Agent skills
Skills you can use with AI coding agents, indexed from public GitHub repositories.
-
security-bluebook-builder
Create or refine a concise, normative security policy ("Blue Book") for sensitive applications. Use when users need a threat model, data classification rules, auth/session policy, logging and audit requirements, retention/deletion expectations, incident response, or security gates for apps handling PII/PHI/financial data.
majiayu000/claude-skill-registry 163
-
nextauth
Implements authentication with Auth.js/NextAuth.js v5 including OAuth providers, credentials, sessions, and route protection. Use when adding authentication to Next.js, configuring OAuth providers, or protecting routes.
majiayu000/claude-skill-registry 163
-
env-secret-detector
Env Secret Detector - Auto-activating skill for Security Fundamentals.
Triggers on: env secret detector, env secret detector
Part of the Security Fundamentals skill category.
majiayu000/claude-skill-registry 163
-
license-compliance-scanner
License Compliance Scanner - Auto-activating skill for Security Fundamentals.
Triggers on: license compliance scanner, license compliance scanner
Part of the Security Fundamentals skill category.
majiayu000/claude-skill-registry 163
-
security-compliance
Implement comprehensive security for shared library. Use when working with security audits, dependency vulnerabilities, API security, token encryption, or secure coding practices for library consumers. Library security impacts all consuming plugins.
majiayu000/claude-skill-registry 163
-
better-auth-setup
Guide implementation of OAuth 2.1 / OIDC authentication using Better Auth with the OIDC Provider plugin. Use this skill when setting up centralized authentication for multiple apps, implementing SSO across a platform, creating an OAuth authorization server, or integrating Better Auth as an identity provider. Covers PKCE for public clients, JWKS configuration, token management, email verification, and common pitfalls like preserving PKCE parameters during sign-in redirects.
majiayu000/claude-skill-registry 163
-
version-checker
Check version compatibility, breaking changes, and security vulnerabilities for dependencies
majiayu000/claude-skill-registry 163
-
owasp-security-review
Security review and implementation support based on OWASP Cheat Sheet Series. Use for code review requests, security-related implementation/research, and vulnerability checks. Covers security topics such as XSS, SQL Injection, CSRF, and authentication/authorization.
majiayu000/claude-skill-registry 163
-
web-performance-audit
Conduct comprehensive web performance audits. Measure page speed, identify bottlenecks, and recommend optimizations to improve user experience and SEO.
majiayu000/claude-skill-registry 163
-
security-pattern-detection
Detect OWASP Top 10 vulnerabilities via static analysis. Calculate security score (0.00-1.00) for code quality. Auto-generate remediation suggestions with implementation examples. Integrate with Serena for vulnerability tracking and SLA compliance. Use when: securing code, detecting vulnerabilities, improving security posture, validating fixes, enforcing security standards.
majiayu000/claude-skill-registry 163
-
xss-prevention
Prevent Cross-Site Scripting (XSS) attacks through input sanitization, output encoding, and Content Security Policy. Use when handling user-generated content in web applications.
majiayu000/claude-skill-registry 163
-
vulnerability-management
Vulnerability lifecycle management including CVE tracking, CVSS scoring, risk prioritization, remediation workflows, and coordinated disclosure practices
majiayu000/claude-skill-registry 163
-
security-best-practices-expert
Application security specialist covering OWASP top 10, secure coding, and vulnerability prevention
majiayu000/claude-skill-registry 163
-
Better Auth Integrator
Implement full Better Auth registration/login with JWT tokens and protect routes when authentication is mentioned
majiayu000/claude-skill-registry 163
-
pinpoint-security
Security patterns, CSP nonces, input validation, auth checks, Supabase SSR patterns. Use when implementing authentication, forms, security features, or when user mentions security/validation/auth.
majiayu000/claude-skill-registry 163
-
security-gate
Classifies inbound Telegram messages for telclaude as ALLOW/WARN/BLOCK with brief rationale.
majiayu000/claude-skill-registry 163
-
code-audit
Perform comprehensive code audits on repositories or directories. Use when asked to audit code, review a codebase, analyze code quality, find bugs, check for security issues, review architecture, check SOLID/DRY compliance, or generate a code audit report. Produces well-formatted markdown reports with prioritized recommendations.
majiayu000/claude-skill-registry 163
-
justfile-security-patterns
Level 2 patterns - vulns, lic, sbom, doctor (security, compliance, environment health)
majiayu000/claude-skill-registry 163
-
budget-optimizer
Analyze spending patterns and find savings. 50/30/20 rule, subscription audit, debt payoff strategies, emergency fund roadmap.
majiayu000/claude-skill-registry 163
-
checking-owasp-compliance
Check compliance with OWASP Top 10 security risks and best practices. Use when performing comprehensive security audits. Trigger with 'check OWASP compliance', 'audit web security', or 'validate OWASP'.
majiayu000/claude-skill-registry 163
-
cursor-sso-integration
Configure SSO and enterprise authentication in Cursor. Triggers on "cursor sso",
"cursor saml", "cursor oauth", "enterprise cursor auth", "cursor okta". Use when working with cursor sso integration functionality. Trigger with phrases like "cursor sso integration", "cursor integration", "cursor".
majiayu000/claude-skill-registry 163
-
dependency-supply-chain-security
Manage dependencies and supply chain security to prevent vulnerable or malicious packages. Use this skill when you need to audit dependencies, update packages, check for vulnerabilities, understand supply chain attacks, or maintain dependency security. Triggers include "dependencies", "npm audit", "supply chain", "package security", "vulnerability", "npm update", "security audit", "outdated packages".
majiayu000/claude-skill-registry 163
-
cursor-agent
A comprehensive skill for using the Cursor CLI agent for various software engineering tasks (updated for 2026 features, includes tmux automation guide).
majiayu000/claude-skill-registry 163
-
session-end
Mandatory session close-out with IG audit, AAR, and optional HISTORIAN. Enforces clean session handoff.
majiayu000/claude-skill-registry 163