audit AI Agent Skills

electron-ipc-security-audit

376

a5c-ai

Analyze Electron IPC implementations for security vulnerabilities including contextIsolation, nodeIntegration, preload scripts, and channel validation

sandbox-entitlements-auditor

376

a5c-ai

Audit and recommend minimal sandbox entitlements for secure desktop applications

qt-widget-accessibility-audit

376

a5c-ai

Audit Qt Widget applications for accessibility compliance using QAccessible interface and platform accessibility APIs

convex-security-audit

339

Waynesutton Convexskills Convex Security Audit

Deep security review patterns for authorization logic, data access boundaries, action isolation, rate limiting, and protecting sensitive operations

audit

241

MadAppGang

On-demand security and code quality audit. Use when checking for vulnerabilities, security issues, code smells, or compliance problems. Trigger keywords - "audit", "security check", "vulnerability scan", "code quality", "compliance", "security audit".

compliance-testing

215

proffesor-for-testing

Regulatory compliance testing for GDPR, CCPA, HIPAA, SOC2, PCI-DSS and industry-specific regulations. Use when ensuring legal compliance, preparing for audits, or handling sensitive data.

qe-compliance-testing

215

proffesor-for-testing

Regulatory compliance testing for GDPR, CCPA, HIPAA, SOC2, PCI-DSS and industry-specific regulations. Use when ensuring legal compliance, preparing for audits, or handling sensitive data.

audit-skills

97

yonatangross

Audits all OrchestKit skills for quality, completeness, and compliance with authoring standards. Use when checking skill health, before releases, or after bulk skill edits to surface SKILL.md files that are too long, have missing frontmatter, lack rules/references, or are unregistered in manifests.

audit-full

97

yonatangross

Full-codebase audit using 1M context window. Security, architecture, and dependency analysis in a single pass. Use when you need whole-project analysis.

SOC 2 Compliance Testing

71

PramodDutta

Testing SOC 2 compliance controls including security monitoring, change management, access reviews, and incident response procedures.

Lighthouse Performance Audit

71

PramodDutta

Automated web performance auditing using Google Lighthouse for Core Web Vitals, accessibility, SEO, and best practices scoring with CI integration.

Website Audit

71

PramodDutta

Comprehensive website auditing skill using Lighthouse, PageSpeed Insights, and web performance APIs to audit performance, accessibility, SEO, best practices, and security.

Convex Security Audit

34

powroom

Deep security review patterns for authorization logic, data access boundaries, action isolation, rate limiting, and protecting sensitive operations

skill-snitch

30

SimHacker

Security auditing for MOOLLM skills - static analysis and runtime surveillance

forensic-data-engineer

17

daffy0208

Expert in data forensics, anomaly detection, audit trail analysis, fraud detection, and breach investigation

agent-security

14

0xAxiom

Security guardrails, self-audit tools, and secret scanning for AI agents

project-index

9

mkSteady

Use this skill for large-project maintenance with a layered CLAUDE.md index system. It triggers when users need to (1) analyze and document existing codebases, (2) generate hierarchical CLAUDE.md files for modules, (3) set up incremental update hooks after code changes, or (4) navigate large projects efficiently. Supports legacy project onboarding and automatic context management.

pi-cli

9

mkSteady

Unified project analysis CLI tool. Supports DAG scheduling, LLM batch tasks, dependency graph construction, test analysis/repair, documentation generation, code auditing, and a Web Dashboard. Functionality is fully consistent with project-index and is recommended as the unified entry point.

security-review

8

Factory-AI

Scan code changes for security vulnerabilities using STRIDE threat modeling, validate findings for exploitability, and output structured results for downstream patch generation. Supports PR review, scheduled scans, and full repository audits.

security-auditor

7

louloulin

Security vulnerability detection and remediation expert for applications and infrastructure

aws-security-audit

4

ngxtm

Comprehensive AWS security posture assessment using AWS CLI and security best practices

aws-compliance-checker

4

ngxtm

Automated compliance checking against CIS, PCI-DSS, HIPAA, and SOC 2 benchmarks

None

2

mukul975

Audit service accounts across enterprise infrastructure to identify orphaned, over-privileged, and non-compliant accounts. This skill covers discovery of service accounts in Active Directory, cloud pl

performing-privileged-account-access-review

2

mukul975

Conduct systematic reviews of privileged accounts to validate access rights, identify excessive permissions, and enforce least privilege across PAM infrastructure.

performing-soc-2-type-ii-audit-preparation

2

mukul975

SOC 2 Type II audit preparation involves designing, implementing, and demonstrating the operational effectiveness of controls aligned to the AICPA Trust Services Criteria (TSC) over a defined audit pe

security-essentials-pack

2

organvm-iv-taxis

Curated bundle of essential security skills for building secure applications. Includes threat modeling, hardening guides, audit checklists, compliance frameworks, and contract analysis. Use when establishing security practices for a project.

performing-cryptographic-audit-of-application

2

mukul975

A cryptographic audit systematically reviews an application's use of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms, insecure modes, hardco

Website Audit

1

KaliBellion

Comprehensive website auditing skill using Lighthouse, PageSpeed Insights, and web performance APIs to audit performance, accessibility, SEO, best practices, and security.

Skill Guardian

1

hanabi-jpn

5-layer security scanner for AI agent skills — post-ClawHavoc protection

fte.security.scan

assadsharif

Run a secrets and sensitive-data scan across the vault and report any findings — API keys, tokens, passwords, or PII patterns detected in task files.

audit-evidence

danielshue

Generate change logs, diff controlled documents, and build audit-ready evidence packs.

security-hardening

theagentledger

Security audit and hardening for AI agents — credential hygiene, secret scanning, prompt injection defense, data leakage prevention, and privacy zones.