Claude Code Skills·Claude Skills·The open SKILL.md registry for Claude
ClaudSkills › Security › Page 55

Claude Security Skills (Page 55 of 197)

Security auditing, penetration testing, vulnerability scanning, OWASP, cloud security, and compliance skills for Claude Code.

11,778 skills · updated 2026-11-01 · showing 3241–3300 of 11,778 by quality score

Sub-topics:Red Team (1,737)Web Security (1,187)Threat Hunting (887)Identity Access (554)Network Security (471)Appsec Tools (426)Forensics (347)Compliance (241)

For the full experience including quality scoring and one-click install features for each skill — upgrade to Pro.

Datenbankrecht: Datenbankrecht im Logistik-Tracking mit geführtem Workflow, Normencheck, Beweis- und Fristenlogik, Red-Team und verwertbarem Ergebnis.
Datenbankrecht: Datenbankrecht und Cyberincident mit geführtem Workflow, Normencheck, Beweis- und Fristenlogik, Red-Team und verwertbarem Ergebnis.
Datenbankrecht: Datenbankrecht Compliance Policy mit geführtem Workflow, Normencheck, Beweis- und Fristenlogik, Red-Team und verwertbarem Ergebnis.
Datenbankrecht: Datenbankrecht Abschlussmemo mit geführtem Workflow, Normencheck, Beweis- und Fristenlogik, Red-Team und verwertbarem Ergebnis.
Database performance and safety audit. 70+ checks across 13 dimensions (DB1-DB13): query patterns, indexes, schema design, connections, transactions, migrations, caching, query…
Change the database schema safely (new table or column, index, RLS policy, grants, backfill, drop). Use when a feature needs to store something new or change how it's stored, or…
관계형 스키마를 설계·검토하거나 인덱스·쿼리 튜닝·트랜잭션·마이그레이션을 다룰 때, 그리고 doksam pig 의 공유 PostgreSQL 클러스터를 운영할 때 사용한다. SQLite 고유 주제는 sqlite-expert 를 쓴다.
Database index optimization advisor for PostgreSQL, MySQL, and SQLite. Analyzes slow queries, missing indexes, unused indexes, and over-indexed tables.
Data model behind the engine memory surfaces + the `sc mem` command for each. Check before reading or writing memory — identity, decisions, roadmap, documents, flags.
Use when user wants to create database migrations, compare model changes, generate SQL migration files, manage schema changes, or handle database versioning for MySQL, PostgreSQL,…
Быстрая read-only проверка SQLite-БД учебного проекта SIM-карт после пересборки. Использовать, когда нужно вывести count по clients, sim_cards, services и payments без изменения…
Use when installing, configuring, or managing IBM DB2 LUW on RHEL 9 (and AlmaLinux/Rocky 9) — instance creation, database administration, buffer pool and tablespace management,…
DBA Deutschland Bulgarien 2010. Anwendungsfall Outsourcing IT Pflege Holding Beteiligungen. EU-MTRL ergaenzend. Niedrige KSt 10 Prozent. Methodenartikel Anrechnung.
Universal database CLI supporting 30+ databases (SQLite, PostgreSQL, MySQL, SQL Server, Oracle, MongoDB, ClickHouse, DuckDB and more).
Open and operate the local DB Craft visual schema studio at D:\DBdesigner. Use it to design or edit MySQL 8, PostgreSQL 14, SQLite, and MSSQL models, generate tables with AI,…
Design and review production database schemas, data models, ERDs, migration plans, and storage patterns.
dbmate is a standalone, framework-agnostic database migration tool that uses plain SQL files. It supports PostgreSQL, MySQL, SQLite, ClickHouse, BigQuery, and Spanner, and works…
Drafts DD Form 254 Contract Security Classification Specifications for classified government contracts.
Static Application Security Testing (SAST). Scans the code for security vulnerabilities. A BLOCKING GATE — the `sast` receipt is what lets a ticket leave CODE, in every tier.
Threat analysis of the proposed design. Identifies new attack surfaces and security risks before any code is written. The findings become mitigations folded into the spec.
Tier 2 Delaware content skill for entity formation covering tax year 2025. Includes the Court of Chancery and DGCL advantages making Delaware the standard for VC-backed startups,…
A final accuracy check for security work — it re-tests a conclusion against the evidence and labels each part as confirmed, inferred, or assumed, so an unverified result never…
Iterative TRIO-debate + fix-wave protocol for hardening non-trivial PRs and changes before merge. Spawns a parallel Reviewer + Auditor + Critic trio, dispatches fix waves, loops…
Handle a GitHub Security Advisory response for Paperclip, including confidential fix development in a temporary private fork, human coordination on advisory-thread comments, CVE…
Skill para el proyecto Flutter `fitness_tracker` con Clean Architecture + Vertical Slicing + flutter_bloc + get_it.
Autonomous red team agent executing full attack chains with domain specialists. Use when running autonomous red team operations, simulating end-to-end attack chains, or planning…
Maintain durable repository memory for architecture and technical decisions using ADRs, decision candidates, and update/supersede checks.
Detect decompression bomb vulnerabilities where compressed input can expand to exhaust memory, targeting buffer-based decompression without size limits.
Merge two tracking issues that describe the same root-cause vulnerability (typically discovered independently by two reporters, arriving via different channels) — from…
Drafts combined Deed of Trust and Security Agreement instruments creating real property and UCC Article 9 personal property security interests for commercial financing.
· Grill a plan before building: clarify the decision tree, then attack it. Triggers: 'grill me', 'deep grill', 'stress-test this plan', 'poke holes', 'what did I miss'.
Takes a rough, unpolished prompt idea and autonomously turns it into an implementation plan. Researches the project deeply, asks clarifying questions, generates a precise internal…
Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide or scoped-path Codex Security scan.
Use DeepAPI for supported scraping, research, and email workflows with explicit credentials and approval.
Help developers build third-party tools that import, inspect, migrate, or analyze DeepChat data. Use when Codex needs to work with DeepChat provider configuration, model…
Prüft Deepfake-, CEO-Fraud- und Payment-Fraud-Abwehr im Nis2 Cybersecurity Compliance.
Run a tabletop drill of a voice-clone or deepfake fraud attempt — the 'CEO needs this wire today' call — against your actual approval process, before a real attacker does, then…
Install and configure Deepgram SDK authentication. Use when setting up a new Deepgram integration, configuring API keys, or initializing Deepgram in your project.
Apply Deepgram security best practices for API key management and data protection. Use when securing Deepgram integrations, implementing key rotation, or auditing security…
Hybrid crypto analysis combining technical indicators with DeepSeek AI reasoning.
Deep system-level code investigation, execution simulation, and adversarial debugging on real projects.
Adversarial security audit built on the DeepTrace method. Traces untrusted input from entry point to sink, hunting injection, auth bypass, and data exposure.
Comprehensive academic advisor investigation and evaluation system for graduate school decisions. Investigates professors at any institution worldwide — searches publications…
Run a multi-pass defect scan across the source codebase, checking for logic errors, error handling gaps, concurrency bugs, security issues, API contract violations, and…
Run the early, mechanical subset of the multi-pass defect scan — local bugs that do not need contracts or protocols context to spot.
Run the deep, semantic subset of the multi-pass defect scan — bugs that need contracts and protocols context to spot. Run after protocols, before porting.
Guide for implementing DefectDojo - an open-source DevSecOps, ASPM, and vulnerability management platform.
Securing and monitoring tool-calling AI agents against excessive agency and indirect prompt injection, where one hostile instruction becomes a real action such as sending email,…
Implement layered collective defense using alarm signaling, role mobilization, and proportional response.
Coverage-and-gaps methodology for the memory-corruption exploit mitigations that break an exploit before it runs attacker code: ASLR, DEP/NX, Control Flow Guard (CFG), and CET…
Defensive playbook for the OWASP Top 10 for LLM Applications (2025), centered on prompt injection (MITRE ATLAS AML.T0051, direct and indirect), RAG retrieval abuse (LLM08), and…
Compiler and allocator hardening against memory-corruption exploitation - stack and heap buffer overflows, use-after-free, and integer overflows that attackers turn into code…
Defensive methodology for open redirect (CWE-601) abuse, where a link on a trusted domain sends the victim off-site via a redirect parameter, used to cloak phishing behind your…
Detection, hunting, and hardening methodology for social engineering against people: help-desk impersonation and vishing to reset credentials or MFA (Scattered Spider / UNC3944,…
Blue-team release-gate analysis for smart contract deployment and upgrade readiness. Classifies repositories, checks deploy/upgrade execution paths, CI/CD trust boundaries, config…
Trigger Windows Defender scans, check threat history, update signatures, and query protection status via PowerShell
Implement mitigations, create input filters, design output guards, and build defensive prompting for LLM security
Analyze defense supply chain systems — DFARS compliance assessment, CMMC cybersecurity readiness, sole-source and DMSMS risk identification, counterfeit parts prevention per SAE…
Fast blue-team triage checklist for a SOC analyst working an alert queue under time pressure, the defensive answer to a speed-run recon and quick-win scan (MITRE ATT&CK T1595…
Run a defensive, read-only audit of local MCP and AI-agent exposure, including risky bindings, configuration issues, and confused-deputy risks.
Search all 11,778 Security skills →