Skills.
Give your AI a better way to work.
A skill is a set of written instructions that teaches an AI how to do one job the way it should be done: review a pull request, plan a migration, write the release notes.
Install one here and it travels with your account into Claude, Claude Code, Cursor and every other client you sign in with.
Category: Security
1,833 results · page 45 of 62
- View details
zero-trust-assessmentSkillSecurity
Performs a Zero Trust Architecture maturity assessment against NIST SP 800-207 and the CISA Zero Trust Maturity Model v2. Evaluates all five CISA ZT pillars (Identity, Devices, Networks, Applications & Workloads, Data) across maturity stages. Covers microsegmentation readiness, continuous verificati
Ready to connect★ 63
- View details
agentic-code-reviewSkillSecurity
Use when reviewing a diff, pull request, branch, or AI-generated code for correctness, security, regression, test, performance, and maintainability risks before merge.
Ready to connect★ 62
- View details
cash-auditSkillSecurity
Audit changed code for security sharp edges — dangerous defaults, type confusion, and silent failures
Ready to connect★ 62
- View details
review-forkSkillSecurity
Safety-first review of an external pull request from an untrusted fork. Fetches the diff read-only into an isolated worktree, scans for supply-chain / exfiltration / CI-tampering threats, checks scope, then delegates correctness review. Never builds or runs the fork's code.
Ready to connect★ 62
- View details
thermo-nuclear-reviewSkillSecurity
Comprehensive security and correctness audit of a branch's changes. Use for thermo nuclear, thermonuclear, or deep review requests, or branch/PR diff audits focused on bugs, breaking changes, security issues, devex regressions, and feature-gate leaks.
Ready to connect★ 62
- View details
thermosSkillSecurity
Launch both thermo-nuclear review subagents in parallel, then synthesize their findings. Use for thermos, double thermo review, or combined bug/security and code-quality branch audits.
Ready to connect★ 62
- View details
api-connectionSkillSecurity
Configure and use Backoffice API connections. Use when creating outbound HTTP API integrations, configuring OAuth or bearer authentication, starting API OAuth flows, checking auth status, or executing authenticated API requests from automations.
Ready to connect★ 61
- View details
behavioral-analysisSkillSecurity
Analyzes security risks in the AI Agent/MCP Skill catalog. Used when users request to inspect, audit, review, or scan the Skill catalog for potential security risks, including command injection, data leakage, prompt word attacks, stealth access, remote execution, or other malicious activities within
Ready to connect★ 61
- View details
longbridge-market-dataSkillSecurity
Real-time quotes, K-line charts, order book, trade ticks, intraday capital flow, market sentiment temperature, trading session schedule, security lists, exchange rates, and IPO calendar for HK/US/A-share/SG via Longbridge. Also covers ADR premium and FX carry frameworks. Triggers: "股价", "行情", "K线",
Ready to connect★ 60
- View details
mcp-connectionSkillSecurity
Configure and use Backoffice MCP servers. Use when registering remote MCP endpoints, authenticating MCP servers with OAuth or bearer tokens, listing MCP tools, or calling MCP tools from automations.
Ready to connect★ 61
- View details
quality-engineerSkillSecurity
Quality validation specialist covering functional, performance, and security testing to ensure production readiness through evidence-based testing.
Ready to connect★ 61
- View details
attack-chainsSkillSecurity
Detect multi-step exploit sequences where individual steps may appear benign but combine into critical vulnerabilities. Use when analyzing protocols for flash-loan-to-governance chains, oracle manipulation sequences, or cross-contract re-entrancy paths inspired by real-world exploits like Ronin, Wor
Ready to connect★ 60
- View details
context-detectionSkillSecurity
Automatically identify the type of protocol being audited to load appropriate checklists, templates, and vulnerability patterns without manual configuration. Use when starting any new audit to classify the protocol (DeFi lending, AMM, bridge, governance, etc.) and surface the most relevant checks.
Ready to connect★ 60
- View details
cyber-auditSkillSecurity
Lets your agent run security exposure checks and save a structured audit report locally.
Ready to connect★ 60
- View details
effective-agent-skillsSkillSecurity
Lets your agent write and review its own skill instructions, including triggers and safety notes.
Ready to connect★ 60
- View details
fix-reviewSkillSecurity
Lets your agent check whether a fix commit resolves audit findings without introducing new bugs.
Ready to connect★ 60
- View details
methodologySkillSecurity
Comprehensive audit methodology guides covering the full security auditor workflow -- from preparation and AI-assisted analysis through formal verification, economic modeling, report writing, and skill quality scoring. Use when learning audit workflows, selecting testing strategies, or authoring new
Ready to connect★ 60
- View details
move-scannerSkillSecurity
Use when the user wants to audit Move smart contracts for security vulnerabilities, scan Aptos or Sui contracts for resource safety, capability leaks, or module upgrade issues, review Move-based DeFi protocols for object model and linear type violations, or analyze cross-module trust boundaries.
Ready to connect★ 60
- View details
plc-code-analysisSkillSecurity
Standalone skill for multi-perspective PLC code security and quality analysis. Triggers on: "review", "audit", "analyze", "security check", "vulnerability scan", "code review", "check this code", "is this safe", "find issues" when combined with PLC, SCL, ST, LAD, FBD, Structured Text, or block conte
Ready to connect★ 59
- View details
routeros-mac-telnetSkillSecurity
MAC-Telnet protocol (MikroTik Layer-2 terminal/exec over UDP 20561) wire format, session handshake, and MD5 + MTWEI (EC-SRP) authentication. Use when: implementing or debugging a MAC-Telnet client/server, reaching a RouterOS device by MAC address without IP, parsing MAC-Telnet packets, understanding
Ready to connect★ 60
- View details
security-checklistSkillSecurity
Lets your agent check a reference security checklist for guidance during reviews.
Ready to connect★ 60
- View details
skillsSkillSecurity
Root skill definition for the Web3 Audit Plugin providing AI-powered smart contract security auditing across EVM, Solana, Move, Cairo, CosmWasm, and TON platforms. Use as the top-level entry point for understanding plugin capabilities, supported chains, and skill routing.
Ready to connect★ 60
- View details
solana-scannerSkillSecurity
Use when auditing Solana programs for security vulnerabilities, reviewing Anchor or Pinocchio/native Rust smart contracts, checking CPI safety, PDA validation, account ownership, signer verification, or Token-2022 security.
Ready to connect★ 60
- View details
solidity-scannerSkillSecurity
Use when the user wants to audit Solidity smart contracts for security vulnerabilities, scan EVM-compatible contracts for reentrancy, oracle manipulation, access-control, or flash-loan issues, review DeFi protocols on Ethereum, Arbitrum, Optimism, Base, Polygon, or BSC, or generate security audit re
Ready to connect★ 60
- View details
static-analysisSkillSecurity
Lets your agent scan code for security vulnerabilities using CodeQL and Semgrep analysis.
Ready to connect★ 60
- View details
sui-scannerSkillSecurity
Use when the user wants to audit Sui Move smart contracts, scan Sui-specific patterns including object ownership, shared objects, or dynamic fields, review Sui DeFi protocols for object model security issues, or analyze Sui-specific transaction and consensus patterns.
Ready to connect★ 60
- View details
mstar-auditSkillSecurity
Morning Star codebase audit — survey any repository and produce prioritized, self-contained improvement plans for the normal Prepare → Execute flow. Strictly read-only on source code. Use when asked to audit or survey a codebase, find improvement opportunities (bugs, security, performance, test gaps
Ready to connect★ 59
- View details
- View details
achieving-cmmc-level-2-complianceSkillSecurity
Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, manage a compliant POA&M, and ready the organization for a C3PAO a
Ready to connect★ 57
- View details
agent-governanceSkillSecurity
Implement hooks for permission control and security in custom agents. Use when adding security controls, blocking dangerous operations, implementing audit trails, or designing permission governance.
Ready to connect★ 58
What is a skill?
A skill is plain text, usually a SKILL.md file and the scripts it refers to, written for an AI rather than for a person. It carries the steps, the house rules and the examples a good answer needs, so you stop pasting the same briefing into every new chat.
55,111 of the 55,543 skills listed here can be served through ahel today, and they come from public repositories. Each one has its own page with the instructions themselves on it, so you can read what a skill will tell your AI to do before you install it.
Install one and every AI you use gets it
Installing a skill adds it to your gateway and turns it on in the same step. Claude Code surfaces it as a slash command; any client can read the full instructions with the skill_read tool.
Nothing is copied into a project folder. The instructions are served from your account, so the same skill is there in every AI you connect, and turning it off removes it from all of them at once.