Claude Code skills for Security

51,885 security skills for Claude Code, Codex, Cursor and other AI coding agents, ranked by trust score. Open a skill to see its security scan and source before you install it, or filter the full registry.

npx vskill@latest install <owner>/<repo>/<skill>

Top 50 Security skills by trust score

  1. anthropics/anthropic-cookbook/cookbook-auditCertified

    anthropics/anthropic-cookbook

    Security · 34,691 stars
  2. anthropics/claude-cookbooks/claude-cookbooksCertified

    anthropics/claude-cookbooks

    Security · 34,671 stars
  3. anthropics/claude-plugins-official/claude-securityCertified

    anthropics/claude-plugins-official

    Security · 36,901 stars
  4. anthropics/cwc-workshops/eval-audit-and-sweepCertified

    anthropics/cwc-workshops

    Security · 1,119 stars
  5. anthropics/financial-services/audit-xlsCertified

    anthropics/financial-services

    Security · 24,312 stars
  6. anthropics/knowledge-work-plugins/audit-supportCertified

    anthropics/knowledge-work-plugins

    Security · 24,368 stars
  7. anthropics/knowledge-work-plugins/finance-audit-supportCertified

    Support SOX 404 compliance with control testing methodology, sample selection, and documentation standards. Use when generating testing workpapers, selecting audit samples, classif…

    Security · 8,194 stars
  8. anthropics/knowledge-work-plugins/seo-auditCertified

    anthropics/knowledge-work-plugins

    Security · 22,332 stars
  9. anton-abyzov/vskill-test-public-skills-826/oss-license-auditorCertified

    anton-abyzov/vskill-test-public-skills-826

    Security
  10. anton-abyzov/vskill-test-public-skills-826/scanner-tripwire-fixtureCertified

    anton-abyzov/vskill-test-public-skills-826

    Security
  11. anton-abyzov/vskill/stripe-refund-auditorCertified

    Audits Stripe refunds over a date range to surface anomalies (refund-rate spikes, missing reasons, duplicate refunds). Activates when the user asks to "audit refunds", "check Strip…

    Security · 47 stars
  12. cloudflare/security-audit-skill/security-auditCertified

    cloudflare/security-audit-skill

    Security · 15,909 stars
  13. google-gemini/gemini-managed-agents-templates/scannerCertified

    google-gemini/gemini-managed-agents-templates

    Security · 6 stars
  14. google/mantis/mantis-threat-modelCertified

    google/mantis

    Security · 1,399 stars
  15. google/skills/api-gateway-backend-security-and-rate-limitingCertified

    google/skills

    Security
  16. google/skills/gke-platform-securityCertified

    Plans, configures, and hardens platform-level Google Kubernetes Engine (GKE) cluster security. Covers cluster add-ons (Secret Manager enablement), RBAC hardening (disabling insecur…

    Security · 15,376 stars
  17. google/skills/gke-workload-securityCertified

    Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running security audits (`audit_cluster.sh`)…

    Security · 15,376 stars
  18. google/skills/google-cloud-filestore-auditingCertified

    Audits Filestore instances on Google Cloud across projects for disaster recovery readiness (missing or stale backups), security access governance (overly permissive NFS export rule…

    Security · 20,494 stars
  19. google/skills/google-cloud-solution-multi-agent-securityCertified

    Designs, deploys, and secures Google Cloud Agent Gateway solutions. Use when the user needs to configure multi-agent security, ingress (CLIENT_TO_AGENT), or egress (AGENT_TO_ANYWHE…

    Security · 20,494 stars
  20. google/skills/google-cloud-waf-securityCertified

    google/skills

    Security · 15,376 stars
  21. microsoft/apm/docs-corpus-auditCertified

    Use this skill to run a holistic regrounding pass on the entire microsoft/apm documentation corpus against current source code, page-by-page, and emit surgical fixes for stale clai…

    Security · 3,923 stars
  22. microsoft/azure-devops-skills/security-alert-reviewCertified

    microsoft/azure-devops-skills

    Security · 17 stars
  23. microsoft/cat-agent-skills/blog-content-auditorCertified

    Use this skill when the user asks to audit, review, score, rationalise, prioritise, refresh, or improve blog posts, article libraries, newsletters, or thought-leadership content.

    Security · 89 stars
  24. microsoft/cat-agent-skills/content-quality-auditorCertified

    Use this skill when the user asks to assess, audit, score, review, improve, prioritise, or quality-check content, documents, pages, posts, decks, or reusable artefacts.

    Security · 102 stars
  25. microsoft/dataverse-skills/dv-securityCertified

    microsoft/dataverse-skills

    Security · 188 stars
  26. microsoft/fluentui-react-native/fix-security-issuesCertified

    microsoft/fluentui-react-native

    Security · 1,442 stars
  27. microsoft/github-copilot-modernization/cve-known-vulnerabilitiesCertified

    microsoft/github-copilot-modernization

    Security
  28. microsoft/github-copilot-modernization/cve-remediationCertified

    microsoft/github-copilot-modernization

    Security
  29. microsoft/github-copilot-modernization/cwe-credentials-secretsCertified

    Assess codebase for CWE credentials & secrets vulnerabilities (CWE-259, CWE-321, CWE-732, CWE-778, CWE-798)

    Security · 53 stars
  30. microsoft/github-copilot-modernization/cwe-file-path-securityCertified

    Assess codebase for CWE file & path security vulnerabilities (CWE-22, CWE-23, CWE-36, CWE-434, CWE-611)

    Security
  31. microsoft/haste/security-analysisCertified

    microsoft/haste

    Security · 106 stars
  32. microsoft/hve-core/security-planningCertified

    microsoft/hve-core

    Security · 1,492 stars
  33. microsoft/hve-core/security-reviewer-formatsCertified

    microsoft/hve-core

    Security · 1,492 stars
  34. microsoft/kiota/codegen-literal-security-scanCertified

    microsoft/kiota

    Security · 3,823 stars
  35. microsoft/onnxruntime/python-kwargs-setattr-securityCertified

    microsoft/onnxruntime

    Security · 21,947 stars
  36. microsoft/power-platform-skills/audit-permissionsCertified

    Audits existing table permissions on a Power Pages site by analyzing them against site code and Dataverse metadata, then GRADES the configuration with deterministic 1–5 scores acro…

    Security · 1,097 stars
  37. microsoft/power-platform-skills/audit-ppmpluginCertified

    microsoft/power-platform-skills

    Security · 947 stars
  38. microsoft/power-platform-skills/security-reviewCertified

    microsoft/power-platform-skills

    Security · 418 stars
  39. microsoft/skills/azure-keyvault-secrets-rustCertified

    microsoft/skills

    Security · 1,675 stars
  40. microsoft/skills/azure-keyvault-secrets-tsCertified

    Manage secrets using Azure Key Vault Secrets SDK for JavaScript (@azure/keyvault-secrets). Use when storing and retrieving application secrets or configuration values.

    Security · 3,070 stars
  41. microsoft/skills/azure-security-keyvault-keys-dotnetCertified

    Azure Key Vault Keys SDK for .NET. Client library for managing cryptographic keys in Azure Key Vault and Managed HSM. Use for key creation, rotation, encryption, decryption, signin…

    Security · 3,070 stars
  42. microsoft/skills/azure-security-keyvault-keys-javaCertified

    microsoft/skills

    Security · 1,700 stars
  43. microsoft/skills/azure-security-keyvault-secrets-javaCertified

    Azure Key Vault Secrets Java SDK for secret management. Use when storing, retrieving, or managing passwords, API keys, connection strings, or other sensitive configuration data.

    Security · 2,714 stars
  44. microsoft/sre-agent/nsg-auditCertified

    microsoft/sre-agent

    Security · 125 stars
  45. microsoft/sre-agent/rbac-auditCertified

    Use when an operator or a scheduled task requests a periodic RBAC / least-privilege audit of the Zava Learning resource group — enumerate the real role assignments effective on the…

    Security · 168 stars
  46. microsoft/sre-agent/zava-audit-reportCertified

    Use to package a completed Zava Learning weekly governance audit (NSG / network security, RBAC / least-privilege, or cloud cost) into a single branded, downloadable PowerPoint deck…

    Security · 181 stars
  47. microsoft/typescript/security-report-checkCertified

    microsoft/typescript

    Security · 111,273 stars
  48. microsoft/upgrade-agent-samples/fabrikam-package-auditCertified

    microsoft/upgrade-agent-samples

    Security
  49. microsoft/vscode/memory-leak-auditCertified

    microsoft/vscode

    Security · 186,493 stars
  50. microsoft/work-iq/channel-auditCertified

    microsoft/work-iq

    Security · 971 stars

Common questions

What is a Claude Code skill?

A folder with a SKILL.md file that teaches an agent how to do one job well. Claude Code loads it only when the task needs it. The same format works in Codex, Cursor, GitHub Copilot, Gemini CLI and other agents.

How do I install one?

Run npx vskill@latest install owner/repo/skill. The vskill CLI detects which agents you have and puts the skill where each one looks for it.

Are these skills safe to install?

Every listing shows its security scan results, trust tier and source before you install it. Read them, and see the verification methodology for what the scan checks.

How do I keep AI coding work on track across tools?

Skills teach an agent how to do a job. SpecWeave keeps the spec, task progress and a handoff in git, so you can switch between Claude Code, Codex and other tools mid-task.