Security Agent Skills
664 skills for security — ranked by real installs, refreshed continuously, never faked.
# Skill Installs
1 
entra-app-registration microsoft/azure-skills Microsoft Entra ID app registration, OAuth 2.0 configuration, and MSAL integration for secure application authentication. 471k installs 2 entra-agent-id microsoft/azure-skills Provision OAuth 2.0 identities for AI agents with per-instance credentials and audit trails via Microsoft Graph. 194k installs 3 
supabase supabase/agent-skills Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps l… 179k installs 4 
firebase-auth-basics firebase/agent-skills Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management… 112k installs 5 
convex-setup-auth get-convex/agent-skills Set up Convex authentication with the right provider, user management, and access control patterns. 89k installs 6 
better-auth-best-practices better-auth/skills Complete Better Auth server and client setup with database adapters, session management, plugins, and security configuration. 78k installs 7 firebase-security-rules-auditor firebase/agent-skills A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that th… 76k installs 8 firebase-ai-logic-basics firebase/agent-skills Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structur… 75k installs 9 
vercel-cli-with-tokens vercel-labs/agent-skills Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rathe… 72k installs 10 
doc-coauthoring anthropics/skills Guide users through a structured workflow for co-authoring documentation. Use when user wants to write documentation, proposals,… 70k installs 11 
audit-website squirrelscan/skills Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility. 65k installs 12 
neon-postgres neondatabase/agent-skills Comprehensive guides and best practices for Neon Serverless Postgres, covering setup, connection methods, authentication, and pla… 55k installs 13 
nodejs-backend-patterns wshobson/agents Production-ready Node.js backend patterns with Express/Fastify, middleware, authentication, and database integration. 40k installs 14 
cloudflare cloudflare/skills Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-a… 40k installs 15 
expo-api-routes expo/skills API routes in Expo Router for server-side logic, secrets, and third-party integrations on EAS Hosting. 38k installs 16 
golang-security samber/cc-skills-golang golang security 34k installs 17 create-auth-skill better-auth/skills Scaffold and implement authentication in TypeScript/JavaScript apps with Better Auth framework detection, database adapter setup,… 30k installs 18 
clerk-nextjs-patterns clerk/skills Advanced Next.js patterns for authentication, middleware, Server Actions, and user-scoped caching with Clerk. 28k installs 19 clerk-setup clerk/skills Framework-agnostic Clerk authentication setup following official quickstart guides. 27k installs 20 
docker-expert sickn33/antigravity-awesome-skills Advanced Docker containerization expert for multi-stage builds, security hardening, and production deployment patterns. 24k installs 21 two-factor-authentication-best-practices better-auth/skills Multi-factor authentication with TOTP, OTP, backup codes, and trusted device management for Better Auth. 23k installs 22 
nestjs-best-practices kadajett/agent-nestjs-skills 40 NestJS best practices organized by priority across architecture, dependency injection, security, and performance. 23k installs 23 
insforge insforge/agent-skills Client-side SDK for database queries, authentication, file uploads, AI features, real-time messaging, and edge function invocatio… 22k installs 24 better-auth-security-best-practices better-auth/skills better auth security best practices 21k installs 25 
skill-vetter useai-pro/openclaw-skills-security Pre-install security vetting for OpenClaw skills using a structured red-flag checklist. 20k installs 26 firestore-security-rules-auditor firebase/agent-skills Automated security auditor for Firestore rules using red-team methodology and structured scoring. 20k installs 27 clerk clerk/skills Intelligent router that directs authentication tasks to specialized Clerk skills based on your framework and use case. 19k installs 28 
best-practices addyosmani/web-quality-skills Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practice… 16k installs 29 security-requirement-extraction wshobson/agents Transform threat analysis into actionable security requirements. 16k installs 30 security-and-hardening addyosmani/agent-skills Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use w… 15k installs 31 solidity-security wshobson/agents Comprehensive smart contract security patterns, vulnerability prevention, and secure Solidity development practices. 13k installs 32 k8s-security-policies wshobson/agents Defense-in-depth Kubernetes security through network policies, pod security standards, RBAC, and admission control. 12k installs 33 
sql-code-review github/awesome-copilot Comprehensive SQL security, performance, and quality analysis across MySQL, PostgreSQL, SQL Server, and Oracle databases. 12k installs 34 
security-review affaan-m/everything-claude-code Comprehensive security checklist and patterns for authentication, input validation, secrets management, and sensitive operations. 12k installs 35 
kubernetes-specialist jeffallan/claude-skills Kubernetes workload deployment, configuration, security, and troubleshooting across single and multi-cluster environments. 12k installs 36 
java-spring-boot pluginagentmarketplace/custom-plugin-java Production-ready Spring Boot applications with REST APIs, security, data access, and monitoring. 11k installs 37 
security-review getsentry/skills security review 11k installs 38 postgresql-code-review github/awesome-copilot PostgreSQL code review assistant covering JSONB, arrays, custom types, schema design, and security best practices. 11k installs 39 doubt-driven-development addyosmani/agent-skills Subjects every non-trivial decision to a fresh-context adversarial review before it stands. Use when correctness matters more tha… 11k installs 40 auth-implementation-patterns wshobson/agents Industry-standard authentication and authorization patterns for building secure, scalable access control systems. 11k installs 41 secrets-management wshobson/agents secrets management 10k installs 42 
google-cloud-recipe-auth google/skills google cloud recipe auth 8.8k installs 43 fabric-lakehouse github/awesome-copilot Microsoft Fabric Lakehouse storage for unified tabular and non-tabular data with Delta Lake, SQL analytics, and fine-grained secu… 8.7k installs 44 typespec-create-api-plugin github/awesome-copilot Generate TypeSpec API plugins for Microsoft 365 Copilot with REST operations, authentication, and Adaptive Cards. 8.6k installs 45 
verified-agent-identity billionsnetwork/verified-agent-identity Decentralized identity for agents with Ethereum-based DIDs and x402 payment authentication. 8.2k installs 46 google-cloud-waf-security google/skills google cloud waf security 8k installs 47 api-security-best-practices sickn33/antigravity-awesome-skills api security best practices 8k installs 48 django-security affaan-m/everything-claude-code django security 6.7k installs 49 
okx-security okx/onchainos-skills okx security 6.6k installs 50 springboot-security affaan-m/everything-claude-code springboot security 6.6k installs 51 security-scan affaan-m/everything-claude-code security scan 6k installs 52 nextjs-supabase-auth sickn33/antigravity-awesome-skills nextjs supabase auth 6k installs 53 laravel-security affaan-m/everything-claude-code laravel security 5.9k installs 54 
security-best-practices openai/skills security best practices 5.6k installs 55 perl-security affaan-m/everything-claude-code perl security 4.6k installs 56 
wp-plugin-development wordpress/agent-skills Handles the full WordPress plugin development cycle: structure, activation hooks, Settings API, security hardening, and release p… 4.5k installs 57 
ci-cd-security superagent-ai/skills Agent skill from superagent-ai/skills. 4.3k installs 58 skill-security superagent-ai/skills Agent skill from superagent-ai/skills. 4.3k installs 59 security-review github/awesome-copilot security review 4.2k installs 60 security-reviewer jeffallan/claude-skills security reviewer 4.2k installs 61 
solana-vulnerability-scanner trailofbits/skills solana vulnerability scanner 4.1k installs 62 okx-cex-auth okx/agent-skills okx cex auth 4k installs 63 secret-scanning github/awesome-copilot secret scanning 3.9k installs 64 cosmos-vulnerability-scanner trailofbits/skills cosmos vulnerability scanner 3.8k installs 65 security-bounty-hunter affaan-m/everything-claude-code security bounty hunter 3.8k installs 66 algorand-vulnerability-scanner trailofbits/skills algorand vulnerability scanner 3.7k installs 67 ton-vulnerability-scanner trailofbits/skills ton vulnerability scanner 3.7k installs 68 cairo-vulnerability-scanner trailofbits/skills cairo vulnerability scanner 3.7k installs 69 substrate-vulnerability-scanner trailofbits/skills substrate vulnerability scanner 3.7k installs 70 llm-trading-agent-security affaan-m/everything-claude-code llm trading agent security 3.7k installs 71 
security monitoring claude-office-skills/skills security monitoring 3.6k installs 72 defi-amm-security affaan-m/everything-claude-code defi amm security 3.6k installs 73 security-threat-model openai/skills security threat model 3.5k installs 74 gha-security-review getsentry/skills gha security review 3.3k installs 75 
ghost-scan-code ghostsecurity/skills ghost scan code 3.2k installs 76 ghost-scan-secrets ghostsecurity/skills ghost scan secrets 2.8k installs 77 
authentication dpearson2699/swift-ios-skills authentication 2.6k installs 78 ghost-scan-deps ghostsecurity/skills ghost scan deps 2.6k installs 79 
owasp-security hoodini/ai-agents-skills Implement secure coding practices following OWASP Top 10. Use when preventing security vulnerabilities, implementing authenticati… 2.6k installs 80 
security markdown-viewer/skills security 2.6k installs 81 ghost-proxy ghostsecurity/skills ghost proxy 2.4k installs 82 
vibe-security raroque/vibe-security-skill vibe security 2.3k installs 83 
creating-secrets-using-best-practices aws/agent-toolkit-for-aws creating secrets using best practices 2.3k installs 84 ghost-validate ghostsecurity/skills ghost validate 2.3k installs 85 ghost-report ghostsecurity/skills ghost report 2.3k installs 86 ghost-repo-context ghostsecurity/skills ghost repo context 2.3k installs 87 
security-case-management elastic/agent-skills security case management 2.2k installs 88 security-ownership-map openai/skills security ownership map 2.2k installs 89 
business-logic-vulnerabilities yaklang/hack-skills business logic vulnerabilities 2.1k installs 90 api-auth-and-jwt-abuse yaklang/hack-skills api auth and jwt abuse 2.1k installs 91 authbypass-authentication-flaws yaklang/hack-skills authbypass authentication flaws 2.1k installs 92 websocket-security yaklang/hack-skills websocket security 2.1k installs 93 jwt-oauth-token-attacks yaklang/hack-skills jwt oauth token attacks 2.1k installs 94 auth-sec yaklang/hack-skills auth sec 2.1k installs 95 security-audit cloudflare/security-audit-skill Agent skill from cloudflare/security-audit-skill. 2.1k installs 96 oauth-oidc-misconfiguration yaklang/hack-skills oauth oidc misconfiguration 2.1k installs 97 
auth-wechat-miniprogram tencentcloudbase/skills auth wechat miniprogram 2k installs 98 ai-ml-security yaklang/hack-skills ai ml security 2k installs 99 linux-security-bypass yaklang/hack-skills linux security bypass 2k installs 100 smart-contract-vulnerabilities yaklang/hack-skills smart contract vulnerabilities 2k installs
entra-app-registration microsoft/azure-skills Microsoft Entra ID app registration, OAuth 2.0 configuration, and MSAL integration for secure application authentication. 471k installs 2 entra-agent-id microsoft/azure-skills Provision OAuth 2.0 identities for AI agents with per-instance credentials and audit trails via Microsoft Graph. 194k installs 3 supabase supabase/agent-skills Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps l… 179k installs 4 firebase-auth-basics firebase/agent-skills Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management… 112k installs 5 convex-setup-auth get-convex/agent-skills Set up Convex authentication with the right provider, user management, and access control patterns. 89k installs 6 better-auth-best-practices better-auth/skills Complete Better Auth server and client setup with database adapters, session management, plugins, and security configuration. 78k installs 7 firebase-security-rules-auditor firebase/agent-skills A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that th… 76k installs 8 firebase-ai-logic-basics firebase/agent-skills Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structur… 75k installs 9 vercel-cli-with-tokens vercel-labs/agent-skills Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rathe… 72k installs 10 doc-coauthoring anthropics/skills Guide users through a structured workflow for co-authoring documentation. Use when user wants to write documentation, proposals,… 70k installs 11 audit-website squirrelscan/skills Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility. 65k installs 12 neon-postgres neondatabase/agent-skills Comprehensive guides and best practices for Neon Serverless Postgres, covering setup, connection methods, authentication, and pla… 55k installs 13 nodejs-backend-patterns wshobson/agents Production-ready Node.js backend patterns with Express/Fastify, middleware, authentication, and database integration. 40k installs 14 cloudflare cloudflare/skills Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-a… 40k installs 15 expo-api-routes expo/skills API routes in Expo Router for server-side logic, secrets, and third-party integrations on EAS Hosting. 38k installs 16 golang-security samber/cc-skills-golang golang security 34k installs 17 create-auth-skill better-auth/skills Scaffold and implement authentication in TypeScript/JavaScript apps with Better Auth framework detection, database adapter setup,… 30k installs 18 clerk-nextjs-patterns clerk/skills Advanced Next.js patterns for authentication, middleware, Server Actions, and user-scoped caching with Clerk. 28k installs 19 clerk-setup clerk/skills Framework-agnostic Clerk authentication setup following official quickstart guides. 27k installs 20 docker-expert sickn33/antigravity-awesome-skills Advanced Docker containerization expert for multi-stage builds, security hardening, and production deployment patterns. 24k installs 21 two-factor-authentication-best-practices better-auth/skills Multi-factor authentication with TOTP, OTP, backup codes, and trusted device management for Better Auth. 23k installs 22 nestjs-best-practices kadajett/agent-nestjs-skills 40 NestJS best practices organized by priority across architecture, dependency injection, security, and performance. 23k installs 23 insforge insforge/agent-skills Client-side SDK for database queries, authentication, file uploads, AI features, real-time messaging, and edge function invocatio… 22k installs 24 better-auth-security-best-practices better-auth/skills better auth security best practices 21k installs 25 skill-vetter useai-pro/openclaw-skills-security Pre-install security vetting for OpenClaw skills using a structured red-flag checklist. 20k installs 26 firestore-security-rules-auditor firebase/agent-skills Automated security auditor for Firestore rules using red-team methodology and structured scoring. 20k installs 27 clerk clerk/skills Intelligent router that directs authentication tasks to specialized Clerk skills based on your framework and use case. 19k installs 28 best-practices addyosmani/web-quality-skills Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practice… 16k installs 29 security-requirement-extraction wshobson/agents Transform threat analysis into actionable security requirements. 16k installs 30 security-and-hardening addyosmani/agent-skills Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use w… 15k installs 31 solidity-security wshobson/agents Comprehensive smart contract security patterns, vulnerability prevention, and secure Solidity development practices. 13k installs 32 k8s-security-policies wshobson/agents Defense-in-depth Kubernetes security through network policies, pod security standards, RBAC, and admission control. 12k installs 33 sql-code-review github/awesome-copilot Comprehensive SQL security, performance, and quality analysis across MySQL, PostgreSQL, SQL Server, and Oracle databases. 12k installs 34 security-review affaan-m/everything-claude-code Comprehensive security checklist and patterns for authentication, input validation, secrets management, and sensitive operations. 12k installs 35 kubernetes-specialist jeffallan/claude-skills Kubernetes workload deployment, configuration, security, and troubleshooting across single and multi-cluster environments. 12k installs 36 java-spring-boot pluginagentmarketplace/custom-plugin-java Production-ready Spring Boot applications with REST APIs, security, data access, and monitoring. 11k installs 37 security-review getsentry/skills security review 11k installs 38 postgresql-code-review github/awesome-copilot PostgreSQL code review assistant covering JSONB, arrays, custom types, schema design, and security best practices. 11k installs 39 doubt-driven-development addyosmani/agent-skills Subjects every non-trivial decision to a fresh-context adversarial review before it stands. Use when correctness matters more tha… 11k installs 40 auth-implementation-patterns wshobson/agents Industry-standard authentication and authorization patterns for building secure, scalable access control systems. 11k installs 41 secrets-management wshobson/agents secrets management 10k installs 42 google-cloud-recipe-auth google/skills google cloud recipe auth 8.8k installs 43 fabric-lakehouse github/awesome-copilot Microsoft Fabric Lakehouse storage for unified tabular and non-tabular data with Delta Lake, SQL analytics, and fine-grained secu… 8.7k installs 44 typespec-create-api-plugin github/awesome-copilot Generate TypeSpec API plugins for Microsoft 365 Copilot with REST operations, authentication, and Adaptive Cards. 8.6k installs 45 verified-agent-identity billionsnetwork/verified-agent-identity Decentralized identity for agents with Ethereum-based DIDs and x402 payment authentication. 8.2k installs 46 google-cloud-waf-security google/skills google cloud waf security 8k installs 47 api-security-best-practices sickn33/antigravity-awesome-skills api security best practices 8k installs 48 django-security affaan-m/everything-claude-code django security 6.7k installs 49 okx-security okx/onchainos-skills okx security 6.6k installs 50 springboot-security affaan-m/everything-claude-code springboot security 6.6k installs 51 security-scan affaan-m/everything-claude-code security scan 6k installs 52 nextjs-supabase-auth sickn33/antigravity-awesome-skills nextjs supabase auth 6k installs 53 laravel-security affaan-m/everything-claude-code laravel security 5.9k installs 54 security-best-practices openai/skills security best practices 5.6k installs 55 perl-security affaan-m/everything-claude-code perl security 4.6k installs 56 wp-plugin-development wordpress/agent-skills Handles the full WordPress plugin development cycle: structure, activation hooks, Settings API, security hardening, and release p… 4.5k installs 57 ci-cd-security superagent-ai/skills Agent skill from superagent-ai/skills. 4.3k installs 58 skill-security superagent-ai/skills Agent skill from superagent-ai/skills. 4.3k installs 59 security-review github/awesome-copilot security review 4.2k installs 60 security-reviewer jeffallan/claude-skills security reviewer 4.2k installs 61 solana-vulnerability-scanner trailofbits/skills solana vulnerability scanner 4.1k installs 62 okx-cex-auth okx/agent-skills okx cex auth 4k installs 63 secret-scanning github/awesome-copilot secret scanning 3.9k installs 64 cosmos-vulnerability-scanner trailofbits/skills cosmos vulnerability scanner 3.8k installs 65 security-bounty-hunter affaan-m/everything-claude-code security bounty hunter 3.8k installs 66 algorand-vulnerability-scanner trailofbits/skills algorand vulnerability scanner 3.7k installs 67 ton-vulnerability-scanner trailofbits/skills ton vulnerability scanner 3.7k installs 68 cairo-vulnerability-scanner trailofbits/skills cairo vulnerability scanner 3.7k installs 69 substrate-vulnerability-scanner trailofbits/skills substrate vulnerability scanner 3.7k installs 70 llm-trading-agent-security affaan-m/everything-claude-code llm trading agent security 3.7k installs 71 security monitoring claude-office-skills/skills security monitoring 3.6k installs 72 defi-amm-security affaan-m/everything-claude-code defi amm security 3.6k installs 73 security-threat-model openai/skills security threat model 3.5k installs 74 gha-security-review getsentry/skills gha security review 3.3k installs 75 ghost-scan-code ghostsecurity/skills ghost scan code 3.2k installs 76 ghost-scan-secrets ghostsecurity/skills ghost scan secrets 2.8k installs 77 authentication dpearson2699/swift-ios-skills authentication 2.6k installs 78 ghost-scan-deps ghostsecurity/skills ghost scan deps 2.6k installs 79 owasp-security hoodini/ai-agents-skills Implement secure coding practices following OWASP Top 10. Use when preventing security vulnerabilities, implementing authenticati… 2.6k installs 80 security markdown-viewer/skills security 2.6k installs 81 ghost-proxy ghostsecurity/skills ghost proxy 2.4k installs 82 vibe-security raroque/vibe-security-skill vibe security 2.3k installs 83 creating-secrets-using-best-practices aws/agent-toolkit-for-aws creating secrets using best practices 2.3k installs 84 ghost-validate ghostsecurity/skills ghost validate 2.3k installs 85 ghost-report ghostsecurity/skills ghost report 2.3k installs 86 ghost-repo-context ghostsecurity/skills ghost repo context 2.3k installs 87 security-case-management elastic/agent-skills security case management 2.2k installs 88 security-ownership-map openai/skills security ownership map 2.2k installs 89 business-logic-vulnerabilities yaklang/hack-skills business logic vulnerabilities 2.1k installs 90 api-auth-and-jwt-abuse yaklang/hack-skills api auth and jwt abuse 2.1k installs 91 authbypass-authentication-flaws yaklang/hack-skills authbypass authentication flaws 2.1k installs 92 websocket-security yaklang/hack-skills websocket security 2.1k installs 93 jwt-oauth-token-attacks yaklang/hack-skills jwt oauth token attacks 2.1k installs 94 auth-sec yaklang/hack-skills auth sec 2.1k installs 95 security-audit cloudflare/security-audit-skill Agent skill from cloudflare/security-audit-skill. 2.1k installs 96 oauth-oidc-misconfiguration yaklang/hack-skills oauth oidc misconfiguration 2.1k installs 97 auth-wechat-miniprogram tencentcloudbase/skills auth wechat miniprogram 2k installs 98 ai-ml-security yaklang/hack-skills ai ml security 2k installs 99 linux-security-bypass yaklang/hack-skills linux security bypass 2k installs 100 smart-contract-vulnerabilities yaklang/hack-skills smart contract vulnerabilities 2k installs Showing the top 100 of 664 — browse and filter all agent skills.
The best new security skills, weekly
One email every week with the tools worth your time — plus Agentic Toolbelt: 100 Worth Stealing free when you join.
Frequently asked questions
What are the best security skills for coding agents?
Ranked by real installs, the current top security skills are: entra-app-registration (471k installs), entra-agent-id (194k installs), supabase (179k installs), firebase-auth-basics (112k installs), convex-setup-auth (89k installs).
How do I install a security skill?
Copy the install command from the skill's page — for example: npx -y skills add https://github.com/microsoft/azure-skills --skill entra-app-registration --agent claude-code. Skills follow the open SKILL.md standard, so they work with Claude Code, Codex, Cursor, Gemini CLI, and other compatible agents.
How many security skills are listed here?
664 security skills are currently tracked, with metrics (installs, stars, last-update dates) sourced from GitHub and package registries and refreshed continuously.