Skills.
Give your AI a better way to work.
A skill is a set of written instructions that teaches an AI how to do one job the way it should be done: review a pull request, plan a migration, write the release notes.
Install one here and it travels with your account into Claude, Claude Code, Cursor and every other client you sign in with.
Category: Security
1,738 results · page 26 of 58
- View details
analyzing-securitySkillSecurity
Scans code for security vulnerabilities, detects dangerous patterns, and ensures security decisions are documented. Use when running security scans, auditing code, or checking for OWASP issues, injection risks, or sensitive data leaks. Automatically triggered on new modules, security-related changes
Ready to connect★ 239
- View details
defending-applicationsSkillSecurity
Application security defense knowledge for builders. Covers Web/API/GraphQL hardening (XSS/SQLi/SSRF/IDOR/BOLA/Mass Assignment/deserialization/upload/path traversal), authentication/authorization (OAuth 2.0/OIDC/JWT/Session/Cookie/SAML/SSO), and LLM application security (prompt injection, jailbreak,
Ready to connect★ 239
- View details
securing-systemsSkillSecurity
Security engineering router for penetration testing, code auditing, red/blue/purple team operations, threat intelligence, and vulnerability research. For specialized application security, cloud security, detection engineering, or security architecture, route to dedicated skills (defending-applicatio
Ready to connect★ 239
- View details
stella-cliSkillSecurity
Drive the stella command-line client (@stll/cli), a legal-workspace CLI whose command surface is generated from the stella MCP tool registry. Covers install, OAuth login, the full command tree grouped by domain, JSON output for scripting, the --input escape hatch for deep payloads, cursor pagination
Ready to connect★ 237
- View details
- View details
auditingSkillSecurity
Use when reviewing a bundle-plugin for structural issues, version drift, skill quality, workflow integration, or security risks — before releasing, after changes, or after adding skills. Auto-detects scope (full project vs skill vs workflow)
Ready to connect★ 230
- View details
80-20-reviewSkillSecurity
Focus code review effort on the 20% of code that causes 80% of issues. Prioritizes data access, security, concurrency, and integration boundaries over formatting and style. Uses blast radius scoring to determine review depth. Includes checkpoint schedules, critical path identification, and a batch r
Ready to connect★ 226
- View details
code-review-workflowSkillSecurity
Structured code review workflow for .NET projects using Roslyn MCP tools. Multi-dimensional review covering correctness, security, performance, architecture compliance, and test coverage. Load when: "review PR", "review code", "code review", "PR review", "review changes", "review my code", "check co
Ready to connect★ 226
- View details
verification-loopSkillSecurity
7-phase .NET verification pipeline with structured PASS/FAIL reporting. Ensures every change is build-verified, diagnostics-clean, anti-pattern-free, test-passing, security-scanned, format-compliant, and diff-reviewed before marking work as complete. Load this skill when: "verify", "check everything
Ready to connect★ 226
- View details
AFL++ Fuzzing TestingSkillSecurity
American Fuzzy Lop Plus Plus mutation-based fuzz testing for finding crashes, hangs, and security vulnerabilities in binary programs.
Ready to connect★ 224
- View details
API FuzzingSkillSecurity
API endpoint fuzzing for discovering unexpected behaviors, crashes, and security vulnerabilities through malformed requests, boundary values, and protocol violations.
Ready to connect★ 224
- View details
API Security TestingSkillSecurity
Comprehensive API security testing based on OWASP API Security Top 10 including broken authentication, injection attacks, rate limiting, BOLA/BFLA vulnerabilities, and automated security scanning with ZAP and custom scripts.
Ready to connect★ 224
- View details
API Test Suite GeneratorSkillSecurity
Automatically generate comprehensive API test suites from OpenAPI specifications covering CRUD operations, error handling, authentication, pagination, and edge cases
Ready to connect★ 224
- View details
API Testing RESTSkillSecurity
Comprehensive RESTful API testing patterns covering HTTP methods, status codes, request/response validation, authentication, error handling, and contract testing.
Ready to connect★ 224
- View details
Auth Bypass TesterSkillSecurity
Comprehensive authentication and authorization bypass testing including session hijacking, privilege escalation, JWT manipulation, and access control verification
Ready to connect★ 224
- View details
Authentication Testing PatternsSkillSecurity
Comprehensive authentication testing including login flows, password policies, MFA, session management, account lockout, and SSO integration.
Ready to connect★ 224
- View details
BurpSuite Security TestingSkillSecurity
Web application security testing using BurpSuite for proxy-based interception, scanning, and manual penetration testing of web applications.
Ready to connect★ 224
- View details
Clerk Auth TestingSkillSecurity
Testing patterns for Clerk authentication including sign-in flow testing, protected route testing, webhook verification, middleware testing, and organization-based access control
Ready to connect★ 224
- View details
CodeQL Security AnalysisSkillSecurity
Advanced security analysis using GitHub CodeQL to find zero-day vulnerabilities, injection flaws, and security anti-patterns in source code.
Ready to connect★ 224
- View details
Compliance-as-Code TestingSkillSecurity
Automated compliance testing using Open Policy Agent, Chef InSpec, and custom policy engines for security baseline validation.
Ready to connect★ 224
- View details
CORS Security TestingSkillSecurity
Testing Cross-Origin Resource Sharing configurations for misconfigurations, overly permissive policies, and credential handling vulnerabilities.
Ready to connect★ 224
- View details
CSP Security TestingSkillSecurity
Content Security Policy testing and validation to prevent XSS attacks, data injection, and clickjacking through proper CSP header configuration.
Ready to connect★ 224
- View details
Dependency Vulnerability ScannerSkillSecurity
Automated scanning of project dependencies for known vulnerabilities using tools like npm audit, Snyk, and Dependabot patterns.
Ready to connect★ 224
- View details
Express.js Testing PatternsSkillSecurity
Express.js API testing with supertest, middleware testing, route handler testing, error handling verification, and authentication testing.
Ready to connect★ 224
- View details
researchSkillSecurity
Research technical solutions, analyze architectures, gather requirements thoroughly. Use for technology evaluation, best practices research, solution design, scalability/security/maintainability analysis.
Ready to connect★ 224
- View details
new-device-supportSkillSecurity
Full workflow to add support for a new Eufy Security device type (cameras, locks, sensors, and other devices) across eufy-security-client and homebridge-eufy-security. Covers exploration, implementation, build verification, and git/PR creation.
Ready to connect★ 221
- View details
requesting-code-reviewSkillSecurity
Pre-commit review: security scan, quality gates, auto-fix.
Ready to connect★ 220
- View details
dv-connectSkillSecurity
One-step setup for a Dataverse environment — installs tools, authenticates, registers the MCP server, and writes `.env`. Use when starting a new project, switching environments, fixing authentication, or troubleshooting an MCP connection that won't come up.
Ready to connect★ 219
- View details
dv-securitySkillSecurity
Security-role assignment, user access, application users, business units, and admin self-elevation in Dataverse environments. Use when the user wants to give someone access, grant a role, become an admin, or add a service principal.
Ready to connect★ 219
- View details
mcp-creatorSkillSecurity
Expert MCP (Model Context Protocol) server developer creating safe, performant, production-ready servers with proper security, error handling, and developer experience. Activate on 'create
Ready to connect★ 219
What is a skill?
A skill is plain text, usually a SKILL.md file and the scripts it refers to, written for an AI rather than for a person. It carries the steps, the house rules and the examples a good answer needs, so you stop pasting the same briefing into every new chat.
52,524 of the 52,958 skills listed here can be served through ahel today, and they come from public repositories. Each one has its own page with the instructions themselves on it, so you can read what a skill will tell your AI to do before you install it.
Install one and every AI you use gets it
Installing a skill adds it to your gateway and turns it on in the same step. Claude Code surfaces it as a slash command; any client can read the full instructions with the skill_read tool.
Nothing is copied into a project folder. The instructions are served from your account, so the same skill is there in every AI you connect, and turning it off removes it from all of them at once.