Skills.
Give your AI a better way to work.
A skill is a set of written instructions that teaches an AI how to do one job the way it should be done: review a pull request, plan a migration, write the release notes.
Install one here and it travels with your account into Claude, Claude Code, Cursor and every other client you sign in with.
Category: Security
1,840 results · page 20 of 62
- View details
codebase-review-swarmSkillSecurity
Codex adapter for running a rigorous, quote-grounded codebase review or security/QA/accessibility/performance/AI-slop/enhancement audit. Use for full-repo or large-subsystem review reports; not for normal implementation.
Ready to connect★ 467
- View details
mqlSkillSecurity
Use when writing MQL (Mondoo Query Language) queries, working with Mondoo MCP tools, or developing security policies
Ready to connect★ 441
- View details
043-planning-github-issuesSkillSecurity
Use when you need GitHub CLI (`gh`) installation/authentication guidance and an operator-only GitHub issue inventory workflow. The agent does not ingest GitHub issue, milestone, body, comment, title, label, or summary text; requirements analysis must use repository-owned planning artifacts, with iss
Ready to connect★ 439
- View details
044-planning-jiraSkillSecurity
Use when you need Jira CLI (`jira`) installation/authentication guidance and a maintainer-authored Jira issue inventory workflow. The agent does not ingest raw Jira issue or JQL output directly; it asks the Jira project maintainer/operator to author sanitized issue summaries before analysis or @014-
Ready to connect★ 439
- View details
112-java-maven-pluginsSkillSecurity
Use when you need to add or configure Maven plugins in your pom.xml — including quality tools (enforcer, surefire, failsafe, jacoco, pitest, spotbugs, pmd), security scanning (OWASP), code formatting (Spotless), version management, container image build (Jib), build information tracking, and benchma
Ready to connect★ 439
- View details
304-frameworks-spring-boot-securitySkillSecurity
Use when you need to design, review, or improve security in Spring Boot applications — including SecurityFilterChain, OAuth2/JWT resource server patterns, form login basics, method security (@PreAuthorize), CSRF and CORS for APIs, session fixation, security headers, exception handling, password enco
Ready to connect★ 439
- View details
404-frameworks-quarkus-securitySkillSecurity
Use when you need to design, review, or improve security in Quarkus applications — including Quarkus Security with JWT/OIDC, basic auth, @RolesAllowed / @Authenticated / @PermitAll, SecurityIdentity, permission checks, path-based authorization in configuration, exception mapping for auth failures, a
Ready to connect★ 439
- View details
804-regulations-eu-nis2SkillSecurity
Use when reviewing, designing, or modifying Java enterprise systems from a maintainer-authored or maintainer-sanitized NIS2 engineering evidence inventory. Supports essential or important entities, critical-sector services, managed service providers, supply-chain dependencies, and cybersecurity inci
Ready to connect★ 439
- View details
805-regulations-eu-cyber-resilience-actSkillSecurity
Use when reviewing, designing, or modifying Java enterprise products, services, libraries, agents, plugins, connected components, or platform modules that may qualify as products with digital elements and need EU Cyber Resilience Act secure-by-design, vulnerability handling, security update, SBOM, p
Ready to connect★ 439
- View details
812-regulations-eu-product-liability-directiveSkillSecurity
Use when reviewing, designing, or modifying Java enterprise software products, AI-enabled products, RAG assistants, AI agents, generated instructions, related services, automated updates, vulnerability handling, corrective updates, warnings, instructions, or product-safety evidence under Directive (
Ready to connect★ 439
- View details
account-authenticationSkillSecurity
Use when applying for Xiaohongshu account verification (blue check), understanding verification types and benefits, preparing verification application materials, or increasing account credibility and trust
Ready to connect★ 437
- View details
account-safetySkillSecurity
Use when needing to protect account from hacking, unauthorized access, suspension, or other security threats on Xiaohongshu
Ready to connect★ 437
- View details
account-securitySkillSecurity
Use when protecting Xiaohongshu account from unauthorized access, preventing account theft, recovering compromised accounts, or implementing security measures to safeguard account and follower base
Ready to connect★ 437
- View details
improve-backendSkillSecurity
Use when wanting to systematically improve the Go backend - scans for security vulnerabilities, stability risks, performance issues, and code simplification opportunities, then presents 5 ranked findings for the user to choose from
Ready to connect★ 435
- View details
improve-frontendSkillSecurity
Use when wanting to systematically improve the React/TypeScript frontend - scans for security vulnerabilities, stability risks, performance issues, and code simplification opportunities, then presents 5 ranked findings for the user to choose from
Ready to connect★ 435
- View details
winui-code-reviewSkillSecurity
Code quality review for WinUI 3 apps — MVVM compliance, x:Bind correctness, accessibility, theming, security, and performance. Use before committing to catch issues that the compiler and UI tests won't find.
Ready to connect★ 433
- View details
1password-credential-lookupSkillSecurity
This skill should be used when agents need to log into websites, retrieve passwords, or access credentials. CRITICAL - always use find_credential with the website URL, never guess item names.
Ready to connect★ 423
- View details
memstack-automation-api-integrationSkillSecurity
Use this skill when the user says 'API integration', 'connect APIs', 'sync data', 'data mapping', 'rate limiting', or needs system-to-system connectors with authentication, rate limit handling, and error recovery. Generates API integration code with authentication (OAuth, API key, JWT), request/resp
Ready to connect★ 421
- View details
memstack-development-code-reviewerSkillSecurity
Use this skill when the user says 'review code', 'code review', 'check my code', 'audit this', 'review PR', 'review changes', 'what's wrong with this', or is requesting a structured review of code quality, security, performance, or maintainability. Do NOT use for refactoring plans or test generation
Ready to connect★ 421
- View details
memstack-development-performance-auditSkillSecurity
Use this skill when the user says 'performance audit', 'why is it slow', 'optimize performance', 'page speed', 'Core Web Vitals', 'lighthouse', 'load time', or needs to diagnose and fix frontend or backend performance issues. Do NOT use for code reviews or security audits.
Ready to connect★ 421
- View details
memstack-security-api-auditSkillSecurity
Use this skill when the user says 'audit API', 'check API security', 'API routes security', 'endpoint audit', 'check my routes', or needs to verify API route protection. Reviews API endpoints for authentication, authorization, and input validation gaps. Do NOT use for frontend security headers or de
Ready to connect★ 421
- View details
memstack-security-csp-headersSkillSecurity
Use this skill when the user says 'CSP', 'Content-Security-Policy', 'security headers', 'HSTS', 'X-Frame-Options', 'clickjacking', 'unsafe-inline', 'unsafe-eval', or needs to audit, generate, or fix HTTP security headers for a web application. Do NOT use for API route audits or dependency scanning.
Ready to connect★ 421
- View details
memstack-security-dependency-auditSkillSecurity
Use this skill when the user says 'dependency audit', 'npm audit', 'pip audit', 'cargo audit', 'security vulnerabilities', 'outdated packages', 'supply chain', or needs to scan project dependencies for vulnerabilities, abandoned packages, and upgrade risks. Do NOT use for application-level security
Ready to connect★ 421
- View details
memstack-security-owasp-top10SkillSecurity
Use this skill when the user says 'OWASP audit', 'OWASP top 10', 'security audit', 'vulnerability assessment', 'full security check', or needs a comprehensive web application security review against OWASP Top 10 categories. Do NOT use for dependency audits or secret scanning alone.
Ready to connect★ 421
- View details
memstack-security-secrets-scannerSkillSecurity
Use this skill when the user says 'scan for secrets', 'check for leaked keys', 'secrets scanner', 'hardcoded credentials', 'API key leak', or needs to detect exposed secrets in source code. Do NOT use for dependency vulnerabilities or RLS auditing.
Ready to connect★ 421
- View details
cve-source-checkSkillSecurity
Audit CVE/vulnerability source coverage for a technology stack. Maps each component (container, library, base image, runtime) to authoritative CVE feeds, flags gaps, and produces audit-ready reports. Generic: works for any service or stack.
Ready to connect★ 419
- View details
parallel-code-reviewSkillSecurity
Parallel 3-reviewer code review: Security, Business-Logic, Architecture.
Ready to connect★ 419
- View details
security-threat-modelSkillSecurity
Security threat model: scan toolkit for attack surface, supply-chain risks.
Ready to connect★ 419
- View details
AI & LLM SecuritySkillSecurity
LLM and AI application security testing — prompt injection, jailbreak resistance, OWASP LLM Top 10 (2025), RAG and agent/tool-use security, model supply chain, and AI red teaming for authorized assessments
Ready to connect★ 414
- View details
Cryptographic Analysis & AssessmentSkillSecurity
SSL/TLS auditing, cipher suite analysis, hash algorithm identification, encryption implementation review, and cryptographic weakness detection in code
Ready to connect★ 414
What is a skill?
A skill is plain text, usually a SKILL.md file and the scripts it refers to, written for an AI rather than for a person. It carries the steps, the house rules and the examples a good answer needs, so you stop pasting the same briefing into every new chat.
54,764 of the 55,196 skills listed here can be served through ahel today, and they come from public repositories. Each one has its own page with the instructions themselves on it, so you can read what a skill will tell your AI to do before you install it.
Install one and every AI you use gets it
Installing a skill adds it to your gateway and turns it on in the same step. Claude Code surfaces it as a slash command; any client can read the full instructions with the skill_read tool.
Nothing is copied into a project folder. The instructions are served from your account, so the same skill is there in every AI you connect, and turning it off removes it from all of them at once.