Agent skills · Security & identity

50 listings on this page, in order of arrival. Each one has its own page with README, repository facts and source links.

1. web-design-guidelines ★ 30,851
   Review UI code for Web Interface Guidelines compliance. Use when asked to "review my UI", "check accessibility", "audit design", "review UX"
2. writing-guidelines ★ 30,851
   Review docs/prose for Writing Guidelines compliance. Use when asked to "review my docs", "check writing style", "audit prose", "review docs
3. agent-owasp-compliance ★ 38,819
   Check any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks. Use this skill when: - Evaluating an agent sys
4. agent-skill-stack ★ 38,819
   Find, evaluate, and assemble the smallest compatible set of AI Agent Skills for an end-to-end natural-language goal. Use when a user wants S
5. desk-open ★ 38,819
   Create and open a new desk in the workshop. Sets up the folder structure, initial journal, and desk identity so the next session that sits d
6. flowstudio-power-automate-governance ★ 38,819
   Govern Power Automate flows and Power Apps at scale using the FlowStudio MCP cached store. Classify flows by business impact, detect orphane
7. gdpr-compliant ★ 38,819
   Apply GDPR-compliant engineering practices across your codebase. Use this skill whenever you are designing APIs, writing data models, buildi
8. resemble-detect ★ 38,819
   Deepfake detection and media safety — detect AI-generated audio, images, video, and text, trace synthesis sources, apply watermarks, verify
9. security-review ★ 38,819
   AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component intera
10. typespec-create-api-plugin ★ 38,819
    Generate a TypeSpec API plugin with REST operations, authentication, and Adaptive Cards for Microsoft 365 Copilot
11. algorand-vulnerability-scanner ★ 6,975
    Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validatio
12. audit-context-building ★ 6,975
    Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere. Use
13. cairo-vulnerability-scanner ★ 6,975
    Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address c
14. codeql ★ 6,975
    Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql"
15. cosmos-vulnerability-scanner ★ 6,975
    Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence
16. firebase-apk-scanner ★ 6,975
    Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed clo
17. fp-check ★ 6,975
    Systematically verifies suspected security bugs to eliminate false positives, producing a TRUE POSITIVE or FALSE POSITIVE verdict with docum
18. semgrep ★ 6,975
    Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every
19. semgrep-rule-creator ★ 6,975
    Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or buil
20. spec-to-code-compliance ★ 6,975
    Check code against the documentation that specifies it - which requirements hold, which the code contradicts, which are absent, and what the
21. substrate-vulnerability-scanner ★ 6,975
    Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin
22. ton-vulnerability-scanner ★ 6,975
    Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts, and
23. trailmark-variant-neighborhood ★ 6,975
    Expands one confirmed or suspected vulnerability into a Trailmark graph neighborhood of variant candidates by finding sibling functions, sha
24. variant-analysis ★ 6,975
    Hunts for the other instances of a bug already found — the variants of one root cause across a codebase. Use immediately after a vulnerabili
25. vulnerability-triage-brocards ★ 6,975
    This skill should be used when the user asks to "triage a vulnerability report", "assess a CVE", "evaluate a bug bounty submission", "decide
26. yara-rule-authoring ★ 6,975
    Guides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing YARA rules. C
27. hf-cloud-sagemaker-iam-preflight ★ 11,032
    Ensure a usable SageMaker execution role exists before deploying or training. Use this skill whenever about to create a SageMaker endpoint,
28. ai-security ★ 25,768
    Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent to
29. apple-hig-expert ★ 25,768
    Audits and designs iOS/macOS/watchOS/visionOS interfaces against the Apple Human Interface Guidelines, including the Liquid Glass design lan
30. compliance-os ★ 25,768
    Compliance OS — meta-orchestrator that lets compliance teams CONFIGURE which frameworks apply, COMPUTE cross-framework control overlap, SIMU
31. compliance-readiness ★ 25,768
    /cs:compliance-readiness <program> — Multi-framework compliance officer 6-question forcing interrogation of any compliance program. Use befo
32. dossier ★ 25,768
    Decision-grade entity research skill — produces a hypothesis-tested dossier on a specific company, person, nonprofit, or government org, not
33. isms-audit-expert ★ 25,768
    Information Security Management System (ISMS) audit expert for ISO 27001 compliance verification, security control assessment, and certifica
34. iso42001-specialist ★ 25,768
    ISO/IEC 42001:2023 AI Management System (AIMS) specialist for compliance teams running internal audits. Three decisions: (1) Where are the g
35. senior-secops ★ 25,768
    Senior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices.
36. soc2-compliance ★ 25,768
    Use when the user asks to prepare for SOC 2 audits, map Trust Service Criteria, build control matrices, collect audit evidence, perform gap
37. django-access-review ★ 986
    Django access control and IDOR security review. Use when reviewing Django views, DRF viewsets, ORM queries, or any Python/Django code handli
38. security-review ★ 986
    Security code review for vulnerabilities. Use when asked to "security review", "find vulnerabilities", "check for security issues", "audit s
39. better-auth-best-practices ★ 217
    Configure Better Auth server and client, set up database adapters, manage sessions, add plugins, and handle environment variables. Use when
40. create-auth ★ 217
    Scaffold and implement authentication in TypeScript/JavaScript apps using Better Auth. Detect frameworks, configure database adapters, set u
41. two-factor-authentication-best-practices ★ 217
    Configure TOTP authenticator apps, send OTP codes via email/SMS, manage backup codes, handle trusted devices, and implement 2FA sign-in flow
42. google-chat ★ 417
    Interact with Google Chat - send, read, edit, delete and react to messages, share images and files, reply in threads, and manage spaces and
43. google-docs ★ 417
    Interact with Google Docs - create documents, search by title, read content, and edit text. Use when user asks to: create a Google Doc, find
44. google-drive ★ 417
    Interact with Google Drive - search files, find folders, list contents, download files, upload files, create folders, move, copy, rename, an
45. google-slides ★ 417
    Read and write Google Slides presentations - get text, find presentations, create presentations, add slides, replace text, and manage slide
46. arkit-camera-access-providers ★ 60
    Build and debug ARKit camera access providers for visionOS 27: CameraFrameProvider and CameraRegionProvider. Use when accessing camera frame
47. arkit-hand-tracking-provider ★ 60
    Build and debug HandTrackingProvider on visionOS 27. Use when implementing hand anchors, hand joint transforms, custom hand gestures, hand-d
48. arkit-visionos-developer ★ 60
    Router for ARKit features on visionOS 27, including ARKitSession setup, authorization, provider selection, anchor processing, and RealityKit
49. character-design ★ 237
    Build consistent character designs and character media with genmedia. Use this for original characters, reference sheets, expression sheets,
50. fan-cam ★ 237
    Create personalized live sports broadcast fan-cam videos with genmedia. Use this for realistic spectator cutaways, stadium or arena crowd re