Download

Skill UI

Browse and discover 7065+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Token Security , found 26 results

Default Newest Most Downloaded

CSRF Protection Validator

validating-csrf-protection

jeremylongshore/claude-code-plugins-plus-skills

This skill scans web application endpoints and cookies to spot missing CSRF safeguards—tokens, double-submit cookies, SameSite attributes, and origin checks—then documents vulnerable paths and mitigation steps for security reviews.

Enterprise Credential Security

sickn33/antigravity-awesome-skills

Operates as a CISO-grade engine to discover, classify, protect, and govern every credential or secret (API keys, tokens, vaulted accounts) across clouds, CI/CD, containers, and logs, enforcing rotation, least privilege, and auditing.

Azure Storage Security Audit

detecting-misconfigured-azure-storage

mukul975/Anthropic-Cybersecurity-Skills

Automates detection of misconfigured Azure Storage accounts by checking for public blob containers, missing encryption, overly permissive SAS tokens, disabled logging, and loose network rules via Azure CLI/PowerShell/Defender for Storage across subscriptions.

Detect OAuth Token Theft

detecting-oauth-token-theft

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through detecting and responding to OAuth token theft, covering Microsoft Entra ID/Azure AD protections, conditional access policies, and sign-in log investigations to block token replay, PRT abuse, and session hijacking in cloud deployments.

OAuth Misconfiguration Exploits

exploiting-oauth-misconfiguration

mukul975/Anthropic-Cybersecurity-Skills

Identifies and exploits OAuth 2.0/OpenID Connect misconfigurations during authorized security assessments, covering redirect URI manipulation, token leakage, authorization code theft, and scope escalation to evaluate provider and consumer defenses.

Okta SCIM Provisioning Guide

implementing-scim-provisioning-with-okta

mukul975/Anthropic-Cybersecurity-Skills

Automate user lifecycle management by building a SCIM 2.0 API that pairs with Okta for provisioning, deprovisioning, profile updates, and group sync, leveraging Flask/FastAPI and token-based auth to meet security and compliance needs.

Hardware Security Module Integration

performing-hardware-security-module-integration

mukul975/Anthropic-Cybersecurity-Skills

Guide for integrating Hardware Security Modules via PKCS#11—covering slot/token discovery, key creation, signing, verification, and compliance reporting with python-pkcs11, AWS CloudHSM, and YubiHSM2 in security assessments or audits.

JWT None Attack Testing

performing-jwt-none-algorithm-attack

mukul975/Anthropic-Cybersecurity-Skills

Provides steps and tooling for intercepting JWTs, crafting tokens with the alg header set to none, and submitting forged privileged claims to verify whether a service improperly skips signature verification during authorized security testing.

JWT Vulnerability Testing

testing-for-json-web-token-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Test JWT implementations for algorithm confusion, none bypass, kid/jku injections, and weak secrets to validate authentication and privilege controls during security assessments.

Open Redirect Testing Guide

testing-for-open-redirect-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Identifies open redirect vulnerabilities in web apps by analyzing redirect parameters, applying bypass payloads, and chaining exploits for phishing or token theft during security assessments.

JWT Token Security Testing

testing-jwt-token-security

mukul975/Anthropic-Cybersecurity-Skills

Performs targeted security assessments of JSON Web Token implementations, probing algorithm confusion, claim tampering, brute-force secrets, and misuse during penetration tests of APIs, SSO, and microservice authentication flows.

OAuth2 Security Testing

testing-oauth2-implementation-flaws

mukul975/Anthropic-Cybersecurity-Skills

Evaluates OAuth 2.0 and OpenID Connect deployments for redirect URI flaws, CSRF via missing state, PKCE bypasses, token leakage, and scope escalation to ensure secure authorization-code flows before production onboarding.

Language