Security skills

This skill helps you write secure, efficient backend queries using parameterized queries, ORM builders, and proper optimization strategies.

This skill enforces Next.js App Router patterns, routing, caching, middleware, and metadata to accelerate secure, scalable app development.

This skill analyzes Claude Code skills for security risks before installation, helping you avoid unsafe plugins and protect your environment.

This skill implements multi-layer validation and security patterns to harden apps, enabling robust input handling, error management, and threat mitigation.

This skill analyzes a given AI agent skill for security risks, identifying worm-like behavior, exfiltration, and supply-chain threats across code.

This skill helps you create and configure Pulumi TypeScript projects, integrate ESC, and write reusable TypeScript patterns for infrastructure automation.

This skill performs a comprehensive security audit of AI agents, auditing lethal trifecta, sandboxing, access control, and guardrails to prevent breaches.

This skill guides iterative multi-pass code reviews with automatic fix-review loops, improving correctness, quality, and risk handling before merge.

This skill helps you retrieve internal company information by querying the nlweb-mcp server and presenting precise results.

This skill enforces global development rules across projects, ensuring consistent communication, architecture, and quality through coding, reviews, and

This skill helps you audit security risk, enforce authentication, and prevent IDOR by applying proven patterns for auth, PII protection, and webhooks.

This skill helps you manage UK health and safety requirements for manufacturing, including risk assessments, COSHH, PPE, incident reporting, and LOTO.

This skill performs read-only OpenHarmony dsoftbus code reviews, enforcing safety and logging standards with cross-file and control-flow analysis.

This skill enforces Laravel best practices to optimize security, Eloquent, performance, API design, and testing across applications.

This skill enforces centralized Supabase access and boundary rules to prevent direct calls from components, hooks, or utils.

This skill helps you design autonomous agents for Claude Code plugins by guiding markdown YAML frontmatter setup and system prompts.

This skill helps you design and implement consistent RESTful APIs across frameworks, enforcing naming, versioning, authentication, and documentation.

This skill helps you identify and demonstrate XSS vulnerabilities in web apps, guiding safe testing and remediation with client-side injection techniques.

This skill securely executes sensitive browser actions such as login and payments via a dedicated CLI, keeping credentials isolated from the main agent.

This skill helps you discover relevant agent skills, vet them for safety, and obtain explicit consent before any Codex global installation.

This skill harnesses Codex CLI to provide an independent, non-interactive code and architecture review, highlighting issues and improvement opportunities.