Skills · category
Security skills and plugins
Public Claude skills and plugins for security, each with Waxell's security verdict and the findings behind it.
- 1,533 reviewed
- 1,190 no issues
- 276 to review
- 60 high risk
337 resultsSecurity
m365-agents-dotnetMicrosoftMicrosoft 365 Agents SDK for .NET. Build multichannel agents for Teams/M365/Copilot Studio with ASP.NET Core hosting, AgentApplication… No issuesSecurityEngineering3.2k- microsoft-azure-webjobs-extensions-authentication-events-dotnetMicrosoftMicrosoft Entra Authentication Events SDK for .NET. Azure Functions triggers for custom authentication extensions. Use for token… No issuesSecurityEngineering3.2k
- azure-communication-common-javaMicrosoftAzure Communication Services common utilities for Java. Use when working with CommunicationTokenCredential, user identifiers, token… No issuesSecurityEngineering3.2k
- azure-identity-javaMicrosoftAzure Identity library for Java authentication with Azure services. Use when implementing DefaultAzureCredential, managed identity,… No issuesSecurityEngineering3.2k
- azure-security-keyvault-keys-javaMicrosoftAzure Key Vault Keys Java SDK for cryptographic key management. Use when creating, managing, or using RSA/EC keys, performing… No issuesSecurityEngineering3.2k
- azure-security-keyvault-secrets-javaMicrosoftAzure Key Vault Secrets Java SDK for secret management. Use when storing, retrieving, or managing passwords, API keys, connection strings,… No issuesSecurityEngineering3.2k
- azure-identity-pyMicrosoftAzure Identity SDK for Python authentication with Microsoft Entra ID. Use for DefaultAzureCredential, managed identity, service… Review findingsSecurityEngineering3.2k
- azure-keyvault-pyMicrosoftAzure Key Vault SDK for Python. Use for secrets, keys, and certificates management with secure storage. Triggers: "key vault",… Review findingsSecurityEngineering3.2k
- fastapi-router-pyMicrosoftCreate FastAPI routers with CRUD operations, authentication dependencies, and proper response models. Use when building REST API… No issuesSecurityEngineering3.2k
- m365-agents-pyMicrosoftMicrosoft 365 Agents SDK for Python. Build multichannel agents for Teams/M365/Copilot Studio with aiohttp hosting, AgentApplication… Review findingsSecurityEngineering3.2k
- azure-identity-rustMicrosoftAzure Identity library for Rust. Microsoft Entra ID authentication for all Azure SDK clients. Triggers: "azure identity rust",… No issuesSecurityEngineering3.2k
- azure-keyvault-keys-rustMicrosoftAzure Key Vault Keys library for Rust. Create, manage, and use cryptographic keys including RSA, EC, and HSM-protected keys. Triggers:… No issuesSecurityEngineering3.2k
- azure-keyvault-secrets-rustMicrosoftAzure Key Vault Secrets library for Rust. Store and retrieve secrets, passwords, and API keys. Triggers: "keyvault secrets rust",… No issuesSecurityEngineering3.2k
- azure-identity-tsMicrosoftAuthenticate to Azure services using Azure Identity library for JavaScript (@azure/identity). Use when configuring authentication with… Review findingsSecurityEngineering3.2k
- azure-keyvault-keys-tsMicrosoftManage cryptographic keys using Azure Key Vault Keys SDK for JavaScript (@azure/keyvault-keys). Use when creating, encrypting/decrypting,… Review findingsSecurityEngineering3.2k
- azure-keyvault-secrets-tsMicrosoftManage secrets using Azure Key Vault Secrets SDK for JavaScript (@azure/keyvault-secrets). Use when storing and retrieving application… Review findingsSecurityEngineering3.2k
- azure-postgres-tsMicrosoftConnect to Azure Database for PostgreSQL Flexible Server from Node.js/TypeScript using the pg (node-postgres) package. Use for PostgreSQL… Review findingsSecurityEngineering3.2k
- azure-complianceMicrosoftRun Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review,… Review findingsSecurityLegal & compliance3.2k
- azure-kubernetesMicrosoftPlan, create, and configure production-ready Azure Kubernetes Service (AKS) clusters. Covers Day-0 checklist, SKU selection (Automatic vs… Review findingsSecurityEngineering3.2k
- azure-messagingMicrosoftTroubleshoot and resolve issues with Azure Messaging SDKs for Event Hubs and Service Bus. Covers connection failures, authentication… No issuesSecurityEngineering3.2k
- entra-app-registrationMicrosoftGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register… Review findingsSecurityEngineering3.2k
- entra-agent-idMicrosoftMicrosoft Entra Agent ID (preview) for creating OAuth2-capable AI agent identities via Microsoft Graph beta API. Covers Agent Identity… Review findingsSecurityEngineering3.2k
supabaseSupabaseUse when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron,… No issuesSecurityEngineering3k- set-app-registration-nativeMicrosoftUse when the user wants to discover and verify available Entra ID app registrations, wire one to a Power Apps Wrap mobile app, or create… Review findingsSecurity1.1k
- publish-pcf-companionMicrosoftDeploy the dispatcher PCF for a third-party `.ppmplugin` control to a Power Platform environment via `pac pcf push`. The dispatcher PCF is… Review findingsSecurityEngineering1.1k
- build-flowMicrosoftAutonomously build a complete Power Automate flow from a description. Use when you need to generate a full flow definition and create it.… No issuesSecurity1.1k
- create-flowMicrosoftGuided flow creation wizard. Use when the user wants to create a new flow interactively. Always validates first and uses… No issuesSecurity1.1k
- manage-headersMicrosoftInspects and configures the security headers a Power Pages site sends to browsers, Content Security Policy, frame and clickjacking… No issuesSecurityLegal & compliance1.1k
- scan-codeMicrosoftScans a Power Pages site project for security issues in source code and dependencies. Runs static analysis and dependency scanning, then… No issuesSecurityEngineering1.1k
- scan-siteMicrosoftRuns a security scan on a deployed Power Pages site, fetches the latest scan report, and produces a plain-language summary. Scans the live… No issuesSecurityEngineering1.1k
- security-reviewMicrosoftRuns a guided, end-to-end security review of a Power Pages site and consolidates every finding into one HTML report covering source code… No issuesSecurityDocuments1.1k
- setup-authMicrosoftUse when the user asks to "set up authentication", "add login", "add logout", "add sign in", "enable auth", "add role-based access", "add… No issuesSecurityDesign1.1k
- setupMicrosoftUse when Process Intelligence needs building, explicit cloud/account/environment configuration, sign-in, connection diagnostics, or… No issuesSecurity1.1k
create-payment-credentialStripeGets secure payment credentials (cards, tokens) from a Link wallet for one-time purchases and recurring payments. Use when the user says… Review findingsSecurityEngineering891
extension-to-functions-codebaseFirebaseSkill for converting an installed Firebase Extension (or extension source) into a standalone Cloud Functions for Firebase codebase or… No issuesSecurityEngineering499- firebase-app-hosting-basicsFirebaseDeploys and manages full-stack web applications (Next.js, Angular) with Server-Side Rendering (SSR) using Firebase App Hosting. Use when… No issuesSecurityEngineering499
- firebase-auth-basicsFirebaseGuide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or… No issuesSecurityData & analytics499
- firebase-firestoreFirebaseSets up, manages, queries, and configures Cloud Firestore databases (Standard/Enterprise edition), including data modeling, security… No issuesSecurityData & analytics499
- firebase-hosting-basicsFirebaseDeploys and configures classic Firebase Hosting for static websites, single-page apps (SPAs), and microservices. Use when deploying static… No issuesSecurityData & analytics499
- firebase-security-rules-auditorFirebaseAudits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update… No issuesSecurityData & analytics499
- firestore-rules-creationFirebaseDesigns, authors, refactors, and hardens production-grade Cloud Firestore Security Rules (firestore.rules). IMPORTANT: If subagent… No issuesSecurityDesign499
- dv-securityMicrosoftSecurity-role assignment, user access, application users, business units, and admin self-elevation in Dataverse environments. Use when the… No issuesSecurityEngineering253
incident-initAnthropicAutomatic init the first time Claude acts in an incident or alerts channel, one named like #inc-…, #incident-…, #sev0-…/#sev1-…, or whose… No issuesSecurityAI & agents76- incident-investigateAnthropicInvestigate an alert, page, or production symptom in an incident channel or a team's oncall / monitoring channel, and report findings a… No issuesSecurityResearch76
- incident-postmortemAnthropicWrite the postmortem for an incident, in its incident channel, once it is mitigated or resolved. Use on "write up this incident",… No issuesSecurityWriting & content76
- incident-sitrepAnthropicPost a sitrep (situation report) for a live incident, in its incident channel: a short fixed-layout update for people who haven't read the… No issuesSecurityDocuments76
- datadogAnthropicAccess Datadog logs, metrics, monitors, dashboards, SLOs, events, traces, and incidents. No issuesSecurityData & analytics76
- pagerdutyAnthropicAccess PagerDuty incidents, on-call schedules, escalation policies, and services. No issuesSecurityLegal & compliance76
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF