Skip to main content

Creators Occupations Docs

Run any Skill in Manus
with one click

Run any Skill in Manus with one click

$ cat README.md

# Skills Marketplace

Discover and explore AI skills built by the community.

$ git remote -v

Twitter
Reddit

$ ls ./resources/

📚Skills Docs
📈Insights
📄Skill Document
📁Official Skills
📄Codex Skills Docs
📋Agent Skills Spec

$ ls ./legal/

📄About
📋Changelog
🔒Privacy Policy
📜Terms of Service

onlinev0.1.0Skill Marketplace

© 2026 Not affiliated with Anthropic.

Run any Skill with one click

Security - Agent Skills | SkillsMP

$pwd:

~
/
categories
/
security

Security

Browse agent skills for security auditing, vulnerability scanning, and authentication. Build secure applications.

openclaw-mac-release.md

from "openclaw/openclaw"

Run or recover OpenClaw macOS release signing, notarization, appcast, and asset promotion.

from "openclaw/openclaw"

Set up and use 1Password CLI for sign-in, desktop integration, and reading or injecting secrets.

n8n-node-add-oauth.md

from "n8n-io/n8n"

Add OAuth2 credential support to an existing n8n node — creates the credential file, updates the node, adds tests, and keeps the CLI constant in sync. Use when the user says /node-add-oauth.

security-review.md

from "affaan-m/ECC"

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

django-security.md

from "affaan-m/ECC"

Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.

security-review.md

from "affaan-m/ECC"

認証の追加、ユーザー入力の処理、シークレットの操作、APIエンドポイントの作成、支払い/機密機能の実装時にこのスキルを使用します。包括的なセキュリティチェックリストとパターンを提供します。

security-review.md

from "affaan-m/ECC"

인증 추가, 사용자 입력 처리, 시크릿 관리, API 엔드포인트 생성, 결제/민감한 기능 구현 시 이 스킬을 사용하세요. 포괄적인 보안 체크리스트와 패턴을 제공합니다.

laravel-security.md

from "affaan-m/ECC"

Laravel security best practices for authn/authz, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure deployment.

quarkus-security.md

from "affaan-m/ECC"

Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security.

security-review.md

from "affaan-m/ECC"

Kimlik doğrulama eklerken, kullanıcı girdisi işlerken, secret'larla çalışırken, API endpoint'leri oluştururken veya ödeme/hassas özellikler uygularken bu skill'i kullanın. Kapsamlı güvenlik kontrol listesi ve kalıplar sağlar.

springboot-security.md

from "affaan-m/ECC"

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.

accessibility.md

from "affaan-m/ECC"

使用 WCAG 2.2 Level AA 标准设计、实施和审计包容性数字产品。运用此技能为 Web 生成语义 ARIA，并为 Web 和原生平台（iOS/Android）生成无障碍特性。

django-security.md

from "affaan-m/ECC"

Django 安全最佳实践、认证、授权、CSRF 防护、SQL 注入预防、XSS 预防和安全部署配置。

django-verification.md

from "affaan-m/ECC"

Django项目的验证循环：迁移、代码检查、带覆盖率的测试、安全扫描，以及在发布或PR前的部署就绪检查。

healthcare-phi-compliance.md

from "affaan-m/ECC"

医疗应用中受保护健康信息（PHI）和个人身份信息（PII）的合规模式。涵盖数据分类、访问控制、审计追踪、加密及常见泄露途径。

hipaa-compliance.md

from "affaan-m/ECC"

针对医疗隐私和安全工作的HIPAA特定入口点。当任务明确围绕HIPAA、PHI处理、受保实体、BAA、违规态势或美国医疗合规要求时使用。

kotlin-ktor-patterns.md

from "affaan-m/ECC"

Ktor 服务器模式，包括路由 DSL、插件、身份验证、Koin DI、kotlinx.serialization、WebSockets 和 testApplication 测试。

laravel-security.md

from "affaan-m/ECC"

Laravel 安全最佳实践，涵盖认证/授权、验证、CSRF、批量赋值、文件上传、密钥管理、速率限制和安全部署。

nodejs-keccak256.md

from "affaan-m/ECC"

防止 JavaScript 和 TypeScript 中的以太坊哈希错误。Node 的 sha3-256 是 NIST SHA3，而非以太坊 Keccak-256，会静默破坏选择器、签名、存储槽和地址推导。

santa-method.md

from "affaan-m/ECC"

具有收敛循环的多智能体对抗验证。两个独立的审查代理必须都通过，输出才能发送。

security-review.md

from "affaan-m/ECC"

在添加身份验证、处理用户输入、处理机密信息、创建API端点或实现支付/敏感功能时使用此技能。提供全面的安全检查清单和模式。

springboot-security.md

from "affaan-m/ECC"

Java Spring Boot 服务中认证/授权、验证、CSRF、密钥、标头、速率限制和依赖安全性的 Spring Security 最佳实践。

security-review.md

from "affaan-m/ECC"

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

security-review.md

from "affaan-m/ECC"

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

laravel-security.md

from "affaan-m/ECC"

Laravel security best practices for authn/authz, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure deployment.

django-security.md

from "affaan-m/ECC"

Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.

healthcare-phi-compliance.md

from "affaan-m/ECC"

Protected Health Information (PHI) and Personally Identifiable Information (PII) compliance patterns for healthcare applications. Covers data classification, access control, audit trails, encryption, and common leak vectors.

hipaa-compliance.md

from "affaan-m/ECC"

HIPAA-specific entrypoint for healthcare privacy and security work. Use when a task is explicitly framed around HIPAA, PHI handling, covered entities, BAAs, breach posture, or US healthcare compliance requirements.

perl-security.md

from "affaan-m/ECC"

Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies.

quarkus-security.md

from "affaan-m/ECC"

Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security.

santa-method.md

from "affaan-m/ECC"

Multi-agent adversarial verification with convergence loop. Two independent review agents must both pass before output ships.

security-review.md

from "affaan-m/ECC"

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

springboot-security.md

from "affaan-m/ECC"

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.

from "NousResearch/hermes-agent"

Canvas LMS integration — fetch enrolled courses and assignments using API token authentication.

setup-browser-cookies.md

from "garrytan/gstack"

Import cookies from your real Chromium browser into the headless browse session. Opens an interactive picker UI where you select which cookie domains to import. Use before QA testing authenticated pages. Use when asked to "import cookies", "login to the site", or "authenticate the browser". (gstack)

query-netdata-agents.md

from "netdata/netdata"

Query Netdata Agents (parents and children) directly via their HTTP API on port 19999. Includes a bearer-token helper that mints, caches, and transparently refreshes a per-agent bearer from a long-lived Netdata Cloud token, and auto-detects bearer-protected agents. Use when the user asks how to call an agent's REST API or Function directly, query an agent's logs/metrics/alerts directly, mint a bearer token from a cloud token, or work around bearer protection.

ruview-cli-api.md

from "ruvnet/RuView"

Use the RuView `wifi-densepose` CLI binary (incl. MAT scan/status/zones/survivors/alerts/export subcommands), the REST API (`wifi-densepose-api`, Axum), and the browser/WASM build (`wifi-densepose-wasm`, `wifi-densepose-wasm-edge`). Use when integrating RuView into another program, scripting it from the shell, exposing it over HTTP, or shipping it to the browser / ESP32-WASM3.

from "mem0ai/mem0"

Set up mem0 for this project — API key setup, config, categories, identity

mem0-integrate.md

from "mem0ai/mem0"

Integrate Mem0 into an existing repository using a goal-driven, TDD pipeline. Detects the repo's language automatically and asks the user to pick between Mem0 Platform (managed) and Mem0 Open Source (self-hosted). Writes failing tests before any implementation. Produces a local feature branch plus `.mem0-integration/` artifacts consumed by the paired verification skill. TRIGGER when: user says "integrate mem0", "add mem0 to this repo", "wire mem0 into <repo>", or asks how to add memory to an existing project. DO NOT TRIGGER when: the user wants general SDK usage (use skill:mem0), CLI usage (use skill:mem0-cli), or Vercel AI SDK (use skill:mem0-vercel-ai-sdk). After success, invoke skill:mem0-test-integration to verify in the same workspace (loose coupling).

mem0-test-integration.md

from "mem0ai/mem0"

Verify a Mem0 integration produced by /mem0-integrate. Runs in the same workspace on the same branch (loose coupling) — installs dependencies, runs the repo's native test suite, then exercises a real end-to-end smoke flow against the user's API key. Produces a scorecard. TRIGGER when: user has just run /mem0-integrate and says "verify", "test the integration", "run /mem0-test-integration", or when a .mem0-integration/ directory exists and tests have not been run yet on the current branch. DO NOT TRIGGER when: the user wants to run general project tests (defer to the repo's native test command), or when no prior /mem0-integrate run exists in the current branch (ask them to run /mem0-integrate first). This skill ONLY catches compile and runtime bugs by design. Logical integration errors — wrong data stored, wrong time retrieved, wrong user scoping — are on the human reviewer.

socialite-development.md

from "coollabsio/coolify"

Manages OAuth social authentication with Laravel Socialite. Activate when adding social login providers; configuring OAuth redirect/callback flows; retrieving authenticated user details; customizing scopes or parameters; setting up community providers; testing with Socialite fakes; or when the user mentions social login, OAuth, Socialite, or third-party authentication.

agent-authentication.md

from "ruvnet/ruflo"

Agent skill for authentication - invoke with $agent-authentication

agent-security-manager.md

from "ruvnet/ruflo"

Agent skill for security-manager - invoke with $agent-security-manager

from "ruvnet/ruflo"

Claims-based authorization for agents and operations. Grant, revoke, and verify permissions for secure multi-agent coordination. Use when: permission management, access control, secure operations, authorization checks. Skip when: open access, no security requirements, single-agent local work.

security-audit.md

from "ruvnet/ruflo"

Comprehensive security scanning and vulnerability detection. Includes input validation, path traversal prevention, CVE detection, and secure coding pattern enforcement. Use when: authentication implementation, authorization logic, payment processing, user data handling, API endpoint creation, file upload handling, database queries, external API integration. Skip when: read-only operations on public data, internal development tooling, static documentation, styling changes.

browser-auth-flow.md

from "ruvnet/ruflo"

Probe a site's authentication flow for redirect leaks, missing CSRF, weak session cookies, and OAuth misconfiguration; produces an auth findings.md

browser-login.md

from "ruvnet/ruflo"

Drive an authentication flow once, sanitize cookies through AIDefence, and vault a reusable cookie handle in browser-cookies for future sessions

security-scan.md

from "ruvnet/ruflo"

Run full security scans on the codebase using Ruflo security tools