Insurance Portability and Accountability Act) compliance issues in codebases, infrastructure configurations, and…
Expert HIPAA compliance assistant for healthcare and software contexts. Use this skill whenever the user mentions HIPAA, PHI (Protected Health Information), ePHI, covered…
HIPAA compliance for Rails apps handling PHI (Protected Health Information) — Active Record Encryption for PHI at rest, audit logs that survive deletion, access controls (RBAC),…
HITL Protocol — the open standard for human decisions in autonomous agent workflows. When a website or API needs human input, it returns HTTP 202 with a review URL.
Use this skill whenever asked about Honduras personal income tax (ISR — Impuesto Sobre la Renta) for individuals (personas naturales), including self-employed professionals.
Use this skill whenever asked about Honduras payroll processing for employed persons. Trigger on phrases like \"Honduras payroll\", \"ISR Honduras\", \"Impuesto Sobre la Renta…
Use this skill whenever asked about Honduras payroll contributions, social security, or personal income tax (ISR) for employees, employers, or self-employed individuals.
Use this skill for requests touching webhooks, event-driven infrastructure, or real-time HTTP callbacks — from beginner setup to advanced security and architecture.
houtu-dependencies enterprise-grade Spring Cloud microservice foundational framework complete usage guide.
Use this skill when working with MCP Hub. Triggers when user mentions MCP Hub or imports from it.
Apply structured critical thinking — identifying claims, evidence, reasoning chains, hidden assumptions, and logical fallacies — to evaluate or construct specific written…
Hunt JWT cryptographic failures — alg:none signature-stripping and RS256→HS256 key-confusion that let an attacker forge a token for any identity (e.g.
Hunt shadow / zombie / undocumented API surface (OWASP API9 Improper Inventory Management) — enumerate the full API version history (v1/v2/beta/legacy paths, header- and…
Hunt TLS/SSL and DNS misconfigurations — missing HSTS (downgrade attack), weak cipher suites, expired/invalid certificates, mTLS bypass, missing SPF/DKIM/DMARC (email spoofing),…
Author Kubernetes manifests for Hush UAM (Universal Access Management) — AccessCredential, AccessPrivilege, AccessPolicy CRDs from Hush Security.
Converts a long source document (opdrachtbeschrijving, stage-plan, intern rapport, draft, bedrijfsbrief, onderzoeksnotities) into a properly structured afstudeerrapport-outline…
Use this skill when the user says 'hybrid cloud', 'hybrid-cloud', 'cloud burst', 'on-prem to cloud', 'cloud repatriation', 'hybrid connectivity', 'express route', 'direct…
Provides cryptocurrency trading data analytics including smart money tracking, whale monitoring, market data queries, and trader statistics.
Internationalization and localization rules for UMRS: locale detection, gettext wiring, .po/.pot file management, French Canadian (fr_CA) translation, security label fidelity, and…
Evaluate infrastructure definitions for security risk, syntax error, and configuration drift before deployment.
Purchase API keys from iAutoPay Fact API using USDC on Base chain. Use this skill when: - Buying API keys for AI agent payment services - Managing API key subscriptions (1/7/30…
Use this skill whenever asked about Iceland payroll processing for employed persons. Trigger on phrases like \"Iceland payroll\", \"Icelandic payroll\", \"staðgreiðsla\", \"PAYE…
Use this skill whenever asked about Iceland (Ísland) social security contributions, payroll levies, and mandatory pension for employers, employees, and self-employed individuals.
Use this skill whenever asked to calculate, review, or advise on Indonesian payroll — PPh 21 (income tax withholding), BPJS Kesehatan (health insurance), BPJS Ketenagakerjaan…
Use this skill when implementing identity provider solutions: SSO, federation, directory sync, and access governance.
Use this skill when an identity lifecycle event (joiner, mover, leaver) or an access request must be evaluated end-to-end across Microsoft Entra identity, Conditional Access…
This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or…
Symptom-driven troubleshooting guide for HTTP/transport errors when integrating the Overlens IDP — the "why am I getting this status code?" skill.
ALWAYS read this skill before touching any Irish Capital Gains Tax work. Trigger on phrases like \"Ireland CGT\", \"33% capital gains Ireland\", \"PPR exemption Ireland\",…
Generate a production-grade Industrial IoT protocol bridge — OPC UA ↔ MQTT Sparkplug B, Modbus → MQTT, or direct PLC (Rockwell/Siemens/Beckhoff) → cloud (AWS IoT Core / Azure IoT…
Use this skill when advising on Israeli cryptocurrency tax reporting and capital gains calculations. Trigger on phrases like \"crypto tax Israel\", \"bitcoin tax Israel\", \"מס…
This skill covers deploying AWS Security Hub as a centralized cloud security posture management platform that
This skill covers deploying and tuning Web Application Firewall rules on AWS WAF, Azure WAF, and Cloudflare
This skill covers designing and implementing security zones and conduits for industrial automation and control
This skill covers implementing automated security scanning for Infrastructure as Code (IaC) templates using
ISO/IEC 27001:2022 is the international standard for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS).
This skill covers implementing Gitleaks for detecting and preventing hardcoded secrets in git repositories.
> Use this skill whenever asked about Indian EPF (Employees' Provident Fund), ESI (Employees' State Insurance), or employer social security obligations.
Use this skill to generate comprehensive incident response playbooks from authoritative templates (NIST SP 800-61r3, CISA, NIST SP 800-161r1).
Search all 11,778 Security skills →