Skills · category
Security skills and plugins
Public Claude skills and plugins for security, each with Waxell's security verdict and the findings behind it.
- 1,533 reviewed
- 1,190 no issues
- 276 to review
- 60 high risk
337 resultsSecurity
pdfAnthropicUse this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining… Review findingsSecurityDocuments187k
security-auditCloudflareSecurity guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions,… No issuesSecurityEngineering58k- claude-securityAnthropicDeep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding… No issuesSecurityAI & agents46k
- claude-securityAnthropicClaude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or… No issuesSecurityEngineering46k
- mcp-server-devAnthropicSkills for designing and building MCP servers that work seamlessly with Claude, guides you through deployment models (remote HTTP, MCPB,… Review findingsSecurityDesign46k
- security-guidanceAnthropicSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit… Review findingsSecurityAI & agents46k
agent-owasp-complianceGitHubCheck any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks. Use this skill when: - Evaluating an agent… Review findingsSecurityAI & agents41k- ai-prompt-engineering-safety-reviewGitHubComprehensive AI prompt engineering safety review and improvement prompt. Analyzes prompts for safety, bias, security vulnerabilities, and… No issuesSecurityData & analytics41k
- arduino-azure-iot-edge-integrationGitHubDesign and implement Arduino integration with Azure IoT Hub and IoT Edge, including secure provisioning, resilient telemetry, command… No issuesSecurityDesign41k
- audit-integrityGitHubEnforce output quality, evidence verification, and quality gates across security audits. Use this skill when you perform SAST, SCA, threat… No issuesSecurityDocuments41k
- aws-resource-queryGitHubQuery AWS resources using natural language. Covers EC2, S3, RDS, Lambda, ECS, EKS, Secrets Manager, IAM, VPC, networking, messaging, and… No issuesSecurityData & analytics41k
- azure-smart-city-iot-solution-builderGitHubDesign and plan end-to-end Azure IoT and Smart City solutions: requirements, architecture, security, operations, cost, and a phased… No issuesSecurityDesign41k
- bug-receiptGitHubClose defects and incidents with a BUG RECEIPT and VERIFIED, PARTIAL, or BLOCKED status after diagnosis, repair, or recovery. No issuesSecurityFinance41k
- cloud-design-patternsGitHubCloud design patterns for distributed systems architecture covering 42 industry-standard patterns across reliability, performance,… No issuesSecurityDesign41k
- code-tourGitHubUse this skill to create CodeTour .tour files, persona-targeted, step-by-step walkthroughs that link to real files and line numbers.… Review findingsSecurityEngineering41k
- copilot-pr-autopilotGitHubCopilot left 14 review comments on your PR: half are nits. Hours of fix → reply → resolve → re-request, and each round lands MORE… No issuesSecurityEngineering41k
- create-spring-boot-java-projectGitHubCreate a new Spring Boot Java project (Maven or Gradle) from start.spring.io with sensible defaults for configuration, PostgreSQL,… No issuesSecurityEngineering41k
- dependabotGitHubComprehensive guide for configuring and managing GitHub Dependabot. Use this skill when users ask about creating or optimizing… No issuesSecurityEngineering41k
- flowstudio-power-automate-debugGitHubDebug failing Power Automate cloud flows using the FlowStudio MCP server. The Graph API only shows top-level status codes. This skill… No issuesSecurityEngineering41k
- flowstudio-power-automate-mcpGitHubFoundation skill for Power Automate via FlowStudio MCP, auth setup, the reusable MCP helper (Python + Node.js), tool discovery via… No issuesSecurityEngineering41k
- github-actions-hardeningGitHubSecurity hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that… No issuesSecurityEngineering41k
- incident-postmortemGitHubUse when an outage, production incident, or significant service degradation has occurred and the team needs to write a structured… No issuesSecurityData & analytics41k
- java-helidonGitHubGet best practices for developing applications with Helidon 4 (SE and MP). Use when working with Helidon SE or Helidon MP, HttpService… No issuesSecurityEngineering41k
- mcp-implementation-security-reviewGitHubReview the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline,… No issuesSecurityAI & agents41k
- mcp-security-auditGitHubAudit MCP (Model Context Protocol) server configurations for security issues. Use this skill when: - Reviewing .mcp.json files for… No issuesSecurityAI & agents41k
- openapi-to-application-java-spring-bootGitHubGenerate a Spring Boot (Java) application from an OpenAPI 3 specification using the spec-first approach: openapi-generator (Maven or… No issuesSecurityEngineering41k
- pdftk-serverGitHubSkill for using the command-line tool pdftk (PDFtk Server) for working with PDF files. Use when asked to merge PDFs, split PDFs, rotate… No issuesSecurityDocuments41k
- postgresql-code-reviewGitHubPostgreSQL-specific code review assistant focusing on PostgreSQL best practices, anti-patterns, and unique quality standards. Covers JSONB… No issuesSecurityEngineering41k
- react-audit-grep-patternsGitHubProvides the complete, verified grep scan command library for auditing React codebases before a React 18.3.1 or React 19 upgrade. Use this… No issuesSecurityEngineering41k
- salesforce-apex-qualityGitHubApex code quality guardrails for Salesforce development. Enforces bulk-safety rules (no SOQL/DML in loops), sharing model requirements,… No issuesSecurityEngineering41k
- secret-scanningGitHubGuide for configuring and managing GitHub secret scanning, push protection, custom patterns, and secret alert remediation. For pre-commit… Review findingsSecurityEngineering41k
- security-reviewGitHubAI-powered codebase security scanner that reasons about code like a security researcher, tracing data flows, understanding component… No issuesSecurityEngineering41k
- spring-securityGitHubConfigure, test and review Spring Security 6/7 in Spring Boot 3/4 apps: SecurityFilterChain lambda DSL, method security, OAuth2 resource… No issuesSecurityEngineering41k
- sql-code-reviewGitHubUniversal SQL code review assistant that performs comprehensive security, maintainability, and code quality analysis across all SQL… No issuesSecurityData & analytics41k
- threat-model-analystGitHubFull STRIDE-A threat model analysis and incremental update skill for repositories and systems. Supports two modes: (1) Single analysis,… No issuesSecurityData & analytics41k
- tm7-threat-modelGitHubCreates valid Microsoft Threat Modeling Tool (.tm7) files compatible with the Microsoft Threat Modeling Tool v7.3+. Use this skill… No issuesSecurity41k
- typespec-create-api-pluginGitHubGenerate a TypeSpec API plugin with REST operations, authentication, and Adaptive Cards for Microsoft 365 Copilot No issuesSecurityEngineering41k
- customer-escalationAnthropicPackage an escalation for engineering, product, or leadership with full context. Use when a bug needs engineering attention beyond normal… No issuesSecuritySales & marketing35k
- code-reviewAnthropicReview code changes for security, performance, and correctness. Trigger with a PR URL or diff, "review this before I merge", "is this code… No issuesSecurityEngineering35k
- incident-responseAnthropicRun an incident response workflow: triage, communicate, and write postmortem. Trigger with "we have an incident", "production is down", an… No issuesSecurityWriting & content35k
- briefAnthropicGenerate contextual briefings for legal work: daily summary, topic research, or incident response. Use when starting your day and need a… No issuesSecurityLegal & compliance35k
- competitive-briefAnthropicResearch competitors and generate a positioning and messaging comparison with content gaps, opportunities, and threats. Use when building… No issuesSecuritySales & marketing35k
- debug-zoomAnthropicDebug a broken Zoom integration by isolating the failure point and routing into the right Zoom references. Use when auth, API, webhook,… No issuesSecurityEngineering35k
- debug-zoom-integrationAnthropicDebug broken Zoom implementations quickly. Use when auth, webhooks, SDK joins, MCP transport, or real-time media workflows are failing and… No issuesSecurityEngineering35k
- zoom-generalAnthropicCross-product Zoom reference skill. Use after the workflow is clear when you need shared platform guidance, app-model comparisons,… Review findingsSecurityEngineering35k
- zoom-meeting-sdk-react-nativeAnthropicZoom Meeting SDK for React Native. Use when embedding Zoom meetings in React Native iOS/Android apps with @zoom/meetingsdk-react-native,… Review findingsSecurityEngineering35k
- zoom-oauthAnthropicReference skill for Zoom authentication. Use after routing to an auth workflow when choosing app credentials, grant types, scopes, token… Review findingsSecurityEngineering35k
- plan-zoom-integrationAnthropicTurn a Zoom integration idea into an implementation plan with architecture, auth, and delivery milestones. Use when you need a practical… No issuesSecurityProductivity35k
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF