Agent Skills

io.github.openai/plugins/security-scan

Use when the user asks for a repository-wide or scoped-path security scan.

io.github.alibaba/loongcollector/security-check

Security scanning before commit/push. Checks for sensitive information like API keys and tokens.

io.github.Jeffallan/claude-skills/security-reviewer

Identifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance. Use when conducting security audits, reviewing code for vulnerabilities, or analyzing infrastructure security. Invoke for SAST scans, penetration testing, DevSecOps practices, cloud security reviews, dependency audits, secrets scanning, or compliance checks. Produces vulnerability reports, prioritized recommendations, and compliance checklists.

io.github.openai/skills/security-best-practices

Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.

io.github.Ed1s0nZ/CyberStrikeAI/security-automation

安全自动化的专业技能和方法论

io.github.openclaw/openclaw/security-triage

Triage OpenClaw security advisories, drafts, and GHSA reports with shipped-tag and trust-model proof.

io.github.bradygaster/squad/security-review

How to review PRs for security — credentials, injection, workflow permissions, supply chain, git operation safety

io.github.rohitg00/awesome-claude-code-toolkit/security-hardening

Application security covering input validation, auth, headers, secrets management, and dependency auditing

io.github.transilienceai/communitytools/mobile-security

Mobile application security testing — Android (smali, Frida, IL2CPP, Flutter AOT, root detection), iOS (jailbreak, Objection).

io.github.sugarforever/01coder-agent-skills/nextjs-security-scan

Comprehensive security vulnerability scanner for Next.js and TypeScript/JavaScript projects. Detects OWASP Top 10 vulnerabilities, XSS, injection flaws, authentication issues, hardcoded secrets, and Next.js-specific security problems. Audits dependencies for known CVEs and generates actionable security reports.

io.github.davila7/claude-code-templates/security-best-practices

Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.

Security Scanner

v1.0.0

io.clawhub.dmx64/security-scanner

Automated security scanning and vulnerability detection for web applications, APIs, and infrastructure. Use when you need to scan targets for vulnerabilities, check SSL certificates, find open ports, detect misconfigurations, or perform security audits. Integrates with nmap, nuclei, and other security tools.

io.github.RightNow-AI/openfang/security-audit

Security audit expert for OWASP Top 10, CVE analysis, code review, and penetration testing methodology

io.github.microsoft/hve-core/security-reviewer-formats

Format specifications and data contracts for the security reviewer orchestrator and its subagents.

Security Skill Scanner

v2.0.0

io.clawhub.anikrahman0/security-skill-scanner

Scans OpenClaw skills for security vulnerabilities and suspicious patterns before installation

io.github.samber/cc-skills-golang/golang-security

Security best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookies, secrets management, memory safety, and logging. Apply when writing, reviewing, or auditing Go code for security, or when working on any risky code involving crypto, I/O, secrets management, user input handling, or authentication. Includes configuration of security tools.

Clawdbot Security Suite

v1.0.0

io.clawhub.gtrusler/clawdbot-security-suite

Advanced security validation for Clawdbot - pattern detection, command sanitization, and threat monitoring

io.github.Ed1s0nZ/CyberStrikeAI/api-security-testing

API安全测试的专业技能和方法论

io.github.Ed1s0nZ/CyberStrikeAI/security-awareness-training

安全意识培训的专业技能和方法论

io.github.webiny/webiny-js/security

API — Security & Auth — 53 abstractions. Authentication, API keys, roles, users, teams event handlers and use cases.

io.github.sickn33/antigravity-awesome-skills/security-bluebook-builder

Build a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using MUST/SHOULD/CAN language, with explicit assumptions, scope, and security gates.

io.github.LeoYeAI/openclaw-master-skills/security-auditor

Use when reviewing code for security vulnerabilities, implementing authentication flows, auditing OWASP Top 10, configuring CORS/CSP headers, handling secrets, input validation, SQL injection prevention, XSS protection, or any security-related code review.

io.github.ruvnet/ruflo/security-audit

Security scanning and vulnerability detection. Use when: authentication, authorization, payment processing, user data. Skip when: read-only operations, internal tooling.

Security Auditor

v1.0.0

io.clawhub.jgarrison929/security-auditor

Use when reviewing code for security vulnerabilities, implementing authentication flows, auditing OWASP Top 10, configuring CORS/CSP headers, handling secrets, input validation, SQL injection prevention, XSS protection, or any security-related code review.