Skills.
Give your AI a better way to work.
A skill is a set of written instructions that teaches an AI how to do one job the way it should be done: review a pull request, plan a migration, write the release notes.
Install one here and it travels with your account into Claude, Claude Code, Cursor and every other client you sign in with.
Category: Security
1,840 results · page 35 of 62
- View details
system-administratorSkillSecurity
Manage and troubleshoot computer systems with security-first practices. Trigger on phrases like "system administration", "system admin", "linux admin", "server management", "troubleshoot system".
Ready to connect★ 99
- View details
repo-maintenanceSkillSecurity
Full repository maintenance pipeline that orchestrates all project agents in sequence - code review, accessibility, bundle size, security, API stability, test coverage, ecosystem, and release preparation. Acts as a quality gate before publishing or merging major changes. Use when: maintenance, healt
Ready to connect★ 99
- View details
attack-tree-constructionSkillSecurity
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.
Ready to connect★ 98
- View details
backend-security-coderSkillSecurity
Lets your agent review and write backend code with secure input validation, authentication, and API security practices.
Ready to connect★ 98
- View details
cicd-automation-workflow-automateSkillSecurity
Lets your agent design and set up automated CI/CD pipelines and GitHub Actions workflows.
Ready to connect★ 98
- View details
code-review-checklistSkillSecurity
Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability
Ready to connect★ 98
- View details
codebase-cleanup-deps-auditSkillSecurity
Lets your agent scan project dependencies for known vulnerabilities, license issues, and outdated packages with fix suggestions.
Ready to connect★ 98
- View details
application-securitySkillSecurity
OWASP Top 10 with code examples, SAST/DAST tools, dependency scanning, CSP headers, and input validation patterns. Use when hardening applications, reviewing security posture, or implementing defensive coding practices.
Ready to connect★ 97
- View details
blockchain-web3SkillSecurity
Solidity smart contracts, Web3 development, DeFi protocols, NFTs, EVM chains, Hardhat/Foundry tooling, and blockchain security. Use when writing smart contracts, building dApps, auditing contract security, or integrating Web3 wallets.
Ready to connect★ 97
- View details
core-workflowSkillSecurity
Detailed development workflow patterns, checklists, and standards. Auto-loads for complex tasks, planning, debugging, testing, or when explicit patterns are needed. Contains session protocols, git conventions, security checklists, testing strategy, and communication standards.
Ready to connect★ 97
- View details
generic-code-reviewerSkillSecurity
Review code for bugs, security vulnerabilities, performance issues, accessibility gaps, and CLAUDE.md workflow compliance. Supports any tech stack - HTML/CSS/JS, React, TypeScript, Node.js, Python, NestJS, Next.js, and more. Use when completing features, before commits, or reviewing pull requests.
Ready to connect★ 97
- View details
generic-fullstack-code-reviewerSkillSecurity
Review full-stack code for bugs, security vulnerabilities, performance issues, accessibility gaps, and CLAUDE.md compliance. Enforces TypeScript strict mode, input validation, GPU-accelerated animations, and design system consistency. Use when completing features, before commits, or reviewing pull r
Ready to connect★ 97
- View details
generic-react-code-reviewerSkillSecurity
Review React/TypeScript code for bugs, security vulnerabilities, performance issues, accessibility gaps, and CLAUDE.md workflow compliance. Enforces TypeScript strict mode, GPU-accelerated animations, WCAG AA accessibility, bundle size limits, and surgical simplicity. Use when completing features, b
Ready to connect★ 97
- View details
generic-static-code-reviewerSkillSecurity
Review static site code for bugs, security issues, performance problems, accessibility gaps, and CLAUDE.md compliance. Enforces pure HTML/CSS/JS standards, minimal page weight, mobile-first design. Use when completing features, before commits, or reviewing changes.
Ready to connect★ 97
- View details
tauri-desktopSkillSecurity
Tauri 2.0 project setup, Rust backend + web frontend, plugin system, IPC commands, security model, auto-update, and mobile support. Use when building lightweight cross-platform desktop or mobile apps with Tauri.
Ready to connect★ 97
- View details
test-specialistSkillSecurity
This skill should be used when writing test cases, fixing bugs, analyzing code for potential issues, or improving test coverage for JavaScript/TypeScript applications. Use this for unit tests, integration tests, end-to-end tests, debugging runtime errors, logic bugs, performance issues, security vul
Ready to connect★ 97
- View details
pr-code-reviewerSkillSecurity
Reviews a GitHub pull request or focused branch diff for correctness, regressions, security, compatibility, test gaps, and maintainability. Use when an implementation needs an independent source-aware review before merge. Produces prioritized findings with evidence and actionable fixes. Not for arch
Ready to connect★ 94
- View details
afrexai-compliance-auditSkillSecurity
Run internal compliance audits against major governance and security
Ready to connect★ 92
- View details
api-design-patternsSkillSecurity
Comprehensive API design patterns covering REST, GraphQL, gRPC, versioning, authentication, and modern API best practices
Ready to connect★ 92
- View details
api-gatewaySkillSecurity
Passthrough proxy for direct access to third-party APIs using managed OAuth connections, provided by [Maton](https://maton.ai). The API gateway lets y
Ready to connect★ 92
- View details
audit-codeSkillSecurity
Run a two-pass, multidisciplinary code audit led by a tie-breaker lead, combining security, performance, UX, DX, and edge-case analysis into one prioritized report with concrete fixes. Use when the user asks to audit code, perform a deep review, stress-test a codebase, or produce a risk-ranked remed
Ready to connect★ 92
- View details
auth-systemSkillSecurity
Implement secure authentication and authorization systems with JWT, OAuth2, Session-based auth, and RBAC. Use when: (1) implementing user login/signup, (2) setting up JWT tokens, (3) OAuth2 integration (Google, GitHub, etc.), (4) role-based access control (RBAC), (5) password hashing and validation,
Ready to connect★ 92
- View details
automate-macos-cua-driverSkillSecurity
Build and validate macOS GUI automation with cua-driver and AX trees. Use for permissions, sessions, Chrome interaction, authenticated downloads, or unverified UI actions.
Ready to connect★ 92
- View details
openclaw-shieldSkillSecurity
Security audit engine for OpenClaw configurations. Detects vulnerabilities, misconfigurations, secret leaks, and over-privileged agents. Use when the user asks about security, hardening, config review, or audit of their OpenClaw setup.
Ready to connect★ 92
- View details
prose-styleSkillSecurity
Reusable writing-style contract for agent outputs (reports, ARCH docs, verdicts, threat models). Forces direct prose with concrete evidence, no marketing voice, no hedge words. The single most-referenced skill across the pipeline — used by 28 agents.
Ready to connect★ 93
- View details
architecture-reviewSkillSecurity
Before committing to an implementation plan, run this skill to stress-test the proposed architecture. Catches over-engineering, circular dependencies, missing failure modes, security gaps, and scalability cliffs — before any code is written. Acts as a "second eye" on the plan.
Ready to connect★ 92
- View details
magpie-audit-finding-fixSkillSecurity
For a batch of findings from a non-security audit tool (`<audit-tool>` — ruff / flake8 / mypy / pylint / CodeQL / Apache Verum / Apache Caer / equivalent; full list in the body) against `<upstream>`, draft the smallest fix for each finding. Re-runs the tool after each batch to confirm the findings a
Ready to connect★ 91
- View details
magpie-optimize-skillSkillSecurity
Optimize an existing framework skill (or sweep a set of them) by applying the restructuring patterns proven on the security-skill suite: split an oversized `SKILL.md` into linked sibling docs, lift concrete/project-specific values out of the body into `<project-config>` placeholders, replace in-agen
Ready to connect★ 91
- View details
magpie-pairing-multi-agent-reviewSkillSecurity
Fan a local diff through three independent, axis-focused review passes (correctness, security, conventions), then merge the findings into a single structured report. Each pass is isolated so findings from one axis cannot suppress or bias the others. The merged report uses the same format as pairing-
Ready to connect★ 91
- View details
magpie-pairing-self-reviewSkillSecurity
Run a structured pre-flight self-review on local changes before opening a PR. Reads the diff against a configurable base (default: the merge base of HEAD and the upstream default branch), checks correctness, security, and project conventions, and returns a structured report to the developer. No stat
Ready to connect★ 91
What is a skill?
A skill is plain text, usually a SKILL.md file and the scripts it refers to, written for an AI rather than for a person. It carries the steps, the house rules and the examples a good answer needs, so you stop pasting the same briefing into every new chat.
54,764 of the 55,196 skills listed here can be served through ahel today, and they come from public repositories. Each one has its own page with the instructions themselves on it, so you can read what a skill will tell your AI to do before you install it.
Install one and every AI you use gets it
Installing a skill adds it to your gateway and turns it on in the same step. Claude Code surfaces it as a slash command; any client can read the full instructions with the skill_read tool.
Nothing is copied into a project folder. The instructions are served from your account, so the same skill is there in every AI you connect, and turning it off removes it from all of them at once.