competition-dpapi-credential-chain
zhaoxuya520
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for DPAPI masterkeys, vault blobs, browser credential stores, protected secrets, domain back…
33.7KGitHub
OPENAGENTSKILL / DIRECTORY
AI Agent Skills
Find a skill for your next task. Explore tools for Codex, Claude Code, Cursor and more.
Results · “ci-cd-security”
81–96 / 163
More filters · 1
Candidates in this shortlist, not the full registry. GitHub stars belong to repositories, not individual skills.
Results: 163
ai-prompt-engineering-safety-review
github
Comprehensive AI prompt engineering safety review and improvement prompt. Analyzes prompts for safety, bias, security vulnerabilities, and effectiveness while providing…
38.5KGitHub
agent-supply-chain
github
Verify supply chain integrity for AI agent plugins, tools, and dependencies. Use this skill when: - Generating SHA-256 integrity manifests for agent plugins or tool pack…
38.5KGitHub
competition-k8s-control-plane
zhaoxuya520
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for Kubernetes API analysis, service-account trust, RBAC edges, admission and controller beh…
33.7KGitHub
competition-container-runtime
zhaoxuya520
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for live container runtime analysis, mounted secrets, sidecars, namespaces, init containers,…
33.7KGitHub
add-integration
simstudioai
Add a complete Sim integration from API docs, covering tools, block, icon, optional triggers, registrations, resolved-secret/model-input safety, and integration conventi…
29.5KGitHub
diagram-design
cathrynlavery
Create branded architecture, IT current-state, flowchart, sequence, state machine, ER/data model, timeline, swimlane, quadrant, radar/spider, polar chart (polar/radial l…
24.2KGitHub
review-standards
promptfoo
Use this skill when asked to review authentication code for security issues.
24.7KGitHub
Njsscan
ajinabraham
njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
SecuritySkill source unconfirmed
436GitHub
YASA Engine
antgroup
YASA is an open-source static program analysis project. Its core innovation lies in a unified intermediate representation called UAST, designed to support multiple progr…
SecuritySkill source unconfirmed
316GitHub
Globstar
DeepSourceCorp
Globstar is a fast, feature-rich, and open-source static analysis toolkit for writing and running code checkers. Based on tree-sitter.
SecuritySkill source unconfirmed
491GitHub
differential-review
trailofbits
Performs security-focused differential review of code changes. Adapts analysis depth to codebase size, uses git blame for context, calculates blast radius by counting ca…
6.9KGitHub
audit-context-building
trailofbits
Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere. Use when starting an audit, threa…
6.8KGitHub
c-review
trailofbits
Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C…
6.8KGitHub
secure-workflow-guide
trailofbits
Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generat…
6.8KGitHub
audit-prep-assistant
trailofbits
Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, en…
6.8KGitHub