Skip to main content
skillsmp

Menu

Security

Browse agent skills for security auditing, vulnerability scanning, and authentication

Categories, GitHub stars, and source recency help organize and order the catalog. These signals are not an endorsement, quality certification, safety review, or guarantee of fit. Open a skill detail and inspect its source before use.

89,749 results

discord-user-post
389.0k
openclawopenclaw/openclaw
Post an approved message as the logged-in Discord user through the Discord desktop app. Use for release announcements or other direct user-authored Discord posts; not for OpenClaw channel sends, bots, webhooks, relays, agent sessions, or archive search.
openclaw-ghsa-maintainer
389.0k
openclawopenclaw/openclaw
Inspect, patch, validate, publish, or confirm OpenClaw GHSA security advisories and private-fork state.
openclaw-release-validation
389.0k
openclawopenclaw/openclaw
Test the latest OpenClaw main commit through an isolated OCM copy or an explicitly approved in-place gateway update, then guide structured release feedback.
parallels-discord-roundtrip
389.0k
openclawopenclaw/openclaw
Run macOS Parallels smoke with Discord send, host verification, host reply, and guest readback proof.
release-openclaw-mac
389.0k
openclawopenclaw/openclaw
Run or recover OpenClaw macOS release signing, notarization, appcast, and asset promotion.
telegram-e2e-userbot
389.0k
openclawopenclaw/openclaw
Prove user-visible OpenClaw Telegram behavior on Telegram's Test Server with Convex-leased team credentials; drive real-user turns and record messages, edits, deletions, reactions, typing, or rich content.
add-model-provider
389.0k
openclawopenclaw/openclaw
Add and live-prove a model provider with non-interactive config one-liners, without exposing credentials.
1password
389.0k
openclawopenclaw/openclaw
Set up and use 1Password CLI for sign-in, desktop integration, and reading or injecting secrets.
security-review
253.2k
affaan-maffaan-m/ECC
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
laravel-security
253.2k
affaan-maffaan-m/ECC
Buenas prácticas de seguridad en Laravel para autenticación/autorización, validación, CSRF, asignación masiva, subida de archivos, secretos, limitación de velocidad y despliegue seguro.

Skill content language: Spanish

quarkus-security
253.2k
affaan-maffaan-m/ECC
Buenas prácticas de seguridad en Quarkus para autenticación, autorización, JWT/OIDC, RBAC, validación de entrada, CSRF, gestión de secretos y seguridad de dependencias.

Skill content language: Spanish

security-review
253.2k
affaan-maffaan-m/ECC
Usar este skill al agregar autenticación, manejar entradas de usuario, trabajar con secretos, crear endpoints de API o implementar funcionalidades de pago/sensibles. Proporciona lista de verificación y patrones de seguridad completos.

Skill content language: Spanish

springboot-security
253.2k
affaan-maffaan-m/ECC
Buenas prácticas de Spring Security para autenticación/autorización, validación, CSRF, secretos, cabeceras, limitación de velocidad y seguridad de dependencias en servicios Java Spring Boot.

Skill content language: Spanish

django-security
253.2k
affaan-maffaan-m/ECC
Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.

Skill content language: Japanese

kotlin-ktor-patterns
253.2k
affaan-maffaan-m/ECC
Ktor サーバーパターン（ルーティング DSL、プラグイン、認証、Koin DI、kotlinx.serialization、WebSocket、testApplication テストを含む）。

Skill content language: Japanese

laravel-security
253.2k
affaan-maffaan-m/ECC
Laravel セキュリティベストプラクティス：認証・認可、バリデーション、CSRF、一括割当、ファイルアップロード、シークレット管理、レート制限、安全なデプロイメント

Skill content language: Japanese

perl-security
253.2k
affaan-maffaan-m/ECC
テイントモード、入力バリデーション、安全なプロセス実行、DBIパラメータ化クエリ、Webセキュリティ（XSS/SQLi/CSRF）、perlcriticセキュリティポリシーを網羅する包括的なPerlセキュリティ。

Skill content language: Japanese

quarkus-security
253.2k
affaan-maffaan-m/ECC
Quarkus認証、認可、JWT/OIDC、RBAC、入力検証、CSRF、シークレット管理、依存関係セキュリティのセキュリティベストプラクティス。

Skill content language: Japanese

security-review
253.2k
affaan-maffaan-m/ECC
認証の追加、ユーザー入力の処理、シークレットの操作、APIエンドポイントの作成、支払い/機密機能の実装時にこのスキルを使用します。包括的なセキュリティチェックリストとパターンを提供します。

Skill content language: Japanese

security-scan
253.2k
affaan-maffaan-m/ECC
AgentShield を使用して、Claude Code の設定（.claude/ ディレクトリ）のセキュリティ脆弱性、設定ミス、インジェクションリスクをスキャンします。CLAUDE.md、settings.json、MCP サーバー、フック、エージェント定義をチェックします。

Skill content language: Japanese

springboot-security
253.2k
affaan-maffaan-m/ECC
Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.

Skill content language: Japanese

security-review
253.2k
affaan-maffaan-m/ECC
인증 추가, 사용자 입력 처리, 시크릿 관리, API 엔드포인트 생성, 결제/민감한 기능 구현 시 이 스킬을 사용하세요. 포괄적인 보안 체크리스트와 패턴을 제공합니다.

Skill content language: Korean

laravel-security
253.2k
affaan-maffaan-m/ECC
Laravel security best practices for authn/authz, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure deployment.

Skill content language: Turkish

quarkus-security
253.2k
affaan-maffaan-m/ECC
Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security.

Skill content language: Turkish

security-review
253.2k
affaan-maffaan-m/ECC
Kimlik doğrulama eklerken, kullanıcı girdisi işlerken, secret'larla çalışırken, API endpoint'leri oluştururken veya ödeme/hassas özellikler uygularken bu skill'i kullanın. Kapsamlı güvenlik kontrol listesi ve kalıplar sağlar.

Skill content language: Turkish

springboot-security
253.2k
affaan-maffaan-m/ECC
Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.

Skill content language: Turkish

accessibility
253.2k
affaan-maffaan-m/ECC
使用 WCAG 2.2 Level AA 标准设计、实施和审计包容性数字产品。运用此技能为 Web 生成语义 ARIA，并为 Web 和原生平台（iOS/Android）生成无障碍特性。

Skill content language: Chinese

django-security
253.2k
affaan-maffaan-m/ECC
Django 安全最佳实践、认证、授权、CSRF 防护、SQL 注入预防、XSS 预防和安全部署配置。

Skill content language: Chinese

django-verification
253.2k
affaan-maffaan-m/ECC
Django项目的验证循环：迁移、代码检查、带覆盖率的测试、安全扫描，以及在发布或PR前的部署就绪检查。

Skill content language: Chinese

healthcare-phi-compliance
253.2k
affaan-maffaan-m/ECC
医疗应用中受保护健康信息（PHI）和个人身份信息（PII）的合规模式。涵盖数据分类、访问控制、审计追踪、加密及常见泄露途径。

Skill content language: Chinese

hipaa-compliance
253.2k
affaan-maffaan-m/ECC
针对医疗隐私和安全工作的HIPAA特定入口点。当任务明确围绕HIPAA、PHI处理、受保实体、BAA、违规态势或美国医疗合规要求时使用。

Skill content language: Chinese

kotlin-ktor-patterns
253.2k
affaan-maffaan-m/ECC
Ktor 服务器模式，包括路由 DSL、插件、身份验证、Koin DI、kotlinx.serialization、WebSockets 和 testApplication 测试。

Skill content language: Chinese

laravel-security
253.2k
affaan-maffaan-m/ECC
Laravel 安全最佳实践，涵盖认证/授权、验证、CSRF、批量赋值、文件上传、密钥管理、速率限制和安全部署。

Skill content language: Chinese

nodejs-keccak256
253.2k
affaan-maffaan-m/ECC
防止 JavaScript 和 TypeScript 中的以太坊哈希错误。Node 的 sha3-256 是 NIST SHA3，而非以太坊 Keccak-256，会静默破坏选择器、签名、存储槽和地址推导。

Skill content language: Chinese

parallel-execution-optimizer
253.2k
affaan-maffaan-m/ECC
当用户希望通过并行工作、并发 agents、批量工具调用、隔离 worktree 或多条独立验证通道来大幅加速任务、同时不损失正确性时使用。

Skill content language: Chinese

repo-scan
253.2k
affaan-maffaan-m/ECC
用于从固定且可审查的提交安装外部 repo-scan 技能的引导指针。在运行跨栈源代码资产审计前需要安装 repo-scan 时使用；此 ECC 指针本身不执行审计。

Skill content language: Chinese

santa-method
253.2k
affaan-maffaan-m/ECC
具有收敛循环的多智能体对抗验证。两个独立的审查代理必须都通过，输出才能发送。

Skill content language: Chinese

security-review
253.2k
affaan-maffaan-m/ECC
在添加身份验证、处理用户输入、处理机密信息、创建API端点或实现支付/敏感功能时使用此技能。提供全面的安全检查清单和模式。

Skill content language: Chinese

springboot-security
253.2k
affaan-maffaan-m/ECC
Java Spring Boot 服务中认证/授权、验证、CSRF、密钥、标头、速率限制和依赖安全性的 Spring Security 最佳实践。

Skill content language: Chinese

security-review
253.2k
affaan-maffaan-m/ECC
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

Skill content language: Chinese

django-security
253.2k
affaan-maffaan-m/ECC
Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.
security-review
253.2k
affaan-maffaan-m/ECC
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
springboot-security
253.2k
affaan-maffaan-m/ECC
Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.
django-security
253.2k
affaan-maffaan-m/ECC
Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations. Use when reviewing Django authentication, authorization, input handling, or deployment settings.
healthcare-phi-compliance
253.2k
affaan-maffaan-m/ECC
Protected Health Information (PHI) and Personally Identifiable Information (PII) compliance patterns for healthcare applications. Covers data classification, access control, audit trails, encryption, and common leak vectors. Use when code touches PHI or PII in a healthcare system, or when auditing access control, audit trails, or leak vectors.
hipaa-compliance
253.2k
affaan-maffaan-m/ECC
HIPAA-specific entrypoint for healthcare privacy and security work. Use when a task is explicitly framed around HIPAA, PHI handling, covered entities, BAAs, breach posture, or US healthcare compliance requirements.
kotlin-ktor-patterns
253.2k
affaan-maffaan-m/ECC
Ktor server patterns including routing DSL, plugins, authentication, Koin DI, kotlinx.serialization, WebSockets, and testApplication testing. Use when building a Ktor server — routing, plugins, auth, DI, serialization, or tests.
laravel-security
253.2k
affaan-maffaan-m/ECC
Laravel security best practices — authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and secure deployment configurations. Use when reviewing Laravel auth, Eloquent safety, CSRF, XSS, API security, or deployment configuration.