Files
claude-plugins/awesome-skills/skills/security/SKILL.md
T
rootandClaude Opus 4.6 9c475f137b Add awesome-skills plugin: 856+ skill router via antigravity-awesome-skills
9 category-based router skills (architecture, business, data-ai, development,
general, infrastructure, security, testing, workflow) that auto-invoke on
matching keywords and route to the appropriate antigravity skill file.

Includes generate-indexes.py script to regenerate category indexes from
catalog.json when the antigravity repo updates.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-14 13:12:50 +00:00

14 KiB

name, description
name description
awesome-security Application security, penetration testing, ethical hacking, OWASP, authentication patterns, OAuth2, JWT, encryption, TLS, compliance, GDPR, HIPAA, SOC2, PCI-DSS, secrets management, web application security, supply chain security, vulnerability assessment, code audit, binary analysis, malware analysis, threat modeling, API security, network security, cloud security, incident response, forensics. Use when securing applications, performing security audits, implementing authentication, or assessing vulnerabilities.

Security Skills Router

Routes to 126 specialized security skills from antigravity-awesome-skills.

Instructions

When this skill is invoked:

  1. Match the user's request against the skill index below
  2. Read the full SKILL.md file using the Read tool from the path shown
  3. If multiple skills match, pick the most specific one
  4. Apply the loaded skill's guidance to help the user
  5. If no clear match exists, list the top 3-5 candidates and ask

Skill files location (check in order):

  • /home/n8n/plugins/antigravity-awesome-skills/skills/{id}/SKILL.md
  • ~/.claude/antigravity-awesome-skills/skills/{id}/SKILL.md
  • ~/antigravity-awesome-skills/skills/{id}/SKILL.md

Skill Index

ID Description
accessibility-compliance-accessibility-audit You are an accessibility expert specializing in WCAG compliance, inclusive de...
active-directory-attacks This skill should be used when the user asks to "attack Active Directory", "e...
agent-memory-systems Memory is the cornerstone of intelligent agents
ai-product Every product will be AI-powered
antigravity-workflows Orchestrate multiple Antigravity skills through guided workflows for SaaS MVP...
api-fuzzing-bug-bounty This skill should be used when the user asks to "test API security", "fuzz AP...
api-security-best-practices Implement secure API design patterns including authentication, authorization,...
attack-tree-construction Build comprehensive attack trees to visualize threat paths
auth-implementation-patterns Master authentication and authorization patterns including JWT, OAuth2, sessi...
aws-penetration-testing This skill should be used when the user asks to "pentest AWS", "test AWS secu...
azure-cosmos-db-py Build Azure Cosmos DB NoSQL services with Python/FastAPI following production...
azure-identity-dotnet Azure Identity SDK for .NET
azure-keyvault-py Azure Key Vault SDK for Python
azure-keyvault-secrets-rust Azure Key Vault Secrets SDK for Rust
azure-keyvault-secrets-ts Manage secrets using Azure Key Vault Secrets SDK for JavaScript (@azure/keyva...
azure-security-keyvault-keys-dotnet Azure Key Vault Keys SDK for .NET
azure-security-keyvault-keys-java Azure Key Vault Keys Java SDK for cryptographic key management
azure-security-keyvault-secrets-java Azure Key Vault Secrets Java SDK for secret management
backend-security-coder Expert in secure backend coding practices specializing in input validation, a...
broken-authentication This skill should be used when the user asks to "test for broken authenticati...
burp-suite-testing This skill should be used when the user asks to "intercept HTTP traffic", "mo...
cc-skill-security-review Use this skill when adding authentication, handling user input, working with ...
cicd-automation-workflow-automate You are a workflow automation expert specializing in creating efficient CI/CD...
clerk-auth Expert patterns for Clerk auth implementation, middleware, organizations, web...
cloud-architect Expert cloud architect specializing in AWS/Azure/GCP multi-cloud infrastructu...
cloud-penetration-testing This skill should be used when the user asks to "perform cloud penetration te...
code-review-checklist Comprehensive checklist for conducting thorough code reviews covering functio...
code-reviewer Elite code review expert specializing in modern AI-powered code analysis, sec...
codebase-cleanup-deps-audit You are a dependency security expert specializing in vulnerability scanning, ...
computer-use-agents Build AI agents that interact with computers like humans do - viewing screens...
database-admin Expert database administrator specializing in modern cloud databases, automat...
database-migration Execute database migrations across ORMs and platforms with zero-downtime stra...
database-migrations-sql-migrations SQL database migrations with zero-downtime strategies for PostgreSQL, MySQL, ...
dependency-management-deps-audit You are a dependency security expert specializing in vulnerability scanning, ...
deployment-engineer Expert deployment engineer specializing in modern CI/CD pipelines, GitOps wor...
deployment-pipeline-design Design multi-stage CI/CD pipelines with approval gates, security checks, and ...
design-orchestration Orchestrates design workflows by routing work through brainstorming, multi-ag...
devops-troubleshooter Expert DevOps troubleshooter specializing in rapid incident response, advance...
docker-expert Docker containerization expert with deep knowledge of multi-stage builds, ima...
dotnet-backend Build ASP.NET Core 8+ backend services with EF Core, auth, background jobs, a...
ethical-hacking-methodology This skill should be used when the user asks to "learn ethical hacking", "und...
file-path-traversal This skill should be used when the user asks to "test for directory traversal...
find-bugs Find bugs, security vulnerabilities, and code quality issues in local branch ...
firebase Firebase gives you a complete backend in minutes - auth, database, storage, f...
firmware-analyst Expert firmware analyst specializing in embedded systems, IoT security, and h...
form-cro Optimize any form that is NOT signup or account registration — including lead...
framework-migration-deps-upgrade You are a dependency management expert specializing in safe, incremental upgr...
frontend-mobile-security-xss-scan You are a frontend security specialist focusing on Cross-Site Scripting (XSS)...
frontend-security-coder Expert in secure frontend coding practices specializing in XSS prevention, ou...
gdpr-data-handling Implement GDPR-compliant data handling with consent management, data subject ...
graphql-architect Master modern GraphQL with federation, performance optimization, and enterpri...
html-injection-testing This skill should be used when the user asks to "test for HTML injection", "i...
hugging-face-jobs This skill should be used when users want to run any workload on Hugging Face...
hybrid-cloud-architect Expert hybrid cloud architect specializing in complex multi-cloud solutions a...
idor-testing This skill should be used when the user asks to "test for insecure direct obj...
incident-responder Expert SRE incident responder specializing in rapid problem resolution, moder...
incident-response-incident-response Use when working with incident response incident response
incident-response-smart-fix [Extended thinking: This workflow implements a sophisticated debugging and re...
incident-runbook-templates Create structured incident response runbooks with step-by-step procedures, es...
internal-comms-anthropic A set of resources to help me write all kinds of internal communications, usi...
internal-comms-community A set of resources to help me write all kinds of internal communications, usi...
k8s-manifest-generator Create production-ready Kubernetes manifests for Deployments, Services, Confi...
k8s-security-policies Implement Kubernetes security policies including NetworkPolicy, PodSecurityPo...
kubernetes-architect Expert Kubernetes architect specializing in cloud-native infrastructure, adva...
legal-advisor Draft privacy policies, terms of service, disclaimers, and legal notices
linkerd-patterns Implement Linkerd service mesh patterns for lightweight, security-focused ser...
loki-mode Multi-agent autonomous startup system for Claude Code
m365-agents-dotnet Microsoft 365 Agents SDK for .NET
m365-agents-py Microsoft 365 Agents SDK for Python
malware-analyst Expert malware analyst specializing in defensive malware research, threat int...
memory-forensics Master memory forensics techniques including memory acquisition, process anal...
metasploit-framework This skill should be used when the user asks to "use Metasploit for penetrati...
mobile-security-coder Expert in secure mobile coding practices specializing in input validation, We...
mtls-configuration Configure mutual TLS (mTLS) for zero-trust service-to-service communication
multi-agent-brainstorming Use this skill when a design or idea requires higher confidence, risk reducti...
network-engineer Expert network engineer specializing in modern cloud networking, security arc...
nextjs-supabase-auth Expert integration of Supabase Auth with Next.js App Router
nodejs-best-practices Node.js development principles and decision-making
notebooklm Use this skill to query your Google NotebookLM notebooks directly from Claude...
observability-engineer Build production-ready monitoring, logging, and tracing systems
openapi-spec-generation Generate and maintain OpenAPI 3.1 specifications from code, design-first spec...
payment-integration Integrate Stripe, PayPal, and payment processors
pci-compliance Implement PCI DSS compliance requirements for secure handling of payment card...
pentest-checklist This skill should be used when the user asks to "plan a penetration test", "c...
plaid-fintech Expert patterns for Plaid API integration including Link token flows, transac...
popup-cro Create and optimize popups, modals, overlays, slide-ins, and banners to incre...
postmortem-writing Write effective blameless postmortems with root cause analysis, timelines, an...
quant-analyst Build financial models, backtest trading strategies, and analyze market data
red-team-tactics Red team tactics principles based on MITRE ATT&CK
red-team-tools This skill should be used when the user asks to "follow red team methodology"...
research-engineer An uncompromising Academic Research Engineer
reverse-engineer Expert reverse engineer specializing in binary analysis, disassembly, decompi...
risk-manager Monitor portfolio risk, R-multiples, and position limits
risk-metrics-calculation Calculate portfolio risk metrics including VaR, CVaR, Sharpe, Sortino, and dr...
sast-configuration Configure Static Application Security Testing (SAST) tools for automated vuln...
scanning-tools This skill should be used when the user asks to "perform vulnerability scanni...
secrets-management Implement secure secrets management for CI/CD pipelines using Vault, AWS Secr...
security-auditor Expert security auditor specializing in DevSecOps, comprehensive cybersecurit...
security-bluebook-builder Build security Blue Books for sensitive apps
security-compliance-compliance-check You are a compliance expert specializing in regulatory requirements for softw...
security-requirement-extraction Derive security requirements from threat models and business context
security-scanning-security-dependencies You are a security expert specializing in dependency vulnerability analysis, ...
security-scanning-security-hardening Coordinate multi-layer security scanning and hardening across application, in...
security-scanning-security-sast Static Application Security Testing (SAST) for code vulnerability analysis ac...
seo-authority-builder Analyzes content for E-E-A-T signals and suggests improvements to build autho...
service-mesh-expert Expert service mesh architect specializing in Istio, Linkerd, and cloud-nativ...
smtp-penetration-testing This skill should be used when the user asks to "perform SMTP penetration tes...
solidity-security Master smart contract security best practices to prevent common vulnerabiliti...
sql-injection-testing This skill should be used when the user asks to "test for SQL injection vulne...
ssh-penetration-testing This skill should be used when the user asks to "pentest SSH services", "enum...
stride-analysis-patterns Apply STRIDE methodology to systematically identify threats
stripe-integration Implement Stripe payment processing for robust, PCI-compliant payment flows i...
terraform-specialist Expert Terraform/OpenTofu specialist mastering advanced IaC automation, state...
threat-mitigation-mapping Map identified threats to appropriate security controls and mitigations
threat-modeling-expert Expert in threat modeling methodologies, security architecture review, and ri...
top-web-vulnerabilities This skill should be used when the user asks to "identify web application vul...
twilio-communications Build communication features with Twilio: SMS messaging, voice calls, WhatsAp...
ui-visual-validator Rigorous visual validation expert specializing in UI testing, design system c...
using-neon Guides and best practices for working with Neon Serverless Postgres
varlock-claude-skill Secure environment variable management ensuring secrets are never exposed in ...
vulnerability-scanner Advanced vulnerability analysis principles
web-design-guidelines Review UI code for Web Interface Guidelines compliance
wiki-onboarding Generates two complementary onboarding guides — a Principal-Level architectur...
wiki-researcher Conducts multi-turn iterative deep research on specific topics within a codeb...
wordpress-penetration-testing This skill should be used when the user asks to "pentest WordPress sites", "s...
xss-html-injection This skill should be used when the user asks to "test for XSS vulnerabilities...