Agent skills
Skills you can use with AI coding agents, indexed from public GitHub repositories.
-
validating-csrf-protection
Validate CSRF protection implementations for security gaps. Use when reviewing form security or state-changing operations. Trigger with 'validate CSRF', 'check CSRF protection', or 'review token security'.
majiayu000/claude-skill-registry 163
-
validating-authentication-implementations
Validate authentication mechanisms for security weaknesses and compliance. Use when reviewing login systems or auth flows. Trigger with 'validate authentication', 'check auth security', or 'review login'.
majiayu000/claude-skill-registry 163
-
security-analysis
Master skill for comprehensive security analysis. Identifies technology stack and delegates to specialized security sub-skills for deep vulnerability assessment.
majiayu000/claude-skill-registry 163
-
dependency-vulnerability-scanner
Scans dependencies for known vulnerabilities (npm audit, pip-audit, etc.), generates reports, and suggests fixes. Use when user asks to "check vulnerabilities", "security scan", "audit dependencies", "check CVEs", or "vulnerable packages".
majiayu000/claude-skill-registry 163
-
better-auth-sso
Integrate with Better Auth SSO for OAuth2/OIDC authentication. Use this skill when implementing SSO login flows, PKCE authentication, token management, JWKS verification, or global logout in Next.js applications connecting to a Better Auth server.
majiayu000/claude-skill-registry 163
-
hashing-passwords
CRITICAL security skill teaching proper credential and password handling. NEVER store passwords, use bcrypt/argon2, NEVER accept third-party credentials. Use when handling authentication, passwords, API keys, or any sensitive credentials.
majiayu000/claude-skill-registry 163
-
vuln-patterns-languages
Language-specific vulnerability detection patterns for JavaScript/TypeScript, Python, Go, Java, Ruby, and PHP. Provides regex patterns and grep commands for common security vulnerabilities.
majiayu000/claude-skill-registry 163
-
windsurf-common-errors
Diagnose and fix Windsurf common errors and exceptions.
Use when encountering Windsurf errors, debugging failed requests,
or troubleshooting integration issues.
Trigger with phrases like "windsurf error", "fix windsurf",
"windsurf not working", "debug windsurf".
majiayu000/claude-skill-registry 163
-
harbor-expert
Expert Harbor container registry administrator specializing in registry operations, vulnerability scanning with Trivy, artifact signing with Notary, RBAC, and multi-region replication. Use when managing container registries, implementing security policies, configuring image scanning, or setting up disaster recovery.
majiayu000/claude-skill-registry 163
-
github-security-review
Analyze GitHub repository security alerts and generate remediation plans. Use when the user asks to review security alerts, fix vulnerabilities, check dependabot alerts, review code scanning issues, or address secret scanning findings for a GitHub repository. Triggers on requests mentioning GitHub security, repo security review, vulnerability remediation, or security audit.
majiayu000/claude-skill-registry 163
-
security-reactnative
Security - React Native Best Practices. Use when reviewing security, implementing auth, or hardening code.
majiayu000/claude-skill-registry 163
-
sanitizing-user-inputs
Sanitizing and validating user input to prevent XSS, injection attacks, and security vulnerabilities in TypeScript applications
majiayu000/claude-skill-registry 163
-
web-performance-audit
Conduct comprehensive web performance audits. Measure page speed, identify bottlenecks, and recommend optimizations to improve user experience and SEO.
majiayu000/claude-skill-registry 163
-
csp-config-generator
This skill should be used when the user requests to generate, create, or configure Content Security Policy (CSP) headers for Next.js applications to prevent XSS attacks and control resource loading. It analyzes the application to determine appropriate CSP directives and generates configuration via next.config or middleware. Trigger terms include CSP, Content Security Policy, security headers, XSS protection, generate CSP, configure CSP, strict CSP, nonce-based CSP, CSP directives.
majiayu000/claude-skill-registry 163
-
rn-security-audit
Security audit skill for React Native applications. Use when reviewing code for vulnerabilities, detecting leaked secrets (API keys, tokens, credentials), identifying exposed personal data (PII), checking insecure storage, validating authentication flows, reviewing network security, and ensuring compliance with mobile security best practices (OWASP MASVS). Covers both JavaScript/TypeScript and native iOS/Android code.
majiayu000/claude-skill-registry 163
-
zero-trust-config-helper
Zero Trust Config Helper - Auto-activating skill for Security Advanced.
Triggers on: zero trust config helper, zero trust config helper
Part of the Security Advanced skill category.
majiayu000/claude-skill-registry 163
-
network-security-scanner
Network Security Scanner - Auto-activating skill for Security Advanced.
Triggers on: network security scanner, network security scanner
Part of the Security Advanced skill category.
majiayu000/claude-skill-registry 163
-
moai-security
Auth0 security specialist covering attack protection, multi-factor authentication, token security, sender constraining, and compliance. Use when implementing Auth0 security features, configuring attack defenses, setting up MFA, or meeting regulatory requirements.
majiayu000/claude-skill-registry 163
-
create-middleware
Create middleware for cross-cutting concerns. Use when creating authentication, validation, or other request processing middleware. Triggers on "create middleware", "auth middleware", "validation middleware".
majiayu000/claude-skill-registry 163
-
https-certificate-checker
Https Certificate Checker - Auto-activating skill for Security Fundamentals.
Triggers on: https certificate checker, https certificate checker
Part of the Security Fundamentals skill category.
majiayu000/claude-skill-registry 163
-
grey-haven-security-analysis
Comprehensive security analysis with vulnerability detection, OWASP Top 10 compliance, penetration testing simulation, and remediation. Use when conducting security audits, pre-deployment security checks, investigating vulnerabilities, or performing compliance assessments.
majiayu000/claude-skill-registry 163
-
app-sharing
Manage Glide app access, privacy, authentication, and publishing.
Use when configuring who can access an app, setting up sign-in methods,
publishing apps, inviting users, or configuring Row Owners for data security.
majiayu000/claude-skill-registry 163
-
dependency-scan-cosmix-claude-code-setup
majiayu000/claude-skill-registry 163
-
https-certificate-checker
Https Certificate Checker - Auto-activating skill for Security Fundamentals.
Triggers on: https certificate checker, https certificate checker
Part of the Security Fundamentals skill category.
majiayu000/claude-skill-registry 163