Find the perfect skill
Security Audit Scanner
Security
Analyzes code to detect OWASP Top 10 vulnerabilities.
OWASP Security Checklist
Security
Generates application security checklists based on the OWASP Top 10.
Threat Model Generator
Security
Generates threat model documents with STRIDE analysis.
Compliance Manager Guardian
Security
Enforces non-negotiable compliance rules when editing core/security/compliance-manager.js, preserving PCI card masking, GDPR consent/encryption, PSD2 strong customer authentication, SOX audit trails, and HIPAA health data protection. Use this skill when modifying compliance validators, security handling, or audit flows to prevent accidental weakening of regulatory controls.
AI Prompt Engineering Safety Review
Security
Comprehensive review of AI prompts for safety, bias, security, and effectiveness, with detailed improvement recommendations and frameworks.
Scan Specific MCP Skill
Security
Scan a specific MCP skill by npm package name or GitHub URL for security threats.
Secrets Scanner and Rotator
Security
Detect hardcoded secrets in code, suggest proper secret management, and help rotate compromised credentials.
Shannon: Autonomous AI Pentester
Security
Autonomous AI pentester for web apps and APIs. Analyzes source code, identifies attack vectors, and executes real exploits to prove vulnerabilities.
Regular Patching of RDS Systems
Security
Ensure RDS instances and database engines are regularly updated to address vulnerabilities, following CIS AWS Database Benchmark v2.0.0 control 3.8.
Generate Function Signature
Security
Generate and validate unique byte signatures for functions using IDA Pro MCP. Reliably locate functions across binary updates with pattern-scanning signatures.
Security Analyzer
Security
Comprehensive security vulnerability analysis for codebases and infrastructure. Scans dependencies, containers, cloud IaC, detects secrets, fetches CVE data, and generates remediation plans.
Frontend Security Coder
Security
Expert in secure frontend coding: XSS prevention, output sanitization, and client-side security patterns.