Best skills for Security engineer
For security engineers, AI coding skills can be a force multiplier when reviewing code, modeling threats, and ensuring compliance—if used correctly. The most practical skills here include Threat Model Status, which helps generate threat models (like STRIDE or attack trees) from your codebase, and Backend Application Security, which flags common vulnerabilities (SQLi, SSRF) in your pull requests. A key pitfall: AI often hallucinates false positives or misses context-specific risks. Always treat suggestions as starting points, not final verdicts. Also consider Compliance Mapping to Security Frameworks for aligning code changes with SOC 2 or PCI DSS requirements. Avoid generic 'secure coding' skills; look for those that output structured data (e.g., JSON) for integration with SAST tools. The real value comes from combining these skills with your domain expertise—use them to catch the obvious early, so you can focus on architectural threats.
13 skills selected
Compliance Mapping to Security Frameworks
Security
Maps threats and controls to compliance frameworks like OWASP Top 10, SOC2, PCI-DSS, HIPAA, and GDPR. Generates compliance reports with coverage percentages and identifies gaps. Use when checking compliance status, mapping to security frameworks, or generating audit documentation.
Go Vulnerability Scanner
Security
Runs a vulnerability scan for Go projects using govulncheck, detecting known vulnerabilities (CVEs) in both direct and indirect dependencies. Helps with regular security checks or CI/CD integration by reporting severity levels and suggesting update actions.
Security Bounty Hunter
Security
Hunt for exploitable, reportable vulnerabilities in a repository for bug bounty programs. Focuses on remotely reachable attack paths.
Kubernetes Security Policies
Security
This skill covers implementing Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use it to enforce network segmentation, configure pod security standards, or set up least-privilege access controls.
Better Auth JWT Authentication Setup
Security
This skill provides guidance for configuring Better Auth with JWT for secure user authentication. It covers JWT token creation, password hashing, user signup and login, and session management using FastAPI dependencies. Useful for implementing user authentication in web applications.
Dependency Vulnerability Scanning
Security
Scans project dependencies across ecosystems to identify known vulnerabilities, generates SBOMs, and suggests automated remediation. Helps during security audits or for supply chain compliance and risk assessment.
Security Audit Phase 1
Security
First phase of the security audit pipeline that scans the codebase (src/app) for vulnerabilities like unprotected endpoints, missing input validation, authorization gaps, and exposed secrets. Outputs a prioritized findings list in SECURITY_PLAN.md. Use after /full-security-audit or invoke directly with '/1-security-audit'.
Compliance, ISO, Governance and Audit
Security
Compliance, governance and audit: compliance systems, whistleblowers, institutional AML, risk management, controls, ISO and organizational-legal audit.
PHI Compliance Checker
Security
Scans code and data for Protected Health Information (PHI) to ensure HIPAA compliance. Use when reviewing code that handles patient data, healthcare records, or medical information. Checks for 18 HIPAA identifiers, logs, encryption, access controls, and flags PHI in comments, test data, or configuration files.
MEV Security
Security
Provides structured guidance on MEV (Miner Extractable Value) concepts, common attack patterns like sandwich/frontrunning/backrunning, and mitigation strategies such as private relays and MEV blockers. Helps organize relevant resources in README files under appropriate sections.
Dependency Security Audit
Security
Analyze project dependencies for vulnerabilities, license issues, and outdated packages. Provide actionable remediation strategies.
ClawGuard Security Layer
Security
Intercepts shell commands, file operations, and network requests before execution, enforcing a customizable security policy. Actions can be automatically allowed, blocked, or held for human approval. Use it to prevent accidental or malicious changes to your system.
Compliance Checklist Builder
Security
Builds regulatory compliance checklists tailored to your industry and jurisdiction.
How to choose
- How are these skills selected?
- An algorithm picks them among the published skills that match this page's criteria, such as category, tags or compatible tools. It ranks them by the quality score a language model gave them. On ranking pages, it also weighs GitHub stars and the security rating. Nobody reviews them one by one.
- What do the security ratings mean?
- A language model reads the SKILL.md file, without running it, and gives it a rating. Safe means it sees no meaningful execution risk. Caution means the skill uses powerful tools such as bash, docker or the network for a legitimate purpose. Risky means it asks for destructive actions, for secrets to be sent out, or for obfuscated code to run; a skill rated Risky is never published. The rating does not replace your own reading of the file.
- How do I install a skill?
- Open any skill page and follow its install instructions for your tool — Claude Code, Cursor or Copilot. Each skill lists the exact steps so you can get it running in a couple of minutes.