Security AI Agent Skills

MseeP.ai Security Assessment A Model Context Protocol server that provides browser automation capabilities using Playwright. This server enables LLMs to interact with web pages, take screenshots, generate test code, web scrapes the page and execute JavaScript in a real browser environment. Test your web applications on real device profiles with a simple command: Natural Language Support for AI Ass

Security auditor for Laravel applications. Analyzes code for vulnerabilities, misconfigurations, and insecure practices using OWASP standards and Laravel security best practices.

Static Application Security Testing (SAST) for code vulnerability

Senior Laravel Engineer role for production-grade, maintainable, and idiomatic Laravel solutions. Focuses on clean architecture, security, performance, and modern standards (Laravel 10/11+).

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities

Use when developing WordPress plugins: architecture and hooks, activation/deactivation/uninstall, admin UI and Settings API, data storage, cron/tasks, security (nonces/capabilities/sanitization/escaping), and release packaging.

Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability

You are a frontend security specialist focusing on Cross-Site Scripting (XSS) vulnerability detection and prevention. Analyze React, Vue, Angular, and vanilla JavaScript code to identify injection poi

API authentication patterns including JWT, OAuth 2.0, API keys, and session-based auth. Covers token generation, validation, refresh strategies, security best practices, and when to use each pattern. Use when implementing API authentication, choosing auth strategy, securing endpoints, or debugging auth issues. Prevents common vulnerabilities like token theft, replay attacks, and insecure storage.

A 165K-line financial intelligence platform that turns Reddit into structured options trade ideas. Built solo in 9 days. The first financial intelligence MCP server in existence. Connect Claude, Cursor, or any MCP-compatible AI to live trading signals, sentiment analysis, and unusual options activity — in one line of config. ROT is the world's first financial intelligence MCP server. No other MCP

Elite code review expert specializing in modern AI-powered code

Expert network engineer specializing in modern cloud networking,

🧠 NeuroLink The Enterprise AI SDK for Production Applications 13 Providers | 58+ MCP Tools | HITL Security | Redis Persistence Enterprise AI development platform with unified provider access, production-ready tooling, and an opinionated factory architecture. NeuroLink ships as both a TypeScript SDK and a professional CLI so teams can build, operate, and iterate on AI features quickly. NeuroLink i

Docker image optimization patterns including multi-stage builds, layer caching, security hardening, and size reduction techniques. Use when building Docker images, optimizing container size, improving build performance, or implementing Docker security best practices. Reduces image sizes by 70-90% and build times by 50-80%.

Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debugging security issues.

Master network protocol reverse engineering including packet analysis, protocol dissection, and custom protocol documentation. Use when analyzing network traffic, understanding proprietary protocols, or debugging network communication.

Expert security auditor specializing in DevSecOps, comprehensive

AI-assisted coding is transforming how software gets built. But the data tells a sobering story: - 1.7x more bugs in AI-generated code compared to human-written code (CodeRabbit, 2025) - 40% of AI-generated code contains security vulnerabilities - 2026 is "the year of technical debt from vibe coding" (Forrester) The root cause is not the AI. It is the absence of engineering discipline between sess

66 skills · 7 commands

After install, run st --cleanup to scan for and remove any malicious AI integrations. Security scanner detects supply chain attacks targeting AI assistants. Why this matters: Some npm packages install MCP servers that phone home to external endpoints, fetch mutable content via IPFS/IPNS, and can inject behavioral modifications into your AI sessions. These supply chain attacks are difficult to dete

This skill should be used when the user asks to "learn ethical hacking", "understand penetration testing lifecycle", "perform reconnaissance", "conduct security scanning", "exploit vulnerabilities", or "write penetration test reports". It provides comprehensive ethical hacking methodology and techniques.

Expert reverse engineer specializing in binary analysis,

This skill should be used when the user asks to "plan a penetration test", "create a security assessment checklist", "prepare for penetration testing", "define pentest scope", "follow security testing best practices", or needs a structured methodology for penetration testing engagements.

A standalone MCP server for API testing and management, allowing AI assistants to interact with RESTful APIs through natural language. Postmancer is an MCP (Model Context Protocol) server that enables AI assistants like Claude to make HTTP requests, manage collections of API endpoints, and test API responses. It provides similar functionality to tools like Postman or Insomnia but designed specific

Expert in secure frontend coding practices specializing in XSS