Security agent skills
Compare skills for vulnerability scanning, secret detection, dependency review, policy checks, audit notes, and security-aware workflows.
Built for teams looking for AI agent skills that can help scan projects, summarize risks, and prepare reviewable remediation steps.
Matched
16
Stars
219K
Workflow
Scan
Output
Risk notes
Agent jobs
These pages are built for high-intent search and for agents that need a structured shortlist before installing third-party code.
01
Scan repositories for common risky patterns
02
Summarize dependency and secret scanning results
03
Prepare remediation steps for maintainers
04
Add policy-aware checks before installing third-party skills
Task routes
Ranked shortlist
#01
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
100
Quality
100
Trust
70
Fit
$ npx skills add CISOfy/lynis#02
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
100
Quality
100
Trust
72
Fit
$ npx skills add future-architect/vuls#03
A static analysis security vulnerability scanner for Ruby on Rails applications
100
Quality
100
Trust
69
Fit
$ npx skills add presidentbeef/brakeman#04
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
100
Quality
100
Trust
74
Fit
$ npx skills add projectdiscovery/nuclei#05
A vulnerability scanner for container images and filesystems
100
Quality
100
Trust
72
Fit
$ npx skills add anchore/grype#06
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
100
Quality
100
Trust
72
Fit
$ npx skills add open-policy-agent/opaEvaluation
Distinguishes confirmed issues from warnings
Documents scanner scope and false-positive behavior
Does not expose secrets in output
Encourages review before high-stakes compliance decisions
Questions
No. They help agents collect signals and summarize risks, but formal audits need qualified human review and organization-specific controls.
They should prioritize confirmed risks, avoid leaking sensitive data, and include clear remediation steps with confidence levels.