Skills.
Give your AI a better way to work.
A skill is a set of written instructions that teaches an AI how to do one job the way it should be done: review a pull request, plan a migration, write the release notes.
Install one here and it travels with your account into Claude, Claude Code, Cursor and every other client you sign in with.
Category: Security
1,840 results · page 21 of 62
- View details
Exploit Development & Payload EngineeringSkillSecurity
Proof-of-concept development, payload crafting, shellcode analysis, and exploitation technique research for authorized security testing
Ready to connect★ 414
- View details
GRC & ComplianceSkillSecurity
Governance, risk, and compliance — risk assessment and scoring, control mapping across NIST CSF 2.0 / ISO 27001:2022 / SOC 2 / CIS Controls v8, gap analysis, audit evidence preparation, and security policy generation
Ready to connect★ 414
- View details
Malware Analysis & SandboxingSkillSecurity
Static and dynamic malware analysis, YARA rule generation, sandbox configuration, behavioral profiling, and malware family classification
Ready to connect★ 414
- View details
Network Security & Traffic AnalysisSkillSecurity
Network traffic analysis, PCAP parsing, IDS/IPS rule creation, firewall configuration auditing, and network anomaly detection
Ready to connect★ 414
- View details
OT / ICS / SCADA SecuritySkillSecurity
Operational Technology and industrial control system security — Purdue model segmentation, industrial protocol analysis (Modbus, DNP3, S7, EtherNet/IP), PLC/HMI exposure, IEC 62443 alignment, and MITRE ATT&CK for ICS, for authorized and safety-conscious assessments
Ready to connect★ 414
- View details
Purple Team & Adversary EmulationSkillSecurity
Collaborative purple-team operations — threat-informed adversary emulation planning (ATT&CK, CTID, Atomic Red Team, CALDERA), the detect-tune-validate loop, detection coverage measurement (DeTT&CT/Navigator), safe execution and deconfliction, and MTTD/coverage reporting
Ready to connect★ 414
- View details
Reconnaissance & OSINT AutomationSkillSecurity
Passive and active reconnaissance, subdomain enumeration, DNS analysis, technology fingerprinting, and OSINT data correlation for authorized security assessments
Ready to connect★ 414
- View details
Red Team Operations & Engagement PlanningSkillSecurity
Authorized red team engagement planning, C2 architecture design, attack methodology, lateral movement strategy, OPSEC, and professional reporting
Ready to connect★ 414
- View details
Reverse Engineering & Binary AnalysisSkillSecurity
Binary analysis, assembly interpretation, disassembly, decompilation, firmware RE, and protocol reverse engineering
Ready to connect★ 414
- View details
Supply Chain SecuritySkillSecurity
Software supply chain security — SBOM generation and analysis, dependency confusion and typosquatting detection, malicious package indicators, CI/CD pipeline hardening, and artifact provenance/signing (SLSA, Sigstore)
Ready to connect★ 414
- View details
Threat Hunting & IOC AnalysisSkillSecurity
IOC extraction, threat intelligence correlation, MITRE ATT&CK mapping, hunt hypothesis generation, and detection rule creation
Ready to connect★ 414
- View details
Threat Intelligence & CTISkillSecurity
Cyber threat intelligence production — the intelligence cycle, IOC extraction/normalization/enrichment, STIX/TAXII and MISP, structured analytic models (Diamond, Kill Chain, ATT&CK), source scoring, actor/campaign tracking, and finished intelligence reporting
Ready to connect★ 414
- View details
Vulnerability Scanning & AssessmentSkillSecurity
Dependency auditing, CVE detection, configuration security review, CVSS scoring, and prioritized vulnerability reporting
Ready to connect★ 414
- View details
Web Application Security TestingSkillSecurity
OWASP Top 10 testing, injection vulnerability detection, API security assessment, authentication testing, and web vulnerability reporting for authorized assessments
Ready to connect★ 414
- View details
ghost-exoSkillSecurity
The single interface for building, improving, and debugging exo workflows. Routes to one of three intents. BUILD takes a rough idea through interrogation, assessment, resource creation in dependency order, and one manual run, then hands off. IMPROVE runs the observe-and-iterate loop over recent runs
Ready to connect★ 405
- View details
ghost-reportSkillSecurity
Ghost Security — combined security report. Aggregates findings from all scan skills (scan-deps, scan-secrets, scan-code) into a single prioritized report focused on the highest risk, highest confidence issues. Use when the user requests a security overview, vulnerability summary, full security audit
Ready to connect★ 405
- View details
ghost-scan-depsSkillSecurity
Ghost Security - Software Composition Analysis (SCA) scanner. Scans dependency lockfiles for known vulnerabilities, identifies CVEs, and generates findings with severity levels and remediation guidance. Use when the user asks about dependency vulnerabilities, vulnerable packages, CVE checks, securit
Ready to connect★ 405
- View details
ghost-scan-secretsSkillSecurity
Ghost Security - Secrets and credentials scanner. Scans codebase for leaked API keys, tokens, passwords, and sensitive data. Detects hardcoded secrets and generates findings with severity and remediation guidance. Use when the user asks to check for leaked secrets, scan for credentials, find hardcod
Ready to connect★ 405
- View details
ghost-validateSkillSecurity
This skill should be used when the user asks to "validate a finding", "check if a vulnerability is real", "triage a security finding", "confirm a vulnerability", "determine if a finding is a true positive or false positive", or provides a security finding for review. It validates security vulnerabil
Ready to connect★ 405
- View details
convex-http-actionsSkillSecurity
External API integration and webhook handling including HTTP endpoint routing, request/response handling, authentication, CORS configuration, and webhook signature validation
Ready to connect★ 404
- View details
convex-security-auditSkillSecurity
Deep security review patterns for authorization logic, data access boundaries, action isolation, rate limiting, and protecting sensitive operations
Ready to connect★ 404
- View details
convex-security-checkSkillSecurity
Quick security audit checklist covering authentication, function exposure, argument validation, row-level access control, and environment variable handling
Ready to connect★ 404
- View details
create-threat-modelSkillSecurity
Analyze a codebase and produce a structured threat model at .turbo/threat-model.md covering assets, trust boundaries, attack surfaces with existing mitigations, attacker stories, and calibrated severity. Use when the user asks to \"create a threat model\", \"threat model\", \"threat model this codeb
Ready to connect★ 402
- View details
review-codeSkillSecurity
Review code for bugs, security vulnerabilities, API misuse, consistency issues, simplicity problems, or test coverage gaps by running internal reviews and a peer review in parallel and returning combined findings. Single-concern with a type argument, or full review with no argument. Use when the use
Ready to connect★ 402
- View details
review-dependenciesSkillSecurity
Detect package managers and CI action pins, then discover outdated or vulnerable dependencies. Returns structured findings without upgrading. Use when the user asks to \"review dependencies\", \"check for outdated packages\", \"check dependencies\", \"scan dependencies\", \"dependency review\", \"ch
Ready to connect★ 402
- View details
agentsop-multi-tenant-ragSkillSecurity
Security-first SOP for multi-tenant RAG systems. Activate when a calling agent is building, reviewing, or debugging any retrieval pipeline whose vector store is shared across more than one user, organisation, workspace, customer, or permission scope. Encodes the single non-negotiable rule — **filter
Ready to connect★ 398
- View details
auth-implementation-patternsSkillSecurity
Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debugging security issues.
Ready to connect★ 396
- View details
bitcoin-auth-diagnosticsSkillSecurity
Diagnose and troubleshoot bitcoin-auth token generation and verification issues. This skill should be used when users encounter authentication failures, signature verification errors, or integration problems with the bitcoin-auth library.
Ready to connect★ 396
- View details
blockchain-developerSkillSecurity
Expert blockchain developer specializing in smart contract development, DApp architecture, and DeFi protocols. Masters Solidity, Web3 integration, and blockchain security with focus on building secure, gas-efficient, and innovative decentralized applications.
Ready to connect★ 396
- View details
secure-authSkillSecurity
Secure authentication patterns (OWASP, NIST). Use for login, registration, password reset, sessions, JWT, OAuth, MFA, passkeys.
Ready to connect★ 393
What is a skill?
A skill is plain text, usually a SKILL.md file and the scripts it refers to, written for an AI rather than for a person. It carries the steps, the house rules and the examples a good answer needs, so you stop pasting the same briefing into every new chat.
54,764 of the 55,196 skills listed here can be served through ahel today, and they come from public repositories. Each one has its own page with the instructions themselves on it, so you can read what a skill will tell your AI to do before you install it.
Install one and every AI you use gets it
Installing a skill adds it to your gateway and turns it on in the same step. Claude Code surfaces it as a slash command; any client can read the full instructions with the skill_read tool.
Nothing is copied into a project folder. The instructions are served from your account, so the same skill is there in every AI you connect, and turning it off removes it from all of them at once.