Skills.
Give your AI a better way to work.
A skill is a set of written instructions that teaches an AI how to do one job the way it should be done: review a pull request, plan a migration, write the release notes.
Install one here and it travels with your account into Claude, Claude Code, Cursor and every other client you sign in with.
Category: Security
1,840 results · page 18 of 62
- View details
validate-changes-match-specsSkillSecurity
Validate that a branch or pull request implementation matches introduced product, technical, security, and related specs. Use when reviewing or finishing a spec-driven change and resolving mismatches between checked-in specs and implementation.
Ready to connect★ 578
- View details
67-agency-vendor-briefSkillSecurity
Use when hiring OUTSOURCERS — agencies, freelancers, production houses, vendors: scope of work, deliverable specs, number of revision rounds, approval workflow, payment milestones, IP and security clauses, and a post-project vendor evaluation sheet. Triggered when the user mentions 'brief agency', '
Ready to connect★ 574
- View details
android-networkingSkillSecurity
Integrate Retrofit, OkHttp, and Kotlinx Serialization for type-safe API communication in Android. Use when building API clients, adding interceptors, or configuring network security—not standalone MockWebServer or API-test setup.
Ready to connect★ 565
- View details
angular-securitySkillSecurity
Harden Angular apps against XSS, CSP violations, and unauthorized access. Use when implementing XSS protection, Content Security Policy, or auth guards in Angular.
Ready to connect★ 565
- View details
common-exploit-verificationSkillSecurity
Enforce "No Exploit, No Report" policy with PoC construction standards, false-positive filtering, and evidence collection per vulnerability class across backend, frontend, and mobile. Use when validating security findings, constructing exploit proofs, filtering false positives, or writing pentest fi
Ready to connect★ 565
- View details
common-git-collaborationSkillSecurity
Enforce version control best practices for commits, branching, pull requests, and repository security. Use when writing commits, creating branches, merging, or opening pull requests.
Ready to connect★ 565
- View details
common-llm-securitySkillSecurity
OWASP LLM Top 10 (2025) audit checklist for AI applications, agent tools, RAG pipelines, and prompt construction. Use when performing any security review touching LLM client code, prompt templates, agent tools, or vector stores.
Ready to connect★ 565
- View details
common-owaspSkillSecurity
OWASP Top 10 audit checklists for Web Applications (2021), APIs (2023), and Mobile (2024). Use when performing any security review, PR review, or codebase audit touching web, mobile, or API code.
Ready to connect★ 565
- View details
common-pentest-methodologySkillSecurity
PTES-aligned penetration testing methodology for backend, frontend, and mobile. Provides attack taxonomy, exploit techniques per vulnerability class, and platform-specific test matrices. Use when executing pentest workflow, planning security assessments, mapping attack surfaces, or building threat m
Ready to connect★ 565
- View details
common-security-auditSkillSecurity
Probe for hardcoded secrets, injection surfaces, unguarded routes, business logic flaws, and platform-specific weaknesses across backend (Node, Go, Java, Python, Rust), frontend (React, Angular, Vue), and mobile (iOS, Android, Flutter) codebases. Use when performing security audits, vulnerability sc
Ready to connect★ 565
- View details
common-security-standardsSkillSecurity
Enforce universal security protocols for safe, resilient software. Use when implementing authentication, encryption, authorization, input validation, secret management, or any security-sensitive feature across any language or framework.
Ready to connect★ 565
- View details
review-ticketSkillSecurity
Review a ticket or PR through focused specialist lenses: scope, architecture, security, tests, AC coverage, and PR metadata.
Ready to connect★ 565
- View details
security-testSkillSecurity
Fast, continuous DevSecOps pipeline for Pull Requests and active branches. Runs SAST, SCA, and secrets detection to catch vulnerabilities before they merge.
Ready to connect★ 565
- View details
codex-abSkillSecurity
Run an A/B codex review experiment — holistic codex review vs 3 focused dimension passes (security, ecto, liveview) on the branch diff, classify findings, report a panel-value verdict. Use when the branch is fresh, before any codex review runs.
Ready to connect★ 551
- View details
deps-auditSkillSecurity
Audit Hex deps for supply-chain security risk — bidi chars, compile-time exec, maintainer changes, typosquats, CVEs. Use after mix deps.update, when checking if a package upgrade is safe, or reviewing mix.lock PR diffs.
Ready to connect★ 551
- View details
deps-vetSkillSecurity
Record a vetted Hex package version in hex_vet.exs after a security review — manages the audit ledger, not the scanner. Use to approve a dep after /phx:deps-audit findings or to initialize hex_vet.exs.
Ready to connect★ 551
- View details
phx-deps-auditSkillSecurity
Audit Hex deps for supply-chain security risk — bidi chars, compile-time
Ready to connect★ 551
- View details
phx-deps-vetSkillSecurity
Record a vetted Hex package version in hex_vet.exs after a security review
Ready to connect★ 551
- View details
Quality ReviewSkillSecurity
Use after execution to evaluate code quality across correctness, security, performance, and architecture
★ 550
- View details
Security AuditSkillSecurity
OWASP Top 10 and STRIDE security auditing with supply chain analysis
★ 550
- View details
auth-setupSkillSecurity
Lets your agent generate ready-to-use authentication code with JWT, OAuth, and session support.
Ready to connect★ 533
- View details
debug-rlsSkillSecurity
Use when users report access denied errors, see wrong data, RLS policies are not working, or when troubleshooting Row-Level Security issues in Butterbase
Ready to connect★ 533
- View details
config-security-scanSkillSecurity
Scan .claude/ directory for security misconfigurations, exposed secrets, unsafe permissions
Ready to connect★ 531
- View details
dependency-analysis-patternsSkillSecurity
Dependency graph visualization, circular dependency detection, CVE scanning, and license compliance
Ready to connect★ 531
- View details
differential-reviewSkillSecurity
Security-focused differential code review with blast radius analysis, risk-adaptive depth (DEEP/FOCUSED/SURGICAL), git history correlation, and structured finding format. Adapted from Trail of Bits. Use when reviewing PRs, commits, or code changes for security implications.
Ready to connect★ 531
- View details
handoff-templatesSkillSecurity
Templates for inter-agent communication. Standard handoff, QA verdict (PASS/FAIL), escalation, bug report, security finding, and status update formats.
Ready to connect★ 531
- View details
insecure-defaultsSkillSecurity
Detect fail-open configurations, hardcoded secrets, weak authentication defaults, permissive CORS, disabled security features, and other insecure-by-default patterns. Adapted from Trail of Bits. Use during security review or when auditing configuration and initialization code.
Ready to connect★ 531
- View details
ai-threat-testingSkillSecurity
Offensive AI security testing and exploitation framework. Systematically tests LLM applications for OWASP Top 10 vulnerabilities including prompt injection, model extraction, data poisoning, and supply chain attacks. Integrates with pentest workflows to discover and exploit AI-specific threats.
Ready to connect★ 525
- View details
architecting-securitySkillSecurity
Design comprehensive security architectures using defense-in-depth, zero trust principles, threat modeling (STRIDE, PASTA), and control frameworks (NIST CSF, CIS Controls, ISO 27001). Use when designing security for new systems, auditing existing architectures, or establishing security governance pr
Ready to connect★ 518
- View details
configuring-nginxSkillSecurity
Configure nginx for static sites, reverse proxying, load balancing, SSL/TLS termination, caching, and performance tuning. When setting up web servers, application proxies, or load balancers, this skill provides production-ready patterns with modern security best practices for TLS 1.3, rate limiting,
Ready to connect★ 518
What is a skill?
A skill is plain text, usually a SKILL.md file and the scripts it refers to, written for an AI rather than for a person. It carries the steps, the house rules and the examples a good answer needs, so you stop pasting the same briefing into every new chat.
54,764 of the 55,196 skills listed here can be served through ahel today, and they come from public repositories. Each one has its own page with the instructions themselves on it, so you can read what a skill will tell your AI to do before you install it.
Install one and every AI you use gets it
Installing a skill adds it to your gateway and turns it on in the same step. Claude Code surfaces it as a slash command; any client can read the full instructions with the skill_read tool.
Nothing is copied into a project folder. The instructions are served from your account, so the same skill is there in every AI you connect, and turning it off removes it from all of them at once.