Trusted skills for AI agents from official vendors and established maintainers. Every skill is attributed to its author, scanned, and comes with install steps for your AI tool.
213 skills
MicrosoftOfficial
Manage Microsoft Entra Agent Identity blueprints and per-instance identities for AI agents using Microsoft Graph.
MicrosoftOfficial
A comprehensive guide for managing Microsoft Entra ID app registrations, OAuth 2.0 flows, and MSAL integration.
MicrosoftOfficial
Java SDK for managing cryptographic keys and performing operations within Azure Key Vault and Managed HSM.
MicrosoftOfficial
A structured knowledge base for identifying, assessing, and remediating security risks within Model Context Protocol (MCP) implementations.
MicrosoftOfficial
A comprehensive reference set for assessing software supply chain security posture and prioritizing remediation efforts.
MicrosoftOfficial
OpenVEX v0.2.0 specification reference plus VEX management playbooks - Brought to you by microsoft/hve-core.
MicrosoftOfficial
A structured knowledge base for identifying, assessing, and remediating the OWASP Top 10 security risks in LLM applications.
MicrosoftOfficial
Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.
MicrosoftOfficial
A structured knowledge base of the OWASP Top 10 (2025) for identifying, assessing, and remediating web application security risks.
MicrosoftOfficial
OWASP Docker Top 6 knowledge base for identifying, assessing, and remediating Docker container security risks.
MicrosoftOfficial
A structured reference for the Microsoft Cloud Security Benchmark v2, providing control-domain taxonomies and framework crosswalks for Azure security.
MicrosoftOfficial
A structured knowledge base for identifying, assessing, and remediating risks within CI/CD pipelines based on the OWASP Top 10.
MicrosoftOfficial
A structured assessment framework for evaluating systems against the 7 Foundation Principles of Privacy by Design.
MicrosoftOfficial
A structured knowledge base for identifying, assessing, and remediating security risks in AI agent systems based on the OWASP Agentic Top 10.
MicrosoftOfficial
A security guideline for AI agents to treat external, untrusted content strictly as data rather than executable instructions.
MicrosoftOfficial
A structured knowledge base for identifying, assessing, and remediating risks based on the OWASP Infrastructure Security Top 10.
MicrosoftOfficial
A comprehensive toolkit for security planning, threat modeling, plan-drift analysis, and backlog generation.
SentryOfficial
Audit code for credential leaks occurring through automated object serialization in logs, traces, and error reports.
SentryOfficial
A systematic security code review tool that identifies exploitable vulnerabilities with high-confidence reporting.
SentryOfficial
A security scanner for agent skills that detects prompt injection, malicious code, and excessive permissions.
SentryOfficial
A systematic approach to auditing Django applications for IDOR and broken access control vulnerabilities.
SentryOfficial
Define and maintain SECURITY_MODEL.md files to provide security review tools with repository-specific threat models and trust boundaries.
ElasticOfficial
A structured workflow for investigating, classifying, and documenting Elastic Security detection alerts.
ElasticOfficial
Prioritize and rank Elastic Security alerts by weighted risk and entity grouping.