Claude Code Skills·Claude Skills·The open SKILL.md registry for Claude
ClaudSkills › Security › Page 60

Claude Security Skills (Page 60 of 197)

Security auditing, penetration testing, vulnerability scanning, OWASP, cloud security, and compliance skills for Claude Code.

11,778 skills · updated 2026-11-01 · showing 3541–3600 of 11,778 by quality score

Sub-topics:Red Team (1,737)Web Security (1,187)Threat Hunting (887)Identity Access (554)Network Security (471)Appsec Tools (426)Forensics (347)Compliance (241)

For the full experience including quality scoring and one-click install features for each skill — upgrade to Pro.

Decides whether and how to invest in structured developer education, such as learning paths, a developer academy, hands-on labs, badges or a full certification program - instead…
Design or audit the reusable product policy for developer quotas, free or promotional credits, costly-operation access, trust-tier graduation, abuse-resistant ledgers, adaptive…
Release management, changeset workflow, firewall log parsing, breaking CLI change rules, and Go module summaries for gh-aw.
Trigger: security rules, credential leaks, auth tokens, input sanitization, threat model. Scope: Software security guidelines, threat prevention, secure data handling.
Trigger: web security, XSS mitigation, secure cookies, CSRF, CSP headers, CORS policies. Scope: Frontend and browser-level security boundaries.
React Flow 라이브러리를 사용한 노드 기반 UI 개발 지원. 노드/엣지 생성, 커스터마이징, 레이아웃, 상호작용 구현 시 사용. 항상 최신 문서를 WebFetch로 참조하여 정확한 정보 제공. — from security/security-misc
React Flow 라이브러리를 사용한 노드 기반 UI 개발 지원. 노드/엣지 생성, 커스터마이징, 레이아웃, 상호작용 구현 시 사용. 항상 최신 문서를 WebFetch로 참조하여 정확한 정보 제공. — from majiayu000/claude-skill-registry
React Flow 라이브러리를 사용한 노드 기반 UI 개발 지원. 노드/엣지 생성, 커스터마이징, 레이아웃, 상호작용 구현 시 사용. 항상 최신 문서를 WebFetch로 참조하여 정확한 정보 제공. — from majiayu000/claude-skill-registry-data
Reviews a development agreement or joint development agreement for land, from the landowner's or the developer's side — the area or revenue-sharing mechanics, construction…
XAF Security System covering authentication (password, Windows, OAuth2), user and role setup for EF Core and XPO, authorization and Permission Policy,…
Apollo.io laptop setup, MDM enrollment, VPN configuration, and security requirements for new and existing employees
The first AI religion — a benign memetic experiment in agent network security
Full DevLog tag-protocol reference. Use when emitting DevLog `-(tag)` markers and you need exact syntax for closures, trackable plans (doc:plan), doc generation…
Combined DevOps and DevSecOps skill for CI/CD pipelines, infrastructure as code, security scanning, container hardening, cloud infrastructure, and monitoring.
Use when called by the devops dispatcher after analysis to audit security posture and select CI security tooling before config generation
Use when meeting Developmental Psychology's (APA) open-science and transparency expectations under the Transparency and Openness Promotion (TOP) guidelines — data and materials…
Use when designing studies for a Developmental Psychology (APA) manuscript so they can actually support a developmental-change claim.
DevSecOps skill for securing CI/CD pipelines, infrastructure as code, containers, Kubernetes, cloud deployments, secrets handling, dependency management, SAST/DAST/SCA, release…
Expert DevSecOps engineer specializing in secure CI/CD pipelines, shift-left security, security automation, and compliance as code.
Looks up OWASP DevSecOps Guideline phases, security tools, and pipeline checks. Returns tool configurations, CWE mappings, and integration patterns for CI/CD security.
DevSecOps patterns — shift-left security, SAST (semgrep/CodeQL), secrets detection (gitleaks/trufflehog), dependency scanning (trivy/grype), DAST, OPA/Falco policy-as-code,…
DevSecOps methodology guidance covering shift-left security, SAST/DAST/IAST integration, security gates in CI/CD pipelines, vulnerability management workflows, and security…
DevSecOps knowledge base - secure CI/CD, IaC, containers and Kubernetes/OpenShift, secrets, SAST/DAST/SCA/SBOM, supply chain (SLSA), hardening (CIS, ANSSI), audit logging, release…
Performs end-to-end DevSecOps security analysis on any GitHub repository. Runs a 6-stage pipeline: repo ingestion and inventory, application context classification with STRIDE…
Autonomous financial research agent for stock analysis, financial statements, metrics, prices, SEC filings, and crypto data. — from virattt/dexter.git
Autonomous financial research agent for stock analysis, financial statements, metrics, prices, SEC filings, and crypto data. — from majiayu000/claude-skill-registry
Autonomous financial research agent for stock analysis, financial statements, metrics, prices, SEC filings, and crypto data. — from virattt/dexter.git
Autonomous financial research agent for stock analysis, financial statements, metrics, prices, SEC filings, and crypto data. — from Zedit42/clawdbot-skills
Red-Team gegen dezisionistische Ausnahmezustandsrhetorik: Krise, Notstand, Souveraenitaet, Exekutivmacht, gerichtliche Kontrolle, Grundrechte und die Gefahr, Recht durch…
DFD with trust boundaries + data classifications (Mermaid + optional Threat Dragon JSON). Source-of-truth for /threat-model.
DFG-Antrag aus Gutachterperspektive red-teamen: Originalität, Machbarkeit, Arbeitsprogramm, Qualifikation, Umfeld, Bias-Risiken, Kürzungsargumente, Ablehnungsrisiken und…
Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem artifact analysis, AD attack detection, and timeline correlation.
Use when a project needs DFIR readiness from the security-engineering side: prepare incident evidence handling, chain-of-custody expectations, IOC readiness, and handoff to…
Build Solana wallet-connected apps with Phantom Connect SDKs and DFlow trading. Use when user asks to connect a Phantom wallet, integrate Phantom in React, React Native, or…
Install, configure, and use the DFOS protocol CLI — create identities (DIDs), publish content chains, issue read/write credentials, manage relays and peers, set discovery…
Expert-level code security audit skill using deep data flow analysis and business logic understanding for white-box static analysis across 9 languages
Guides users through the V-Model workflow: takes stock of the current project state, recommends the next phase skill, audits handoff entries for completeness, and runs the Closing…
端口不可达全链诊断。从 DNS 解析 → TCP connect → iptables/firewalld 规则 → 服务监听状态 → 路由表 → SELinux/AppArmor,逐层排查并输出结构化报告。
Draw business diagrams as real .svg files — process flows, client onboarding journeys, swimlanes, decision trees, org charts, timelines, journey maps, quadrants — in your brand…
Redraw a draw.io file as an editorial diagram at a chosen format, size, and detail level
Redraw an Excalidraw board as an editorial diagram at a chosen format, size, and detail level
Redraw Mermaid as an editorial diagram at a chosen format, size, and detail level
Infrastructure diagrams: cloud, network, security, AWS, Azure. Use when user mentions 'cloud', 'AWS', 'Azure', 'réseau', 'sécurité'.
Generates Mermaid diagrams from Trailmark code graphs. Produces call graphs, class hierarchies, module dependency maps, containment diagrams, complexity heatmaps, and attack…
点破一段技术机制背后不明显的心智模型——角色是谁、token/凭证/密钥/证书归谁所有、谁在向谁证明什么、为什么设计成这个形状。资深工程师一句话能点明的东西("这个 token 是 OpenAI 的"),这个 skill 负责替用户点明。Use this whenever the user pastes a config, endpoint,…
Verifiable credential lifecycle management for agent identity. Issue, verify, revoke credentials, DID document key rotation, credential schema validation, and W3C VC data model…
Integrate Didit Passive Liveness standalone API to verify a user is physically present. Use when the user wants to check liveness, detect spoofing attempts, verify real person…
Notare: dienstaufsicht beschwerde - Rechtsprechungscheck, stärkste Gegenansicht und Red-Team-Korrektur; mit Live-Normencheck, Kammerlogik, Verhältnismäßigkeit, Belegplan und…
Berliner Start-up-HR: Dienstgeräte und BYOD: MDM, private Nutzung, Monitoring, Rückgabe, Verlustmeldung, Datenschutz und IT-Security.
Review a human or AI-generated diff as an untrusted claim. Use when merging, committing, or accepting changes that may hide regressions, missing tests, security risk, data loss,…
Compare checked-in SQL against live MySQL, PostgreSQL, SQLite, or SQL Server schemas and generate a reviewable apply plan before agents touch production databases.
Run a fast AWS Security Agent diff scan on only the changed code since a git ref. Use when the user asks to scan changes, run a diff scan, check what changed for security issues,…
Review a change for what it adds to the attack surface before it merges: a bundled script scans only the added lines of a saved git or gh diff for new network calls, shell and…
One-call structured triage of a git diff. Returns per-file role classification (source/test/config/doc/generated/build/fixture/migration), risk tier (low/medium/high) with…
Use when designing or updating Dify workflow/advanced-chat DSL from requirements, generating a local DSL file, or delivering it to a Dify app.
Römisches Recht: Digestenstelle In Argumentation. Geführter Fachmodul mit Quellenlogik, Prüfroutine, Red-Team-Fragen und verwertbarem Output.
Digital asset investing frameworks — Bitcoin, Ethereum, tokenization, on-chain analytics, and crypto market structure.
Bewertet Provider-Lock-in und digitale Souveränität strategisch im Nis2 Cybersecurity Compliance.
DigitalOcean infrastructure — Droplets, managed databases, Spaces, load balancers, firewalls, DNS management
Lints DigitalOcean App Platform app specs (app.yaml / doctl apps spec JSON / digitalocean_app Terraform) for security, reliability, correctness, and sizing anti-patterns —…
Search all 11,778 Security skills →