Skills.
Give your AI a better way to work.
A skill is a set of written instructions that teaches an AI how to do one job the way it should be done: review a pull request, plan a migration, write the release notes.
Install one here and it travels with your account into Claude, Claude Code, Cursor and every other client you sign in with.
Category: Security
1,840 results · page 55 of 62
- View details
arkweb-security-patch-riskSkillSecurity
Assess residual risk after ArkWeb security patch merge, review, and build verification.
Ready to connect
- View details
audio_pr_createSkillSecurity
Use when managing GitCode repositories with the oh-gc CLI — including authentication, issues, PRs, reviewers, testers, labels, releases, and repository configuration. Use this skill when the user wants to commit code, create an ISSUE, create a PR, update a PR, or perform other GitCode web operations
Ready to connect
- View details
bugbountyrulesSkillSecurity
Use for ANY bug bounty, penetration test, or web/API/mobile security assessment: recon, testing endpoints, analyzing Burp traffic or any bug-bounty platform's MCP (HackerOne, Intigriti, Bugcrowd, YesWeHack, Immunefi), reviewing APKs, bypassing a WAF, enforcing scope, hunting a specific vuln class, v
Ready to connect
- View details
defense-in-depthSkillSecurity
Apply layered security architecture. Use when designing security controls, hardening systems, or reviewing security posture. Covers multiple security layers.
Ready to connect
- View details
identity-accessSkillSecurity
Implement identity and access management. Use when designing authentication, authorization, or user management. Covers OAuth2, OIDC, and RBAC.
Ready to connect
- View details
oauth-2-0-setupSkillSecurity
Implement OAuth 2.0 authentication flows including authorization code with PKCE, client credentials, and device code for secure API integration.
Ready to connect
- View details
oh-distributed-security-design-reviewSkillSecurity
A skill specialized for security code review of OpenHarmony distributed systems. Triggered when the user asks to "review code security implementation", "code security review", "security code review", or makes a similar distributed system code security review request. This skill provides detailed rev
Ready to connect
- View details
ohos-req-feasibility-analysisSkillSecurity
Use when evaluating an OHOS requirement in Phase 0.2, especially for 02-feasibility.md, capability gaps, candidate technical paths, compatibility, security, dependencies, effort, risk, or validation planning. Triggers: 02-feasibility.md, 可行性分析, capability gap, 候选技术路径, 兼容性分析, 工作量估算, 500行人月. Do NOT us
Ready to connect
- View details
ohos-test-fuzz-generationSkillSecurity
Generates LLVM libFuzzer FUZZ test cases for C/C++ projects, performs review against 26 security rules, and generates semantic seed data. Compatible with OpenHarmony / Linux / Android build systems.
Ready to connect
- View details
- View details
openharmony-security-reviewSkillSecurity
Use when reviewing OpenHarmony C++ system service code for security vulnerabilities, particularly IPC handlers, multithreaded components, or code handling sensitive user data
Ready to connect
- View details
sec-agentshield-wrapperSkillSecurity
Pre-flight security analysis before code changes — identifies trust boundary risks, dangerous patterns, and provides proceed/caution/block advisory before implementation starts
Ready to connect
- View details
ajax-securitySkillSecurity
Use when registering or handling WordPress AJAX over admin-ajax.php - wp_ajax_{action} / wp_ajax_nopriv_{action} hooks, JavaScript that posts to admin_url('admin-ajax.php'), or wp.apiFetch / fetch calls to custom actions. Verifies the nonce with check_ajax_referer, gates the action with current_user
Ready to connect
- View details
aspnet-identitySkillSecurity
ASP.NET Core Identity for authentication, roles, claims, and external providers. Covers Identity setup, customization, and token-based auth.
Ready to connect
- View details
assess-github-repo-securitySkillSecurity
Read-only audit of a GitHub repository's security posture. Gathers ref protection (rulesets AND classic branch protection), Actions token permissions, code and supply-chain features (Dependabot, secret scanning, push protection, CodeQL), and repo hygiene toggles via `gh api`, then classifies finding
Ready to connect
- View details
awarenessSkillSecurity
AI situational awareness — internal threat detection for hallucination risk, scope creep, and context degradation. Maps Cooper color codes to reasoning states and OODA loop to real-time decisions. Use during any task where reasoning quality matters, when operating in unfamiliar territory, after dete
Ready to connect
- View details
- View details
capability-permission-checksSkillSecurity
Use when adding admin pages, menu items, AJAX/REST handlers, action links, or any code that performs a privileged operation in WordPress. Gates actions with current_user_can() using the correct capability (not roles), including per-object checks like edit_post, and pairs the check with a nonce. Prev
Ready to connect
- View details
checking-legal-and-safety-wordingSkillSecurity
Reviews public text for license, warranty, compliance, safety, security, certification, and fitness claims that go too far, then rewrites them to stay inside the real limits. Use when shipping or editing public docs, READMEs, or rollout copy. Do not use for internal code comments, or for deciding ac
Ready to connect
- View details
cron-background-job-securitySkillSecurity
Use when scheduling WordPress cron events with wp_schedule_event / wp_schedule_single_event or writing the callback that runs on a cron hook. Treats cron callbacks as running without a logged-in user, re-checks authorization against stored context rather than current_user_can, keeps secrets out of c
Ready to connect
- View details
dependency-supply-chain-securitySkillSecurity
Use when a plugin or theme bundles a third-party PHP or JavaScript library, enqueues an asset from a CDN, fetches or executes code at runtime, manages dependencies with Composer, or prepares the distributable zip. Covers core-handle-first enqueuing, dependency vetting with composer audit, lockfile p
Ready to connect
- View details
google-cloud-recipe-authSkillSecurity
Provides expert guidance on authenticating and authorizing to Google Cloud services and APIs, covering human users, service identities, Application Default Credentials (ADC), and best practices for secure access.
Ready to connect
- View details
google-cloud-waf-securitySkillSecurity
Generates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate a workload, identify security requirements, and provide actionable recommendations for IAM, network secur
Ready to connect
- View details
gutenberg-block-editor-securitySkillSecurity
Use when building dynamic blocks or block-editor features - a render_callback, server-side rendered blocks via ServerSideRender, REST-backed block data, or register_rest_field for the editor. Sanitizes block attributes per type, escapes server render output, sets a real permission_callback on editor
Ready to connect
- View details
http-api-ssrf-preventionSkillSecurity
Use when a plugin or theme makes outbound HTTP requests with the WordPress HTTP API - wp_remote_get, wp_remote_post, wp_remote_request - especially when any part of the URL comes from user input, options, or webhooks. Uses wp_safe_remote_* with wp_http_validate_url, allowlists hosts, blocks internal
Ready to connect
- View details
jwtSkillSecurity
JSON Web Tokens for authentication. Covers token structure, signing, and validation. Use for stateless authentication.
Ready to connect
- View details
multisite-securitySkillSecurity
Use when writing code that runs on a WordPress multisite network - switch_to_blog, network admin pages, get_sites, or capabilities that differ between site and network scope. Uses manage_network / manage_network_options and is_super_admin correctly, restores context with restore_current_blog, isolat
Ready to connect
- View details
nextauthSkillSecurity
NextAuth.js authentication for Next.js. Covers providers, sessions, and callbacks. Use for Next.js authentication.
Ready to connect
- View details
nonces-csrf-protectionSkillSecurity
Use when handling any form submission, AJAX request, admin-post action, settings page, link that triggers an action, or any other user-initiated request in a WordPress plugin or theme. Generates nonces with wp_nonce_field / wp_create_nonce and verifies them with check_admin_referer, check_ajax_refer
Ready to connect
- View details
oauth2SkillSecurity
OAuth 2.0 authorization framework. Covers flows, tokens, and provider integration. Use for third-party authentication.
Ready to connect
What is a skill?
A skill is plain text, usually a SKILL.md file and the scripts it refers to, written for an AI rather than for a person. It carries the steps, the house rules and the examples a good answer needs, so you stop pasting the same briefing into every new chat.
54,764 of the 55,196 skills listed here can be served through ahel today, and they come from public repositories. Each one has its own page with the instructions themselves on it, so you can read what a skill will tell your AI to do before you install it.
Install one and every AI you use gets it
Installing a skill adds it to your gateway and turns it on in the same step. Claude Code surfaces it as a slash command; any client can read the full instructions with the skill_read tool.
Nothing is copied into a project folder. The instructions are served from your account, so the same skill is there in every AI you connect, and turning it off removes it from all of them at once.