Skill UI

This skill provides a comprehensive security hardening checklist for software projects. It covers network security, authentication, API safety, data protection, secrets management, supply chain security, incident response, and compliance standards like GDPR and PCI-DSS. Use it to review and improve the security posture of your application before production deployment.

This skill acts as a specialized security expert for analyzing project dependencies. It scans dependencies across multiple ecosystems (e.g., npm, pip, Maven) to identify known vulnerabilities, assess associated risks, and generate Software Bill of Materials (SBOMs). It provides comprehensive insights into supply chain security and offers automated strategies for remediation, ensuring compliance and stability during development.

This comprehensive, zero-trust security auditor scans third-party AI agent skills before installation. It performs a rigorous 6-phase review process, analyzing surface patterns, script integrity, permissions, and supply chain risks. It is designed to detect malicious payloads, credential theft, instruction overrides, and prompt injection attacks, ensuring secure AI development and deployment.

Scan AI agent skills for security vulnerabilities including prompt injection, malicious code, excessive permissions, secret exposure, and supply chain risks before adoption. Provides structured analysis with severity levels, URL analysis, and structure information. Supports static scanning plus manual review workflow for comprehensive security assessment.

This skill performs external reconnaissance on software supply chain attack surfaces. It identifies public GitHub organizations, internal package names in JS/Python bundles, and Docker images. It checks for dependency confusion vulnerabilities by verifying if internal package names are available on public registries. Requires explicit authorization for offensive security assessments.

This skill enables detection, response, and prevention of software supply chain attacks targeting package registries, container images, and CI/CD pipelines. It includes lockfile auditing, provenance verification using tools like Cosign and SLSA, and emergency response playbooks for compromised dependencies.

This skill identifies dependencies at heightened risk of exploitation or takeover by evaluating factors like maintainer activity, popularity, and security history. It generates a security report for supply chain attack surface assessment and pre-engagement scoping.

This skill covers comprehensive software supply chain security assessments, including SBOM generation, SCA scanning, CI/CD pipeline reviews, and container image audits. It focuses on verifying build integrity, dependency provenance, and vulnerability reachability to ensure secure software delivery and mitigate supply chain risks.

Master advanced vulnerability analysis principles aligned with OWASP 2025 standards. Learn to think like an attacker and defend like an expert. Covers supply chain security, attack surface mapping, risk prioritization using CVSS and EPSS, and exceptional condition handling. Includes methodologies for scanning, code pattern analysis, and cloud security considerations to identify and mitigate critical security risks effectively.