Trusted skills for AI agents from official vendors and established maintainers. Every skill is attributed to its author, scanned, and comes with install steps for your AI tool.
172 skills
OpenAIOfficial
A repository-grounded workflow for generating actionable, evidence-backed application security threat models.
OpenAIOfficial
Analyze git history to map security ownership, identify bus factor risks, and detect orphaned sensitive code.
OpenAIOfficial
Perform language and framework-specific security reviews and provide secure-by-default coding guidance.
GoogleOfficial
Automates the audit and upgrade of Google Cloud Armor security policies from legacy OWASP CRS 3.0/3.3 to CRS 4.22.
GoogleOfficial
Assess Google Cloud environments for compliance and recommend optimal Assured Workloads frameworks.
GoogleOfficial
Author and provision custom cloud controls and frameworks for Google Cloud Assured Workloads.
GoogleOfficial
Query and retrieve security findings from Google Cloud Security Command Center using read-only gcloud CLI patterns.
GoogleOfficial
Provides a structured workflow for triaging security alerts and managing cases within Google SecOps.
GoogleOfficial
Safely simulate and apply Google Cloud IAM v1 Allow policy changes using historical access logs to prevent workload disruption.
GoogleOfficial
Maps Google Cloud workload requirements to Data Boundary Frameworks and cloud controls for compliance assessment.
GoogleOfficial
Expert guidance for conducting deep security incident and entity investigations within Google SecOps.
GoogleOfficial
Automates the end-to-end detection engineering lifecycle in Google SecOps to identify and close security coverage gaps.
GoogleOfficial
Expert guidance for conducting proactive threat hunting and retroactive indicator analysis within Google SecOps.
GoogleOfficial
Audit AI agent activity, data access, and policy denials in Google Cloud using Cloud Audit Logs.
GoogleOfficial
Orchestrates Google Cloud IAM access troubleshooting and remediation for developers and administrators.
GoogleOfficial
Manage the full lifecycle of Google Security Operations SOAR cases, from creation and investigation to closure.
GoogleOfficial
Remediates Google Cloud Security Command Center findings with a mandatory safety-first approval workflow.
GoogleOfficial
Manage the end-to-end lifecycle of YARA-L 2.0 detection rules and evaluate security coverage gaps in Google SecOps.
Android (Google)Official
Automated auditor for verifying Android application compliance against Google Play Policy requirements.
Trail of BitsOfficial
Generates CVSS v4.0 vector strings and calculator links from vulnerability descriptions.
Trail of BitsOfficial
Automated dimensional analysis to detect unit, decimal, and scaling bugs in arithmetic-heavy codebases.
Trail of BitsOfficial
A systematic security auditing tool for Algorand smart contracts using TEAL and PyTeal.
Trail of BitsOfficial
Build and query multi-language code graphs to map attack surfaces, trace taint, and prioritize security audits.
Trail of BitsOfficial
A structured process for adjudicating whether software evidence confirms a new regression or an exclusion.