Security skills

Configure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing zero-trust networking, certificate management, or securing internal service communication.

Use Gait when an AI agent can cause real side effects and you need deterministic control plus portable proof. Gait is not an agent framework, not a model host, and not a dashboard. It is an offline-first Go CLI that sits at the tool boundary. Capture every prod agent tool call as a signed, offline-verifiable pack. Enforce fail-closed policy before high-risk actions execute. Turn incidents into CI

Build security Blue Books for sensitive apps

Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.

A Model Context Protocol (MCP) server that enables free web searching using Google search results, with no API keys required. - Search the web using Google search results - No API keys or authentication required - Returns structured results with titles, URLs, and descriptions - Configurable number of results per search 1. Clone or download this repository 2. Install dependencies: 3. Build the serv

Verify fix commits address audit findings without new bugs

You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform compliance audits and provide implementation guidance.

Understand anti-reversing, obfuscation, and protection techniques encountered during software analysis. Use when analyzing protected binaries, bypassing anti-debugging for authorized analysis, or understanding software protection mechanisms.

Red team tactics principles based on MITRE ATT&CK. Attack phases, detection evasion, reporting.

Expert patterns for Plaid API integration including Link token flows, transactions sync, identity verification, Auth for ACH, balance checks, webhook handling, and fintech compliance best practices. Use when: plaid, bank account linking, bank connection, ach, account aggregation.

MCP server to let LLM take full control on your device by providing screen automation toolkit for controlling and interacting with graphical user interfaces. Good for automation, education and having fun. - 📷 Screen capture and analysis - 🖱️ Mouse control (clicking, positioning) - ⌨️ Keyboard input (typing, key presses, hotkeys) 0. Install python 3.12 1. Clone the repository: 2. create virtiual

   Give AI assistants (Claude, Cursor, VS Code, etc.) the ability to control your desktop and automate tasks across any application. Claude Code (one-liner): Other clients (Cursor, VS Code, Windsurf, etc.): Add to your MCP config file: See the MCP Agent README for detailed setup instructions. - Uses your browser session - no need to relogin, keeps all your cookies and auth - Doesn't take

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.

A personal MCP (Model Context Protocol) server for securely storing and accessing API keys across projects using the macOS Keychain. ServeMyAPI allows you to store API keys securely in the macOS Keychain and access them through a consistent MCP interface. This makes it easy to: - Store API keys securely (they're never visible in .env files or config files) - Access the same keys across multiple pr

Triggers on TastyTrade account queries, trading, positions, orders, options analysis.

Context compaction for AI code assistants – Give your AI structured, token-efficient access to 17+ languages including Elixir, Python, TypeScript, JavaScript, Rust, and more. Quick Install · Security · Developers · AI Assistants · Docs The core problem: AI code assistants waste context on blind searches. Grep dumps entire files when you only need a function signature, leaving less room for actual

Release automation for Claw skills and website. Guides through version bumping, tagging, and release verification.

Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.

Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.

A Claude Code skill that integrates the powerful web fuzzer ffuf (Fuzz Faster U Fool) for web security testing and reconnaissance tasks. This skill enables Claude Code to perform intelligent web fuzzing operations using ffuf, making it easier to discover hidden directories, files, subdomains, and API endpoints. - ffuf must be installed on your system - Claude Desktop application - Appropriate auth

Expert malware analyst specializing in defensive malware research,

Netresearch AI skill for assessing and enhancing software projects to meet enterprise-grade standards for security, quality, and automation. This is an Agent Skill following the open standard originally developed by Anthropic and released for cross-platform use. Supported Platforms: - ✅ Claude Code (Anthropic) - ✅ GitHub Copilot - ✅ Other skills-compatible AI agents - OpenSSF Framework Alignment -