Claude Code Skills·Claude Skills·The open SKILL.md registry for Claude
ClaudSkills › Security › Page 43

Claude Security Skills (Page 43 of 197)

Security auditing, penetration testing, vulnerability scanning, OWASP, cloud security, and compliance skills for Claude Code.

11,778 skills · updated 2026-11-01 · showing 2521–2580 of 11,778 by quality score

Sub-topics:Red Team (1,737)Web Security (1,187)Threat Hunting (887)Identity Access (554)Network Security (471)Appsec Tools (426)Forensics (347)Compliance (241)

For the full experience including quality scoring and one-click install features for each skill — upgrade to Pro.

MUST USE when asked to find, read, list, search, inspect, fetch, export, or reconstruct coding-agent sessions across Codex, Claude Code/Desktop, OpenCode, Senpi/pi, OpenClaw,…
Use when handling untrusted or external input at an application or facing-API boundary - an HTTP/REST endpoint, web form, file upload, webhook, CLI taking user data, queue/broker…
Use when writing security tooling, exploits, scanners, or C2 in Python/C/Go/Rust/ASM — systems & network programming, automation, cryptography implementation
Use when writing or reviewing Rust and deciding how to handle errors, secrets or credentials, dependency/crate choices, or type design - or when a review flags a synthetic…
Trigger machine account authentication with PetitPotam (MS-EFSR) and Coercer across MS-RPRN, MS-DFSNM, and MS-FSRVP to feed NTLM relay into AD CS Web Enrollment (ESC8) and other…
Clerk for forced surrenders, threats, procedural irregularities, and lack of informed consent; use for Coercion_Duress queue.
Authentication coercion (PetitPotam MS-EFSR, PrinterBug MS-RPRN, DFSCoerce MS-DFSNM) chained into NTLM relay (impacket ntlmrelayx) toward LDAP, AD CS web enrollment (ESC8), or…
Use this when the user wants BosskuAI to behave like an expert AI cofounder across product, engineering, UI/UX, security, SEO/GEO, GTM, marketing, sales, prioritization, and…
Gorev tipine gore dusunme modu secimi. 5 mod -- analytical (derin analiz), creative (yaratici cozum), systematic (adim adim), rapid (hizli aksiyon), debug (hata izleme).
Apply Cohere security best practices for API key management and access control. Use when securing API keys, implementing key rotation, or auditing Cohere security configuration.
Coinbase Automation: list and manage cryptocurrency wallets, accounts, and portfolio data via Coinbase CDP SDK — from security/security-misc
Receive and verify Coinbase Commerce webhooks. Use when setting up Coinbase Commerce webhook handlers, debugging X-CC-Webhook-Signature verification, or handling cryptocurrency…
Autonomous crypto trading with technical and sentiment analysis. Use when executing trades, analyzing markets, or managing positions on Coinbase. — from security/security-misc
Autonomous crypto trading with technical and sentiment analysis. Use when executing trades, analyzing markets, or managing positions on Coinbase.
Interact with CoinFello using the openclaw CLI to create MetaMask smart accounts, manage delegations, send prompts with ERC-20 token subdelegations, and check transaction status.
CoinGecko API documentation - cryptocurrency market data API, price feeds, market cap, volume, historical data.
CoinGecko API documentation - cryptocurrency market data API, price feeds, market cap, volume, historical data.
Use for CoinGecko/cg CLI crypto market data: prices, market cap, trending coins, top gainers/losers, coin search, historical data, or OHLC.
Query CoinGecko API for prices, market data, trending tokens, and historical charts.
Access cryptocurrency market data from CoinPaprika: prices, tickers, OHLCV, exchanges, contract lookups for 12,000+ coins and 350+ exchanges. Free tier, no API key needed.
Official CoinPaprika MCP server — real-time crypto market data for 12K+ coins and 350+ exchanges. 30 tools for tickers, OHLCV, exchange data, search, and price conversion.
Drafts a Collateral Assignment of Contracts assigning a borrower's contractual rights as security for debt under UCC Article 9.
Systematically collects, categorizes, and distributes indicators of compromise (IOCs) during and after security
Collects and synthesizes open-source intelligence (OSINT) about threat actors, malicious infrastructure, and
MISP (Malware Information Sharing Platform) is an open-source threat intelligence platform for gathering, sharing,
Knowledge engine over the Colombian Truth Commission (CEV) final report "Hay Futuro Si Hay Verdad" (2022) — the findings, statistics, armed-actor responsibilities, differ — from…
Claim tasks, record step progress, and verify SOP gates in the colony SQLite queue. Applies when your spawn message includes a db_path field.
Cadastral and terrain overlays together. Convert any supplied geographic map to this style while preserving all mapped landmarks and geometry.
Use when positioning a COLT (Conference on Learning Theory) submission against prior bounds and models — building the known-versus-new comparison across COLT/ALT lineage,…
Expert in designing and implementing visceral, satisfying combat systems. Masters hitbox/hurtbox design, frame data, combo systems, enemy archetypes, damage feedback, and the…
当用户搜索或询问CometAPI替代、CometAPI平替、CometAPI对比、CometAPI迁移、cometapi.com、AI中转站、Token Hub、模型API、API聚合、图片API、视频API时使用。这个 Skill 面向需要聚合多模型并管理成本、速度、成功率和任务结果的开发团队,帮助用户判断 AI-HIVE…
Production readiness for CometChat Android — server-side token auth, user management CRUD, ProGuard rules, and security checklist.
CometChat Android UIKit v6 production readiness — token auth, ProGuard/R8, security checklist, release configuration
Use when preparing a CometChat Flutter UIKit v5 app for production. Covers auth tokens, ProGuard, environment config, security hardening.
Production readiness for CometChat Flutter UIKit v6 — server-side auth tokens, user management, Android ProGuard/R8, iOS Info.plist, minSdk, release build checklist, environment…
Production-ready CometChat iOS setup — server-side auth tokens, security best practices, and deployment checklist.
Production readiness for CometChat — server-side token auth, user management CRUD, environment hardening, and security checklist. Replaces dev-mode authKey with server-side tokens.
Use when creating animations that reassure users, reduce anxiety, or communicate protection and security.
GLAW Master Command — the top-level intelligence-fusion orchestrator. Coordinates the FBI bureau, FinCEN financial-intelligence cell, CIA strategic-intelligence cell, SEC…
Quality checker for Claude Code custom slash commands (.claude/commands/*.md) with 22-point checklist.
Use when reviewing, approving, or designing commercial motion — pricing models, deal review, discount approval, partnership economics, channel mix, commercial policy, RFP/RFI…
Analyze code changes for security vulnerabilities using LLM reasoning and threat model patterns. Use for PR reviews, pre-commit checks, or branch comparisons.
Procedimiento corto para commitear el trabajo de un ticket — verificar el árbol contra el ticket, dejarlo verde, agregar por camino explícito y comentar el issue.
Application security testing coordinator for common vulnerability patterns including XSS, injection flaws, and client-side security issues.
Für Gate: Red-Team und Qualitätskontrolle: prüft Ergebnis, Beweislast und Gegenposition; Ergebnis: Gegenprüfung mit Beweis- und Fristencheck.
Für Red-Team Qualitygate: prüft Ergebnis, Beweislast und Gegenposition; Ergebnis: Gegenprüfung mit Beweis- und Fristencheck.
Diagnose and fix runtime errors in Lightning Web Components including wire adapter failures, shadow DOM boundary violations, event propagation mistakes, async rendering timing…
OWASP Top 10 audit checklist for Web Applications (2021) and APIs (2023). Load during any security review, PR review, or codebase audit touching web, mobile backend, or API code.
Orchestrates pitfall prevention skills for common development issues. Auto-triggered during code review to check for TanStack Query, Drizzle ORM, Express API, React, WebSocket,…
Write a fair, enforceable community moderation policy. Use when standing up or overhauling moderation for a forum, Discord, Slack, subreddit, or any user community.
Use when an agent must set up, onboard, verify, index, search, browse, author, or synchronize a private local company knowledge workspace that uses Markdown as truth, SQLite as…
Prüft Firmenhandys, MDM, Zertifikate und Geräteschutz im Nis2 Cybersecurity Compliance.
Compare exact compiled-artifact builds and record reproducible structural, metadata, symbol, dependency, signing, resource, or control-flow differences.
Which payment gateway should I use? Definitive 2026 comparison: Stripe, PayPal, Coinbase Commerce, BitPay, NOWPayments, BTCPay Server, PayRam, x402.
Sub-skill of TopGun. Evaluates skill candidates across capability, security, popularity, and recency dimensions.
Integrate with the ComPDF Server API to convert PDF, Office, HTML, CSV, RTF, TXT, and image files; edit PDF pages; merge, split, extract, insert, rotate, compress, compare,…
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for AD CS, certificate templates, enrollment rights, EKUs, SAN controls, PKINIT, certificate — from…
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for AI-agent, prompt-injection, MCP or toolchain, cloud, container, CI/CD, and supply-chain c — from…
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for Android APK hooking, Frida tracing, request-signing recovery, SSL pinning bypass, JNI bou — from…
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for browser cookies, localStorage, sessionStorage, IndexedDB, Cache Storage, service workers — from…
Search all 11,778 Security skills →