Skills.
Give your AI a better way to work.
A skill is a set of written instructions that teaches an AI how to do one job the way it should be done: review a pull request, plan a migration, write the release notes.
Install one here and it travels with your account into Claude, Claude Code, Cursor and every other client you sign in with.
Category: Security
1,833 results · page 56 of 62
- View details
spring-ldapSkillSecurity
Spring LDAP for LDAP/Active Directory integration and authentication. Covers LdapTemplate, @Entry mapping, LdapRepository, and Spring Security integration.
Ready to connect
- View details
spring-profilesSkillSecurity
Configuration and profiles management in Spring Boot 3.x. Covers @Profile, @ConfigurationProperties, property sources, YAML/properties, external configuration, secrets management, and environment-specific beans.
Ready to connect
- View details
spring-securitySkillSecurity
Spring Security JWT authentication for Spring Boot 3. Covers SecurityFilterChain, JWT filter, authentication, authorization, CORS, rate limiting, and security headers.
Ready to connect
- View details
webauthnSkillSecurity
WebAuthn/FIDO2 passwordless authentication. Passkeys, registration and authentication ceremonies, SimpleWebAuthn library, resident credentials, and platform/cross-platform authenticators.
Ready to connect
- View details
agri-food-securitySkillSecurity
Author-guideline skill for Agriculture & Food Security (BMC / Springer Nature, open access). Use to format or check a manuscript for this BMC journal — structure, mandatory BMC declarations, numbered references, and figure specs. Triggers: submit to Agriculture & Food Security, BMC food journal guid
Ready to connect
- View details
bitrix-restSkillSecurity
Covers REST module — registering methods from a custom module, scopes, webhook and OAuth overview, rest / restIntegration settings, link to Engine controllers and ActionFilter\Scope::REST. Applied when exposing module APIs to apps, webhooks, or marketplace integrations. Key terms — rest, OnRestServi
Ready to connect
- View details
bitrix-securitySkillSecurity
CSRF, XSS, SQLi, SSRF, JWT/JWK, access rights, encryption. Use when handling input or auditing security.
Ready to connect
- View details
convex-setup-authSkillSecurity
Set up Convex authentication and authorization. Use for Convex Auth, Better Auth, Clerk, Auth0, JWT providers, auth.config.ts, protected functions, and user mapping.
Ready to connect
- View details
ethics-review-checklistSkillSecurity
Generate a story-specific editorial ethics checklist: consent verification, harm assessment, source protection, vulnerable-subject protocols, conflict-of-interest flags, and public interest justification — tailored to the story's specific risks.
Ready to connect
- View details
ns-security-auditSkillSecurity
Audit and remediate NowStack Mobile security flaws. Use for auth/session abuse, Apple or Stripe payment bypass, Convex authorization, cross-user data leaks, unsafe deep links, R2 uploads, client secrets, SSRF, XSS, or pentest follow-up.
Ready to connect
- View details
ns-setup-google-authSkillSecurity
Set up and verify Google OAuth for NowStack Mobile web and Expo clients against the shared Better Auth and Convex backend. Use for Google sign-in buttons, Google Cloud OAuth clients, callback URLs, missing GOOGLE_CLIENT_ID or GOOGLE_CLIENT_SECRET, or production Google auth rotation.
Ready to connect
- View details
security-and-hardeningSkillSecurity
加固代码以防漏洞。用于处理用户输入、认证、数据存储或外部集成时；用于构建任何接受不可信数据、管理用户会话或与第三方服务交互的功能时。
Ready to connect
- View details
springer-foodSkillSecurity
Shared author-guideline skill for Springer / Springer Nature food journals: Food Engineering Reviews, Food and Bioprocess Technology, Food Security, and the SpringerOpen journal Food Production Processing and Nutrition. Use to format or check a manuscript for a Springer food journal — structure, abs
Ready to connect
- View details
tinycrypt-integrationSkillSecurity
Use when integrating, porting, configuring, or debugging TinyCrypt cryptographic primitives, AES, SHA, HMAC, ECC, CTR/CCM, RNG, or embedded security code
Ready to connect
- View details
wiley-foodSkillSecurity
Shared author-guideline skill for Wiley food & nutrition journals: Comprehensive Reviews in Food Science and Food Safety, Food Frontiers, eFood, Legume Science, Food and Energy Security, Molecular Nutrition & Food Research, Journal of Food Biochemistry, Food Science & Nutrition. Use to format or che
Ready to connect
- View details
api-debugSkillSecurity
Debug REST, GraphQL, webhook, and OAuth/API-key integrations with layered request, auth, schema, and response checks.
Ready to connect
- View details
authorized-web-pentestSkillSecurity
Run an authorized, scoped web application security test with evidence-based findings and strict active-testing guardrails.
Ready to connect
- View details
- View details
security-lensSkillSecurity
Security review lens for evaluating threats, vulnerabilities, and
Ready to connect
- View details
agentclash-cli-setupSkillSecurity
Use when configuring the AgentClash CLI, authenticating with device login or tokens, selecting a workspace, saving default config with link, creating project config with init, resolving API URL precedence, or diagnosing CLI access against production, local, or self-hosted backends.
Ready to connect
- View details
agentclash-security-evaluationSkillSecurity
Use when running client-side security stress harnesses against security challenge packs, measuring leak posture, Agent Vault routing, or HashiCorp Vault runtime leaks with agentclash security commands.
Ready to connect
- View details
auth-patternsSkillSecurity
JWT access/refresh tokens, Passport.js strategies, session management, OAuth. Use when implementing authentication, authorization, or setting up OAuth providers in a NestJS + Next.js app.
Ready to connect
- View details
domain-webSkillSecurity
Use when building web services. Keywords: web server, HTTP, REST API, GraphQL, WebSocket, axum, actix, warp, rocket, tower, hyper, reqwest, middleware, router, handler, extractor, state management, authentication, authorization, JWT, session, cookie, CORS, rate limiting, web development, HTTP servic
Ready to connect
- View details
healthbankoneSkillSecurity
Pull verified medical records and digital-identity context from Health Bank One (https://www.healthbankone.com) via their MCP server. HBO uses OAuth 2.x with per-consumer authorization, so this skill drives an authorization-code grant first, then runs the MCP pull, then ingests the redacted bundle i
Ready to connect
- View details
healthcheckSkillSecurity
Use when auditing or hardening the host running CrawClaw, including security posture review, exposure assessment, firewall or SSH hardening, periodic host audits, or version checks.
Ready to connect
- View details
plan-tddSkillSecurity
Turn a plain-language feature or module description into a reviewed TDD plan. Ask clarifying questions when context is missing, then design behavior cycles and assertions with edge, error, and security scenarios made explicit, and emit a self-contained HTML brief plus a machine-readable YAML plan th
Ready to connect
- View details
updateSkillSecurity
Automates and manages package updates and vulnerability fixes for Rito.
Ready to connect
- View details
cra-produktanforderungenSkillSecurity
Determination of the essential cybersecurity requirements per Annex I Regulation (EU) 2024/2847 – product security properties per Annex I Part I, vulnerability handling requirements per Annex I Part II, cybersecurity risk assessment per Art. 13 CRA, software bill of materials (SBOM),
Ready to connect
- View details
cra-vulnerability-managementSkillSecurity
Establishing and reviewing vulnerability management per Annex I Part II of Regulation (EU) 2024/2847 – coordinated vulnerability disclosure policy (CVD policy), contact point and intake channels for reports, triage and assessment, remediation via security updates, and secure update distribution with
Ready to connect
- View details
grundschuld-sicherungsrechtSkillSecurity
Land charge as loan security – creation and content under §§ 1191 ff. BGB, the collateral agreement as the contractual link between land charge and loan, submission to immediate enforcement under § 794 (1) no. 5 ZPO including clause issuance § 726 ZPO and successor-in-title clause § 727 ZPO.
Ready to connect
What is a skill?
A skill is plain text, usually a SKILL.md file and the scripts it refers to, written for an AI rather than for a person. It carries the steps, the house rules and the examples a good answer needs, so you stop pasting the same briefing into every new chat.
55,111 of the 55,543 skills listed here can be served through ahel today, and they come from public repositories. Each one has its own page with the instructions themselves on it, so you can read what a skill will tell your AI to do before you install it.
Install one and every AI you use gets it
Installing a skill adds it to your gateway and turns it on in the same step. Claude Code surfaces it as a slash command; any client can read the full instructions with the skill_read tool.
Nothing is copied into a project folder. The instructions are served from your account, so the same skill is there in every AI you connect, and turning it off removes it from all of them at once.