Skills.
Give your AI a better way to work.
A skill is a set of written instructions that teaches an AI how to do one job the way it should be done: review a pull request, plan a migration, write the release notes.
Install one here and it travels with your account into Claude, Claude Code, Cursor and every other client you sign in with.
Category: Security
1,738 results · page 35 of 58
- View details
evo-spring-boot-jakarta-migrationSkillSecurity
Migrate a Java 8/Spring Boot 2.7 project to Java 21/Spring Boot 3.2 with comprehensive handling of namespace changes, security config, Hibernate 6, JJWT 0.12.x, and RestClient migration.
Ready to connect★ 89
- View details
ai-assist-security-auditSkillSecurity
16-dimension security posture assessment with adaptive activation, health scoring, and remediation plan. Covers application security, infrastructure, auth, crypto, privacy, supply chain, and more. Use when assessing security posture, auditing code for vulnerabilities, reviewing compliance, or prepar
Ready to connect★ 89
- View details
aif-ciSkillSecurity
Generate CI/CD pipeline (GitHub Actions / GitLab CI) with linting, static analysis, tests, security. Use when user says "ci", "setup ci", "github actions", "gitlab ci", "pipeline".
Ready to connect★ 89
- View details
aif-reviewSkillSecurity
Perform code review on staged changes or a pull request. Checks for bugs, security issues, performance problems, and best practices. Use when user says "review code", "check my code", "review PR", or "is this code okay". Optional +check flag validates findings via a fresh-context subagent.
Ready to connect★ 89
- View details
f-securitySkillSecurity
Apply Security First with a security lens who inspects this repo as a data analyst. Use when the user types /f-security or /f security.
Ready to connect★ 89
- View details
ck:gitSkillSecurity
Git operations with conventional commits. Use for staging, committing, pushing, PRs, merges. Auto-splits commits by type/scope. Security scans for secrets.
Ready to connect★ 88
- View details
ck:researchSkillSecurity
Research technical solutions, analyze architectures, gather requirements thoroughly. Use for technology evaluation, best practices research, solution design, scalability/security/maintainability analysis.
Ready to connect★ 88
- View details
swedish-payrollSkillSecurity
Swedish payroll (lön & arbetsgivaravgifter) compliance reference. Covers AGI filing, social security contributions (sociala avgifter, 31.42%), tax withholding/tax tables (skatteavdrag/skattetabeller), fringe benefit taxation (förmånsbeskattning: car/meals/wellness), accrued vacation pay liability (s
Ready to connect★ 88
- View details
cve-auditSkillSecurity
Audit exact npm dependency versions against OSV through Runx native HTTP and emit replay-verified evidence with no unverified findings.
Ready to connect★ 87
- View details
flutter-dart-code-reviewSkillSecurity
Library-agnostic Flutter/Dart code review checklist covering widget best practices, state management patterns (BLoC, Riverpod, Provider, GetX, MobX, Signals), Dart idioms, performance, accessibility, security, and clean architecture.
Ready to connect★ 87
- View details
github-syncSkillSecurity
Read or synchronize bounded GitHub issues, threads, and pull requests through the local authenticated gh CLI or any compatible hosted connector, with scoped authority and readback.
Ready to connect★ 87
- View details
native-mcpSkillSecurity
Use OpenAEON's MCP-oriented workflow safely: prefer the bundled mcporter skill for ad-hoc MCP discovery, schema inspection, authentication, daemon management, and direct tool calls.
Ready to connect★ 87
- View details
perl-securitySkillSecurity
Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies.
Ready to connect★ 87
- View details
qa-security-testingSkillSecurity
Builds automated security testing pipelines for SAST, DAST, SCA, secret scanning, and containers. Use when integrating scanners into CI or managing security regression gates.
Ready to connect★ 87
- View details
software-code-reviewSkillSecurity
Applies systematic code review patterns and checklists. Use when reviewing PRs or diffs for correctness, security, readability, maintainability, and AI-generated changes.
Ready to connect★ 87
- View details
software-security-appsecSkillSecurity
Provides application security guidance for design and implementation. Use when reviewing auth, data handling, supply-chain controls, or AppSec architecture.
Ready to connect★ 87
- View details
vuln-disclosureSkillSecurity
Prepare an evidence-bound vulnerability publication and publish the exact approved advisory through any compatible provider binding with independent readback.
Ready to connect★ 87
- View details
vuln-triageSkillSecurity
Turn verified exact-version vulnerability evidence into bounded remediation and advisory packets without inventing exposure or claiming publication.
Ready to connect★ 87
- View details
adversarySkillSecurity
Pre-implementation red-team analysis. Use when a plan is high-risk, critical path, or expensive to reverse. Challenges plans before code is written — finds edge cases, security holes, scalability bottlenecks, error propagation risks, and integration conflicts. Catches flaws at plan time (10x cheaper
Ready to connect★ 86
- View details
dependency-doctorSkillSecurity
Dependency health management. Detects package manager, checks outdated packages and vulnerabilities, and produces a prioritized update plan.
Ready to connect★ 86
- View details
secure-phaseSkillSecurity
Retroactively verify threat mitigations for a completed phase
Ready to connect★ 86
- View details
sentinelSkillSecurity
Automated security gatekeeper. Blocks unsafe code before commit — secret scanning, OWASP top 10, dependency audit, permission checks. A GATE, not a suggestion.
Ready to connect★ 86
- View details
apiSkillSecurity
How to reach the platform REST API — where prod and dev live, where the API token is (.env), how to authenticate with curl, and how to fetch the OpenAPI spec listing every endpoint. Use whenever you need to read or edit course/homework/project/registration data, or inspect real prod data while debug
Ready to connect★ 85
- View details
cloudsignal-webhooksSkillSecurity
Receive and verify CloudSignal webhooks from Cloudprinter.com. Use when setting up a CloudSignal Webhooks v2.0 receiver, authenticating deliveries by the plaintext `apikey` field in the JSON body (there is NO HMAC signature header), or handling print order/item status signals like CloudprinterOrderV
Ready to connect★ 85
- View details
fusionauth-webhooksSkillSecurity
Receive and verify FusionAuth webhooks. Use when setting up FusionAuth webhook handlers, debugging JWT signature verification, or handling authentication events like user.create, user.login.success, user.registration.create, or user.delete.
Ready to connect★ 85
- View details
greendot-webhooksSkillSecurity
Receive and authenticate Green Dot Embedded Finance (BaaS) webhooks. Use when setting up a Green Dot partner webhook endpoint, validating the OAuth client_credentials Bearer token (scope post:webhook), handling the optional undocumented x-gd-signature header, echoing the x-GD-RequestId header, retur
Ready to connect★ 85
- View details
okta-webhooksSkillSecurity
Receive and verify Okta Event Hooks. Use when setting up Okta event hook handlers, implementing the one-time verification challenge, authenticating requests with the Authorization header secret, or handling identity events like user.lifecycle.create, user.session.start, user.account.lock, or group.u
Ready to connect★ 85
- View details
pipedrive-webhooksSkillSecurity
Receive and authenticate Pipedrive webhooks. Use when setting up Pipedrive webhook handlers, debugging HTTP Basic Auth verification, or handling CRM events like create.deal, change.person, or delete.activity.
Ready to connect★ 85
- View details
shopifySkillSecurity
Build Shopify applications, extensions, and themes using GraphQL/REST APIs, Shopify CLI, Polaris UI components, and Liquid templating. Capabilities include app development with OAuth authentication, checkout UI extensions for customizing checkout flow, admin UI extensions for dashboard integration,
Ready to connect★ 85
- View details
advanced-threat-huntingSkillSecurity
Use when formulating hypotheses and executing deep-dive proactive threat
Ready to connect★ 84
What is a skill?
A skill is plain text, usually a SKILL.md file and the scripts it refers to, written for an AI rather than for a person. It carries the steps, the house rules and the examples a good answer needs, so you stop pasting the same briefing into every new chat.
52,524 of the 52,958 skills listed here can be served through ahel today, and they come from public repositories. Each one has its own page with the instructions themselves on it, so you can read what a skill will tell your AI to do before you install it.
Install one and every AI you use gets it
Installing a skill adds it to your gateway and turns it on in the same step. Claude Code surfaces it as a slash command; any client can read the full instructions with the skill_read tool.
Nothing is copied into a project folder. The instructions are served from your account, so the same skill is there in every AI you connect, and turning it off removes it from all of them at once.