Marketplaces
agent-sec-ops-kit-skills
Security operations and DevSecOps toolbox for AI coding agents
Plugins
appsec-skills
Application security skills for SAST, DAST, code review, and vulnerability detection
devsecops-skills
DevSecOps and CI/CD security automation skills for secrets detection, IaC scanning, and pipeline security
secsdlc-skills
Secure Software Development Lifecycle skills for code review automation, security feedback, and development workflow integration
compliance-skills
Compliance and policy-as-code skills for SOC2, PCI-DSS, GDPR, HIPAA validation using OPA and policy enforcement
incident-response-skills
Security incident response and detection engineering skills for Sigma rules, SIEM integration, and threat hunting
threatmodel-skills
Threat modeling and security architecture skills for STRIDE analysis, data flow diagrams, and risk assessment
offsec-skills
Offensive security skills for penetration testing, network reconnaissance, exploitation, and security assessments
Skills
sast-semgrep
Application security skills for SAST, DAST, code review, and vulnerability detection
sast-bandit
Application security skills for SAST, DAST, code review, and vulnerability detection
dast-zap
Application security skills for SAST, DAST, code review, and vulnerability detection
dast-nuclei
Application security skills for SAST, DAST, code review, and vulnerability detection
api-mitmproxy
Application security skills for SAST, DAST, code review, and vulnerability detection
api-spectral
Application security skills for SAST, DAST, code review, and vulnerability detection
dast-ffuf
Application security skills for SAST, DAST, code review, and vulnerability detection
sca-blackduck
Application security skills for SAST, DAST, code review, and vulnerability detection
secrets-gitleaks
DevSecOps and CI/CD security automation skills for secrets detection, IaC scanning, and pipeline security
iac-checkov
DevSecOps and CI/CD security automation skills for secrets detection, IaC scanning, and pipeline security
container-grype
DevSecOps and CI/CD security automation skills for secrets detection, IaC scanning, and pipeline security
container-hadolint
DevSecOps and CI/CD security automation skills for secrets detection, IaC scanning, and pipeline security
sca-trivy
DevSecOps and CI/CD security automation skills for secrets detection, IaC scanning, and pipeline security
reviewdog
Secure Software Development Lifecycle skills for code review automation, security feedback, and development workflow integration
sast-horusec
Secure Software Development Lifecycle skills for code review automation, security feedback, and development workflow integration
sbom-syft
Secure Software Development Lifecycle skills for code review automation, security feedback, and development workflow integration
policy-opa
Compliance and policy-as-code skills for SOC2, PCI-DSS, GDPR, HIPAA validation using OPA and policy enforcement
detection-sigma
Security incident response and detection engineering skills for Sigma rules, SIEM integration, and threat hunting
forensics-osquery
Security incident response and detection engineering skills for Sigma rules, SIEM integration, and threat hunting
ir-velociraptor
Security incident response and detection engineering skills for Sigma rules, SIEM integration, and threat hunting
pytm
Threat modeling and security architecture skills for STRIDE analysis, data flow diagrams, and risk assessment
pentest-metasploit
Offensive security skills for penetration testing, network reconnaissance, exploitation, and security assessments
recon-nmap
Offensive security skills for penetration testing, network reconnaissance, exploitation, and security assessments
network-netcat
Offensive security skills for penetration testing, network reconnaissance, exploitation, and security assessments
analysis-tshark
Offensive security skills for penetration testing, network reconnaissance, exploitation, and security assessments
webapp-sqlmap
Offensive security skills for penetration testing, network reconnaissance, exploitation, and security assessments
webapp-nikto
Offensive security skills for penetration testing, network reconnaissance, exploitation, and security assessments
crack-hashcat
Offensive security skills for penetration testing, network reconnaissance, exploitation, and security assessments