Reduce risk
Explore skills for vulnerability checks, secret scanning, dependency review, policy validation, and security-aware automation.
Try this task
I need my agent to scan a project for security risks and summarize what needs attention.
Agent should be able to
Resolve
Returns the best skill, alternatives, install handoff, risk summary, and safety gate.
Text plan
Plain text version for Codex, Claude Code, Cursor, and custom agent runtimes.
Browse
Open the filtered registry view for this workflow and compare candidates manually.
Workflow map
Scan dependencies
Find exposed secrets
Review security findings
Prepare audit notes
Best first installs
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Install
Agent install candidate
Risk
Safe to try
Agent fit
Claude Code + CLI
Updated
May 11, 2026
$ npx skills add CISOfy/lynisAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Install
Agent install candidate
Risk
Safe to try
Agent fit
Claude Code + CLI
Updated
Jun 12, 2026
$ npx skills add future-architect/vulsVulnerability scanner written in Go which uses the data provided by https://osv.dev
Install
Agent install candidate
Risk
Safe to try
Agent fit
Claude Code + CLI
Updated
Jun 20, 2026
$ npx skills add google/osv-scannerSkill shortlist
A static analysis security vulnerability scanner for Ruby on Rails applications
Review before production · Review the audit page, then allow agent install in a sandboxed workflow.
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Low metadata risk · Allow agent install in a sandbox or low-risk workspace, then promote after one successful narrow task.
A vulnerability scanner for container images and filesystems
Low metadata risk · Allow agent install in a sandbox or low-risk workspace, then promote after one successful narrow task.
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Low metadata risk · Allow agent install in a sandbox or low-risk workspace, then promote after one successful narrow task.
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
Low metadata risk · Allow agent install in a sandbox or low-risk workspace, then promote after one successful narrow task.
immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history
Review before production · Review the audit page, then allow agent install in a sandboxed workflow.
Unified Policy as Code
Low metadata risk · Review the audit page, then allow agent install in a sandboxed workflow.
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
Low metadata risk · Allow agent install in a sandbox or low-risk workspace, then promote after one successful narrow task.
Automated All-in-One OS Command Injection Exploitation Tool
Review before production · Require human approval before installing into a real workspace.
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
Low metadata risk · Allow agent install in a sandbox or low-risk workspace, then promote after one successful narrow task.
:cookie: Simple cross-browser cookie-consent plugin written in vanilla js
Low metadata risk · Review the audit page, then allow agent install in a sandboxed workflow.
Generate a customized Privacy Policy and Terms of Use document for your mobile apps
Low metadata risk · Allow agent install in a sandbox or low-risk workspace, then promote after one successful narrow task.
A Security Tool for Bug Bounty, Pentest and Red Teaming.
Low metadata risk · Allow agent install in a sandbox or low-risk workspace, then promote after one successful narrow task.
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
Low metadata risk · Allow agent install in a sandbox or low-risk workspace, then promote after one successful narrow task.
EMBA - The firmware security analyzer
Low metadata risk · Require human approval before installing into a real workspace.
FAQ
These answers are written for both human builders and agents consuming the Registry API.
Start by comparing Lynis, Vuls, Osv Scanner. OpenAgentSkill ranks them by workflow fit, GitHub adoption, trust score, safety gate, and install readiness.
Yes. Use the linked Registry API prompt to query /api/skills/search with the task: "I need my agent to scan a project for security risks and summarize what needs attention." and retrieve install handoff links for the top results.
No. Start with the highest-fit skill, test it in a sandbox workflow, and add companion skills only when the task needs extra coverage.