Find the perfect skill
PWN AI Context Ingestion
Security
Use PWN::AI::Context from pwn_eval for local evidence ingestion and context handling without synthetic embeddings.
AI Agent Security Review
Security
Comprehensive security review framework for AI agents, covering skills, MCP, repos, URLs, products, and social interactions. Built from real-world attack patterns.
Frontend Security Coder
Security
Expert in secure frontend coding practices, XSS prevention, output sanitization, and client-side security patterns.
Regulatory Compliance Check
Security
Compliance expert for GDPR, HIPAA, SOC2, PCI-DSS. Perform audits and provide implementation guidance for regulatory compliance.
Create Skill from Custom Approach
Security
Guide for capturing a successful custom security testing approach and turning it into a reusable Claude Code skill, including token budgeting and auto-loading.
Incinerate: Anti-distillation Defense
Security
Anti-distillation defense. Generate pollution content to break distillation of your digital persona.
Compliance-Ops: Compliance Framework Checker
Security
Check codebases against compliance frameworks (SOC2, GDPR, HIPAA, PCI-DSS). Generates compliance reports with pass/fail status and remediation guidance.
Frontend Security Coder
Security
Expert in secure frontend coding: XSS prevention, output sanitization, and client-side security. For security implementations and code reviews.
Firebase APK Scanner
Security
Scans Android APKs for Firebase misconfigurations: open databases, storage, auth issues, and exposed cloud functions. For authorized security testing.
Full Threat Modeling Workflow
Security
Orchestrates the complete threat modeling workflow from initialization through reporting, including asset discovery, threat analysis, control verification, compliance mapping, and documentation generation. Use when performing a full security assessment or generating comprehensive threat documentation.
CIS OCP 1.9.0 Control 1.3.3: Service Account Private Key
Security
Verify that the --service-account-private-key-file argument is set on the OpenShift Controller Manager to ensure secure signing of service account tokens.
API Security Checklist
Security
API-focused security checklist covering OWASP API Top 10, authentication hardening, input validation, rate limiting, and compliance controls for API surfaces.