Menu

AI AGENT SKILLS, IN THE OPEN

Security skills

Assess and improve software security.

54 repositories

  1. 1—
    affaan-m/ECC

    The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

    7.7Network or broad shellActiveProductivity
    +1.6% over 7 days
    298.1kGitHub stars
  2. 2—
    pbakaus/impeccable

    The design vocabulary for your coding agent. Steer with polish and bolder, review with critique and audit, catch AI slop before it ships.

    8.1Network or broad shellActiveDesign
    +7.5% over 7 days
    104.3kGitHub stars
  3. 3—
    cloudflare/security-audit-skill

    Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security audits, or pen tests. Run the complete workflow only for explicit codebase audit or pen-test requests, full/compr

    7.3Network or broad shellActiveSecurity
    +15.6% over 7 days
    62.5kGitHub stars
  4. 4—
    zhaoxuya520/reverse-skill

    Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端

    6.0Network or broad shellActiveEngineering
    +0.9% over 7 days
    44.2kGitHub stars
  5. 5—
    mukul975/Anthropic-Cybersecurity-Skills

    817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

    6.3Network or broad shellSlowingSecurity
    +1.1% over 7 days
    35.7kGitHub stars
  6. 6—
    ComposioHQ/composio

    Route and complete Composio work across Composio For You and Composio Platform. Use when the user mentions Composio; wants an agent to use apps such as Gmail, Slack, GitHub, Notion, Calendar, or Linear; needs first-time setup, an SDK or MCP integration, CLI operation, migration guidance, current doc

    6.4Network or broad shellActiveEngineering
    +0.4% over 7 days
    30.9kGitHub stars
  7. 7—
    NVIDIA/SkillSpector

    Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

    8.0Network or broad shellActiveOperations
    +4.5% over 7 days
    24.6kGitHub stars
  8. 8—
    shadow1ng/fscan

    使用 fscan 进行网络扫描和安全评估。当用户要求扫描网段、探测主机存活、发现开放端口、识别服务、检测漏洞或弱口令时使用。支持 NDJSON 结构化输出，适合 AI agent 管道消费。

    4.6Network or broad shellActiveSecurity
    +0.1% over 7 days
    14.7kGitHub stars
  9. 9—
    SnailSploit/Claude-Red

    claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.

    7.7Network or broad shellActiveOffensive securitySecurity
    +5.0% over 7 days
    10.4kGitHub stars
  10. 10—
    shadcn/improve

    Survey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute. Strictly read-only on source code — never implements, fixes, or refactors anything itself. Use when asked to audit a codebase, find improvement opportunities (bugs

    5.2Local scriptsActiveSecurity
    +0.3% over 7 days
    9.3kGitHub stars
  11. 11▼
    vercel-labs/deepsec

    Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents

    6.4Network or broad shellActiveEngineering
    +0.8% over 7 days
    8.4kGitHub stars
  12. 12—
    trailofbits/skills

    Trail of Bits skills for security research, vulnerability detection, and audit workflows

    7.4Network or broad shellActiveSecurity
    +1.8% over 7 days
    8kGitHub stars
  13. 13—
    Tencent/AI-Infra-Guard

    A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

    7.8Network or broad shellActiveSecurity
    +2.4% over 7 days
    7.4kGitHub stars
  14. 14—
    BitterSecurity/Decepticon

    Autonomous Hacking Agent for Red Team

    7.2Network or broad shellActiveOffensive securitySecurity
    +0.9% over 7 days
    6.5kGitHub stars
  15. 15▼
    Dicklesworthstone/destructive_command_guard

    Destructive Command Guard - High-performance Rust hook for Claude Code that blocks dangerous commands before execution. SIMD-accelerated, modular pack system, whitelist-first architecture. Essential safety layer for agent workflows.

    6.2Network or broad shellActiveDevOps
    +0.5% over 7 days
    6.3kGitHub stars
  16. 16▼
    awarexone/Agentic-Bug-Hunter

    AI-powered bug bounty hunting toolkit that works with or without subscription.

    7.3Network or broad shellActiveSecurity
    +2.6% over 7 days
    5.6kGitHub stars
  17. 17▼
    elementalsouls/Claude-BugHunter

    A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

    7.3Network or broad shellActiveSecurity
    +1.8% over 7 days
    5.5kGitHub stars
  18. 18▼
    iflytek/skillhub

    Self-hosted, open-source agent skill registry for enterprises. Publish & version skill packages, govern with RBAC and audit logs, deploy on-premise with Docker or Kubernetes.

    5.0Network or broad shellActiveDevOps
    +0.6% over 7 days
    5.4kGitHub stars
  19. 19▲
    Manavarya09/design-extract

    Extract any website's complete design system with one command. DTCG tokens, semantic+primitive+composite, MCP server for Claude Code/Cursor/Windsurf, multi-platform emitters (iOS SwiftUI, Android Compose, Flutter, WordPress), Tailwind v4, Figma variables, shadcn/ui, CSS health audit, WCAG remediation, Chrome extension. MIT, Playwright, Node 20+.

    8.2Network or broad shellActiveDesign
    +8.4% over 7 days
    4.8kGitHub stars
  20. 20—
    sanyuan0704/sanyuan-skills

    Expert code review skill: SOLID, security, performance, error handling, boundary conditions

    4.1Local scriptsSlowingSecurity
    +0.2% over 7 days
    4kGitHub stars
  21. 21—
    Netw0rkNoob/VulnClaw

    基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

    5.7Network or broad shellActiveSecurity
    +1.3% over 7 days
    3.9kGitHub stars
  22. 22▼
    ljagiello/ctf-skills

    Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more

    6.7Network or broad shellActiveSecurity
    +1.5% over 7 days
    3.6kGitHub stars
  23. 23▼
    CyberStrikeus/CyberStrike

    Open-source AI-powered offensive security harness for automated penetration testing.

    7.5Network or broad shellActiveOffensive securitySecurity
    +2.8% over 7 days
    3.4kGitHub stars
  24. 24▼
    snyk/agent-scan

    Security scanner for AI agents, MCP servers and agent skills.

    6.5Network or broad shellActiveSecurity
    +0.7% over 7 days
    3.2kGitHub stars
  25. 25▼
    SharpAI/DeepCamera

    Open-Source AI Camera Skills Platform, AI NVR & CCTV Surveillance. Local VLM video analysis with Qwen, DeepSeek, SmolVLM, LLaVA, YOLO26. LLM-powered agentic security camera agent — watches, understands, remembers & guards your home via Telegram, Discord or Slack. Pluggable AI skills. OpenAI, Google, Anthropic or local AI. Runs on Mac Mini & AI PC.

    3.5Network or broad shellActiveSecurity
    +0.4% over 7 days
    3.1kGitHub stars
  26. 26▼
    runkids/skillshare

    📚 Sync skills, agents, MCP, plugins to all AI CLI tools with one command and simplify team sharing.

    7.1Network or broad shellActiveSecurity
    +2.2% over 7 days
    2.9kGitHub stars
  27. 27▼
    zubair-trabzada/ai-marketing-claude

    AI Marketing Suite for Claude Code. 15 marketing skills with parallel subagents — audit any website, generate copy, email sequences, ad campaigns, content calendars, competitive intelligence, and client-ready PDF reports.

    5.1Network or broad shellSlowingMarketing
    +1.3% over 7 days
    2.9kGitHub stars
  28. 28▼
    sheeki03/tirith

    Terminal security analysis for shell environments. This skill should be used when checking commands for supply-chain attacks before execution, scanning repositories for hidden content or config poisoning, scoring URLs for homograph attacks, setting up AI tool protection, inspecting Python package ar

    3.6Network or broad shellActiveSecurity
    +0.2% over 7 days
    2.8kGitHub stars
  29. 29—
    cisco-ai-defense/skill-scanner

    Security Scanner for Agent Skills

    6.3Network or broad shellActiveSecurity
    +0.8% over 7 days
    2.7kGitHub stars
  30. 30—
    yetone/native-feel-skill

    Use when the user is designing, prototyping, or rewriting a desktop app that must run on multiple OSes (macOS + Windows, optionally Linux) AND feel indistinguishable from a native app to its users — fast launch, native windowing, native input handling, native materials. Trigger words include "cross-

    4.7Instructions onlySlowingEngineering
    +0.5% over 7 days
    2kGitHub stars
  31. 31▲
    kenryu42/cc-safety-net

    Operate CC Safety Net: explain why a command was blocked, triage false positives, configure custom rulebooks, manage agent CLI integrations, and diagnose protection.

    8.3Network or broad shellActiveSecurity
    +3.7% over 7 days
    1.9kGitHub stars
  32. 32▼
    wgpsec/AboutSecurity

    Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。

    6.0Network or broad shellActiveOffensive securitySecurity
    +1.0% over 7 days
    1.8kGitHub stars
  33. 33—
    hamen/material-3-skill

    Implement Google's Material Design 3 (Material You) UI system. Primary: Jetpack Compose Material3 (MaterialTheme, components, adaptive layout). Also Flutter and limited web (@material/web, maintenance mode). Covers tokens, 30+ components, layout, theming, M3 Expressive (platform matrix), and accessi

    5.5Instructions onlySlowingDesign
    +1.5% over 7 days
    1.6kGitHub stars
  34. 34—
    kylezantos/design-motion-principles

    Motion and interaction design expert based on Emil Kowalski, Jakub Krehel, and Jhey Tompkins' techniques. Two modes — build interactive components with purposeful motion, or audit existing animations to catch AI-slop motion patterns (audit emits a branded HTML report with looping demos). Use when cr

    6.5Network or broad shellSlowingDesign
    +3.7% over 7 days
    1.5kGitHub stars
  35. 35—
    Anil-matcha/awesome-muse-connectors

    A source-backed catalog of Meta Muse integrations and community connector skills, with capability, authentication, and permission notes.

    6.8Network or broad shellActiveSecurity
    +1.2% over 7 days
    1.4kGitHub stars
  36. 36▼
    utkusen/sast-skills

    Collection of agent skills to find vulnerabilities inside your web/mobile apps.

    4.7Network or broad shellActiveSecurity
    +0.4% over 7 days
    1.4kGitHub stars
  37. 37▼
    uphiago/recon-skills

    Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full write-up at hiago.sh

    4.2Network or broad shellSlowingOffensive securitySecurity
    +0.3% over 7 days
    1.3kGitHub stars
  38. 38▼
    xalgorix/xalgorix

    Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

    6.9Network or broad shellActiveSecurity
    +2.0% over 7 days
    1.3kGitHub stars
  39. 39▼
    pashov/skills

    Pashov Audit Group Skills

    5.2Network or broad shellActiveSecurity
    +0.8% over 7 days
    1.3kGitHub stars
  40. 40—
    Auriti-Labs/geo-optimizer-skill

    Audit and fix a website for AI search visibility (Generative Engine Optimization). Use when asked to check whether a site or page can be found and cited by ChatGPT Search, Perplexity, Claude or Google AI Overviews, to score it 0-100 with `geo audit`, or to fix robots.txt AI crawler rules, llms.txt,

    7.9Network or broad shellActiveMarketing
    +3.5% over 7 days
    1.3kGitHub stars
  41. 41▲
    dagoSte/squadra

    Coordinate Claude, Codex and Cursor windows with shared tasks, acknowledgements, prechecks, parallel tests, source-bound proofs and independent review. Built-in skills recall lessons, simplify code and forecast work. Track progress, decisions and evidence in a bilingual local dashboard, with MCP plugins. Browse skills and verified security audits.

    6.8Network or broad shellActiveEngineering
    +13.9% over 7 days
    1.2kGitHub stars
  42. 42—
    raroque/vibe-security-skill

    Audits codebases for common security vulnerabilities that AI coding assistants introduce in "vibe-coded" applications. Checks for exposed API keys, broken access control (Supabase RLS, Firebase rules), missing auth validation, client-side trust issues, insecure payment flows, and more. Use this skil

    6.5Network or broad shellSlowingEngineering
    +2.4% over 7 days
    1.2kGitHub stars
  43. 43▼
    larlarua/AutoCVE

    Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation.

    2.2Network or broad shellActiveSecurity
    +0.2% over 7 days
    1.2kGitHub stars
  44. 44—
    BagelHole/DevOps-Security-Agent-Skills

    Agent-ready DevOps, security, infrastructure, and compliance knowledge base with 80+ skills across Kubernetes, Terraform, AWS/Azure/GCP, AI platform operations, container hardening, SOC2/ISO27001, and incident response—plus ready-to-run scripts, templates, and playbooks for SRE, platform, and security teams.

    5.2Network or broad shellSlowingDevOps
    +0.8% over 7 days
    1.2kGitHub stars
  45. 45—
    sipyourdrink-ltd/bernstein

    The open-source governance layer for AI agents: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run

    1.3Network or broad shellActiveSecurity
    -11.4% over 7 days
    1.2kGitHub stars
  46. 46▲
    capitalone/VulnHunter

    Agentic AI security tool that applies proactive, attacker-first analysis directly to source code.

    6.2Network or broad shellActiveSecurity
    +1.1% over 7 days
    1.2kGitHub stars
  47. 47▼
    prompt-security/clawsec

    A complete security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents (and variants). Protect your SOUL.md (etc') with drift detection, live security recommendations, automated audits, and skill integrity verification. All from one installable suite.

    5.2Network or broad shellActiveSecurity
    +0.4% over 7 days
    1.1kGitHub stars
  48. 48▼
    hashgraph-online/hol-guard

    Open-source antivirus and firewall for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

    8.1Network or broad shellActiveSecurity
    +3.5% over 7 days
    1.1kGitHub stars
  49. 49—
    H-mmer/pentest-agents

    Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.

    5.5Network or broad shellSlowingOffensive securitySecurity
    +1.2% over 7 days
    1.1kGitHub stars
  50. 50▼
    RuoJi6/audit-skills

    当用户要求审计 Java、.NET 或 PHP 源码/部署产物/反编译产物/安全发现，并需要默认脚本输出目录、报告输出目录、Java/.NET 反编译与反混淆参考、Java 组件 YAML 正则匹配扫描、确认漏洞判定标准、安全 Payload 和 BurpSuite 原始 HTTP 请求包证据时使用。仅用于授权代码审计和防御性安全验证。

    2.7Network or broad shellSlowingSecurity
    +0.4% over 7 days
    1kGitHub stars
  51. 51—
    rampstackco/claude-skills

    Stack-agnostic Claude Skills covering the full website lifecycle: brand, design, content, SEO, dev, ops, growth, and research. Build, ship, audit, optimize.

    6.4Network or broad shellActiveMarketing
    +2.7% over 7 days
    1kGitHub stars
  52. 52—
    Zyrexnn/Cybermes

    Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.

    5.9Network or broad shellActiveSecurity
    +2.1% over 7 days
    1kGitHub stars
  53. 53—
    3stoneBrother/code-audit

    Professional code security audit skill covering 55+ vulnerability types. Enhanced with WooYun 88,636 real-world vulnerability cases (2010-2016). This skill should be used when performing security audits, vulnerability scanning, penetration testing preparation, or code review for security issues. Sup

    4.2Network or broad shellSlowingSecurity
    +0.3% over 7 days
    912GitHub stars
  54. 54▼
    toby-bridges/api-relay-audit

    Local security audit for AI API relays and LLM proxies: detects prompt injection, model substitution, tool-call rewriting, SSE anomalies, error leakage, and Web3 wallet risks. Website: https://apirelayaudit.com

    6.0Network or broad shellActiveSecurity
    +0.9% over 7 days
    907GitHub stars

Ranked by stars. Sponsorship never changes the order.

EngineeringDesignMarketingLegalFinanceOperationsSalesWritingDataDevOpsSecurityTestingDocumentationProductivityResearchEducationClaude CodeCodexCursorGemini CLIGitHub CopilotOpenCode
Back to top