Security Audit skills

Agent OWASP ASI Compliance Check

github

Ensure your AI agents meet OWASP ASI security standards.

Detecting NTLM Relay

mukul975

Identify NTLM relay attacks through event correlation.

AWS Account Enumeration with ScoutSuite

mukul975

Assess AWS security posture with comprehensive audits.

T

Terraform Patterns

alirezarezvani

Streamline your Terraform infrastructure code with best practices.

H

Helm Chart Builder

alirezarezvani

Streamline your Helm chart development process.

D

Dependency Updater

davila7

Automate your dependency management across multiple languages.

Env & Secrets Manager

alirezarezvani

Enhance your environment variable and secrets management.

Ship Gate

alirezarezvani

Pre-production audit for secure code deployment.

Zeroize Audit

trailofbits

Enhance code security by detecting zeroization issues.

Entry Point Analyzer

trailofbits

Identify state-changing functions for smart contract audits.

A

Antigravity Workflows

sickn33

Streamline complex tasks with guided skill sequences.

Security Reviewer

jeffallan

Identify vulnerabilities and generate structured security reports.

Secure Workflow Guide

trailofbits

Enhance smart contract security with a structured approach.

Security Audit

cloudflare

Conduct thorough security audits of codebases.

Code Review Agent

ruvnet

Enhance code quality through structured reviews.

OpenClaw Audit Watchdog

prompt-security

Automate daily security audits for OpenClaw agents.

Deep Context Builder

sickn33

Enhance code audits with detailed, line-by-line analysis.

Best Practices

davila7

Enhance your web development with modern best practices.

Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. Use when auditing Substrate runtimes or FRAME pallets.

Audit authorized codebases for exploitable vulnerabilities using scoped reconnaissance, adversarial review, validation, and structured reporting.

Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.

Focused security audit of code, calibrated to surface real exploitable bugs and suppress theoretical findings. Use when the user asks to "audit", "security-audit", "find vulnerabilities", "check for IDOR/SSRF/XSS/injection", or wants a security review of a file, directory, branch diff, or PR. Covers access control, injection, auth/secrets, sensitive data, business logic, web boundary, and AI agent/LLM trifecta risks. Produces calibrated findings with data flow, exploit request, fix, and confidence — no theoretical or defense-in-depth nits.

Full STRIDE-A threat model analysis and incremental update skill for repositories and systems. Supports two modes: (1) Single analysis — full STRIDE-A threat model of a repository, producing architecture overviews, DFD diagrams, STRIDE-A analysis, prioritized findings, and executive assessments. (2) Incremental analysis — takes a previous threat model report as baseline, compares the codebase at the latest (or a given commit), and produces an updated report with change tracking (new, resolved, still-present threats), STRIDE heatmap, findings diff, and an embedded HTML comparison. Only activate when the user explicitly requests a threat model analysis, incremental update, or invokes /threat-model-analyst directly.

AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching tools miss. Use this skill when asked to scan code for security vulnerabilities, find bugs, check for SQL injection, XSS, command injection, exposed API keys, hardcoded secrets, insecure dependencies, access control issues, or any request like "is my code secure?", "review for security issues", "audit this codebase", or "check for vulnerabilities". Covers injection flaws, authentication and access control bugs, secrets exposure, weak cryptography, insecure dependencies, and business logic issues across JavaScript, TypeScript, Python, Java, PHP, Go, Ruby, and Rust.