Skills · category
Security skills and plugins
Public Claude skills and plugins for security, each with Waxell's security verdict and the findings behind it.
- 1,533 reviewed
- 1,190 no issues
- 276 to review
- 60 high risk
337 resultsSecurity
morningstargauss314Morningstar Screener via API JSON publica: descarga masiva de 53 universes (102K+ listings, 39 paises, NYSE/Nasdaq/BCBA/etc) con 33 campos… Review findingsSecurityEngineering253
snyk-agent-scan-compliancesamberCompliance expert for snyk-agent-scan: the agent skill file scanner, NOT for other Snyk CLI tools (snyk test, snyk code SAST, snyk iac,… High riskSecurityEngineering242
better-authbetter-authBetter Auth development plugin for Claude Review findingsSecurityAI & agents229- better-auth-best-practicesbetter-authConfigure Better Auth server and client, set up database adapters, manage sessions, add plugins, and handle environment variables. Use… Review findingsSecurityData & analytics229
- create-authbetter-authScaffold and implement authentication in TypeScript/JavaScript apps using Better Auth. Detect frameworks, configure database adapters, set… Review findingsSecurityEngineering229
code-reviewcoderabbitaiRun CodeRabbit CLI reviews, retrieve saved local or GitHub PR fix prompts, and interpret CodeRabbit authentication and review output. Use… High riskSecurityEngineering208
agentic-walletcoinbaseCrypto wallet operations via the awal CLI: sign in, check balances, send USDC/ETH/POL/SOL, trade tokens, fund the wallet, and use the x402… Review findingsSecurityEngineering127
security-expressigorwarzochaReview Express.js security audit patterns for middleware and routes. Use for auditing Helmet.js, CORS, body-parser limits, and auth… Review findingsSecurityProductivity122
parallel-cli-setupparallel-webSet up and maintain the Parallel CLI (install, auth, balance, skills install) Review findingsSecurityEngineering91
clerkclerkAdd authentication and user management with Clerk. Skills for setup, framework patterns, organizations, billing, webhooks, and testing,… High riskSecurityEngineering90- clerk-chrome-extension-patternsclerkChrome Extension auth with @clerk/chrome-extension -- popup/sidepanel setup, syncHost for OAuth/SAML via web app, createClerkClient for… Review findingsSecurityResearch90
- clerk-cliclerkOperate the Clerk CLI (`clerk` binary) for authentication, user/org/session management, impersonation, local webhook testing, deploy… Review findingsSecurityEngineering90
- clerk-custom-uiclerkCustom authentication flows and component appearance - hooks (useSignIn, useSignUp), themes, colors, fonts, CSS. Use for custom… Review findingsSecurityDesign90
- clerk-nuxt-patternsclerkNuxt 3 auth patterns with @clerk/nuxt - middleware, composables, server API routes, SSR. Triggers on: Nuxt auth, useAuth composable,… Review findingsSecurityEngineering90
- clerk-react-patternsclerkReact SPA auth patterns with @clerk/react for Vite/CRA - ClerkProvider setup, useAuth/useUser/useClerk hooks, React Router protected… Review findingsSecurityEngineering90
- clerk-tanstack-patternsclerkTanStack React Start auth patterns with @clerk/tanstack-react-start - createServerFn, beforeLoad guards, loaders, Vite plugin, server… Review findingsSecurityEngineering90
crypto-secretssuperagent-aiAudit application source code and configuration for cryptography and secrets hygiene issues: hardcoded API keys, committed .env files,… Review findingsSecurityEngineering80- infra-securitysuperagent-aiAudit Infrastructure-as-Code for security misconfigurations before it ships, Terraform (.tf/.tfvars/.hcl), CloudFormation/SAM (YAML/JSON),… Review findingsSecurityEngineering80
- recon-securitysuperagent-aiGuide authorized external penetration testing from recon through validation and scoped exploitation using free and open-source tools. Use… Review findingsSecurityDocuments80
- redteam-autoresearchsuperagent-aiRun a bounded red-teaming autoresearch loop to generate LLM guardrail training data. You (the agent running the skill) are the attacker… Review findingsSecurityEngineering80
- skill-securitysuperagent-aiAudit an AI agent skill for security risks before installing or trusting it. Runs a deterministic scanner (regex patterns, Python AST… High riskSecurityData & analytics80
config-hardeneruseai-proAudit and harden your OpenClaw configuration. Checks AGENTS.md, gateway settings, sandbox config, and permission policies for security… Review findingsSecurityLegal & compliance73
convex-authconvexAdd authentication (passkeys/OAuth) to the current Convex app, including the auth.config.ts wiring. Review findingsSecurityAI & agents69
huawei-cloud-sg-managehuaweicloudUse when managing or diagnosing Huawei Cloud security groups (安全组), VPC subnet-level firewalls. Covers listing/querying security groups… High riskSecurityData & analytics59- huawei-cloud-iam-diagnosehuaweicloudInvoke this skill to check whether a Huawei Cloud IAM user likely has permission to perform an action/resource, 华为云 IAM 参考性权限分析/诊断. Given… High riskSecurityData & analytics59
- huawei-cloud-iam-managehuaweicloudManages Huawei Cloud IAM identity configuration (write-capable companion to the read-only IAM query capability). Covers full lifecycle of… High riskSecurityData & analytics59
netlify-functionsnetlifyWrite, configure, and deploy Netlify serverless functions in TypeScript, JavaScript, or Go. Use this when adding an API endpoint or… Review findingsSecurityEngineering50- netlify-identitynetlifyAdd user authentication to a Netlify site with @netlify/identity, covering signup/login/logout, Google/GitHub/GitLab/Bitbucket OAuth,… Review findingsSecurityEngineering50
- netlify-mcp-serversnetlifyBuild, deploy, and secure Model Context Protocol (MCP) servers on Netlify. Use whenever the task involves creating an MCP server, exposing… Review findingsSecurityEngineering50
oma-deepsecgracefullightSet up and run Deepsec vulnerability scans, triage, and CI gates. Use for Deepsec work or an explicitly requested agent-powered… Review findingsSecurityEngineering49
CI/CD Pipeline Security ExpertmartinholovskyExpert in CI/CD pipeline design with focus on secret management, code signing, artifact security, and supply chain protection for desktop… Review findingsSecurityEngineering48- encryptionmartinholovsky Review findingsSecurityAI & agents48
- talos-os-expertmartinholovskyElite Talos Linux expert specializing in immutable Kubernetes OS, secure cluster deployment, machine configurations, talosctl CLI… High riskSecurityEngineering48
istio-expertpersonamanagmentlayerExpert-level Istio service mesh management, traffic control, security, and observability for Kubernetes. Use when the user mentions… High riskSecurityEngineering44
dr-bedrockclineTroubleshoot local AWS Bedrock authentication and region configuration for the Cline CLI as Dr. Bedrock. Use when users report Bedrock CLI… Review findingsSecurityDocuments40
auth-web-cloudbasetencentcloudbaseCloudBase Web Authentication Quick Guide for frontend integration after auth-tool has already been checked. Provides concise and practical… Review findingsSecurityResearch39
gitshipshitdevGit and GitHub workflows behind one command: create isolated worktrees, guard secrets, resolve conflicts, open or update PRs, fix failing… Review findingsSecurityEngineering38
okxstarchild-ai-agentOKX OnChainOS: on-chain trading, analytics, security, DeFi across 20+ chains. Use when running OKX-routed on-chain ops (e.g. swap on… High riskSecurityData & analytics29
tavily-clipracticalswanRoute Tavily web-search, extraction, mapping, crawling, and cited-research requests to the narrowest `tvly` command. Use for command-line… High riskSecurityResearch23
building-inferencesh-apps101-skillsBuild and deploy applications on inference.sh. Use when getting started, understanding the platform, creating apps, configuring resources,… High riskSecurityEngineering18
az-aks-agentjulianobarbosaAzure AKS Agentic CLI - AI-powered troubleshooting and insights tool for Azure Kubernetes Service. Use when diagnosing AKS cluster issues,… High riskSecurityEngineering15- container-securityjulianobarbosaContainer image security scanning, Dockerfile hardening, and ACR image management. Use when scanning container images for vulnerabilities… High riskSecurityEngineering15
- pre-commitjulianobarbosaPre-commit hooks framework for multi-language code quality automation. USE WHEN setting up pre-commit OR configuring git hooks OR adding… High riskSecurityEngineering15
emblem-aiemblemcompanyOne-shot user management for apps, multi-chain wallet authentication, an AI-powered assistant, and AI app introspection. Use when the user… Review findingsSecurityEngineering12- emblem-ai-agent-walletemblemcompanyConnect to EmblemVault and manage wallet-aware workflows via EmblemAI with review-first, operator-controlled actions. Supports Solana,… Review findingsSecurityProductivity12
- emblem-ai-reactemblemcompanyReact integration skill for EmblemAI's one-shot user management. Use when the user wants to add website authentication plus wallet-enabled… Review findingsSecurityEngineering12
auth-setupgoldsky-ioSet up Goldsky CLI authentication and project configuration. Use this skill when the user needs to: install the goldsky CLI (what's the… Review findingsSecurityProductivity12
limrun-bazellimrun-incThe default way to build any Bazel workspace on Limrun: build its iOS and Android targets on Limrun's shared build plane with `lim bazel… Review findingsSecurityEngineering2
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF