Find the perfect skill
Prowler Compliance Review
Security
Reviews PRs modifying compliance frameworks (CIS/NIST/PCI-DSS) by validating JSON, duplicates, and metadata.
Scan Specific MCP Skill
Security
Scans a specific MCP skill by npm package name or GitHub URL, runs an audit, and reports findings with severity.
Security PR Reviewer
Security
Security-focused review of actual diffs (PR, branch, staged changes) hunting authn/authz gaps, injection, secrets, SSRF, and more. Produces severity-ranked findings with file:line evidence and remediation.
Threat Modeling Expert
Security
Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction.
PHI Compliance Checker
Security
Scans code and data for Protected Health Information (PHI) to ensure HIPAA compliance. Use when reviewing code that handles patient data, healthcare records, or medical information. Checks for 18 HIPAA identifiers, logs, encryption, access controls, and flags PHI in comments, test data, or configuration files.
CSO: Security Audit & Threat Modeling
Security
Infrastructure-first security audit: secrets, supply chain, CI/CD, OWASP, STRIDE. Daily low-noise and deep monthly modes.
Frontend Security Coder
Security
Expert in secure frontend coding practices, focusing on XSS prevention, output sanitization, and client-side security patterns.
SAST Configuration
Security
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.
Podium Webhook Reliability & Security
Security
Harden a Podium webhook receiver against forged events, replay attacks, duplicate retries, and lost deliveries using HMAC verification, idempotency, and a DLQ.
Vulnerability Scanner Workflow
Security
Automated vulnerability scanning and exploitation workflow, including CVE matching and report generation.
Frontend Security Coding Expert
Security
Expert in secure frontend coding, specializing in XSS prevention, output sanitization, and client-side security patterns. Provides proactive implementation and code reviews.
Kubernetes Security Policies
Security
This skill covers implementing Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use it to enforce network segmentation, configure pod security standards, or set up least-privilege access controls.