Secure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls.
Claude Skills Online Marketplace
Security
20 of 835
Use when reviewing AI-generated code before merge or execution: plan AST/security checks, isolated behavior tests and evidence, with language-specific coverage limits.
Secure AI coding agents (Claude Code, Cursor, Codex, Copilot) with permission boundaries, secret protection, code review gates, and safe sandbox configurations for team...
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
Access matrix of role-by-module permissions, with per-role scope, confidentiality level and SME tier, as CSV, SQL, JSON Schema or Notion on request. Use for access reviews.
Conduct periodic access reviews and certifications. Implement access governance and recertification workflows. Use when managing access compliance.
Assess Active Directory attack paths using scoped configuration review and controlled synthetic lab validation; identify prerequisites, evidence and mitigations.
Statically review MCP configuration for mutable package references before approval or CI, without executing discovered MCP servers.
Statically review MCP configuration for mutable package references before approval or CI, without executing discovered MCP servers. Use when reviewing .mcp.json, Cursor, VS Code,...
Analyzes authorized CTF challenges by reproducing intended solves, identifying cheap LLM shortcuts, applying minimal human-friendly transformations, and verifying results...
Analyzes authorized CTF challenges by reproducing intended solves, identifying cheap LLM shortcuts, applying minimal human-friendly transformations, and verifying results...
Automate Virustotal tasks via Rube MCP (Composio). Always search tools first for current schemas.
Automate Wiz tasks via Rube MCP (Composio). Always search tools first for current schemas.
Automate Securitytrails tasks via Rube MCP (Composio). Always search tools first for current schemas.
Automate Lastpass tasks via Rube MCP (Composio). Always search tools first for current schemas.
Automate Doppler Secretops tasks via Rube MCP (Composio). Always search tools first for current schemas.
Use when designing or reviewing the privacy plan for a study that uses human data — covers HIPAA Safe Harbor vs Expert Determination, GDPR for research, de-identification,...
Use this skill whenever the user needs a risk- or safety-first check for a token, address, or project. Covers contract risk, address compliance labels, and project incidents via...
Token and address risk assessment. Use this skill ONLY when the user's query is exclusively about token/contract/address security with no other analysis dimensions. Trigger...
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive...