Discover tools security skills, compare source repositories and read the instructions for each workflow.
Comprehensive security checklist covering OWASP Top 10, SQL injection, XSS, CSRF, authentication, authorization, secrets management, input validation, and security headers. Use when scanning for vulnerabilities...
Test web applications for security vulnerabilities including SQLi, XSS, command injection, JWT attacks, SSRF, file uploads, XXE, and API flaws. Use when pentesting web apps, analyzing authentication, or exploit...
Auto-load active audit context when working with audited code. Use when user is working on code that has an active audit session, discussing audit findings, or making changes related to a runtime audit. Silentl...
Clear the default organization preference. Use for managing authentication credentials
Get a value from the keyvalue storage. Requires authentication. Use for Agentuity cloud platform operations
Login to the Agentuity Platform using a browser-based authentication flow. Use for managing authentication credentials
Display the API key for the currently authenticated user. Requires authentication. Use for managing authentication credentials
Show the current default organization. Use for managing authentication credentials
Display information about the currently authenticated user. Requires authentication. Use for managing authentication credentials
Set a secret. Requires authentication. Use for Agentuity cloud platform operations
List all secrets. Requires authentication. Use for Agentuity cloud platform operations
Get an environment variable or secret value. Requires authentication. Use for Agentuity cloud platform operations
Set the default organization for all commands. Requires authentication. Use for managing authentication credentials
Get a secret value. Requires authentication. Use for Agentuity cloud platform operations
Set up Agentuity Auth for your project. Requires authentication. Use for managing authentication credentials
Logout of the Agentuity Cloud Platform. Use for managing authentication credentials
Authentication and Authorization patterns.
Senior expert in Auth.js v5 (NextAuth), Edge-First authentication and security. Optimized for Next.js 16.1.1 and React 19.2.
Senior AI Security Architect. Expert in Prompt Injection Defense, Zero-Trust Agentic Security, and Secure Server Actions for 2026.
This skill should be used when the user asks to "test an API", "write API tests", "mock API responses", "validate API endpoints", or needs guidance on REST API testing strategies.
Meticulous Matt is the Auditor and Security Consultant. Reports ALL issues, no matter how small. Scopes out security risks a mile away - reviews plans and implementations for vulnerabilities. Compulsively hones...
AgentSkill: run a repo-specific security audit of the OpenHands-Tab VS Code extension with a focus on secret handling, webview/host boundaries, persistence, and logging redaction. Trigger with /audit.
Validate spots.json for common issues including missing fields, invalid URLs, duplicate entries, and data consistency problems
Quick security audit checking for hardcoded secrets, SSRF vectors, injection points, dependency issues, and missing security headers
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.