Agent skills
Skills you can use with AI coding agents, indexed from public GitHub repositories.
-
rate-limiter-config
Rate Limiter Config - Auto-activating skill for Security Fundamentals.
Triggers on: rate limiter config, rate limiter config
Part of the Security Fundamentals skill category.
majiayu000/claude-skill-registry 163
-
security-policy-generator
Security Policy Generator - Auto-activating skill for Security Advanced.
Triggers on: security policy generator, security policy generator
Part of the Security Advanced skill category.
majiayu000/claude-skill-registry 163
-
@delon/auth Authentication & Authorization
Implement authentication and authorization using @delon/auth. Use this skill when adding login/logout flows, JWT token management, role-based access control (RBAC), route guards, HTTP interceptors, and session management. Integrates with Firebase Auth and custom permission systems. Ensures secure token storage, automatic token refresh, and consistent authorization checks across components and services.
majiayu000/claude-skill-registry 163
-
input-sanitization
Эксперт по санитизации ввода. Используй для XSS prevention, encoding, validation и security headers.
majiayu000/claude-skill-registry 163
-
security-expert
OWASPの基本を前提に、デフォルト安全（入力検証/認可/秘密情報/監査ログ/SSR/CSRF等）を落とさずに設計・実装・レビューする。脅威と攻撃面を洗い出し、最小権限と安全な失敗で守るために使う。
majiayu000/claude-skill-registry 163
-
Reviewing Authentication and Authorization Security
Use when reviewing authentication or authorization code. Provides comprehensive security guidance on JWT validation, token exchange, OAuth 2.0/2.1 compliance, PKCE, Resource Indicators, MCP authorization, session management, and API authentication. Covers critical vulnerabilities including token forwarding, audience validation, algorithm confusion, confused deputy attacks, and authentication bypass. Invoke when analyzing any authentication, authorization, or access control code changes.
majiayu000/claude-skill-registry 163
-
session-security-checker
Session Security Checker - Auto-activating skill for Security Fundamentals.
Triggers on: session security checker, session security checker
Part of the Security Fundamentals skill category.
majiayu000/claude-skill-registry 163
-
seo-optimizer
Audit and optimize WordPress SEO (Yoast/Rank Math) - checks focus keywords, meta descriptions, featured images. Uses Unsplash API for missing images. Run on all pages/posts to identify and fix SEO issues.
majiayu000/claude-skill-registry 163
-
comfort-safety
Use when creating animations that reassure users, reduce anxiety, or communicate protection and security.
majiayu000/claude-skill-registry 163
-
path-traversal-finder
Path Traversal Finder - Auto-activating skill for Security Fundamentals.
Triggers on: path traversal finder, path traversal finder
Part of the Security Fundamentals skill category.
majiayu000/claude-skill-registry 163
-
openwebf-security-remote-content
Review security risks and mitigations for remote WebF content (untrusted bundles, URL allowlists, HTTPS, trust boundaries, clickjacking). Use when the user mentions untrusted remote bundles, bundle URL validation/allowlists, or remote updates risk.
majiayu000/claude-skill-registry 163
-
auth-comprehensive
Production-grade authentication & authorization covering JWT, cookies, sessions, hashing, MFA, OAuth2, RBAC, and permissions across all frameworks (Next.js, Express.js, FastAPI, Django, Spring, etc.). Includes intelligent pattern selection, Better Auth integration, email verification, social login, token revocation, permission management, and 10+ years security expertise. Use when implementing authentication, authorization, user management, MFA, OAuth integration, or securing APIs in any framework.
majiayu000/claude-skill-registry 163
-
vulnerability-patterns
Index of vulnerability detection pattern skills. Routes to core patterns (universal) and language-specific patterns for security scanning.
majiayu000/claude-skill-registry 163
-
Vulnerability Detection
Systematic approach to identifying security vulnerabilities in code, dependencies, and infrastructure
majiayu000/claude-skill-registry 163
-
GitHub CLI
Expert help with GitHub CLI (gh) for managing pull requests, issues, repositories, workflows, and releases. Use this when working with GitHub operations from the command line.
majiayu000/claude-skill-registry 163
-
security-fixer
Use when generating security patches, fixing vulnerabilities, or creating code remediation for security findings. Invoked for automated fix generation, patch creation, and vulnerability remediation.
majiayu000/claude-skill-registry 163
-
repo-structure-reviewer
Audit a repository's structure and propose a safe, approval-gated reorganization plan. Use when asked to review repo anatomy, propose folder changes, or apply an approved reorg with rollback.
majiayu000/claude-skill-registry 163
-
pentest-metasploit
Penetration testing framework for exploit development, vulnerability validation, and authorized security assessments using Metasploit Framework. Use when: (1) Validating vulnerabilities in authorized security assessments, (2) Demonstrating exploit impact for security research, (3) Testing defensive controls in controlled environments, (4) Conducting authorized penetration tests with proper scoping and authorization, (5) Developing post-exploitation workflows for red team operations.
majiayu000/claude-skill-registry 163
-
ui-design-a11y
无障碍设计审查与修复能力。
majiayu000/claude-skill-registry 163
-
threat-model-generation
Generate a STRIDE-based security threat model for a repository. Use when setting up security monitoring, after architecture changes, or for security audits.
majiayu000/claude-skill-registry 163
-
optimization-phase
Standard Operating Procedure for /optimize phase. Covers performance benchmarking, accessibility audit, security review, and code quality checks.
majiayu000/claude-skill-registry 163
-
jwt-auth
Configure JWT Bearer authentication with Keycloak for affolterNET.Web.Api. Use when setting up token validation, Keycloak integration, or API authentication.
majiayu000/claude-skill-registry 163
-
hipaa-audit-helper
Hipaa Audit Helper - Auto-activating skill for Security Advanced.
Triggers on: hipaa audit helper, hipaa audit helper
Part of the Security Advanced skill category.
majiayu000/claude-skill-registry 163
-
discovery.risk_assessment
Identify potential quality, security, and delivery risks early in discovery to inform mitigation planning.
majiayu000/claude-skill-registry 163