Claude Code Skills·Claude Skills·The open SKILL.md registry for Claude
ClaudSkills › Security › Page 20

Claude Security Skills (Page 20 of 197)

Security auditing, penetration testing, vulnerability scanning, OWASP, cloud security, and compliance skills for Claude Code.

11,778 skills · updated 2026-11-01 · showing 1141–1200 of 11,778 by quality score

Sub-topics:Red Team (1,737)Web Security (1,187)Threat Hunting (887)Identity Access (554)Network Security (471)Appsec Tools (426)Forensics (347)Compliance (241)

For the full experience including quality scoring and one-click install features for each skill — upgrade to Pro.

Analyze cryptocurrency market sentiment using Fear & Greed Index, news analysis, and market momentum.
Detect and analyze covert communication channels used by malware including DNS tunneling, ICMP exfiltration,
Analyzes network traffic captures and flow data to identify adversary activity during security incidents, including
Analyzes network traffic generated by malware during sandbox execution or live incident response to identify
Captures and analyzes network packet data using Wireshark and tshark to identify malicious traffic patterns,
Process perform on-chain analysis including whale tracking, token flows, and network activity. Use when performing crypto analysis.
Track crypto options flow to identify institutional positioning and market sentiment. Use when tracking institutional options flow.
Identifies and unpacks UPX-packed and other packed malware samples to expose the original executable code for
Analyzes malicious PDF files using PDFiD, pdf-parser, and peepdf to identify embedded JavaScript, shellcode,
Analyzes network protocol implementations to identify parsing vulnerabilities, state machine issues, and protocol-level security problems.
Analyzes encryption algorithms, key management, and file encryption routines used by ransomware families to
Monitor and analyze ransomware group data leak sites (DLS) to track victim postings, extract threat intelligence
Identify ransomware network indicators including C2 beaconing patterns, TOR exit node connections, data exfiltration
Traces ransomware cryptocurrency payment flows using blockchain analysis tools such as Chainalysis Reactor,
Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities
Structures forward-looking scenario analysis with macroeconomic assumptions and portfolio impact assessment.
Analyze HTTP security headers of web domains to identify vulnerabilities and misconfigurations. Use when you need to audit website security headers, assess header compliance, or…
Leverages Splunk Enterprise Security and SPL (Search Processing Language) to investigate security incidents
Detects session management vulnerabilities including session fixation, session hijacking, and insecure cookie handling.
Evaluates sovereign creditworthiness with fiscal analysis, external vulnerability, political risk, and institutional quality assessment.
Investigate supply chain attack artifacts including trojanized software updates, compromised build pipelines,
Tracks untrusted input propagation from sources to sinks in binary code to identify injection vulnerabilities.
MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics, techniques, and procedures (TTPs)
Map advanced persistent threat (APT) group tactics, techniques, and procedures (TTPs) to the MITRE ATT&CK framework
Analyzes structured and unstructured threat intelligence feeds to extract actionable indicators, adversary tactics,
Analyze the threat landscape using MISP (Malware Information Sharing Platform) by querying event statistics,
Queries Certificate Transparency logs via crt.sh and pycrtsh to detect phishing domains, unauthorized certificate
Evaluates real-world asset tokenization with legal structure, market infrastructure, and liquidity analysis.
Detect typosquatting, homograph phishing, and brand impersonation domains using dnstwist to generate domain permutations
Parse Apache and Nginx access logs to detect SQL injection attempts, local file inclusion, directory traversal,
Analyzes Windows Security, System, and Sysmon event logs in Splunk to detect authentication attacks, privilege
Expert Anchor smart contract development for Solana (January 2026). Use when (1) Writing or auditing Solana programs, (2) Implementing security patterns, (3) Defining account…
Production-grade Solana smart contract (program) development using Rust and the Anchor framework. Covers security vulnerability mitigation, account validation, PDA derivation, CPI…
Notare: anderkonto und verwahrung - Rechtsprechungscheck, stärkste Gegenansicht und Red-Team-Korrektur; mit Live-Normencheck, Kammerlogik, Verhältnismäßigkeit, Belegplan und…
Adversarial System Design auditor that reviews SD deliverables (requirements, architecture, deep-dive, data flow, security, tradeoffs, evolution, product breakdown) plus ADRs and…
Scaffold a production-ready native Android app -- generate a complete Kotlin project with Jetpack Compose UI, MVVM architecture, Hilt dependency injection, Room database with…
The single owner of Android signing and Google Play credentials — the upload keystore, Play App Signing, the SHA-1/SHA-256 fingerprints other services ask for, and the Play…
AndroidアプリのセキュリティレビューをOWASP Mobile Top 10 2024およびMASVS (Mobile Application Security Verification Standard) の観点で実施し、Markdownレポートを生成する。 Use when: (1) Androidアプリのセキュリティ監査/レビュー依頼時 (2)…
Decompile Android APK, XAPK, JAR, and AAR files using jadx or Fernflower/Vineflower. Reverse engineer Android apps, extract HTTP API endpoints, trace call flows from UI to network…
Android security fundamentals: encrypted storage (EncryptedSharedPreferences, EncryptedFile), biometric authentication (BiometricPrompt, Credential Manager), network certificate…
Configure Android release build signing with dual-source credentials (env vars + gradle.properties)
Drive and inspect an Android app's UI on a device/emulator with the `aua` (android-ui-analyser) CLI. Returns the screen as a list of elements with stable integer IDs + bounding…
Für Anfechtung: Tatbestandsmerkmale, Beweisfragen und Beleglage: erstellt Entwurf mit Antrag, Beweis und Anlagen; Ergebnis: Gegenprüfung mit Beweis- und Fristencheck.
Prüfung und Erklärung der Anfechtung einer Willenserklärung – Inhalts- und Erklärungsirrtum sowie Eigenschaftsirrtum § 119 BGB, unrichtige Übermittlung § 120 BGB, arglistige…
Angebot wirtschaftlich kalkulieren und gegen die Zuschlagsmatrix spiegeln: Preis, Qualität, Tempo, Servicelevel, Lebenszykluskosten, Tariftreue und Aufklärbarkeit ungewöhnlich…
Angebotsumstellung: Zahlen, Schwellenwerte und Berechnung: prüft konkret die einschlägigen Tatbestandsmerkmale, Fristen, Belege und Rechtsprechung.
Steuerberater: angestellter steuerberater nebentaetigkeit - Rechtsprechungscheck, stärkste Gegenansicht und Red-Team-Korrektur; mit Live-Normencheck, Kammerlogik,…
Reviews iframe bindings and host bindings for Angular 15-era security and behavior hardening.
ALWAYS use when working with Angular Security, XSS prevention, CSRF protection, Content Security Policy, or sanitization in Angular applications.
Für Anhörung: Red-Team und Qualitätskontrolle: prüft Ergebnis, Beweislast und Gegenposition; Ergebnis: Gegenprüfung mit Beweis- und Fristencheck.
Secure Anima and Figma tokens for design-to-code pipelines. Use when protecting API credentials, restricting Figma access scope, or hardening CI/CD design automation pipelines.
Use when a task needs the judgment of an Animal Control Worker — responding to a dog-bite or animal-attack call, determining rabies-exposure quarantine protocol, evaluating a…
Create, revise, polish, inspect, export, and preview complete stylized Roblox R6 and R15 character animations on authentic Studio-derived Blender rigs through MCP.
Turn a character anchor into an engine-loadable animated spritesheet by generating ONE labeled pose-board image (a grid of the same character in the frames of an action) and…
Für Anlage: Red-Team und Qualitätskontrolle: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.
Finaler Red-Team-Check vor Einreichung: Nummern, Schriftsatzverweise, Dateien, Stempel, OCR, Schwärzung, Dateinamen, beA-Paket, Lücken und Begleitvermerk.
Plausibilisiert die in `annahmen-sammeln-fortfuehrung` gesammelten Annahmen. Pruefraster Konsistenz mit Vergangenheit (BWA SuSa Jahresabschluss) Marktentwicklung (Branche…
Use when targeting Annual Computer Security Applications Conference (ACSAC) or deciding whether a computer-science manuscript fits this venue.
Annual security report aggregation and analysis. USE WHEN annual reports, security reports, threat reports, industry reports, update reports, analyze reports, vendor repo — from…
Annual security report aggregation and analysis. USE WHEN annual reports, security reports, threat reports, industry reports, update reports, analyze reports, vendor repo — from…
Search all 11,778 Security skills →