209 of these skill files have been read, by 223 distinct authors, and what they tell an agent counted. What Vulnerability scanning authors agree on, and what they forbid

• 541

  Semgrep rule variant creator

  Ghosteken/agent-harness/archive/skills-community/semgrep-rule-variant-creator · Skill

  2★ repo

  Production-grade engineering skills and specialist agent personas for AI coding assistants. Orchestrates the full SDLC, from spec to ship, with structured verification gates, anti-rationalization checks, and senior-level engineering discipline.

• 542

  Sql injection testing

  Ghosteken/agent-harness/archive/skills-community/sql-injection-testing · Skill

  2★ repo

  Production-grade engineering skills and specialist agent personas for AI coding assistants. Orchestrates the full SDLC, from spec to ship, with structured verification gates, anti-rationalization checks, and senior-level engineering discipline.

• 543

  Xss html injection

  Ghosteken/agent-harness/archive/skills-community/xss-html-injection · Skill

  2★ repo

  Production-grade engineering skills and specialist agent personas for AI coding assistants. Orchestrates the full SDLC, from spec to ship, with structured verification gates, anti-rationalization checks, and senior-level engineering discipline.

• 544

  Security scanning security sast

  Ghosteken/agent-harness/skills/security-scanning-security-sast · Skill

  2★ repo

  Production-grade engineering skills and specialist agent personas for AI coding assistants. Orchestrates the full SDLC, from spec to ship, with structured verification gates, anti-rationalization checks, and senior-level engineering discipline.

• 545

  Aegis

  IamK77/Skill/skills/engineering/aegis · Skill

  2★ repo

  Agent-era skill suites for Claude Code: engineering lifecycle + distributed systems, gated by the checklist CLI

• 546

  Securecoder scan

  nerdy-krishna/securecoder/skills/security/securecoder-scan · Skill

  2★ repo

  Installable AI-agent skill bundle for OWASP-driven code scanning, fixing, and secure-build supervision. Multi-host (Claude Code, Cursor, Codex, etc). Distilled from the SCCAP platform. Distributed via skills.sh.

• 547

  Semgrep tooling

  xAmirHamza77/PenKit51/skills/semgrep-tooling · Skill

  no license2★ repo

  PenKit51 — Open-source AI penetration testing platform with 63 deep exploitation skills, multi-agent orchestration, PoC-validated findings, and native assistant skills for Claude, ChatGPT, and Grok. Authorized testing only.

• 548

  Source aware sast

  xAmirHamza77/PenKit51/skills/source-aware-sast · Skill

  no license2★ repo

  PenKit51 — Open-source AI penetration testing platform with 63 deep exploitation skills, multi-agent orchestration, PoC-validated findings, and native assistant skills for Claude, ChatGPT, and Grok. Authorized testing only.

• 549

  Sql injection testing

  xAmirHamza77/PenKit51/skills/sql-injection-testing · Skill

  no license2★ repo

  PenKit51 — Open-source AI penetration testing platform with 63 deep exploitation skills, multi-agent orchestration, PoC-validated findings, and native assistant skills for Claude, ChatGPT, and Grok. Authorized testing only.

• 550

  Xss testing

  xAmirHamza77/PenKit51/skills/xss-testing · Skill

  no license2★ repo

  PenKit51 — Open-source AI penetration testing platform with 63 deep exploitation skills, multi-agent orchestration, PoC-validated findings, and native assistant skills for Claude, ChatGPT, and Grok. Authorized testing only.

• 551

  Semgrep rule creator

  Fodhol/skills/plugins/semgrep-rule-creator/skills/semgrep-rule-creator · Skill

  2★ repo

  🚀 Enhance your AI-assisted security workflows with plugins from the Trail of Bits Skills Marketplace for smarter analysis and testing.

• 552

  Semgrep rule variant creator

  Fodhol/skills/plugins/semgrep-rule-variant-creator/skills/semgrep-rule-variant-creator · Skill

  2★ repo

  🚀 Enhance your AI-assisted security workflows with plugins from the Trail of Bits Skills Marketplace for smarter analysis and testing.

• 553

  Semgrep

  Fodhol/skills/plugins/static-analysis/skills/semgrep · Skill

  2★ repo

  🚀 Enhance your AI-assisted security workflows with plugins from the Trail of Bits Skills Marketplace for smarter analysis and testing.

• 554

  Semgrep

  Fodhol/skills/plugins/testing-handbook-skills/skills/semgrep · Skill

  2★ repo

  🚀 Enhance your AI-assisted security workflows with plugins from the Trail of Bits Skills Marketplace for smarter analysis and testing.

• 555

  Security scan

  claude-hangar/claude-hangar/core/skills/security-scan · Skill

  1★ repo

  Production-grade configuration management for Claude Code. Hooks, agents, skills, multi-project orchestration.

• 556

  Senior secops

  timdevai/proteus/skills/community/from-alireza/engineering-team/skills/senior-secops · Skill

  1★ repo

  Always-on multi-agent AI workstation for Claude Code. 142 specialist agents (ML, security, K8s, backend, frontend) · 366 curated skills · 200+ prompt templates · auto prompt-matcher · auto skill-matcher · MCP support · token router cuts Anthropic bill 6x via Kimi/Haiku/Ollama. LiteLLM · BYOK · MIT + Apache. One-line install.

• 557

  Xss

  sunilgentyala/OmniRed/skills/web/xss · Skill

  no license1★ repo

  OmniRed: Multi-AI offensive security skills library for Claude, ChatGPT, Gemini & Microsoft Copilot — with unique MCP, LLM-pipeline, and AI-native attack categories. By Sunil Gentyala, Independent Researcher.

• 558

  Github security scanner hook

  nainishshafi/developer-productivity-skills/.github/skills/github-security-scanner-hook · Skill

  1★ repo

  Reusable AI skills for Claude Code and GitHub Copilot — scan READMEs, sync forks, create skills, lint Python, and scan for security vulnerabilities

• 559

  Pwp security audit

  shandar/pwp-plugin/skills/pwp-security-audit · Skill

  1★ repo

  11 systematic skills for Claude Code — structured protocols for debugging, code review, security, refactoring, testing, deployment, and more. No vibes, just discipline.

• 560

  Bandit sast

  kalshamsi/claude-security-skills/skills/bandit-sast · Skill

  1★ repo

  Production-ready security skills for Claude Code and compatible AI coding agents

• 561

  Security scan

  shivae372/claude-bootstrap/.claude/skills/security-scan · Skill

  1★ repo

  Self-healing, self-learning Claude Code setup — finds, installs, or forges the skills, hooks & MCP your project needs, in real time. Pairs with nodo.

• 562

  Security scan

  manastalukdar/ai-devstudio/skills/security-scan · Skill

  1★ repo

  Professional development studio for Claude Code CLI

• 563

  Semgrep rule creator

  simanam/theaiteam/team/skills/security/_trailofbits/semgrep-rule-creator/skills/semgrep-rule-creator · Skill

  no license1★ repo

  Reusable, provider-agnostic AI team. Drop a project brief, get end-to-end delivery. 12 role agents + 112 skills + orchestrator + self-improvement. Works with Claude Code, Codex, or Gemini.

• 564

  Semgrep rule variant creator

  simanam/theaiteam/team/skills/security/_trailofbits/semgrep-rule-variant-creator/skills/semgrep-rule-variant-creator · Skill

  no license1★ repo

  Reusable, provider-agnostic AI team. Drop a project brief, get end-to-end delivery. 12 role agents + 112 skills + orchestrator + self-improvement. Works with Claude Code, Codex, or Gemini.

• 565

  Semgrep

  simanam/theaiteam/team/skills/security/_trailofbits/static-analysis/skills/semgrep · Skill

  no license1★ repo

  Reusable, provider-agnostic AI team. Drop a project brief, get end-to-end delivery. 12 role agents + 112 skills + orchestrator + self-improvement. Works with Claude Code, Codex, or Gemini.

• 566

  Wordpress security

  iwritec0de/wp-dev/skills/wordpress-security · Skill

  1★ repo

  WordPress development plugin for Claude Code

• 567

  Mcp server security scan

  Dolphinllc/claude-security-skills/skills/defensive/genai/mcp-server-security-scan · Skill

  1★ repo

  Defensive security skills for Claude Code and the Claude Agent SDK — web applications and generative AI systems.

• 568

  Openai sdk security scan

  Dolphinllc/claude-security-skills/skills/defensive/genai/openai-sdk-security-scan · Skill

  1★ repo

  Defensive security skills for Claude Code and the Claude Agent SDK — web applications and generative AI systems.

• 569

  Vercel ai sdk security scan

  Dolphinllc/claude-security-skills/skills/defensive/genai/vercel-ai-sdk-security-scan · Skill

  1★ repo

  Defensive security skills for Claude Code and the Claude Agent SDK — web applications and generative AI systems.

• 570

  Django security scan

  Dolphinllc/claude-security-skills/skills/defensive/web/django-security-scan · Skill

  1★ repo

  Defensive security skills for Claude Code and the Claude Agent SDK — web applications and generative AI systems.

• 571

  Express security scan

  Dolphinllc/claude-security-skills/skills/defensive/web/express-security-scan · Skill

  1★ repo

  Defensive security skills for Claude Code and the Claude Agent SDK — web applications and generative AI systems.

• 572

  Fastapi security scan

  Dolphinllc/claude-security-skills/skills/defensive/web/fastapi-security-scan · Skill

  1★ repo

  Defensive security skills for Claude Code and the Claude Agent SDK — web applications and generative AI systems.

• 573

  Nestjs security scan

  Dolphinllc/claude-security-skills/skills/defensive/web/nestjs-security-scan · Skill

  1★ repo

  Defensive security skills for Claude Code and the Claude Agent SDK — web applications and generative AI systems.

• 574

  Nextjs security scan

  Dolphinllc/claude-security-skills/skills/defensive/web/nextjs-security-scan · Skill

  1★ repo

  Defensive security skills for Claude Code and the Claude Agent SDK — web applications and generative AI systems.

• 575

  Openapi spec security scan

  Dolphinllc/claude-security-skills/skills/defensive/web/openapi-spec-security-scan · Skill

  1★ repo

  Defensive security skills for Claude Code and the Claude Agent SDK — web applications and generative AI systems.

• 576

  Spring boot security scan

  Dolphinllc/claude-security-skills/skills/defensive/web/spring-boot-security-scan · Skill

  1★ repo

  Defensive security skills for Claude Code and the Claude Agent SDK — web applications and generative AI systems.

• 577

  Sast configuration

  steph-frtech/cdesign-expo/.claude/marketplaces/wshobson/plugins/security-scanning/skills/sast-configuration · Skill

  no license1★ repo

  Claude Code skill plugin that turns any design (Claude Design, screenshot, HTML, Figma) into production-ready Expo + NativeWind code. One skill, three slash commands, two reviewer agents.

• 578

  Saas code security review

  hlsitechio/claude-skills-security/saas-security-pack/saas-code-security-review · Skill

  1★ repo

  Defensive security audit skills for Claude — tech-stack-keyed and audit-domain-keyed packs for SaaS apps.

• 579

  Security testing

  bromso/metapowers/plugins/security/skills/security-testing · Skill

  1★ repo

  A Claude Code plugin that adds an agentic skills framework, with MCP's and a meta prompting processes. Inspired by "Superpowers" & "Figma Console MCP", but not just for development or design; but for all aspect within the digital production cycle.

• 580

  Rails security

  tuannv14/claude-team-toolkit/skills/rails-security · Skill

  1★ repo

  Team-ready Claude Code skill pack: 15 multi-account integrations for Rails + React Native + e-commerce. Trello, Azure DevOps, Heroku, Shopify, Firebase, Sentry, Slack, Postgres, Maestro, Fastlane + 5 more. Real value: multi-account profiles, audit logging, safety gates, xlsx-testcases unique workflow.

• 581

  Security audit

  POSTTTT/SKILLs/.claude/skills/security-audit · Skill

  1★ repo

  A skills repo that may useful for you in everyday work. This repo may shorten some daily command you have been using.

• 582

  Trivy scan

  makigjuro/cloudstack-ai-plugins/plugins/cloud-infra/skills/trivy-scan · Skill

  1★ repo

  Claude Code plugin marketplace — AI-powered full-stack cloud engineer for .NET 10 + React 19 + Azure/Terraform/Helm projects. 29 skills, 6 agents, 14 rules.

• 583

  Security

  Jylhis/skills/skills/domains/security · Skill

  no license1★ repo

  Curated Agent Skills marketplace for Claude Code, Codex, and Google Antigravity.

• 584

  Semgrep

  Jylhis/skills/skills/engineering/semgrep · Skill

  no license1★ repo

  Curated Agent Skills marketplace for Claude Code, Codex, and Google Antigravity.

• 585

  Repo status

  VictorAurelius/claude-starter-kit/skills/workflow/repo-status · Skill

  1★ repo

  🤖 Battle-tested Claude Code skills, rules & workflow templates — extracted from a real 200+ PR project. Governance-first. Bilingual VN/EN.

• 586

  Implementing devsecops security scanning

  pinkpixel-dev/skills-collection-2/SKILLS/implementing-devsecops-security-scanning · Skill

  1★ repo

  Part 2 of the AI and agent skills collection, with 650+ skill folders focused on reusable workflows, security playbooks, cloud implementation guides, scripts, references, and assets for builders and operators.

• 587

  Implementing github advanced security for code scanning

  pinkpixel-dev/skills-collection-2/SKILLS/implementing-github-advanced-security-for-code-scanning · Skill

  1★ repo

  Part 2 of the AI and agent skills collection, with 650+ skill folders focused on reusable workflows, security playbooks, cloud implementation guides, scripts, references, and assets for builders and operators.

• 588

  Implementing semgrep for custom sast rules

  pinkpixel-dev/skills-collection-2/SKILLS/implementing-semgrep-for-custom-sast-rules · Skill

  1★ repo

  Part 2 of the AI and agent skills collection, with 650+ skill folders focused on reusable workflows, security playbooks, cloud implementation guides, scripts, references, and assets for builders and operators.

• 589

  Integrating dast with owasp zap in pipeline

  pinkpixel-dev/skills-collection-2/SKILLS/integrating-dast-with-owasp-zap-in-pipeline · Skill

  1★ repo

  Part 2 of the AI and agent skills collection, with 650+ skill folders focused on reusable workflows, security playbooks, cloud implementation guides, scripts, references, and assets for builders and operators.

• 590

  Integrating sast into github actions pipeline

  pinkpixel-dev/skills-collection-2/SKILLS/integrating-sast-into-github-actions-pipeline · Skill

  1★ repo

  Part 2 of the AI and agent skills collection, with 650+ skill folders focused on reusable workflows, security playbooks, cloud implementation guides, scripts, references, and assets for builders and operators.

• 591

  Performing authenticated vulnerability scan

  pinkpixel-dev/skills-collection-2/SKILLS/performing-authenticated-vulnerability-scan · Skill

  1★ repo

  Part 2 of the AI and agent skills collection, with 650+ skill folders focused on reusable workflows, security playbooks, cloud implementation guides, scripts, references, and assets for builders and operators.

• 592

  Performing container security scanning with trivy

  pinkpixel-dev/skills-collection-2/SKILLS/performing-container-security-scanning-with-trivy · Skill

  1★ repo

  Part 2 of the AI and agent skills collection, with 650+ skill folders focused on reusable workflows, security playbooks, cloud implementation guides, scripts, references, and assets for builders and operators.

• 593

  Performing cve prioritization with kev catalog

  pinkpixel-dev/skills-collection-2/SKILLS/performing-cve-prioritization-with-kev-catalog · Skill

  1★ repo

  Part 2 of the AI and agent skills collection, with 650+ skill folders focused on reusable workflows, security playbooks, cloud implementation guides, scripts, references, and assets for builders and operators.

• 594

  Performing sca dependency scanning with snyk

  pinkpixel-dev/skills-collection-2/SKILLS/performing-sca-dependency-scanning-with-snyk · Skill

  1★ repo

  Part 2 of the AI and agent skills collection, with 650+ skill folders focused on reusable workflows, security playbooks, cloud implementation guides, scripts, references, and assets for builders and operators.

• 595

  Performing second order sql injection

  pinkpixel-dev/skills-collection-2/SKILLS/performing-second-order-sql-injection · Skill

  1★ repo

  Part 2 of the AI and agent skills collection, with 650+ skill folders focused on reusable workflows, security playbooks, cloud implementation guides, scripts, references, and assets for builders and operators.

• 596

  Performing web application firewall bypass

  pinkpixel-dev/skills-collection-2/SKILLS/performing-web-application-firewall-bypass · Skill

  1★ repo

  Part 2 of the AI and agent skills collection, with 650+ skill folders focused on reusable workflows, security playbooks, cloud implementation guides, scripts, references, and assets for builders and operators.

• 597

  Performing web application vulnerability triage

  pinkpixel-dev/skills-collection-2/SKILLS/performing-web-application-vulnerability-triage · Skill

  1★ repo

  Part 2 of the AI and agent skills collection, with 650+ skill folders focused on reusable workflows, security playbooks, cloud implementation guides, scripts, references, and assets for builders and operators.

• 598

  Scanning containers with trivy in cicd

  pinkpixel-dev/skills-collection-2/SKILLS/scanning-containers-with-trivy-in-cicd · Skill

  1★ repo

  Part 2 of the AI and agent skills collection, with 650+ skill folders focused on reusable workflows, security playbooks, cloud implementation guides, scripts, references, and assets for builders and operators.

• 599

  Scanning docker images with trivy

  pinkpixel-dev/skills-collection-2/SKILLS/scanning-docker-images-with-trivy · Skill

  1★ repo

  Part 2 of the AI and agent skills collection, with 650+ skill folders focused on reusable workflows, security playbooks, cloud implementation guides, scripts, references, and assets for builders and operators.

• 600

  Testing for xss vulnerabilities with burpsuite

  pinkpixel-dev/skills-collection-2/SKILLS/testing-for-xss-vulnerabilities-with-burpsuite · Skill

  1★ repo

  Part 2 of the AI and agent skills collection, with 650+ skill folders focused on reusable workflows, security playbooks, cloud implementation guides, scripts, references, and assets for builders and operators.