Agent skills
Skills you can use with AI coding agents, indexed from public GitHub repositories.
-
security-gate
Classifies inbound Telegram messages for telclaude as ALLOW/WARN/BLOCK with brief rationale.
majiayu000/claude-skill-registry 163
-
security-prompts-auth
Authentication and authorization prompt templates for RBAC implementation, permissions systems, ownership verification, and authorization testing. Use when setting up roles, implementing access control, or testing authorization logic. Triggers include "RBAC", "role-based access", "permissions", "ownership", "authorization", "access control", "user roles", "auth testing".
majiayu000/claude-skill-registry 163
-
detect-hardcoded-secrets
Detect hardcoded secrets, API keys, passwords, and credentials in source code. Security audit for leaked secrets. Works across all languages. Use when user asks about security issues or secret detection.
majiayu000/claude-skill-registry 163
-
Security Auditing
Audit security with vulnerability scanning, input validation checks, and auth/authz review against OWASP Top 10. Use when implementing authentication, reviewing security-sensitive code, or conducting security audits.
majiayu000/claude-skill-registry 163
-
attacking-wireless-networks
Attack WiFi networks using WPA/WPA2 cracking, WPS exploitation, Evil Twin attacks, deauthentication, and wireless reconnaissance. Use when pentesting wireless networks or performing WiFi security assessments.
majiayu000/claude-skill-registry 163
-
windsurf-dependency-management
Analyze and update dependencies with vulnerability scanning. Activate when users mention
"update dependencies", "security audit", "npm audit", "vulnerability scan",
or "dependency updates". Handles dependency analysis and updates. Use when working with windsurf dependency management functionality. Trigger with phrases like "windsurf dependency management", "windsurf management", "windsurf".
majiayu000/claude-skill-registry 163
-
security-reporter
Use when generating comprehensive security audit reports, analyzing security scan results, calculating security posture, or creating OWASP Top 10 compliance assessments. Invoked for security reporting, vulnerability aggregation, and remediation planning.
majiayu000/claude-skill-registry 163
-
security-rbac-auth
Implement authentication, authorization, and security controls. Use for JWT handling, API key management, RBAC, OAuth integration, and security policies. Triggers on "authentication", "authorization", "JWT", "API key", "RBAC", "OAuth", "security", "permissions", or when implementing spec/006-security-governance.md.
majiayu000/claude-skill-registry 163
-
encrypting-and-decrypting-data
Validate encryption implementations and cryptographic practices. Use when reviewing data security measures. Trigger with 'check encryption', 'validate crypto', or 'review security keys'.
majiayu000/claude-skill-registry 163
-
authentication-docs
API認証ドキュメント（OAuth 2.0/PKCE、API Key、JWT、トークン管理）の作成と図解を支援するスキル。
認証フローの説明、トークン取得手順、セキュリティ注意点をわかりやすく整理します。
Anchors:
• OAuth 2.0 Simplified / 適用: フロー図解 / 目的: 正確な説明と用語整理
• Web Application Security / 適用: セキュリティ注意点 / 目的: 安全な認証ドキュメント
• API Documentation Best Practices / 適用: ドキュメント構成 / 目的: 読みやすさの担保
Trigger:
Use when writing authentication docs, creating OAuth flow diagrams, documenting token management, or preparing quickstart guides for API auth.
majiayu000/claude-skill-registry 163
-
auth-module-builder
Implements secure authentication patterns including login/registration, session management, JWT tokens, password hashing, cookie settings, and CSRF protection. Provides auth routes, middleware, security configurations, and threat model documentation. Use when building "authentication", "login system", "JWT auth", or "session management".
majiayu000/claude-skill-registry 163
-
fastapi-security-expert
Expert in securing FastAPI applications with JWT tokens and Better Auth. Use this when implementing authentication middleware, route protection, and user isolation.
majiayu000/claude-skill-registry 163
-
bir-tax-filing
Automate Philippine BIR (Bureau of Internal Revenue) tax form generation and filing. Handles 1601-C (withholding tax), 2550Q (quarterly VAT), 1702-RT/EX (annual income tax), and ATP (Authorization to Print) validation. Ensures 100% compliance with BIR regulations.
majiayu000/claude-skill-registry 163
-
crack-hashcat
Advanced password recovery and hash cracking tool supporting multiple algorithms and attack modes. Use when: (1) Performing authorized password auditing and security assessments, (2) Recovering passwords from captured hashes in forensic investigations, (3) Testing password policy strength and complexity, (4) Validating encryption implementations, (5) Conducting security research on cryptographic hash functions, (6) Demonstrating password weakness in penetration testing reports.
majiayu000/claude-skill-registry 163
-
discovery.risk_assessment
Identify potential quality, security, and delivery risks early in discovery to inform mitigation planning.
majiayu000/claude-skill-registry 163
-
OC Authentication Helper
Helper skill to retrieve OAuth tokens from the correct OpenShift cluster context when multiple clusters are configured
majiayu000/claude-skill-registry 163
-
vercel-security-basics
Execute apply Vercel security best practices for secrets and access control.
Use when securing API keys, implementing least privilege access,
or auditing Vercel security configuration.
Trigger with phrases like "vercel security", "vercel secrets",
"secure vercel", "vercel API key security".
majiayu000/claude-skill-registry 163
-
django-reviewer
WHEN: Django project review, ORM queries, views/templates, admin customization
WHAT: ORM optimization + View patterns + Template security + Admin config + Migration safety
WHEN NOT: FastAPI → fastapi-reviewer, Flask → flask-reviewer, DRF API only → consider api-expert
majiayu000/claude-skill-registry 163
-
security-audit-logging
Implement comprehensive security audit logging for compliance, forensics, and SIEM integration. Use when building audit trails, compliance logging, or security monitoring systems.
majiayu000/claude-skill-registry 163
-
oauth2-authentication
Comprehensive OAuth2 authentication skill covering authorization flows, token management, PKCE, OpenID Connect, and security best practices for modern authentication systems
majiayu000/claude-skill-registry 163
-
vulnerability-validation
Validate security findings from commit-security-scan by assessing exploitability, filtering false positives, and generating proof-of-concept exploits. Use after running commit-security-scan to confirm vulnerabilities.
majiayu000/claude-skill-registry 163
-
hono-authentication
Use this skill whenever the user wants to design, implement, or refactor authentication and authorization in a Hono + TypeScript backend, including JWT, sessions/cookies, middleware, guards-like patterns, and route protection for Node/Edge/Workers runtimes.
majiayu000/claude-skill-registry 163
-
cursor-install-auth
Install Cursor IDE and configure authentication. Triggers on "install cursor",
"setup cursor", "cursor authentication", "cursor login", "cursor license". Use when working with cursor install auth functionality. Trigger with phrases like "cursor install auth", "cursor auth", "cursor".
majiayu000/claude-skill-registry 163
-
stripe-payments
Use when processing payments, handling payment methods, implementing PaymentIntents, or integrating Payment Element. Invoke for payment flow setup, 3D Secure authentication, refund processing, payment method management, or checkout implementation.
majiayu000/claude-skill-registry 163