Skills.

Give your AI a better way to work.

A skill is a set of written instructions that teaches an AI how to do one job the way it should be done: review a pull request, plan a migration, write the release notes.

Install one here and it travels with your account into Claude, Claude Code, Cursor and every other client you sign in with.

Category: Security

1,738 results · page 27 of 58

  • modern-auth-2026SkillSecurity

    Modern authentication implementation for 2026 - passkeys (WebAuthn), OAuth (Google, Apple), magic links, and cross-device sync. Use for passwordless-first authentication, social login setup,

    Ready to connect★ 219

    github.com/curiositech/some_claude_skills209 stars

    View details
  • oauth-oidc-implementerSkillSecurity

    Expert in implementing OAuth 2.0 and OpenID Connect (OIDC) authentication flows. Specializes in secure token handling, social login integration, API authorization, and identity provider configuration.

    Ready to connect★ 219

    github.com/curiositech/some_claude_skills209 stars

    View details
  • security-auditorSkillSecurity

    Security vulnerability scanner and OWASP compliance auditor for codebases. Dependency scanning (npm audit, pip-audit), secret detection (high-entropy strings, API keys), SAST for injection/XSS

    Ready to connect★ 219

    github.com/curiositech/some_claude_skills209 stars

    View details
  • api-testingSkillSecurity

    HTTP API testing for TypeScript (Supertest) and Python (httpx, pytest). Test REST APIs, GraphQL, request/response validation, authentication, and error handling.

    Ready to connect★ 217

    github.com/secondsky/claude-skills217 stars

    View details
  • claude-code-bash-patternsSkillSecurity

    Claude Code Bash tool patterns with hooks, automation, git workflows. Use for PreToolUse hooks, command chaining, CLI orchestration, custom commands, or encountering bash permissions, command failures, security guards, hook configurations.

    Ready to connect★ 217

    github.com/secondsky/claude-skills217 stars

    View details
  • csrf-protectionSkillSecurity

    Implements CSRF protection using synchronizer tokens, double-submit cookies, and SameSite attributes. Use when securing web forms, protecting state-changing endpoints, or implementing defense-in-depth authentication.

    Ready to connect★ 217

    github.com/secondsky/claude-skills217 stars

    View details
  • cybersecuritySkillSecurity

    OSS-only security for OWASP Top 10, pentest, vuln testing (XSS, SSRF, CSRF, business-logic, Host header), threat modeling (STRIDE, ATT&CK), Sigma rules, SAST, code audit, AI/LLM red-team, or replacing paid tools (Burp, Nessus, Splunk) with OSS.

    Ready to connect★ 217

    github.com/secondsky/claude-skills217 stars

    View details
  • dependency-upgradeSkillSecurity

    Secure dependency upgrades with supply chain protection, cooldowns, and staged rollout. Use when upgrading deps, configuring security policies, or preventing supply chain attacks.

    Ready to connect★ 217

    github.com/secondsky/claude-skills217 stars

    View details
  • gemini-cliSkillSecurity

    Google Gemini CLI for second opinions, architectural advice, code reviews, security audits. Leverage 1M+ context for comprehensive codebase analysis via command-line tool.

    Ready to connect★ 217

    github.com/secondsky/claude-skills217 stars

    View details
  • github-project-automationSkillSecurity

    GitHub repository automation (CI/CD, issue templates, Dependabot, CodeQL). Use for project setup, Actions workflows, security scanning, or encountering YAML syntax, workflow configuration, template structure errors.

    Ready to connect★ 217

    github.com/secondsky/claude-skills217 stars

    View details
  • multi-ai-consultantSkillSecurity

    Consult external AIs (Gemini 2.5 Pro, OpenAI Codex, Claude) for second opinions. Use for debugging failures, architectural decisions, security validation, or need fresh perspective with synthesis.

    Ready to connect★ 217

    github.com/secondsky/claude-skills217 stars

    View details
  • oauth-implementationSkillSecurity

    OAuth 2.0 and OpenID Connect authentication with secure flows. Use for third-party integrations, SSO systems, token-based API access, or encountering authorization code flow, PKCE, token refresh, scope management errors.

    Ready to connect★ 217

    github.com/secondsky/claude-skills217 stars

    View details
  • fix-vulnerabilitiesSkillSecurity

    Triage and fix dependency vulnerabilities in an npm project. Use when the user asks to fix, address, or patch dependency/dependabot/npm audit vulnerabilities.

    Ready to connect★ 215

    github.com/itsbencodes/cookies215 stars

    View details
  • llmquant-equity-derivativesSkillSecurity

    Router skill for LLMQuant equity derivatives workflows. Use when the user needs single-stock derivative, convertible, warrant, structured payoff, or hybrid security analysis.

    Ready to connect★ 214

    github.com/llmquant/skills214 stars

    View details
  • telnyx-account-access-goSkillSecurity

    Configure account addresses, authentication providers, IP access controls, billing groups, and integration secrets. This skill provides Go SDK examples.

    Ready to connect★ 214

    github.com/team-telnyx/ai214 stars

    View details
  • telnyx-account-access-javaSkillSecurity

    Configure account addresses, authentication providers, IP access controls, billing groups, and integration secrets. This skill provides Java SDK examples.

    Ready to connect★ 214

    github.com/team-telnyx/ai214 stars

    View details
  • telnyx-account-access-javascriptSkillSecurity

    Configure account addresses, authentication providers, IP access controls, billing groups, and integration secrets. This skill provides JavaScript SDK examples.

    Ready to connect★ 214

    github.com/team-telnyx/ai214 stars

    View details
  • telnyx-account-access-pythonSkillSecurity

    Configure account addresses, authentication providers, IP access controls, billing groups, and integration secrets. This skill provides Python SDK examples.

    Ready to connect★ 214

    github.com/team-telnyx/ai214 stars

    View details
  • telnyx-account-access-rubySkillSecurity

    Configure account addresses, authentication providers, IP access controls, billing groups, and integration secrets. This skill provides Ruby SDK examples.

    Ready to connect★ 214

    github.com/team-telnyx/ai214 stars

    View details
  • telnyx-oauth-curlSkillSecurity

    Implement OAuth 2.0 authentication flows for Telnyx API access. This skill provides REST API (curl) examples.

    Ready to connect★ 214

    github.com/team-telnyx/ai214 stars

    View details
  • telnyx-oauth-goSkillSecurity

    Implement OAuth 2.0 authentication flows for Telnyx API access. This skill provides Go SDK examples.

    Ready to connect★ 214

    github.com/team-telnyx/ai214 stars

    View details
  • telnyx-oauth-javaSkillSecurity

    Implement OAuth 2.0 authentication flows for Telnyx API access. This skill provides Java SDK examples.

    Ready to connect★ 214

    github.com/team-telnyx/ai214 stars

    View details
  • telnyx-oauth-javascriptSkillSecurity

    Implement OAuth 2.0 authentication flows for Telnyx API access. This skill provides JavaScript SDK examples.

    Ready to connect★ 214

    github.com/team-telnyx/ai214 stars

    View details
  • telnyx-oauth-pythonSkillSecurity

    Implement OAuth 2.0 authentication flows for Telnyx API access. This skill provides Python SDK examples.

    Ready to connect★ 214

    github.com/team-telnyx/ai214 stars

    View details
  • telnyx-oauth-rubySkillSecurity

    Implement OAuth 2.0 authentication flows for Telnyx API access. This skill provides Ruby SDK examples.

    Ready to connect★ 214

    github.com/team-telnyx/ai214 stars

    View details
  • absolute-auditSkillSecurity

    Vulnerability and security scan (defensive, your own repo): dependency CVEs plus risky code patterns (secrets, injection, weak authz), severity x reachability triaged and remediated without suppressing. Complements the built-in /security-review. Triggers on "absolute audit", "security audit", "are w

    Ready to connect★ 211

    github.com/maddhruv/absolute211 stars

    View details
  • absolute-upgradeSkillSecurity

    Dependency upgrades: outdated/vulnerable deps planned into semver waves (patch/minor batched, majors gated and changelog-read), applied incrementally with lockfiles regenerated and tests green after each. Runs on green main. Triggers on "absolute upgrade", "upgrade our dependencies", "bump deps", "u

    Ready to connect★ 211

    github.com/maddhruv/absolute211 stars

    View details
  • mobile-testingSkillSecurity

    Use this skill when you need to design mobile test plans for iOS or Android covering functionality, compatibility, performance, network, and security; triggers include mobile testing and app testing.

    Ready to connect★ 210

    github.com/naodeng/awesome-qa-skills210 stars

    View details
  • security-testingSkillSecurity

    Use this skill when you need to design security testing around OWASP risks, vulnerability scanning, and penetration scenarios; triggers include security testing and vulnerability testing.

    Ready to connect★ 210

    github.com/naodeng/awesome-qa-skills210 stars

    View details
  • adcs-attacksSkillSecurity

    Active Directory Certificate Services (AD CS) escalation techniques ESC1 through ESC17, driven by hand with Certipy (ly4k). Use when the target runs a Certificate Authority and you want to find vulnerable certificate templates or CA misconfigurations, request a certificate that impersonates a privil

    Ready to connect★ 193

    github.com/adscanpro/claude-ad199 stars

    View details

What is a skill?

A skill is plain text, usually a SKILL.md file and the scripts it refers to, written for an AI rather than for a person. It carries the steps, the house rules and the examples a good answer needs, so you stop pasting the same briefing into every new chat.

52,524 of the 52,958 skills listed here can be served through ahel today, and they come from public repositories. Each one has its own page with the instructions themselves on it, so you can read what a skill will tell your AI to do before you install it.

Install one and every AI you use gets it

Installing a skill adds it to your gateway and turns it on in the same step. Claude Code surfaces it as a slash command; any client can read the full instructions with the skill_read tool.

Nothing is copied into a project folder. The instructions are served from your account, so the same skill is there in every AI you connect, and turning it off removes it from all of them at once.

See how to connect your AI