Skills · category
Security skills and plugins
Public Claude skills and plugins for security, each with Waxell's security verdict and the findings behind it.
- 1,533 reviewed
- 1,190 no issues
- 276 to review
- 60 high risk
337 resultsSecurity
rivet-sdkAnthropicReference skill for Zoom Rivet SDK. Use after routing to a Rivet-based server workflow when implementing auth handling, webhook consumers,… No issuesSecurityEngineering35k- setup-zoom-oauthAnthropicImplement Zoom authentication correctly. Use when setting up app credentials, choosing an OAuth grant, requesting scopes, handling token… No issuesSecurityEngineering35k
- setup-zoom-websocketsAnthropicReference skill for Zoom WebSockets. Use after routing to a low-latency event workflow when persistent connections, faster event delivery,… No issuesSecurityProductivity35k
- zoom-mcp/whiteboardAnthropicGuidance for the bundled Zoom Whiteboard MCP connector. Use for Whiteboard MCP auth, endpoints, ID mapping, and tool workflows such as… No issuesSecurityProductivity35k
- handle-objectionAnthropicWork through a live objection or competitive threat - what's really being said, the response that has worked before, and the proof points… No issuesSecuritySales & marketing35k
vercel-cli-with-tokensVercelDeploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than… Review findingsSecurityEngineering33k
gws-sharedGoogle Workspacegws CLI: Shared patterns for authentication, global flags, and output formatting. No issuesSecurityEngineering32k- persona-it-adminGoogle WorkspaceAdminister IT: monitor security and configure Workspace. No issuesSecurityEngineering32k
aspnet-coreOpenAIBuild, review, refactor, or architect ASP.NET Core web applications using current official guidance for .NET web development. Use when… No issuesSecurityEngineering28k- cli-creatorOpenAIBuild a composable CLI for Codex from API docs, an OpenAPI spec, existing curl examples, an SDK, a web app, an admin tool, or a local… No issuesSecurityEngineering28k
- gh-address-commentsOpenAIHelp address review/issue comments on the open GitHub PR for the current branch using gh CLI; verify gh auth first and prompt the user to… No issuesSecurityEngineering28k
- security-best-practicesOpenAIPerform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly… No issuesSecurityEngineering28k
- security-ownership-mapOpenAIAnalyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and… Review findingsSecurityData & analytics28k
- security-threat-modelOpenAIRepository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and… No issuesSecurityEngineering28k
google-cloud-recipe-authGoogleProvides expert guidance on Identity and Access Management (IAM) and authenticating and authorizing to Google Cloud services and APIs,… No issuesSecurityEngineering22k- agent-platform-architectureGoogleDesigns, engineers, and validates enterprise Gemini platform architectures. Use when designing multi-project hierarchies (Host, Central… No issuesSecurityAI & agents22k
- api-gateway-backend-security-and-rate-limitingGoogleSecures and rate limits backend services behind Google Cloud API Gateway across OpenAPI 2.0 and OpenAPI 3.0.x API configurations,… No issuesSecurityEngineering22k
- cloud-armor-crs-rule-upgraderGoogleUpgrades Google Cloud Armor security policies from OWASP CRS 3.0 and 3.3 to OWASP CRS 4.22. Preserves signature opt-in and opt-out lists,… No issuesSecurityAI & agents22k
- cloud-sql-basicsGoogleThis file generates or explains Cloud SQL resources. Use this file when the user asks to create a Cloud SQL instance or database for… Review findingsSecurityData & analytics22k
- gke-basicsGoogleManages core GKE cluster provisioning, credentials, Autopilot vs Standard selection, and workload deployment. Use when creating GKE… Review findingsSecurityEngineering22k
- gke-manifest-generationGoogleGenerates and updates secure, production-ready Kubernetes YAML manifests optimized for GKE Autopilot and GKE Standard clusters. Use when… No issuesSecurityEngineering22k
- gke-platform-securityGooglePlans, configures, and hardens platform-level Google Kubernetes Engine (GKE) cluster security. Covers cluster add-ons (Secret Manager… No issuesSecurityData & analytics22k
- gke-productionizeGoogleOrchestrates comprehensive production readiness reviews and assessments for GKE clusters and workloads across scalability, security,… No issuesSecurity22k
- gke-workload-identityGoogleConfigures and diagnoses Workload Identity Federation for GKE authentication failures for Pods (403 "iam.serviceAccounts.getAccessToken" /… No issuesSecurityEngineering22k
- gke-workload-securityGoogleAudits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers… No issuesSecurityEngineering22k
- google-cloud-filestore-auditingGoogleAudits Filestore instances on Google Cloud across projects for disaster recovery readiness (missing or stale backups), security access… No issuesSecurityLegal & compliance22k
- google-cloud-recipe-foundation-builderGoogleDeploys a baseline landing zone foundation for a Google Cloud Organization, establishing security guardrails using Organization Policies,… No issuesSecurityProductivity22k
- google-cloud-scc-queryGoogleQueries and retrieves active security findings, external exposures, toxic combinations, vulnerabilities, threats, and sensitive data risks… No issuesSecurityData & analytics22k
- google-cloud-scc-remediationGoogleRemediates Google Cloud Security Command Center findings, including IAM permission fixes, cloud resource misconfigurations,… No issuesSecurityLegal & compliance22k
- google-cloud-solution-multi-agent-securityGoogleDesigns, deploys, and secures Google Cloud Agent Gateway solutions. Use when the user needs to configure multi-agent security, ingress… No issuesSecurityAI & agents22k
- google-cloud-solution-n-tier-serverless-web-appGoogleAssists in designing and implementing secure n-tier serverless web applications and microservices on Google Cloud. Use when users need… No issuesSecurityEngineering22k
- google-cloud-waf-operational-excellenceGoogleGenerates operational guidance for CI/CD deployment pipelines, observability, monitoring, logging, and incident management on Google Cloud… No issuesSecurityEngineering22k
- google-cloud-waf-reliabilityGoogleEvaluates, designs, and improves the reliability, resilience, availability, fault tolerance, and disaster recovery (DR) of Google Cloud… No issuesSecurityDesign22k
- google-cloud-waf-securityGoogleGenerates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud… No issuesSecurityData & analytics22k
- secops-casesGoogleManage Google Security Operations (SecOps) SOAR cases throughout their lifecycle. Use when listing, creating, inspecting, updating, or… No issuesSecurityProductivity22k
- secops-detection-engineeringGoogleAuthor, validate, test, and deploy YARA-L 2.0 detection rules and evaluate end-to-end detection coverage gaps in Google SecOps. Use when… No issuesSecurityData & analytics22k
- secops-huntGoogleExpert guidance for proactive threat hunting in Google SecOps. Use when proactively hunting for threats, retroactively analyzing… No issuesSecurityData & analytics22k
- secops-investigateGoogleExpert guidance for deep security incident and entity investigations in Google SecOps. Use when investigating cases, analyzing entities… No issuesSecurityResearch22k
- secops-triageGoogleExpert guidance for security alert triage in Google SecOps. Use when investigating and triaging security alerts, determining false… No issuesSecurityResearch22k
- dpop-adoptionGoogleImplement and debug OAuth 2.0 DPoP (RFC 9449) refresh token sender-constraining for WebCrypto, Node.js ES6, and browser runtimes… No issuesSecurityEngineering22k
- sign-in-with-google-webGoogleImplement, configure, and secure Sign In With Google (SiwG) using Google Identity Services (GIS /… No issuesSecurityEngineering22k
- legal-builder-hubAnthropicFinds, evaluates, and installs community legal skills, with a security review gate before anything lands in your environment. No issuesSecurityLegal & compliance9.9k
cloudflareCloudflareDiscover and choose Cloudflare products for apps, APIs, AI agents, storage, networking, and security. Use for architecture and product… No issuesSecurityDocuments3.3k
aks-gpu-inferenceMicrosoftDiagnose Day-2 AKS GPU and KAITO incidents using profile-aware, read-only evidence. WHEN: 'Insufficient nvidia.com/gpu', GPU pod Pending,… No issuesSecurityData & analytics3.2k- azure-kusto-graph-skillsMicrosoftKusto graph analysis, IRQL security hunting pipelines, and graph visualization skills for Azure Data Explorer. Review findingsSecurityData & analytics3.2k
- azure-kusto-irqlMicrosoftCompose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations. Translates natural language hunting… No issuesSecurityData & analytics3.2k
- azure-identity-dotnetMicrosoftAzure Identity library for .NET. Authentication library for Azure SDK clients using Microsoft Entra ID. Use for DefaultAzureCredential,… No issuesSecurityEngineering3.2k
- azure-security-keyvault-keys-dotnetMicrosoftAzure Key Vault Keys SDK for .NET. Client library for managing cryptographic keys in Azure Key Vault and Managed HSM. Use for key… No issuesSecurityEngineering3.2k
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF