Skills.
Give your AI a better way to work.
A skill is a set of written instructions that teaches an AI how to do one job the way it should be done: review a pull request, plan a migration, write the release notes.
Install one here and it travels with your account into Claude, Claude Code, Cursor and every other client you sign in with.
Category: Security
1,840 results · page 37 of 62
- View details
secure-phaseSkillSecurity
Retroactively verify threat mitigations for a completed phase
Ready to connect★ 87
- View details
software-code-reviewSkillSecurity
Applies systematic code review patterns and checklists. Use when reviewing PRs or diffs for correctness, security, readability, maintainability, and AI-generated changes.
Ready to connect★ 87
- View details
software-security-appsecSkillSecurity
Provides application security guidance for design and implementation. Use when reviewing auth, data handling, supply-chain controls, or AppSec architecture.
Ready to connect★ 87
- View details
vuln-disclosureSkillSecurity
Prepare an evidence-bound vulnerability publication and publish the exact approved advisory through any compatible provider binding with independent readback.
Ready to connect★ 87
- View details
vuln-triageSkillSecurity
Turn verified exact-version vulnerability evidence into bounded remediation and advisory packets without inventing exposure or claiming publication.
Ready to connect★ 87
- View details
adversarySkillSecurity
Pre-implementation red-team analysis. Use when a plan is high-risk, critical path, or expensive to reverse. Challenges plans before code is written — finds edge cases, security holes, scalability bottlenecks, error propagation risks, and integration conflicts. Catches flaws at plan time (10x cheaper
Ready to connect★ 86
- View details
dependency-doctorSkillSecurity
Dependency health management. Detects package manager, checks outdated packages and vulnerabilities, and produces a prioritized update plan.
Ready to connect★ 86
- View details
sentinelSkillSecurity
Automated security gatekeeper. Blocks unsafe code before commit — secret scanning, OWASP top 10, dependency audit, permission checks. A GATE, not a suggestion.
Ready to connect★ 86
- View details
advanced-threat-huntingSkillSecurity
Use when formulating hypotheses and executing deep-dive proactive threat
Ready to connect★ 85
- View details
apiSkillSecurity
How to reach the platform REST API — where prod and dev live, where the API token is (.env), how to authenticate with curl, and how to fetch the OpenAPI spec listing every endpoint. Use whenever you need to read or edit course/homework/project/registration data, or inspect real prod data while debug
Ready to connect★ 85
- View details
apt-threat-huntSkillSecurity
Use when hunting for advanced persistent threat (APT) actor activity,
Ready to connect★ 85
- View details
basic-ioc-enrichmentSkillSecurity
Use when conducting initial reputation and threat intelligence lookups
Ready to connect★ 85
- View details
cloud-vulnerability-triageSkillSecurity
Use when triaging cloud security posture vulnerabilities and contextualizing
Ready to connect★ 85
- View details
cloudsignal-webhooksSkillSecurity
Receive and verify CloudSignal webhooks from Cloudprinter.com. Use when setting up a CloudSignal Webhooks v2.0 receiver, authenticating deliveries by the plaintext `apikey` field in the JSON body (there is NO HMAC signature header), or handling print order/item status signals like CloudprinterOrderV
Ready to connect★ 85
- View details
detection-engineering-coverage-evaluationSkillSecurity
Use when evaluating threat detection opportunities (TDOs), generating synthetic UDM events, evaluating Chronicle rule coverage, and drafting YARA-L 2.0 rules.
Ready to connect★ 85
- View details
domain-get-gti-reportSkillSecurity
Use when fetching GTI threat reputation and WHOIS intelligence for a
Ready to connect★ 85
- View details
domain-get-secops-threat-intelSkillSecurity
Use when retrieving Chronicle SecOps threat intelligence and IOC matches
Ready to connect★ 85
- View details
enrich-iocSkillSecurity
Use when standardizing multi-source threat intelligence enrichment for
Ready to connect★ 85
- View details
fusionauth-webhooksSkillSecurity
Receive and verify FusionAuth webhooks. Use when setting up FusionAuth webhook handlers, debugging JWT signature verification, or handling authentication events like user.create, user.login.success, user.registration.create, or user.delete.
Ready to connect★ 85
- View details
greendot-webhooksSkillSecurity
Receive and authenticate Green Dot Embedded Finance (BaaS) webhooks. Use when setting up a Green Dot partner webhook endpoint, validating the OAuth client_credentials Bearer token (scope post:webhook), handling the optional undocumented x-gd-signature header, echoing the x-GD-RequestId header, retur
Ready to connect★ 85
- View details
group-casesSkillSecurity
Use when clustering related security cases by common entities, campaigns,
Ready to connect★ 85
- View details
hash-get-secops-threat-intelSkillSecurity
Use when retrieving SecOps threat intelligence matches for a SHA256,
Ready to connect★ 85
- View details
investigate-case-external-toolsSkillSecurity
Use when enriching and verifying case artifacts with external threat
Ready to connect★ 85
- View details
investigate-gti-collectionSkillSecurity
Use when investigating a Google Threat Intelligence (GTI) Collection
Ready to connect★ 85
- View details
ip-get-secops-threat-intelSkillSecurity
Use when querying Chronicle SecOps threat intelligence feeds for an IP
Ready to connect★ 85
- View details
okta-webhooksSkillSecurity
Receive and verify Okta Event Hooks. Use when setting up Okta event hook handlers, implementing the one-time verification challenge, authenticating requests with the Authorization header secret, or handling identity events like user.lifecycle.create, user.session.start, user.account.lock, or group.u
Ready to connect★ 85
- View details
pipedrive-webhooksSkillSecurity
Receive and authenticate Pipedrive webhooks. Use when setting up Pipedrive webhook handlers, debugging HTTP Basic Auth verification, or handling CRM events like create.deal, change.person, or delete.activity.
Ready to connect★ 85
- View details
pivot-on-ioc-gtiSkillSecurity
Use when pivoting on GTI campaign identifiers, threat actors, and related
Ready to connect★ 85
- View details
proactive-hunt-gti-campaignSkillSecurity
Use when initiating threat hunting operations driven by GTI threat campaign
Ready to connect★ 85
- View details
report-writing-guidelinesSkillSecurity
Use when structuring, formatting, and refining professional cybersecurity
Ready to connect★ 85
What is a skill?
A skill is plain text, usually a SKILL.md file and the scripts it refers to, written for an AI rather than for a person. It carries the steps, the house rules and the examples a good answer needs, so you stop pasting the same briefing into every new chat.
54,764 of the 55,196 skills listed here can be served through ahel today, and they come from public repositories. Each one has its own page with the instructions themselves on it, so you can read what a skill will tell your AI to do before you install it.
Install one and every AI you use gets it
Installing a skill adds it to your gateway and turns it on in the same step. Claude Code surfaces it as a slash command; any client can read the full instructions with the skill_read tool.
Nothing is copied into a project folder. The instructions are served from your account, so the same skill is there in every AI you connect, and turning it off removes it from all of them at once.