Claude Code Skills·Claude Skills·The open SKILL.md registry for Claude
ClaudSkills › Security › Page 79

Claude Security Skills (Page 79 of 197)

Security auditing, penetration testing, vulnerability scanning, OWASP, cloud security, and compliance skills for Claude Code.

11,778 skills · updated 2026-11-01 · showing 4681–4740 of 11,778 by quality score

Sub-topics:Red Team (1,737)Web Security (1,187)Threat Hunting (887)Identity Access (554)Network Security (471)Appsec Tools (426)Forensics (347)Compliance (241)

For the full experience including quality scoring and one-click install features for each skill — upgrade to Pro.

Deterministic entropy streams for reproducible testing and procedural generation. Perfect 50/50 statistical distribution with hash verification.
GoMining Academy educational platform — courses, articles, and certifications. Covers GoMining Basics Course (10 lessons on ecosystem, miners, tokenomics, veGOMINING, card),…
Step-by-step guide for setting up Google Calendar MCP server in Claude Code CLI. Use when users want to (1) connect Google Calendar to Claude Code, (2) set up the…
Provides expert guidance on authenticating and authorizing to Google Cloud services and APIs, covering human users, service identities, Application Default Credentials (A — from…
Guides agents through a structured 6-step discovery process to design and deploy Google Cloud global external Application Load Balancers with Cloud CDN, Cloud Armor, and Service…
Investigates Google Cloud networking issues by analyzing logs, metrics, and diagnostics. Use when investigating VPC Flow Logs, NAT, firewall, or threat logs, querying lat — from…
Provides expert guidance on authenticating and authorizing to Google Cloud services and APIs, covering human users, service identities, Application Default Credentials (A — from…
Deploys a baseline landing zone foundation for a Google Cloud Organization, establishing security guardrails using Organization Policies, resource hierarchy folders and projects,…
Investigates Google Cloud networking issues by analyzing logs, metrics, and diagnostics. Use when investigating VPC Flow Logs, NAT, firewall, or threat logs, querying lat — from…
Google Cloud Secret Manager conventions for JavaScript and TypeScript - @google-cloud/secret-manager setup, ADC/IAM, access/create/rotate/list/delete secrets, version pinning, and…
Stores, retrieves, and manages data as objects in Cloud Storage (Google Cloud Storage, or GCS) buckets.
Connect to Google Workspace services (Gmail, Docs, Sheets, Calendar, Drive, Tasks, Slides). Load when user mentions 'connect google', 'setup google', 'configure google', 'google…
Use for Google Maps Platform Environment APIs work, including Air Quality API, Pollen API, Solar API, Weather API, environmental heatmap tiles, current/forecast/history requests,…
Use for focused Google Maps JavaScript API 2D map work in either app, including API loading, map IDs/vector maps, camera, controls, Advanced Markers, info windows, data-driven…
Complete Google OAuth integration architecture including token storage and debugging
Prevent and fix Google Safe Browsing "Dangerous site" flags. Use when launching a public web app, buying/picking a domain, building a login or signup page, or when any site shows…
Google Workspace administration via the gws CLI. Install, authenticate, and automate Gmail, Drive, Sheets, Calendar, Docs, Chat, and Tasks.
Export Google Workspace Admin Reports and customer usage evidence with the gws CLI for security reviews, shadow AI detection, OAuth investigation, Drive sharing analysis, login…
Access Google Workspace Admin Reports through the gws CLI with read-only auth. Use when logging in with the correct scopes, verifying saved credentials, troubleshooting missing…
Verify Google Workspace OAuth app permissions and scopes with gws, confirm apps are not effectively allow-all, review app access control and domain-wide delegation risk, and…
Build concise weekly Google Workspace security reports from exported Admin Reports and customer usage evidence, including shadow AI OAuth activity, Gemini Workspace usage, Drive…
Review Google Workspace Admin Reports for daily security triage. Use when analyzing Drive sharing, external downloads, risky logins, OAuth/token activity, admin lifecycle changes,…
Automate Google Drive tasks via Rube MCP (Composio). Always search tools first for current schemas. — from security/threat-hunting
Work with the gopass password store — show, insert, generate, move, search secrets; manage recipients and GPG encryption; handle multi-store mounts; sync with git remotes; resolve…
USE WHEN writing sops-encrypted secrets that become `EnvironmentFile=` for a systemd unit — the file body must be env-file syntax (KEY=VALUE), NOT YAML (key: value).
Safe flow state for Claude Code. Auto-approves routine actions, activates when the agent is about to: write files, run shell commands, send messages, access credentials, make API…
FDEOS overlay for government. FedRAMP, ATO, data sovereignty, security controls, clearance.
DAO governance attack — flash-loan-backed vote manipulation, delegation hijack, quorum dilution, proposal-spam DoS, time-lock bypass via emergency multisig, snapshot vs.
Protocol Type Trigger governance (detected when Governor, Timelock, voting, proposal, quorum, delegate patterns found) - Inject Into Breadth agents, depth-external, depth-edge-case
Build and operate the "Governance Security Threat Modeler" capability for Safety and Governance. Trigger when this exact capability is needed in mission execution.
Use when architecting or assessing a Salesforce Government Cloud org — covering FedRAMP High authorization, Hyperforce GovCloud on AWS GovCloud regions, GovCloud Plus feature set,…
Audit government and federal software for FedRAMP authorization readiness (Low/Moderate/High), NIST 800-53 controls (AC, AU, CM, IA, SC, SI families), FISMA compliance, Section…
Assess compliance with the EU General-Purpose AI (GPAI) Code of Practice under the AI Act (Regulation (EU) 2024/1689, KI-Verordnung) Articles 51-56.
GPAI Code of Practice und Evidence-Logik: Copyright-Policy, Safety/Security, systemisches Risiko, Modellinformationen für Downstream-Anbieter, Standards-Uebergang und Nac — from…
Assess compliance with the EU General-Purpose AI (GPAI) Code of Practice under the AI Act (Regulation (EU) 2024/1689, KI-Verordnung) Articles 51-56.
GPAI Code of Practice und Evidence-Logik: Copyright-Policy, Safety/Security, systemisches Risiko, Modellinformationen für Downstream-Anbieter, Standards-Uebergang und Nac — from…
Manages GPG key lifecycle and file encryption operations using GnuPG CLI and GPGME library. Handles keyserver synchronization, trust model management, and automated encrypted…
Use when deciding whether to route a task to OpenAI's GPT-5.5 frontier model versus Claude Opus or Sonnet — picking the model lane for infrastructure scripts, CI pipelines,…
Generate and edit images with OpenAI GPT Image 2 (ChatGPT Images 2.0) on RunComfy. Documents GPT Image 2's strengths (embedded text, logos, multilingual typography, instr — from…
Generate and edit images with OpenAI GPT Image 2 (ChatGPT Images 2.0) on RunComfy. Documents GPT Image 2's strengths (embedded text, logos, multilingual typography, instr — from…
Generate and edit images with OpenAI GPT Image 2 (ChatGPT Images 2.0) on RunComfy. Documents GPT Image 2's strengths (embedded text, logos, multilingual typography, instr — from…
Greek social security contributions (e-EFKA) on employees' pay for 2026: what the employer withholds and what it pays on top.
Greek income tax for tax year 2026 on partnerships and other legal entities that keep single-entry books: general and limited partnerships (ΟΕ, ΕΕ), civil-law partnerships…
Use when you have findings to report — grade each by real-world risk (P0–P3) with a specific minimal remediation, block only real exploitable harm, and name accepted risk out loud.
Security fundamentals for Grammarly API credential management. Use when setting up secure authentication and token handling for Grammarly integrations.
Security and privacy configuration for Granola meeting data. Use when reviewing data handling practices, configuring encryption, ensuring SOC 2/GDPR compliance, or securing…
Build event-driven automations with Granola's Zapier webhook triggers. Use when creating real-time notification systems, processing meeting events, or building custom integrations…
Build or incrementally update the code knowledge graph for a codebase. Uses Tree-sitter for multi-language AST parsing and stores nodes/edges in SQLite.
Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural changes.
Secure GraphQL APIs - authentication, authorization, rate limiting, and validation
Deep security review mode for GRAVITAS. Adds threat modeling, OWASP Top 10 checks, injection prevention patterns, auth/session security, and security-specific test requirements.
configure, validate, troubleshoot, and document gravity forms setups on wordpress sites through a wordpress mcp app or companion connector.
Execute Gray Swan Wave 3 MITM challenges across 10 challenges and 90 AI models using Playwright automation, tiered execution strategy, and compliance framing.
Use when creating a draw.io diagram for audit planning, request lists, evidence, testing, exceptions, remediation, and reporting in a GRC, security, audit, compliance, privacy,…
Use when creating a draw.io diagram for high-level GRC program architecture, continuous compliance operating models, three lines of defense, and executive program maps in a GRC,…
Use when creating a draw.io diagram for controls mapped across frameworks, systems, owners, risks, and evidence sources in a GRC, security, audit, compliance, privacy, cloud, or…
Use when creating a draw.io diagram for regulated data flows, data classifications, storage, processing, transfer, access, retention, and logging in a GRC, security, audit,…
Use when creating a draw.io diagram for evidence collection, evidence lifecycle, audit evidence pipelines, and systems of record in a GRC, security, audit, compliance, privacy,…
Use when creating a draw.io diagram for mapping controls and obligations across frameworks to show overlap, gaps, and conflicts in a GRC, security, audit, compliance, privacy,…
Senior GRC analyst expertise across 15 compliance frameworks — NIST 800-53, FedRAMP, FISMA, CMMC, SOC 2, ISO 27001, PCI DSS, HIPAA, CIS Controls, COBIT, CSA CCM, GDPR, SLSA,…
Search all 11,778 Security skills →