Skills MCP Plugins Subagents

Browse by category

Coding Skills2061 Marketing Skills1580 Design Skills1479 Security Skills1134 Automation Skills994 Testing Skills985 Media Skills908 Infrastructure Skills902 Data Skills883 Finance Skills840 Automation MCPs799 Planning Skills797 DevTool MCPs797 Documentation Skills757 Coding MCPs738 Productivity Skills721 Productivity MCPs649 Data MCPs505 DevTool Skills503 Infrastructure MCPs482 Security MCPs441 Debugging Skills428 Code review Skills415 Search & RAG MCPs409

The Monday digest

The week's best new agents, skills and MCP servers. One email, every Monday.

Free · unsubscribe anytime.

aaaa.fyi

Every agent skill, MCP server, plugin and subagent — searchable, comparable, and one command from installed. Live stats from GitHub, npm and PyPI.

Agent Skills MCP Servers Plugins Subagents Coding Agents

Collections Official publishers Glossary Blog Search Saved Feedback

Privacy Terms llms.txt Sitemap

made with ♥ · © 2026 aaaa.fyi

Independent project · real data from public registries

home/skills/security

home/skills/security

Security Skills

1134 security agent skills for Claude Code and AI agents, ranked by real installs from npm, PyPI and skills.sh. entra-app-registration leads with 471k installs a month.

#Type

1entra-app-registrationGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API perSkillsJul 2026471k1.3k
2azure-complianceRun Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: SkillsJul 2026470k1.3k
3azure-rbacOfficial agent plugin providing skills and MCP server configurations for Azure scenarios.SkillsJul 2026466k1.3k
4better-auth-best-practicesAgent skill from better-auth/skillsSkillsJul 202678k203
5firebase-security-rules-auditorA skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.SkillsJul 202676k386
6audit-websiteAudit a website with the squirrelscan CLI and fix the findings in code. Runs SEO, performance, security, technical, content, accessibility, and 15 other rule categories (260+ rules), returns an LLM-opSkillsJul 202665k85
7golang-securitySecurity best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookies, secrets management, memory safety, anSkillsJul 202634k2.7k
8create-auth-skillAgent skill from better-auth/skillsSkillsJul 202630k204
9persona-it-adminAdminister IT — monitor security and configure Workspace.SkillsJul 202624k30k
10gws-modelarmorGoogle Model Armor: Filter user-generated content for safety.SkillsJul 202624k30k
11gws-modelarmor-create-templateGoogle Model Armor: Create a new Model Armor template.SkillsJul 202624k30k
12gws-modelarmor-sanitize-promptGoogle Model Armor: Sanitize a user prompt through a Model Armor template.SkillsJul 202623k30k
13gws-modelarmor-sanitize-responseGoogle Model Armor: Sanitize a model response through a Model Armor template.SkillsJul 202623k30k
14better-auth-security-best-practicesAgent skill from better-auth/skillsSkillsJul 202621k203
15firestore-security-rules-auditorAgent Skills for FirebaseSkillsJul 202620k387
16security-requirement-extractionMulti-harness agentic plugin marketplace for Claude Code, Codex CLI, Cursor, OpenCode, GitHub Copilot, and Gemini CLISkillsJul 202616k38k
17security-and-hardeningHardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessSkillsJul 202615k80k
18turnstile-spinSet up Cloudflare Turnstile end-to-end in a project. Scan the codebase, create the widget via the Cloudflare API, embed it on the right forms, wire canonical server-side siteverify in the customer's eSkillsJul 202614k2.5k
19solidity-securityMaster smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing sSkillsJul 202613k38k
20k8s-security-policiesMulti-harness agentic plugin marketplace for Claude Code, Codex CLI, Cursor, OpenCode, GitHub Copilot, and Gemini CLISkillsJul 202612k38k
21security-reviewSecurity code review for vulnerabilities. Use when asked to "security review", "find vulnerabilities", "check for security issues", "audit security", "OWASP review", or review code for injection, XSS,SkillsJul 202611k879
22auth-implementation-patternsMaster authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIsSkillsJul 202611k38k
23secrets-managementImplement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets, or securing CI/CD envSkillsJul 202610k38k
24ai-prompt-engineering-safety-reviewComprehensive AI prompt engineering safety review and improvement prompt. Analyzes prompts for safety, bias, security vulnerabilities, and effectiveness while providing detailed improvement recommendaSkillsJul 20269.9k37k
25mtls-configurationConfigure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing zero-trust networking, certificate management, or securing internal service communication.SkillsJul 20267.9k38k
26security-scanScan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, anSkillsJul 20266.0k232k
27ctf-miscProvides miscellaneous CTF challenge techniques for problems that do not cleanly fit the main categories. Use for encoding puzzles, pyjails, bash jails, RF/SDR, DNS oddities, unicode tricks, esoteric SkillsJul 20265.7k2.8k
28security-best-practicesSkills Catalog for CodexSkillsJul 20265.6k24k
29audit-context-buildingTrail of Bits Claude Code skills for security research, vulnerability detection, and audit workflowsSkillsJul 20264.5k6.2k
30standupOpen source repository of plugins primarily intended for knowledge workers to use in Claude CoworkSkillsJul 20264.1k23k
31searchSearch across all connected sources in one query. Trigger with "find that doc about...", "what did we decide on...", "where was the conversation about...", or when looking for a decision, document, orSkillsJul 20264.0k23k
32secret-scanningGuide for configuring and managing GitHub secret scanning, push protection, custom patterns, and secret alert remediation. For pre-commit secret scanning in AI coding agents via the GitHub MCP Server,SkillsJul 20263.9k37k
33security-threat-modelSkills Catalog for CodexSkillsJul 20263.4k24k
34claude-settings-auditAnalyze a repository to generate recommended Claude Code settings.json permissions. Use when setting up a new project, auditing existing settings, or determining which read-only bash commands to allowSkillsJul 20263.3k879
35squirrelscansquirrelscan audits websites for SEO, performance, security, accessibility, content, and structured data issues (260+ rules) and scores site health, via the squirrel CLI. Use when the user wants to chSkillsJul 20262.9k85
36ghost-scan-secretsGhost Security's collection of AppSec skills for AI coding agentsSkillsMar 20262.8k399
37sentry-sdk-upgradeTeach your AI coding assistant how to use Sentry - setup, debugging, alerts, and moreSkillsJul 20262.4k240
38oauthConfigure OAuth providers (Google, Apple, Microsoft, Facebook, GitHub, etc.) to work with portless local dev URLs. Use when setting up OAuth redirect URIs, fixing "redirect_uri_mismatch" or "invalid rSkillsJul 20262.4k10k
39skill-scannerScan agent skills for security issues. Use when asked to "scan a skill",SkillsJul 20262.1k879
40security-auditSecurity audit of a codebase — web apps, APIs, services, CLI tools, libraries, daemons, and more. Use when asked to find security bugs, do a security review, audit for vulnerabilities, or pen-test theSkillsJul 20262.1k2.6k
41spring-boot-security-jwt Modular plugin marketplace for Claude Code and agentic CLIs, with validated, spec-driven skills, agents, commands, and workflows for Java, TypeScript, Python, PHP, AWS, and AI.SkillsJun 20261.9k310
42typescript-security-review Modular plugin marketplace for Claude Code and agentic CLIs, with validated, spec-driven skills, agents, commands, and workflows for Java, TypeScript, Python, PHP, AWS, and AI.SkillsJun 20261.6k310
43aws-sdk-java-v2-kmsProvides AWS Key Management Service (KMS) patterns using AWS SDK for Java 2.x. Use when creating/managing encryption keys, encrypting/decrypting data, generating data keys, digital signing, key rotatiSkillsJun 20261.6k310
44aws-sdk-java-v2-secrets-managerProvides AWS Secrets Manager patterns for AWS SDK for Java 2.x, including secret retrieval, caching, rotation-aware access, and Spring Boot integration. Use when storing or reading secrets in Java serSkillsJun 20261.6k310
45create-authScaffold and implement authentication in TypeScript/JavaScript apps using Better Auth. Detect frameworks, configure database adapters, set up route handlers, add OAuth providers, and create auth UI paSkillsJul 20261.5k204
46deal-with-security-advisoryThe open-source app everyone uses to manage agents at workSkillsJul 20261.4k6
47code-securitySecurity guidelines for writing secure code. Use when writing code, reviewing code for vulnerabilities, or asking about secure coding practices like 'check for SQL injection' or 'review security'. IMPSkillsJun 20261.3k248
48firebase-auth-basicsAgent Skills for FirebaseSkillsJul 20261.3k387
49semgrepRun Semgrep static analysis scans and create custom detection rules. Use when asked to scan code with Semgrep, find security vulnerabilities, write custom YAML rules, or detect specific bug patterns. SkillsJun 2026993248
50llm-securitySecurity guidelines for LLM applications based on OWASP Top 10 for LLM 2025. Use when building LLM apps, reviewing AI security, implementing RAG systems, or asking about LLM vulnerabilities like 'promSkillsJun 2026911248

More skills categories

Coding2061 Marketing1580 Design1479 Automation994 Testing985 Media908 Infrastructure902 Data883 Finance840 Planning797 All Skills →