Skills by job · page 17
Security skills
439 audited skills for security: 247 SAFE, 147 CAUTION, 45 BLOCK. Threat modelling, penetration testing, secret scanning and vulnerability triage.
Cite
Cite this page
ModelsAtlas. “Security skills”. Retrieved 29 Oct 2026. https://modelsatlas.com/skills/topic/security/page/17
Security Pen Testing
alirezarezvani/claude-skills
380 Claude Code skills & agent skills & plugins (30+ Agents, 70+ custom commands, 380+ skills, customizable references, scripts)for Claude Code, Codex, Gemini CLI, Cursor, and 8 more coding agents — engineering,…
Skill Security Auditor
alirezarezvani/claude-skills
380 Claude Code skills & agent skills & plugins (30+ Agents, 70+ custom commands, 380+ skills, customizable references, scripts)for Claude Code, Codex, Gemini CLI, Cursor, and 8 more coding agents — engineering,…
Threat Detection
alirezarezvani/claude-skills
380 Claude Code skills & agent skills & plugins (30+ Agents, 70+ custom commands, 380+ skills, customizable references, scripts)for Claude Code, Codex, Gemini CLI, Cursor, and 8 more coding agents — engineering,…
Cloud Security
alirezarezvani/claude-skills
380 Claude Code skills & agent skills & plugins (30+ Agents, 70+ custom commands, 380+ skills, customizable references, scripts)for Claude Code, Codex, Gemini CLI, Cursor, and 8 more coding agents — engineering,…
Security Best Practices
davila7/claude-code-templates
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or…
Groq Security Basics
jeremylongshore/claude-code-plugins-plus-skills
Apply Groq security best practices for API key management and data protection.
Mantis Pipeline Adapter
google/mantis
Interactively guides the design and implementation of custom deterministic orchestrator harnesses. Use when a user wants to build their own pipeline to wrap and run Mantis skills reliably. Don't use for executing the…
Last30days
vigolium/vigolium
Researches a topic from the last 30 days across the web, Reddit, and X, surfacing real discussions with engagement metrics and synthesizing them into actionable insights. In an audit, use it for recent domain attack…
Sharp Edges
vigolium/vigolium
Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether…
Common Security Audit
HoangNguyen0403/agent-skills-standard
Probe for hardcoded secrets, injection surfaces, unguarded routes, business logic flaws, and platform-specific weaknesses across backend (Node, Go, Java, Python, Rust), frontend (React, Angular, Vue), and mobile (iOS,…
Deal With Security Advisory
paperclipai/paperclip
Handle confidential GitHub Security Advisory response for Paperclip. Use when coordinating advisory triage, private-fork fixes, CVE/publication steps, and immediate security releases.
Analyzing Supply Chain Malware Artifacts
mukul975/Anthropic-Cybersecurity-Skills
Investigate supply chain attack artifacts including trojanized software
Analyzing Ios App Security With Objection
mukul975/Anthropic-Cybersecurity-Skills
Runtime iOS app security testing with Objection (Frida): inspect keychain and filesystem data, explore app internals at runtime, and validate/bypass client-side protections during authorized mobile assessments.
Building Automated Malware Submission Pipeline
mukul975/Anthropic-Cybersecurity-Skills
Builds an automated malware submission and analysis pipeline that collects
Testing Api For Mass Assignment Vulnerability
mukul975/Anthropic-Cybersecurity-Skills
Tests APIs for mass assignment (auto-binding), OWASP API3:2023, by identifying
Testing Api Security With Owasp Top 10
mukul975/Anthropic-Cybersecurity-Skills
Systematically assesses REST, GraphQL, and gRPC API endpoints against the OWASP
Routines Discover
FlorianBruniaux/claude-code-ultimate-guide
Analyzes the current project to surface high-value Routines use cases across the three trigger types (schedule, API, GitHub events). Usage: /routines-discover
Security Check
FlorianBruniaux/claude-code-ultimate-guide
Quick configuration security check against known threats database
Sonarqube
FlorianBruniaux/claude-code-ultimate-guide
Analyze SonarCloud quality issues for a specific PR
Apk Redteam Pipeline
elementalsouls/Claude-BugHunter
End-to-end Android APK red-team pipeline — automated APK acquisition (Play Store + apkpure + apkmirror fallback), jadx decompilation, secret/URL/JWT/Firebase grep, pinned-cert extraction, exported-component enumeration,…
Bb Local Toolkit
elementalsouls/Claude-BugHunter
Local-tooling companion to the bug-bounty orchestrator — carries the SAME complete bug-bounty workflow, but reach for THIS variant when you also need to resolve where tools, wordlists, and clones are installed on the…
Bug Bounty
elementalsouls/Claude-BugHunter
Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling),…
Bugcrowd Reporting
elementalsouls/Claude-BugHunter
Bugcrowd-specific reporting tactics complementing report-writing: VRT category search-and-fallback strategy when no exact match exists, manual severity override when VRT defaults underrate impact, severity-request…
Cloud Iam Deep
elementalsouls/Claude-BugHunter
Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-credential-discovery privilege analysis. Covers IAM enumeration (aws iam, az role, gcloud iam), STS/AssumeRole…