Security

An automated security auditor that scans code for OWASP vulnerabilities, secrets, and injection flaws before deployment.

Read-only Windows scan for supply-chain worms and AI-assistant persistence that antivirus misses — with wiper-safe cleanup.

Attribute Based Encryption - A Premium AI Agent Skill

API security vulnerabilities are a top attack vector but dedicated scanning tools are expensive.

An adversarial security gate to detect and redact PII, secrets, and confidential data before sending prompts.

Enterprise security with NIST/ISO27001/zero-trust frameworks. Threat modeling, GDPR compliance, DevSecOps guidance.

An adversarial gate that audits an MCP server or agent tool definition for potential security risks.

Audit the decoded text a QR code carries before you print it on something.

Vet dependency changes for supply-chain risk before you install, commit, or release.

Audit your Supabase project for the row-level-security mistakes that quietly expose data.

Audit and harden GitHub Actions workflows against overbroad permissions, secrets exposure, and supply-chain risks.

Detect and remediate CVE-2026-45185 "Dead.Letter" RCE vulnerabilities in Exim mail servers.

Automated detection and remediation auditing for the CVE-2026-46243 "CIFSwitch" Linux privilege escalation vulnerability.

Deep audit and detection of the Dirty Frag (CVE-2026-43284/43500) Linux privilege escalation exploit chain.

A security auditor that identifies Docker vulnerabilities, scores configurations, and generates hardened replacements.

Pre-commit security hooks: secret detection, destructive command prevention

Comprehensive security auditing for AI agents, covering prompt injection, tool permissions, and data leakage risks.

Automate secret scanning with gitleaks — detect API keys, passwords, tokens before incidents.

A specialized security architect skill for performing deep audits, compliance checks, and DevSecOps integrations.

Build safety-first, framework-aligned incident response playbooks for ICS, SCADA, and OT environments.

Helps small teams turn noisy vulnerability reports into practical remediation plans.

Perform evidence-based security assessments and compliance audits for SCADA/HMI systems in OT environments.

Review scripts and docs for safer handling of passwords, tokens, keys, and sensitive values.

Secure, battle-tested patterns for user detection and credential prompting in Jamf and Kandji scripts

Design and analyze industrial control system anomaly detection logic for safe, protocol-aware OT security monitoring.

Review Jamf and Kandji scripts for safer user context, prompts, logging, and rollout readiness.

Generate structured, scored attack trees with AND/OR logic to visualize threat paths and identify security gaps.

Design and govern authorized spearphishing simulations with professional reporting and stakeholder alignment.

Automates the process of designing, running, and documenting professional security operations tabletop exercises.

Professional-grade orchestration for ransomware triage, containment, recovery planning, and executive reporting.

Sanitize Mac admin logs and MDM evidence before sharing.

Review Apple MDM payload risk before production rollout.

Professional drafting and review of cyber security risk reports, mapping evidence to compliance frameworks.

Design and validate IEC 62443-compliant security zones and conduits for industrial (OT) networks.

Expert security assessment for industrial control systems, HMIs, and OT environments based on technical evidence.

Audit AI agent memory files for privacy risk and bloat.

Professional-grade security assessment framework for IoT, OT, and connected device ecosystems.

Automated security audit and health check for software dependencies across polyglot projects.

Transform raw incident logs and evidence into professional, tool-agnostic IR dashboards and executive reporting packs.

Transform complex cyber security risks, audit findings, and meeting notes into executive-grade business communications.

Professional CTI analysis skill for structured attribution using ACH, Diamond Model, and confidence scoring.

Professional network forensics and packet analysis for incident response and security investigations.

Transform raw vulnerability data into compliant remediation reports, ageing registers, and executive dashboards.

Plan, collect, and synthesize lawful defensive intelligence into structured exposure reports and investigation briefs.

Transform CTI reports into structured attack pattern libraries mapped to MITRE ATT&CK for threat-informed defense.

Transform APT threat intelligence into MITRE ATT&CK Navigator layers and prioritized detection gap analyses.

Design, govern, and report on enterprise-grade anti-phishing training programs and simulation metrics.

Transform incident timelines into structured Cyber Kill Chain mappings and high-impact defensive roadmaps.

Convert cyber incident evidence into blameless post-mortem reports, root cause analyses, and action trackers.

GDPR Contract Review Triage Agent helps EU companies and legal teams perform structured first-pass GDPR contract review and triage.

Build, review, and automate structured incident response playbooks for enterprise security operations.

Transform raw security evidence into professional Cyber Healthcheck reports, RAG scorecards, and remediation roadmaps.

Transform technical cyber intel into executive-ready whitepapers, one-pagers, and advisory briefs.

Automated open-source license audit and risk assessment based on your project's specific distribution model.

Adaptive GDPR, CCPA, security, and AI compliance audit with severity-graded findings and law citations

Automated launch-readiness auditor for x402 and agent-payment API surfaces.

A rigorous security auditor that scans code for OWASP Top 10 vulnerabilities with severity ratings and concrete fixes.

A premium library of 399 vulnerability patterns and DeFi attack vectors for AI-driven bug hunting and security audits.

Automatically transforms vulnerability findings into professional, platform-ready submissions for bug bounty reports.

Accelerate your bounty hunting with smart program prioritization and vulnerability report triaging for DeFi protocols.

A high-performance ethical guardrail and IP protection layer for safeguarding AI reasoning and core logic.

Automated security auditing and risk assessment for Model Context Protocol (MCP) servers.

Protect Java desktop apps by migrating sensitive logic and API keys to a secure, Cloudflare-backed thin-client architecture.

A security gate that intercepts sensitive agent actions like payments and deletes for mandatory human approval.

A modular governance framework for AI policy, agent risk assessment, human-in-the-loop approvals, and audit trails.

Automated security and compatibility firewall for installing AI agent skills and Codex/OpenClaw packages.

Prevent vulnerabilities before they happen by forcing early security framing and secure-by-default design patterns.

A high-performance wrapper to route security tasks directly to the Anthropic-Cybersecurity-Skills library.

Audit AI agent skills for security risks, packaging errors, and marketplace readiness with professional reports.

Secure, zero-knowledge encrypted vault for agents to store and manage sensitive documents and digital legacy assets.

Audit dependencies for security, licenses, and health while generating a phased, low-risk upgrade and migration plan.

Professional security audit skill for web apps and APIs with structured severity-based findings and remediation plans.

ai.mcpcap · stdio

An MCP server for analyzing PCAP files.

ai.marchward · stdio

Runtime authority for AI agents: credential mediation, spend cap, approval gates, audit log.

ai.certscore · stdio

CertScore website risk-signal tools for scans, findings, evidence, and latest-domain lookups.