Skills.
Give your AI a better way to work.
A skill is a set of written instructions that teaches an AI how to do one job the way it should be done: review a pull request, plan a migration, write the release notes.
Install one here and it travels with your account into Claude, Claude Code, Cursor and every other client you sign in with.
Category: Security
1,738 results · page 17 of 58
- View details
android-networkingSkillSecurity
Integrate Retrofit, OkHttp, and Kotlinx Serialization for type-safe API communication in Android. Use when building API clients, adding interceptors, or configuring network security—not standalone MockWebServer or API-test setup.
Ready to connect★ 565
- View details
angular-securitySkillSecurity
Harden Angular apps against XSS, CSP violations, and unauthorized access. Use when implementing XSS protection, Content Security Policy, or auth guards in Angular.
Ready to connect★ 565
- View details
common-exploit-verificationSkillSecurity
Enforce "No Exploit, No Report" policy with PoC construction standards, false-positive filtering, and evidence collection per vulnerability class across backend, frontend, and mobile. Use when validating security findings, constructing exploit proofs, filtering false positives, or writing pentest fi
Ready to connect★ 565
- View details
common-git-collaborationSkillSecurity
Enforce version control best practices for commits, branching, pull requests, and repository security. Use when writing commits, creating branches, merging, or opening pull requests.
Ready to connect★ 565
- View details
common-llm-securitySkillSecurity
OWASP LLM Top 10 (2025) audit checklist for AI applications, agent tools, RAG pipelines, and prompt construction. Use when performing any security review touching LLM client code, prompt templates, agent tools, or vector stores.
Ready to connect★ 565
- View details
common-owaspSkillSecurity
OWASP Top 10 audit checklists for Web Applications (2021), APIs (2023), and Mobile (2024). Use when performing any security review, PR review, or codebase audit touching web, mobile, or API code.
Ready to connect★ 565
- View details
common-pentest-methodologySkillSecurity
PTES-aligned penetration testing methodology for backend, frontend, and mobile. Provides attack taxonomy, exploit techniques per vulnerability class, and platform-specific test matrices. Use when executing pentest workflow, planning security assessments, mapping attack surfaces, or building threat m
Ready to connect★ 565
- View details
common-security-auditSkillSecurity
Probe for hardcoded secrets, injection surfaces, unguarded routes, business logic flaws, and platform-specific weaknesses across backend (Node, Go, Java, Python, Rust), frontend (React, Angular, Vue), and mobile (iOS, Android, Flutter) codebases. Use when performing security audits, vulnerability sc
Ready to connect★ 565
- View details
common-security-standardsSkillSecurity
Enforce universal security protocols for safe, resilient software. Use when implementing authentication, encryption, authorization, input validation, secret management, or any security-sensitive feature across any language or framework.
Ready to connect★ 565
- View details
review-ticketSkillSecurity
Review a ticket or PR through focused specialist lenses: scope, architecture, security, tests, AC coverage, and PR metadata.
Ready to connect★ 565
- View details
security-testSkillSecurity
Fast, continuous DevSecOps pipeline for Pull Requests and active branches. Runs SAST, SCA, and secrets detection to catch vulnerabilities before they merge.
Ready to connect★ 565
- View details
ln-22-codebase-auditorSkillSecurity
Audits cross-cutting code health across security, delivery, maintainability, dependencies, diagnosability, concurrency, and lifecycle. Use when no specialist audit is primary.
Ready to connect★ 559
- View details
Quality ReviewSkillSecurity
Use after execution to evaluate code quality across correctness, security, performance, and architecture
★ 549
- View details
Security AuditSkillSecurity
OWASP Top 10 and STRIDE security auditing with supply chain analysis
★ 549
- View details
codex-abSkillSecurity
Run an A/B codex review experiment — holistic codex review vs 3 focused dimension passes (security, ecto, liveview) on the branch diff, classify findings, report a panel-value verdict. Use when the branch is fresh, before any codex review runs.
Ready to connect★ 543
- View details
deps-auditSkillSecurity
Audit Hex deps for supply-chain security risk — bidi chars, compile-time exec, maintainer changes, typosquats, CVEs. Use after mix deps.update, when checking if a package upgrade is safe, or reviewing mix.lock PR diffs.
Ready to connect★ 543
- View details
deps-vetSkillSecurity
Record a vetted Hex package version in hex_vet.exs after a security review — manages the audit ledger, not the scanner. Use to approve a dep after /phx:deps-audit findings or to initialize hex_vet.exs.
Ready to connect★ 543
- View details
phx-deps-auditSkillSecurity
Audit Hex deps for supply-chain security risk — bidi chars, compile-time
Ready to connect★ 543
- View details
phx-deps-vetSkillSecurity
Record a vetted Hex package version in hex_vet.exs after a security review
Ready to connect★ 543
- View details
auth-setupSkillSecurity
Lets your agent generate ready-to-use authentication code with JWT, OAuth, and session support.
Ready to connect★ 533
- View details
debug-rlsSkillSecurity
Use when users report access denied errors, see wrong data, RLS policies are not working, or when troubleshooting Row-Level Security issues in Butterbase
Ready to connect★ 533
- View details
dependency-analysis-patternsSkillSecurity
Dependency graph visualization, circular dependency detection, CVE scanning, and license compliance
Ready to connect★ 530
- View details
differential-reviewSkillSecurity
Security-focused differential code review with blast radius analysis, risk-adaptive depth (DEEP/FOCUSED/SURGICAL), git history correlation, and structured finding format. Adapted from Trail of Bits. Use when reviewing PRs, commits, or code changes for security implications.
Ready to connect★ 530
- View details
handoff-templatesSkillSecurity
Templates for inter-agent communication. Standard handoff, QA verdict (PASS/FAIL), escalation, bug report, security finding, and status update formats.
Ready to connect★ 530
- View details
insecure-defaultsSkillSecurity
Detect fail-open configurations, hardcoded secrets, weak authentication defaults, permissive CORS, disabled security features, and other insecure-by-default patterns. Adapted from Trail of Bits. Use during security review or when auditing configuration and initialization code.
Ready to connect★ 530
- View details
architecting-securitySkillSecurity
Design comprehensive security architectures using defense-in-depth, zero trust principles, threat modeling (STRIDE, PASTA), and control frameworks (NIST CSF, CIS Controls, ISO 27001). Use when designing security for new systems, auditing existing architectures, or establishing security governance pr
Ready to connect★ 517
- View details
configuring-nginxSkillSecurity
Configure nginx for static sites, reverse proxying, load balancing, SSL/TLS termination, caching, and performance tuning. When setting up web servers, application proxies, or load balancers, this skill provides production-ready patterns with modern security best practices for TLS 1.3, rate limiting,
Ready to connect★ 517
- View details
implementing-complianceSkillSecurity
Implement and maintain compliance with SOC 2, HIPAA, PCI-DSS, and GDPR using unified control mapping, policy-as-code enforcement, and automated evidence collection. Use when building systems requiring regulatory compliance, implementing security controls across multiple frameworks, or automating aud
Ready to connect★ 517
- View details
securing-authenticationSkillSecurity
Authentication, authorization, and API security implementation. Use when building user systems, protecting APIs, or implementing access control. Covers OAuth 2.1/OIDC, JWT patterns, sessions, Passkeys/WebAuthn, RBAC/ABAC/ReBAC, policy engines (OPA, Casbin, SpiceDB), managed auth (Clerk, Auth0), self
Ready to connect★ 517
- View details
writing-github-actionsSkillSecurity
Write GitHub Actions workflows with proper syntax, reusable workflows, composite actions, matrix builds, caching, and security best practices. Use when creating CI/CD workflows for GitHub-hosted projects or automating GitHub repository tasks.
Ready to connect★ 517
What is a skill?
A skill is plain text, usually a SKILL.md file and the scripts it refers to, written for an AI rather than for a person. It carries the steps, the house rules and the examples a good answer needs, so you stop pasting the same briefing into every new chat.
52,524 of the 52,958 skills listed here can be served through ahel today, and they come from public repositories. Each one has its own page with the instructions themselves on it, so you can read what a skill will tell your AI to do before you install it.
Install one and every AI you use gets it
Installing a skill adds it to your gateway and turns it on in the same step. Claude Code surfaces it as a slash command; any client can read the full instructions with the skill_read tool.
Nothing is copied into a project folder. The instructions are served from your account, so the same skill is there in every AI you connect, and turning it off removes it from all of them at once.