Claude Code Skills·Claude Skills·The open SKILL.md registry for Claude
ClaudSkills › Security › Page 186

Claude Security Skills (Page 186 of 197)

Security auditing, penetration testing, vulnerability scanning, OWASP, cloud security, and compliance skills for Claude Code.

11,778 skills · updated 2026-11-01 · showing 11101–11160 of 11,778 by quality score

Sub-topics:Red Team (1,737)Web Security (1,187)Threat Hunting (887)Identity Access (554)Network Security (471)Appsec Tools (426)Forensics (347)Compliance (241)

For the full experience including quality scoring and one-click install features for each skill — upgrade to Pro.

Create actionable, role-specific response steps for scenarios such as ransomware or data breach. Use this skill whenever the user mentions incident response, playbook, runbook,…
Use this skill to convert a security incident or public vulnerability pattern into reusable audit prompts, checklists, tests, and AGENTS.md rules.
Use this skill when a security incident must be triaged, contained, remediated, and reviewed in a Zero Trust assume-breach posture across Microsoft 365 and Dynamics 365…
> Use this skill whenever asked about India cryptocurrency or virtual digital asset (VDA) taxation. Trigger on phrases like \"crypto tax India\", \"Bitcoin India tax\", \"VDA…
> Use this skill when advising on LEGAL tax minimization strategies for Indian taxpayers — salaried individuals, self-employed professionals, and business owners.
Detect and reject indirect prompt injection attacks when reading external content (social media posts, comments, documents, emails, web pages, user uploads).
Protect operational-technology environments such as SCADA, covering Modbus and DNP3 traffic analysis, PLC logic integrity verification, safety-instrumented-system protection and…
Infisical is an open-source platform for managing application secrets, environment variables, and certificates across teams and infrastructure.
This skill should be used when migrating a credential off a plaintext .env file onto self-hosted Infisical (the fleet secrets-management platform — distinct from Agent Vault, its…
Integrate InFlow stablecoin payments into any project. Use this skill when the user wants to: accept payments, add a checkout, request a payment, build a payment flow, integrate…
This skill enables Claude to automatically scan source code for potential input validation vulnerabilities.
This skill covers integrating OWASP ZAP (Zed Attack Proxy) for Dynamic Application Security Testing in CI/CD
This skill covers integrating Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub
This skill should be used when the user asks to "check for integrity issues", "analyze deserialization", "find supply chain vulnerabilities", "review CI/CD security", "check SRI",…
Turn ambiguous or high-impact product and engineering changes into scoped, verifiable acceptance criteria before or alongside implementation.
Intershop Commerce Management (ICM) backend development best practices. This skill should be used when writing, reviewing, or refactoring ICM Java code to ensure optimal patterns…
Classify incoming IONOS Cloud requests and route them to the narrowest applicable specialist agent. Covers DCD topology review, security and GDPR compliance, managed Kubernetes,…
iOS data persistence expert skill covering SwiftData (@Model, ModelContainer, @Query, #Predicate, migrations, CloudKit), Core Data (NSPersistentContainer, NSFetchRequest, batch…
iOS physical use-after-free exploitation via IOSurface heap spray. Use this skill whenever the user mentions iOS kernel exploitation, physical UAF, IOSurface, page table…
The self-review pipeline for this repository — the only one. Targets committed changes (default: everything since the merge-base with main), reviewing them through a multi-stage…
Expert ISO 27001 compliance assistant for security and compliance teams. Use this skill whenever a user asks about ISO 27001 or ISO/IEC 27001, including any of the follow — from…
Expert ISO 27001 compliance assistant for security and compliance teams. Use this skill whenever a user asks about ISO 27001 or ISO/IEC 27001, including any of the follow — from…
Expert ISO 27701 Privacy Information Management System (PIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 27701:2025, ISO/IEC 27701:2019, privac — from…
Expert ISO 27701 Privacy Information Management System (PIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 27701:2025, ISO/IEC 27701:2019, privac — from…
Run a structured check on whether an image or video is AI-generated, digitally manipulated, or authentic-but-miscaptioned, and produce a sourced verdict with a confidence level.
> Use this skill whenever asked about Italian INPS social contributions for self-employed professionals (Gestione Separata).
> Use this skill whenever asked about Italy cryptocurrency or digital asset taxation. Trigger on phrases like \"crypto tax Italy\", \"tasse crypto Italia\", \"Bitcoin Italy\",…
Use this skill whenever asked about Côte d'Ivoire (Ivory Coast) personal income tax, salary tax, or self-employed/business income tax.
Use this skill whenever asked about Côte d'Ivoire (Ivory Coast) payroll processing for employed persons.
Use this skill whenever asked about Côte d'Ivoire (Ivory Coast) social security contributions (CNPS) for employers and salaried employees.
Security considerations for Jackson @JacksonInject annotation in Java applications. How to prevent JSON input from overriding server-injected values.
> Use this skill whenever asked about Japan cryptocurrency or digital asset taxation. Trigger on phrases like \"crypto tax Japan\", \"Bitcoin Japan tax\", \"暗号資産 税金\", \"仮想通貨…
Use this skill whenever the user asks to inspect JoCoHunt, 조코헌트, jocohunt.jocoding.io products, ideas, rankings, makers, public security headers, or wants a CLI workflow for the…
Skill: Leiloeiros das Juntas Comerciais do Brasil workflow skill. Use this skill when the user needs Coleta e consulta dados de leiloeiros oficiais de todas as 27 Juntas…
Build automated blockchain analysis workflows on K3 — from natural language requests to deployed, running automations that fetch on-chain data, analyze it with AI, and deliver…
Use this skill whenever asked about Kenyan social contributions for self-employed individuals -- SHIF (formerly NHIF) health insurance and NSSF pension.
Use this skill for managing and reviewing Keboola projects. Activates when syncing project configs (init, pull, push, diff), running project reviews, analyzing SQL…
Retrieve, inject, and manage secrets from Keeper Vault using KSM CLI (ksm). Use when the user needs to access passwords, API keys, database credentials, certificates, or any…
Coordinate safe, reliable database work through Kepler. Use whenever a request discusses databases, DBs, data stores, SQL, relational or non-relational persistence, schema or…
Analyze Linux kernel vulnerabilities from KASAN/UBSAN/BUG crash logs or CVE descriptions. Performs full root cause analysis, exploitability assessment, patch development, and…
CISA Known Exploited Vulnerabilities (KEV) catalog. List actively exploited vulnerabilities prioritized by CISA. **Dependency**: This is an x-cmd module.
Use this skill whenever asked about Cambodia personal income tax, Tax on Salary (TOS), or Tax on Income (TOI) for individuals, sole proprietors, and employers.
Prepares multi-layered educational content for a specific child — currently focused on a 9-year-old boy in Zurich with deep interests in space, physics, math and biology.
Generates printable exercise sheets for Quentin (4th grade, Zurich public school) to prepare for tests and strengthen schoolwork.
Use Cartographing Kittens MCP tools for structural codebase intelligence — dependency mapping, impact analysis, code exploration, refactoring planning, and semantic search via…
Saint Kitts and Nevis payroll levy reference checked for 2026. Covers the Housing and Social Development Levy exemption thresholds introduced in July 2025, the monthly employee…
Use this skill whenever asked about Kosovo payroll social contributions and wage taxation for employees and employers.
Use this skill for Kubernetes Pod Security Admission (PSA) review covering namespace labels for the three profiles (privileged, baseline, restricted), enforce/audit/warn modes,…
Use this skill when running, configuring, testing, extending, or maintaining the AI Chat local multi-provider chat app: `npm run dev`, `npm run smoke`, SQLite chat state, provider…
Use this skill when converting Kujo audit findings, drift reports, release blockers, DocGen gaps, Dependabot/security triage, or recurring automation output into fix-ready backlog…
Use this skill when running, testing, extending, or maintaining the CRUD API showcase: `main.kujo`, SQLite item/project APIs, Next.js playground, auth strategies, smoke tests,…
Use this skill when triaging GitHub Dependabot or security alerts across Kujo repos, summarizing affected repositories/packages/severity/status/patched versions/PR state/next…
Use this skill when contributing to Kujo's Rust implementation: lexer, parser, AST, diagnostics, compiler, VM, interpreter, module loader, native functions, CLI, LSP, DocGen, JIT,…
Use this skill when asked to review Kujo code, PRs, patches, examples, docs, CLI changes, native API changes, security boundaries, runtime parity work, or release-readiness…
Use this skill when setting up, running, extending, testing, or maintaining the Kujo RAG Starter Kit: `kujo run main.kujo --interpreter ingest|query|serve|demo|bootstrap`,…
Use this skill when running, interpreting, extending, or maintaining Scout, the Kujo-native codebase intelligence tool: `kujo run scout.kujo`, repo context packs, `FILE_TREE.md`,…
Use this skill when writing or reviewing Kujo scripts that touch files, processes, shell commands, network, databases, archives, HTML/static serving, AI provider egress, secrets,…
Use this skill when using, adding, or reviewing Kujo native standard library functions, including arity, return types, capability gates, JSON conversion, filesystem, process,…
Use this skill when running, configuring, testing, integrating, or maintaining Watchdog local AI telemetry/proxy workflows: `dashboard_server.kujo`, `/proxy/v1`, `/api/requests`,…
> Use this skill whenever asked about taxation of cryptocurrency and digital mining in Kazakhstan. Trigger on phrases like \"Kazakhstan crypto tax\", \"crypto mining tax…
Search all 11,778 Security skills →