Security
The best skills for security-related work, like app security, pentesting, threat detection and incident response.
App Security
[655]
agent-security-hardeningaffaan-m/ECCHarden AI agent runtimes against untrusted input, tool misuse and credential leaks★291K
agent-security-hardeningHarden AI agent runtimes against untrusted input, tool misuse and credential leaks
laravel-securityaffaan-m/ECC★291K
llm-trading-agent-securityaffaan-m/ECCSecure trading agents against prompt injection, runaway spend and key leaks★291K
llm-trading-agent-securitySecure trading agents against prompt injection, runaway spend and key leaks
mcp-dependency-reviewaffaan-m/ECC★291K
perl-securityaffaan-m/ECCHarden Perl input handling, process execution, DBI queries and web code★291K
quarkus-securityaffaan-m/ECCSecure Quarkus apps with JWT and OIDC auth, RBAC, validation and rate limiting★291K
quarkus-securitySecure Quarkus apps with JWT and OIDC auth, RBAC, validation and rate limiting
security-bounty-hunteraffaan-m/ECCHunt remotely reachable vulnerabilities in a repo that qualify for bounty reports★291K
security-bounty-hunterHunt remotely reachable vulnerabilities in a repo that qualify for bounty reports
Pentesting & Recon
[1038]
osint-investigationaffaan-m/ECCWork through sparse-clue OSINT puzzles, geolocation and entity checks from public sources★291K
osint-investigationWork through sparse-clue OSINT puzzles, geolocation and entity checks from public sources
domain-intelNousResearch/hermes-agentRun passive recon on subdomains, SSL certificates, WHOIS and DNS records★258K
godmodeNousResearch/hermes-agentRed team LLMs with jailbreak prompt techniques and compare their guardrails★258K
godmodeRed team LLMs with jailbreak prompt techniques and compare their guardrails
sherlockNousResearch/hermes-agentFind which platforms use a username across more than 400 websites★258K
web-pentestNousResearch/hermes-agentRun authorized web penetration tests with recon, proof-based exploits and reports★258K
browser-auth-flowruvnet/rufloProbe login flows for redirect leaks, missing CSRF, weak cookies and OAuth flaws★79.9K
browser-auth-flowProbe login flows for redirect leaks, missing CSRF, weak cookies and OAuth flaws
api-security-testingusestrix/strix★72.4K
managed-pentesting-with-strixusestrix/strixRun managed Strix pentests of web apps, APIs and repos from the strix cloud CLI★72.4K
managed-pentesting-with-strixRun managed Strix pentests of web apps, APIs and repos from the strix cloud CLI
Threat Detection
[323]
scan-cyber-threatskoala73/worldmonitorPull active malware IOCs, C2 infrastructure and exploited CVE alerts★89.7K
scan-cyber-threatsPull active malware IOCs, C2 infrastructure and exploited CVE alerts
cli-policy-auditcheaper-inference/OmniRouteReview audit logs, access policies and request history from the OmniRoute CLI★82.1K
cli-policy-auditReview audit logs, access policies and request history from the OmniRoute CLI
harness-security-benchruvnet/rufloEvolve a security detection harness against a vulnerability corpus and grade it★79.9K
harness-security-benchEvolve a security detection harness against a vulnerability corpus and grade it
abuselpdb-automationComposioHQ/awesome-claude-skills★78.2K
fraudlabs-pro-automationComposioHQ/awesome-claude-skills★78.2K
ip2proxy-automationComposioHQ/awesome-claude-skills★78.2K
ip2whois-automationComposioHQ/awesome-claude-skills★78.2K
ipdata-co-automationComposioHQ/awesome-claude-skills★78.2K
Incident Response
[146]
oss-forensicsNousResearch/hermes-agentInvestigate GitHub supply-chain incidents with recovery, IOCs and reports★258K
virustotal-automationComposioHQ/awesome-claude-skillsScan files, URLs and domains against VirusTotal reputation data via Composio★78.2K
virustotal-automationScan files, URLs and domains against VirusTotal reputation data via Composio
competition-forensic-timelinezhaoxuya520/reverse-skillCorrelate logs, PCAP and disk artifacts into an incident timeline★43.1K
competition-forensic-timelineCorrelate logs, PCAP and disk artifacts into an incident timeline
digital-forensicszhaoxuya520/reverse-skillAnalyze memory dumps, disk timelines and PCAPs while preserving incident evidence★43.1K
digital-forensicsAnalyze memory dumps, disk timelines and PCAPs while preserving incident evidence
malware-analysiszhaoxuya520/reverse-skill★43.1K
memory-forensicswshobson/agentsAnalyze RAM captures with Volatility to extract processes and artifacts★41.9K
acquiring-disk-image-with-dd-and-dcflddmukul975/Anthropic-Cybersecurity-SkillsMake hash-verified forensic disk images with dd or dcfldd on Linux★35.2K
acquiring-disk-image-with-dd-and-dcflddMake hash-verified forensic disk images with dd or dcfldd on Linux
analyzing-android-malware-with-apktoolmukul975/Anthropic-Cybersecurity-Skills★35.2K
Cloud & Infra Security
[210]
healthcheckopenclaw/openclawAudit and harden server hosts for SSH, firewall, updates, backups and disk encryption★393K
healthcheckAudit and harden server hosts for SSH, firewall, updates, backups and disk encryption
control-d-automationComposioHQ/awesome-claude-skills★78.2K
digicert-automationComposioHQ/awesome-claude-skills★78.2K
dnsfilter-automationComposioHQ/awesome-claude-skills★78.2K
nextdns-automationComposioHQ/awesome-claude-skills★78.2K
turbot-pipes-automationComposioHQ/awesome-claude-skillsRun Turbot Pipes cloud queries and compliance checks through Composio Rube MCP★78.2K
turbot-pipes-automationRun Turbot Pipes cloud queries and compliance checks through Composio Rube MCP
wiz-automationComposioHQ/awesome-claude-skillsQuery Wiz cloud security issues, assets and vulnerabilities through Composio Rube MCP★78.2K
wiz-automationQuery Wiz cloud security issues, assets and vulnerabilities through Composio Rube MCP
cloud-k8szhaoxuya520/reverse-skillAssess cloud, container and Kubernetes setups for metadata SSRF and RBAC gaps★43.1K
cloud-k8sAssess cloud, container and Kubernetes setups for metadata SSRF and RBAC gaps
Reverse Engineering
[106]
binary-diffzhaoxuya520/reverse-skillMigrate function names and offsets across binary versions with structured diffing★43.1K
binary-diffMigrate function names and offsets across binary versions with structured diffing
binary-ninja-reversezhaoxuya520/reverse-skillAnalyze binaries in Binary Ninja with IL views, cross-references and Python automation★43.1K
binary-ninja-reverseAnalyze binaries in Binary Ninja with IL views, cross-references and Python automation
browser-extension-reversezhaoxuya520/reverse-skillReverse engineer Chrome and Firefox extensions to trace manifests and traffic logic★43.1K
browser-extension-reverseReverse engineer Chrome and Firefox extensions to trace manifests and traffic logic
competition-android-hookingzhaoxuya520/reverse-skill★43.1K
competition-bundle-sourcemap-recoveryzhaoxuya520/reverse-skillRecover source maps and bundled JavaScript structure in CTF web challenges★43.1K
competition-bundle-sourcemap-recoveryRecover source maps and bundled JavaScript structure in CTF web challenges
competition-crypto-mobilezhaoxuya520/reverse-skill★43.1K
competition-custom-protocol-replayzhaoxuya520/reverse-skillRecover custom binary or text protocols and replay accepted sessions in CTFs★43.1K
competition-custom-protocol-replayRecover custom binary or text protocols and replay accepted sessions in CTFs
competition-firmware-layoutzhaoxuya520/reverse-skill★43.1K