AI Skills for Security Scanning
Security vulnerabilities are expensive to fix in production. These AI skills scan your code for common vulnerabilities (OWASP Top 10, CVEs, secrets in code), audit your dependencies, and suggest targeted remediations — shifting security left in your development process.
20 skills found
Doc Coauthoring
Skill from anthropics/skills
Token Optimizer
Find the ghost tokens. Audit your Claude Code context window overhead, see where tokens go, get them back.
FFUF Web Fuzzing
Expert guidance for ffuf web fuzzing during penetration testing and security assessments
Claude Code SEO
100-point SEO audits across 6 dimensions with 27+ commands for comprehensive optimization
Kube Audit Kit
A Claude Code Skill for non-intrusive security audits of Kubernetes clusters.
Reddit Skill
Claude Code Agent Skill for searching and reading Reddit via OAuth2 API
SkillSemgrep
Claude Code安全扫描Skill：说句中文就能扫漏洞，基于Semgrep | Security scanning skill for Claude Code, powered by Semgrep
Spend Optimizer
Audit subscriptions and optimize credit card rewards. Claude Code skill.
Claude Skill Security Auditor
Claude Code skill for running structured security audits with actionable remediation plans
Haveibeenclawned
Security audit for OpenClaw agents — 72 checks, one command
Computer Forensics
Digital forensics techniques for investigation
Secure File Deletion
Implement secure data sanitization and deletion
Metadata Extraction
Analyze file metadata for forensic investigations
Threat Hunting with Sigma
Use Sigma rules for threat detection and hunting
Skills
AI agent skills repository
Skills
A bespoke Claude Code plugin marketplace featuring skills that extend Claude's capabilities for specialized tasks.
Skills
Reusable Codex/Claude skills, including md-to-xhs-cards for Markdown to Xiaohongshu (RedNote) image cards and direct XHS publishing
Skills
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
Skills
Claude Code skills based on The Minimalist Entrepreneur by Sahil Lavingia
Skills
NeuroSkill™ and NeuroLoop™ markdown files
Browse by Category
Frequently Asked Questions
Can these skills detect hardcoded secrets in my codebase?
Yes. Security scanning skills use pattern matching and entropy analysis to detect hardcoded API keys, passwords, and tokens. They can scan your full git history, not just the current state.
Do security skills integrate with CI/CD pipelines?
Many security skills output in standardized formats (SARIF, JSON) that integrate with GitHub Actions, GitLab CI, and other pipelines to block insecure code from merging.